.exe n'est pas une accplication win32 valide Résolu

Question

Bonjour,
Depuis hier, sous XP, je ne peux lancer mon Anti-Virus Avast! ni CCleaner, ni spyBot, bref c'est assez délicat.
IL est écrit en message d'erreur C:\Programmes Files\...\ashAvast.exe n'eest pas une application Win32 valide.
Voila j'ai lu les précédent post la dessus mais il est écrit qu'il est déconseillé de faire la même procédure pour notre PC.

Merci de me venir en aide.

Destrio5 · Answer

Salut,

Tu es infecté par Bagle.

--> Télécharge FindyKill (par Chiquitine29) sur ton Bureau.

--> Lance l'installation avec les paramètres par défaut.

--> Double-clique sur le raccourci FindyKill sur ton Bureau.

--> Au menu principal, choisis l'option 1 (Recherche).

--> Poste le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.

pirlo · Answer

----------------- FindyKill V4.710 ------------------ * User : clement - MARTINESE * Emplacement : C:\Program Files\FindyKill * Outils Mis a jours le 21/12/08 par Chiquitine29 * Recherche effectuée à 17:16:55 le 25/12/2008 * Windows XP - Internet Explorer 6.0.2900.5512 ((((((((((((((((( *** Recherche *** )))))))))))))))))) --------------- [ Processus actifs ] ---------------- C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32 vsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wdfmgr.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Saitek\Software\Profiler.exe C:\Program Files\Saitek\Software\SaiMfd.exe C:\Documents and Settings\clement\Application Data\drivers\winupgro.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\Program Files\Mozilla Firefox\firefox.exe --------------- [ Processus infectieux stoppés ] ---------------- "C:\Documents and Settings\clement\Application Data\drivers\winupgro.exe" (1532) --------------- [ Fichiers/Dossiers infectieux ] ---------------- »»»» Presence des fichiers dans C: »»»» Presence des fichiers dans C:\WINDOWS »»»» Presence des fichiers dans C:\WINDOWS\Prefetch Found ! - C:\WINDOWS\prefetch\107968.EXE-291147DC.pf Found ! - C:\WINDOWS\prefetch\108734.EXE-2891A035.pf Found ! - C:\WINDOWS\prefetch\14860984.EXE-0034A5C6.pf Found ! - C:\WINDOWS\prefetch\14904515.EXE-083B0343.pf Found ! - C:\WINDOWS\prefetch\217578.EXE-0ADEB694.pf Found ! - C:\WINDOWS\prefetch\283375.EXE-01B640B7.pf Found ! - C:\WINDOWS\prefetch\354140.EXE-019A5800.pf Found ! - C:\WINDOWS\prefetch\51640.EXE-07814130.pf Found ! - C:\WINDOWS\prefetch\91328.EXE-0EF4E746.pf Found ! - C:\WINDOWS\prefetch\96843.EXE-2FA8C664.pf Found ! - C:\WINDOWS\prefetch\97140.EXE-362B029E.pf Found ! - C:\WINDOWS\prefetch\FLEC006.EXE-266764E0.pf Found ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf Found ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf Found ! - C:\WINDOWS\prefetch\WINUPGRO.EXE-101AF362.pf »»»» Presence des fichiers dans C:\WINDOWS\system32 Found ! [25/12/2008 16:02] - C:\WINDOWS\system32\mdelk.exe Found ! [25/12/2008 16:02] - C:\WINDOWS\system32\wintems.exe Found ! [25/12/2008 17:03] - C:\WINDOWS\system32\ban_list.txt »»»» Presence des fichiers dans C:\WINDOWS\system32\config\systemprofile\AppData\Roaming »»»» Presence des fichiers dans C:\WINDOWS\system32\drivers »»»» Presence des fichiers dans C:\Documents and Settings\clement\Application Data Found ! [25/12/2008 16:03] - "C:\Documents and Settings\clement\Application Data\m\flec006.exe" Found ! [25/12/2008 16:03] - "C:\Documents and Settings\clement\Application Data\m\list.oct" Found ! [25/12/2008 16:03] - "C:\Documents and Settings\clement\Application Data\m\data.oct" Found ! [25/12/2008 16:03] - "C:\Documents and Settings\clement\Application Data\m\srvlist.oct" Found ! [25/12/2008 16:04] - "C:\Documents and Settings\clement\Application Data\m\shared" Found ! [24/12/2008 19:25] - "C:\Documents and Settings\clement\Application Data\m" Found ! [24/12/2008 19:24] - "C:\Documents and Settings\clement\Application Data\drivers" Found ! [25/12/2008 16:02] - "C:\Documents and Settings\clement\Application Data\drivers\srosa.sys" Found ! [25/12/2008 16:02] - "C:\Documents and Settings\clement\Application Data\drivers\srosa2.sys" Found ! [24/05/2004 07:07] - "C:\Documents and Settings\clement\Application Data\drivers\winupgro.exe" Found ! [25/12/2008 16:07] - "C:\Documents and Settings\clement\Application Data\drivers\downld" Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\105734.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\106453.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\106546.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\106937.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\107968.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\108734.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\110296.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\111015.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\111328.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\112468.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\114375.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\116515.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\118890.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\119937.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\120453.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\125812.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\126187.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\126906.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\126953.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\129046.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\129765.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\130093.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\133953.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\139656.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\140875.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\141343.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\142125.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\142906.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\143140.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\143359.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\143671.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\143687.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\144203.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\148296.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14856718.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14856968.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14860984.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14883937.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14884671.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14885000.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14904515.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\149093.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\149140.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14963765.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14975765.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14976703.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14977140.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14977843.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14978500.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14978937.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14997562.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14997984.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\14998312.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\15008812.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\15010062.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\15010453.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\15038859.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\15039078.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\15039156.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\150609.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\151093.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\151703.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\152687.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\156453.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\156890.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\157203.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\157500.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\157531.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\158187.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\158718.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\158750.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\159187.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\159453.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\159937.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\160218.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\160656.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\160734.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\161093.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\161328.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\161562.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\162296.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\162531.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\162937.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\162968.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\163265.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\163484.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\163671.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\164390.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\164828.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\164921.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\165390.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\165562.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\166375.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\166640.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\167078.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\167093.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\167546.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\167781.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\168500.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\168937.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\170406.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\171703.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\171718.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\172078.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\172406.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\175765.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\177078.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\177546.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\177687.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\178312.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\179140.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\179625.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\183640.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\184312.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\184640.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\185250.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\186421.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\186484.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\186734.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\186937.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\187359.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\187625.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\187671.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\188359.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\188375.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\188812.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\188968.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\189015.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\189343.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\189468.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\189796.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\192593.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\194062.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\194453.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\196421.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\197343.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\197640.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\197906.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\198296.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\198453.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\198671.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\199046.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\199218.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\199593.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\199812.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\199937.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\200062.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\200140.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\200234.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\200312.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\200500.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\200562.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\203984.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\204718.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\208031.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\208703.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\209031.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\212796.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\217187.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\217578.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\217875.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\218578.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\219015.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\219093.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\219562.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\220265.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\220531.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\220984.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\221421.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\222000.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\222375.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\223421.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\223875.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\224234.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\224375.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\224484.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\226750.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\227484.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\227546.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\233640.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\234265.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\234359.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\234687.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\240265.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\240953.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\241281.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\247765.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\248359.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\252031.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\253750.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\254140.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\256406.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\257031.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\257109.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\258218.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\259062.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\259390.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\265093.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\266296.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\266750.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\267500.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\268218.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\268656.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\283625.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\286906.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\287453.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\287531.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\287687.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\288359.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\288687.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\295359.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\295796.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\295859.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\300078.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\301375.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\301750.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\334187.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\334656.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\334796.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\364968.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\365515.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\365625.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\378937.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\379890.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\392187.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\393671.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\394109.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\394812.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\395531.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\395968.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\39765.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\39828.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\40765.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\40796.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\414156.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\414812.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\415140.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\422843.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\424312.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\424703.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\43125.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\43140.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\43578.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\44750.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\44937.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\453734.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\454421.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\454609.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\455187.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\455890.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\46203.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\46515.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\469140.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\469187.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\469906.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\470359.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\470796.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\471500.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\472218.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\472671.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\47500.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\47515.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\483218.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\484578.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\485078.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\485812.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\486750.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\487250.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\48859.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\49078.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\492250.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\492921.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\49312.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\493234.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\49375.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\49437.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\501046.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\502640.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\503015.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\506187.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\506921.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\507281.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\51312.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\51640.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\52203.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\524421.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\525890.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\526281.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\52703.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\549671.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\550218.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\550281.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\56562.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\57484.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\576859.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\577390.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\577453.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\59640.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\61218.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\61890.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\62578.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\62593.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\68109.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\68500.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\68625.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\68734.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\70812.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\70968.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\71406.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\71437.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\71734.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\72468.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\72796.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\76359.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\76812.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\77015.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\77625.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\77734.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\77953.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\78062.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\83593.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\83781.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\84375.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\84593.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\84625.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\84703.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\85921.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\86625.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\87328.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\87796.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\88343.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\88562.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\88890.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\89218.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\89250.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\89546.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\90640.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\91328.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\91484.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\91828.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\96359.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\96843.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\97140.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\97218.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\97468.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\97625.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\98328.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\98656.exe Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Application Data\drivers\downld\99125.exe »»»» Presence des fichiers dans C:\DOCUME~1\clement\LOCALS~1\Temp »»»» Presence des fichiers dans C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5 Found ! [25/12/2008 02:50] - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\EAY6Q74L\b64_3[1].jpg Found ! [25/12/2008 12:35] - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\EAY6Q74L\b64_3[2].jpg Found ! [25/12/2008 16:02] - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\EAY6Q74L\b64_3[3].jpg Found ! [25/12/2008 11:52] - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\GGSNWAXU\b64[1].jpg Found ! [25/12/2008 16:07] - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\GGSNWAXU\b64_2[1].jpg Found ! [25/12/2008 16:03] - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\JEJE4IY7\b64[1].jpg Found ! [25/12/2008 11:55] - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\JEJE4IY7\b64_2[1].jpg Found ! [25/12/2008 02:51] - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\X3Q89DQ8\b64[1].jpg Found ! [25/12/2008 12:36] - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\X3Q89DQ8\b64[2].jpg Found ! [25/12/2008 12:42] - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\X3Q89DQ8\b64[3].jpg Found ! [25/12/2008 11:55] - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\X3Q89DQ8\b64_2[1].jpg Found ! [25/12/2008 12:43] - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\X3Q89DQ8\b64_5[1].jpg --------------- [ Registre / Startup ] ---------------- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion un] SpybotSD TeaTimer=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion un] RTHDCPL=RTHDCPL.EXE Alcmtr=ALCMTR.EXE NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup nwiz=nwiz.exe /install NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe Profiler=C:\Program Files\Saitek\Software\Profiler.exe SaiMfd=C:\Program Files\Saitek\Software\SaiMfd.exe NeroFilterCheck=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe" Ad-Aware="C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe" +c Windows Defender="C:\Program Files\Windows Defender\MSASCui.exe" -hide HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un\OptionalComponents= = HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un\OptionalComponents\IMAIL= Installed=1 = HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un\OptionalComponents\MAPI= NoChange=1 Installed=1 = HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un\OptionalComponents\MSFS= Installed=1 = [HKEY_CURRENT_USER\software\local appwizard-generated applications\boostspeed] [HKEY_CURRENT_USER\software\local appwizard-generated applications\winupgro] --------------- [ Registre / Clés infectieuses ] ---------------- Found ! - HKEY_USERS\S-1-5-21-1292428093-926492609-682003330-1004\Software\Local AppWizard-Generated Applications\winupgro Found ! - HKEY_USERS\S-1-5-21-1292428093-926492609-682003330-1004\Software\bisoft Found ! - HKEY_USERS\S-1-5-21-1292428093-926492609-682003330-1004\Software\DateTime4 Found ! - HKEY_USERS\S-1-5-21-1292428093-926492609-682003330-1004\Software\FirtR Found ! - HKEY_USERS\S-1-5-21-1292428093-926492609-682003330-1004\Software\MuleAppData Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA Found ! - HKEY_CURRENT_USER\Software\bisoft Found ! - HKEY_CURRENT_USER\Software\DateTime4 Found ! - HKEY_CURRENT_USER\Software\FirtR Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SK9OU0S Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_SK9OU0S Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sK9Ou0s Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sK9Ou0s Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sK9Ou0s Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sK9Ou0s --------------- [ Etat / Services ] ---------------- Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot - sans echec non fonctionnel !! Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal - sans echec non fonctionnel !! Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network - sans echec non fonctionnel !! +- Services : [ Auto=2 / Demande=3 / Désactivé=4 ] /!\ Ndisuio - Type de démarrage = 4 EapHost - Type de démarrage = 3 /!\ Ip6Fw - Type de démarrage = 4 /!\ SharedAccess - Type de démarrage = 4 /!\ wuauserv - Type de démarrage = 4 /!\ wscsvc - Type de démarrage = 4 /!\ WinDefend - Type de démarrage = 4 --------------- [ Recherche dans supports amovibles] ---------------- +- Informations : C: - Lecteur fixe +- presence des fichiers : --------------- [ Registre / Mountpoint2 ] ---------------- -> Not found ! ------------------- ! Fin du rapport ! --------------------

Destrio5 · Answer

--> Supprime tes cracks et keygens sinon l'infection se relancera.

--> Double-clique sur le raccourci FindyKill sur ton Bureau.

--> Au menu principal, choisis l'option 2 (Suppression).

/!\ Il y aura 2 redémarrages, laisse travailler l'outil jusqu'à l'apparition du message "nettoyage effectué" /!\

--> Ensuite, poste le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.

pirlo · Answer

----------------- FindyKill V4.710 ------------------

* User : clement - MARTINESE
* executed from : C:\Program Files\FindyKill
* Update on 21/12/08 par Chiquitine29
* Start at 17:36:27 the 25/12/2008
* Windows XP - Internet Explorer 6.0.2900.5512
 
 
((((((((((((((( *** deleting *** ))))))))))))))))))  
 
 
--------------- [ Active Processes ] ----------------  
 

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\userinit.exe
 
--------------- [ Infected files / folders ] ----------------  
 
 
»»»» Supression files in C: 
 
 
»»»» Supression files in C:\WINDOWS 
 
 
»»»» Supression files in C:\WINDOWS\Prefetch 
 
Deleted ! - C:\WINDOWS\prefetch\107968.EXE-291147DC.pf 
Deleted ! - C:\WINDOWS\prefetch\108734.EXE-2891A035.pf 
Deleted ! - C:\WINDOWS\prefetch\14860984.EXE-0034A5C6.pf 
Deleted ! - C:\WINDOWS\prefetch\14904515.EXE-083B0343.pf 
Deleted ! - C:\WINDOWS\prefetch\217578.EXE-0ADEB694.pf 
Deleted ! - C:\WINDOWS\prefetch\283375.EXE-01B640B7.pf 
Deleted ! - C:\WINDOWS\prefetch\354140.EXE-019A5800.pf 
Deleted ! - C:\WINDOWS\prefetch\51640.EXE-07814130.pf 
Deleted ! - C:\WINDOWS\prefetch\91328.EXE-0EF4E746.pf 
Deleted ! - C:\WINDOWS\prefetch\96843.EXE-2FA8C664.pf 
Deleted ! - C:\WINDOWS\prefetch\97140.EXE-362B029E.pf 
Deleted ! - C:\WINDOWS\prefetch\FLEC006.EXE-266764E0.pf 
Deleted ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf 
Deleted ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf 
Deleted ! - C:\WINDOWS\prefetch\WINUPGRO.EXE-101AF362.pf 
 
»»»» Supression files in C:\WINDOWS\system32 
 
Deleted ! - C:\WINDOWS\system32\mdelk.exe  
Deleted ! - C:\WINDOWS\system32\wintems.exe  
Deleted ! - C:\WINDOWS\system32\ban_list.txt  
 
»»»» Supression files in C:\WINDOWS\system32\config\systemprofile\AppData\Roaming 
 
 
»»»» Supression files in C:\WINDOWS\system32\drivers 
 
Deleted ! - C:\WINDOWS\system32\drivers\srosa.sys  
Deleted ! - C:\WINDOWS\system32\drivers\srosa2.sys  
 
»»»» Supression files in C:\Documents and Settings\clement\Application Data 
 
Deleted ! - "C:\Documents and Settings\clement\Application Data\m\flec006.exe"  
Deleted ! - "C:\Documents and Settings\clement\Application Data\m\list.oct"  
Deleted ! - "C:\Documents and Settings\clement\Application Data\m\data.oct"  
Deleted ! - "C:\Documents and Settings\clement\Application Data\m\srvlist.oct"  
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\@PROMT English-Russian Express Translator 7.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\AD Search&Replace 1.9.3 build 98.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Add Shade Font 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Admin Http Time Sync 1.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Adsense Preview 1.5.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\AgataSoft KilX 1.4.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\AgentGuy 1.0.0.3.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Aglare 3GP to AVI Converter 7.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\AirSpace 1.0.3.5.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\AK HHV 2.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\AKVIS LightShop 2.5.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Alexa Toolbar Removal Tool 1.0.2.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Alpha Echo Font 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\AppKill 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Ares Galaxy Turbo Accelerator 4.8.8.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Article Authoring Add-in for Microsoft Office Word 2007 1.0 Beta 1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\AtomicTask 2.0.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Audiolib DVD Ripper 1.0.0 Build 25.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\AutoWikiBrowser 4.1.4.2.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\AV350 1.2.7.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\AVG Anti-Spyware 7.5.1.43-3339.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\AVG.6.0.Antivirus.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\AVIM 20080728.250.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Bass Fretboard Addict 1.3.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\BestImage 1.0.1.7.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\BlazeFtp 2.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Breeze Professional Edition 5.5.9.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Chess Opening Trainer 1.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Click MusicalKEYS 3.0.0.231.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Convert Excel Spreadsheet to HTML 1.03.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Croatian dictionary and hyphenation patterns 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Digi.Torah 1.0.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Discount Browser 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\DisplayFusion 2.2.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\DopeCode Nusic 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Drempels 1.5.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Elektro Addict [DJ news] 1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\ETF 0.2b.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\FAQGenie 1.3.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\FFGenie 0.5.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\FlexiMusic Orchestra Mar 2004.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Forest Images Screensaver 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Free Vista Icons 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Gabhile 1.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Galant 1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\GRAFster 5.8.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\HABCal Calendar 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Heaven Theme 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Hi5Robot 1.2.5.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Hilbert Neue Condensed Font Truetype 1.31C.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Holly Dolly Video Xcoder 2.9.0.60.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\HTML2PDF Pilot 2.15.82.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\HWMonitor Pro 1.03.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\IBM 000-513 Practice Test Exam Questions.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\IridiumBlue 1.00.0006.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Japanese Prints Screensaver 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\JavaScript Spell Check 2.4.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\JoyceCD 3.9.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Keysend.bas 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\LisaSoft DVD to Sony PSP Converter 5.00.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\M File Encryption 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\MB Free Graphology 1.10.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\McXtract 3.44.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Meaning and Structure in C. Bronte 2003.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\MELODY MAKER 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\mini Google 1.4.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\ML File Monitor 1.10.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Musicwheel 1.0.0.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\MySQL Search & Extract Data Software 7.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Nod32.For.Ms.Exchange.Server.2[1].50.25.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Notable Quotables 1.01.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Notre Dame de Paris 3D 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\nPack 2.0.100.2008.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\On-Screen Ruler 1.0.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\On-Time Operator 03.02.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\PageGate 5.0.0.9.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\PDF Counter 1.0.0 Build 2008-06-24.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\PDFDrucker 2.0.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Photocast Viewer 0.8.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Plurker 0.4 Beta.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\previewr 0.2.4.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\PublicPIM Website Database App 0.5.3.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\pwStore 1.0.6.421.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\QRYTSCIP 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\ReaConverter Pro 5.5.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Rewind Digital Clock 1.0.3.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Rhapsody 25 3.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Right Autorun Pro 2.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\rNSV for RealPlayer 1.0 Beta.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Sanmaxi Outlook Password Recovery 5.0.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Scan2PDF 1.7.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Screen Recorder Gold 2.2.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Smart Chembalance Studio 1.00.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\SMDBNavigator component.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\SMSalias MozClient 1.0.4.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Spyware Killa 9.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Star Screen Saver 1 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Stationery Selector 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Stealth Browser 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\SWF to FLA Converter for PC 1.5.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Swiff Saver 2.3.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\SWiSH Studio2 1.0 build 2006.08.25.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\TaskFiles 1.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Teachers Personal Information Manager 1.3.0016.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\TerrainCAD 1.1.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\The Gadgetbar Toolbar 4.5.159.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Top Shelf 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Total Commander PowerPack 1.7.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Travel Dictionary English PPC 3.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\TTF2PT1 3.4.4.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\TuneSleeve 1.0.11.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\UniqueDisplay.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Video2Web 1.2.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Virtual Edit 1.51.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Visual Calendar Planner 5.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\Vivid Cityscapes Screensaver 1.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\VobSubMuxer 1.4.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\WebCleaner 2.5.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\WebInject 1.41.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\WebSynchronizer 1.3.62.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\WendzelINNTPd 1.4.0.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\WhMic 5.1.02.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\WildPresenter 3.204.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\WinCD 2.71.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\WinI2C-DDC Lite 3.22.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\XRfresh 0.7 Beta.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\yPlay 1.0.75.zip 
Deleted ! - C:\Documents and Settings\clement\Application Data\m\shared\ZipWorx Explorer Wizard 2.5.zip 
Deleted ! - "C:\Documents and Settings\clement\Application Data\m\shared"  
Deleted ! - "C:\Documents and Settings\clement\Application Data\m"  
Deleted ! - "C:\Documents and Settings\clement\Application Data\drivers\srosa.sys"  
Deleted ! - "C:\Documents and Settings\clement\Application Data\drivers\srosa2.sys"  
Deleted ! - "C:\Documents and Settings\clement\Application Data\drivers\winupgro.exe"  
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\105734.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\106453.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\106546.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\106937.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\107968.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\108734.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\110296.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\111015.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\111328.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\112468.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\114375.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\116515.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\118890.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\119937.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\120453.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\125812.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\126187.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\126906.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\126953.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\129046.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\129765.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\130093.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\133953.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\139656.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\140875.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\141343.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\142125.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\142906.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\143140.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\143359.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\143671.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\143687.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\144203.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\148296.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14856718.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14856968.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14860984.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14883937.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14884671.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14885000.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14904515.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\149093.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\149140.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14963765.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14975765.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14976703.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14977140.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14977843.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14978500.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14978937.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14997562.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14997984.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\14998312.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\15008812.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\15010062.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\15010453.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\15038859.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\15039078.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\15039156.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\150609.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\151093.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\151703.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\152687.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\156453.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\156890.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\157203.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\157500.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\157531.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\158187.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\158718.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\158750.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\159187.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\159453.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\159937.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\160218.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\160656.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\160734.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\161093.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\161328.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\161562.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\162296.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\162531.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\162937.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\162968.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\163265.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\163484.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\163671.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\164390.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\164828.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\164921.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\165390.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\165562.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\166375.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\166640.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\167078.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\167093.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\167546.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\167781.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\168500.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\168937.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\170406.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\171703.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\171718.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\172078.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\172406.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\175765.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\177078.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\177546.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\177687.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\178312.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\179140.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\179625.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\183640.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\184312.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\184640.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\185250.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\186421.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\186484.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\186734.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\186937.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\187359.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\187625.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\187671.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\188359.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\188375.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\188812.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\188968.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\189015.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\189343.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\189468.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\189796.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\192593.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\194062.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\194453.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\196421.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\197343.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\197640.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\197906.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\198296.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\198453.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\198671.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\199046.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\199218.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\199593.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\199812.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\199937.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\200062.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\200140.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\200234.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\200312.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\200500.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\200562.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\203984.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\204718.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\208031.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\208703.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\209031.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\212796.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\217187.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\217578.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\217875.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\218578.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\219015.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\219093.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\219562.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\220265.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\220531.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\220984.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\221421.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\222000.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\222375.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\223421.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\223875.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\224234.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\224375.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\224484.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\226750.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\227484.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\227546.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\233640.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\234265.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\234359.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\234687.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\240265.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\240953.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\241281.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\247765.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\248359.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\252031.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\253750.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\254140.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\256406.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\257031.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\257109.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\258218.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\259062.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\259390.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\265093.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\266296.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\266750.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\267500.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\268218.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\268656.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\283625.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\286906.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\287453.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\287531.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\287687.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\288359.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\288687.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\295359.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\295796.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\295859.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\300078.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\301375.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\301750.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\334187.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\334656.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\334796.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\364968.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\365515.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\365625.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\378937.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\379890.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\392187.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\393671.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\394109.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\394812.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\395531.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\395968.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\39765.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\39828.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\40765.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\40796.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\414156.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\414812.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\415140.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\422843.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\424312.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\424703.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\43125.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\43140.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\43578.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\44750.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\44937.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\453734.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\454421.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\454609.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\455187.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\455890.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\46203.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\46515.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\469140.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\469187.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\469906.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\470359.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\470796.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\471500.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\472218.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\472671.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\47500.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\47515.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\483218.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\484578.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\485078.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\485812.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\486750.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\487250.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\48859.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\49078.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\492250.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\492921.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\49312.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\493234.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\49375.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\49437.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\501046.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\502640.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\503015.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\506187.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\506921.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\507281.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\51312.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\51640.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\52203.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\524421.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\525890.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\526281.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\52703.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\549671.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\550218.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\550281.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\56562.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\57484.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\576859.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\577390.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\577453.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\59640.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\61218.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\61890.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\62578.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\62593.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\68109.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\68500.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\68625.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\68734.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\70812.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\70968.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\71406.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\71437.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\71734.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\72468.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\72796.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\76359.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\76812.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\77015.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\77625.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\77734.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\77953.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\78062.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\83593.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\83781.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\84375.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\84593.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\84625.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\84703.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\85921.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\86625.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\87328.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\87796.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\88343.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\88562.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\88890.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\89218.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\89250.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\89546.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\90640.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\91328.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\91484.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\91828.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\96359.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\96843.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\97140.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\97218.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\97468.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\97625.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\98328.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\98656.exe 
Deleted ! - C:\Documents and Settings\clement\Application Data\drivers\downld\99125.exe 
Deleted ! - "C:\Documents and Settings\clement\Application Data\drivers\downld"  
Deleted ! - "C:\Documents and Settings\clement\Application Data\drivers"  
 
»»»» Supression files in C:\DOCUME~1\clement\LOCALS~1\Temp 
 
 
»»»» Supression files in C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5 
 
Deleted ! - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\EAY6Q74L\b64_3[1].jpg    
Deleted ! - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\EAY6Q74L\b64_3[2].jpg    
Deleted ! - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\EAY6Q74L\b64_3[3].jpg    
Deleted ! - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\GGSNWAXU\b64[1].jpg    
Deleted ! - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\GGSNWAXU\b64_2[1].jpg    
Deleted ! - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\JEJE4IY7\b64[1].jpg    
Deleted ! - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\JEJE4IY7\b64_2[1].jpg    
Deleted ! - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\X3Q89DQ8\b64[1].jpg    
Deleted ! - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\X3Q89DQ8\b64[2].jpg    
Deleted ! - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\X3Q89DQ8\b64[3].jpg    
Deleted ! - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\X3Q89DQ8\b64_2[1].jpg    
Deleted ! - C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\X3Q89DQ8\b64_5[1].jpg    
 
--------------- [  Registry / Infected keys ] ---------------- 
 
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa   
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA   
Deleted ! - HKEY_CURRENT_CONFIG\System\CurrentControlSet\Enum\ROOT\LEGACY_SROSA   
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S   
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SK9OU0S   
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_SK9OU0S   
Deleted ! - HKEY_USERS\S-1-5-21-1292428093-926492609-682003330-1004\Software\Local AppWizard-Generated Applications\winupgro   
 
--------------- [ States / Restarting of services ] ---------------- 
 
+- Safe boot mode restored ! 


+- Services : [ Auto=2 / Request=3 / Disable=4 ] 

 Ndisuio - Type of startup  = 3 
 
 EapHost - Type of startup  = 2 
 
 Ip6Fw - Type of startup  = 2 
 
 SharedAccess - Type of startup  = 2 
 
 wuauserv - Type of startup  = 2 
 
 wscsvc - Type of startup  = 2 
 
 WinDefend - Type of startup  = 2 
 
 
---------------   [ Cleaning removable drives ] ----------------  
 
+- Informations : 

C: - Lecteur fixe

 
+- deleting files : 
 
 
--------------- [ Registry / Mountpoint2 ] ----------------  
 
 
 -> Not found ! 
 
 
--------------- [ Searching Cracks / Keygen ] ----------------  
 
C:\Documents and Settings\clement\Application Data\uTorrent\PES2009NOCD CRACK.rar.torrent
C:\Documents and Settings\clement\Application Data\uTorrent\[Pc game] Football Manager 2009 [FM2009 + crack + ita,eng,fr,de].iso.torrent
C:\Documents and Settings\clement\Mes documents\Downloads\Pro.Evolution.Soccer.2009-RELOADED\PES2009NOCD CRACK.rar
 
 
---------------- ! End of report ! ------------------

Destrio5 · Answer

---> Réinstalle les applications qui ont été infectées (Antivirus...).

- Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

- Double-clique sur RSIT.exe afin de lancer le programme.

- Clique sur Continue à l'écran Disclaimer.

- Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : Les rapports sont sauvegardés dans le dossier C:\rsit.

pirlo · Answer

Merci de ton aide déja, c'est gentil a toi.
Voici les deux rapports... 


Logfile of random's system information tool 1.05 (written by random/random)
Run by clement at 2008-12-25 17:53:43
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 416 GB (87%) free of 477 GB
Total RAM: 3263 MB (84% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:53:49, on 25/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\clement\Bureau\RSIT.exe
C:\Program Files	rend micro\clement.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: NetAssistantBHO Class - {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - (no file)
R3 - URLSearchHook: (no name) - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: NetAssistantBHO - {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - (no file)
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: XBTBPos00 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - (no file)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: My.Freeze.com Toolbar - {D0523BB4-21E7-11DD-9AB7-415B56D89593} - (no file)
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Ad-Aware] "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe" +c
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [drvsyskit] C:\Documents and Settings\clement\Application Data\drivers\winupgro.exe
O4 - HKCU\..\Run: [german.exe] C:\WINDOWS\system32\wintems.exe
O4 - HKCU\..\Run: [mule_st_key] C:\Documents and Settings\clement\Application Data\m\flec006.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - (no file)
O9 - Extra button: (no name) - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - (no file)
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

Destrio5 · Answer

1/

--> Démarre Spybot, clique sur Mode, coche Mode avancé.
--> A gauche, clique sur Outils, puis sur Résident.
--> Décoche la case devant Résident "TeaTimer" :
http://apu.mabul.org/up/5/apu-5-gpdx9e06cwz2dypom2q7n6nc.jpg
--> Quitte Spybot.


2/

---> Télécharge ComboFix.exe de sUBs sur ton Bureau :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

/!\ Déconnecte-toi du net et ferme toutes les applications, antivirus et antispyware y compris /!\

---> Double-clique sur Combofix.exe
Un "pop-up" va apparaître qui dit que "ComboFix est utilisé à vos risques et avec aucune garantie...".
Accepte en cliquant sur "Oui"

---> Je te conseille vivement d'installer la Console de récupération.

---> Mets-le en langue française F
Tape sur la touche 1 (Yes) pour démarrer le scan.

/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\

En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

/!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

Note : Le rapport se trouve également là : C:\Combofix.txt

Tutoriel officiel : 
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

pirlo · Answer

ComboFix 08-12-24.01 - clement 2008-12-25 18:17:59.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.3263.2792 [GMT 1:00] Lancé depuis: c:\temp\ComboFix.exe * Un nouveau point de restauration a été créé . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents . ((((((((((((((((((((((((((((( Fichiers créés du 2008-11-25 au 2008-12-25 )))))))))))))))))))))))))))))))))))) . 2008-12-25 18:07 . 2008-12-25 18:07 2,886,301 -ra------ c:\temp\ComboFix.exe 2008-12-25 17:56 . 2007-01-18 13:00 3,968 --a------ c:\windows\system32\drivers\AvgArCln.sys 2008-12-25 17:53 . 2008-12-25 17:53 d-------- C:\rsit 2008-12-25 17:53 . 2008-12-25 17:53 d-------- c:\program files\trend micro 2008-12-25 17:43 . 2008-12-25 17:44 29,893,728 --a------ c:\temp\setupfre.exe 2008-12-25 17:16 . 2008-12-25 17:37 d-------- c:\program files\FindyKill 2008-12-24 21:18 . 2008-12-25 16:01 d-------- c:\program files\Back it up! 2008-12-24 21:18 . 2008-12-24 21:18 796,672 --a------ c:\windows\GPInstall.exe 2008-12-24 20:44 . 2008-12-24 20:44 d-------- C:\MFT 3337 2008-12-24 19:28 . 2008-12-25 16:01 d-------- c:\program files\CCleaner 2008-12-24 19:16 . 2008-12-24 19:33 d-------- c:\program files\eMule 2008-12-24 19:14 . 2008-12-24 19:25 d-------- c:\program files\Fichiers communs\AVSMedia 2008-12-24 19:14 . 2008-12-24 19:14 d-------- c:\documents and settings\clement\Application Data\AVS4YOU 2008-12-24 19:14 . 2008-12-24 19:14 d-------- c:\documents and settings\All Users\Application Data\AVS4YOU 2008-12-24 19:14 . 2007-02-27 18:36 974,848 --a------ c:\windows\system32\mfc70.dll 2008-12-24 19:14 . 2007-02-27 18:36 487,424 --a------ c:\windows\system32\msvcp70.dll 2008-12-24 19:14 . 2007-02-27 18:36 344,064 --a------ c:\windows\system32\msvcr70.dll 2008-12-24 19:13 . 2008-12-24 19:25 d-------- c:\program files\AVS4YOU 2008-12-24 19:13 . 2007-02-27 18:36 1,700,352 --a------ c:\windows\system32\GdiPlus.dll 2008-12-24 19:13 . 2007-02-27 18:36 24,576 --a------ c:\windows\system32\msxml3a.dll 2008-12-24 11:28 . 2008-12-24 11:30 d-------- c:\program files\TrackMania Sunrise 2008-12-24 11:26 . 2008-12-24 11:26 d-------- c:\program files\ma-config.com 2008-12-24 11:26 . 2008-12-24 11:26 d-------- c:\documents and settings\All Users\Application Data\ma-config.com 2008-12-24 11:19 . 2008-12-24 11:19 d-------- c:\program files\Windows Defender 2008-12-23 21:45 . 2008-12-23 21:45 d-------- c:\documents and settings\clement\Application Data\Windows Search 2008-12-23 21:13 . 2008-12-23 21:13 d-------- c:\windows\system32\GroupPolicy 2008-12-23 21:13 . 2008-12-24 10:43 d-------- c:\program files\Windows Desktop Search 2008-12-23 14:24 . 2006-12-28 12:01 19,569 --a------ c:\windows\[u]0/u00002_.tmp 2008-12-23 14:19 . 2008-04-14 13:00 221,184 --a------ c:\windows\system32\wmpns.dll 2008-12-23 14:15 . 2008-12-23 14:16 d-------- c:\windows\ServicePackFiles 2008-12-23 14:14 . 2008-12-23 14:24 d-------- c:\windows\EHome 2008-12-23 14:14 . 2006-12-28 12:01 19,569 --a------ c:\windows\[u]0/u00001_.tmp 2008-12-23 13:48 . 2008-12-23 13:48 d-------- c:\windows\system32\XPSViewer 2008-12-23 13:48 . 2008-12-23 13:48 d-------- c:\program files\Reference Assemblies 2008-12-23 13:48 . 2008-12-23 13:48 d-------- c:\program files\MSBuild 2008-12-23 13:47 . 2006-06-29 13:07 14,048 --------- c:\windows\system32\spmsg2.dll 2008-12-20 15:46 . 2008-12-24 19:06 d--h----- C:\LG3G 2008-12-20 15:46 . 2008-12-20 15:46 d-------- c:\documents and settings\clement\Application Data\LG Electronics 2008-12-20 15:44 . 2008-12-20 15:44 d-------- c:\program files\LG Electronics 2008-12-20 15:44 . 2007-12-27 11:17 21,760 --a------ c:\windows\system32\drivers\lgusbmodem.sys 2008-12-20 15:44 . 2007-12-27 11:14 19,968 --a------ c:\windows\system32\drivers\lgusbdiag.sys 2008-12-20 15:44 . 2007-12-27 11:15 12,672 --a------ c:\windows\system32\drivers\lgusbbus.sys 2008-12-20 15:43 . 2008-12-20 15:44 d-------- c:\program files\LG PC Suite 2 2008-12-15 19:51 . 2008-12-23 14:19 17,480 --a------ c:\windows\system32\GDIPFONTCACHEV1.DAT 2008-12-13 20:05 . 2008-12-13 20:05 d-------- c:\program files\FreeGo 2008-12-13 20:05 . 2008-12-13 20:05 d-------- c:\documents and settings\clement\.FreeGo 2008-12-13 19:37 . 2008-12-13 20:03 d-------- c:\program files\FreeMultiPosteTV 2008-12-13 19:25 . 2008-12-13 19:26 d-------- c:\program files\MyFreeTV 2008-12-10 14:14 . 2008-12-10 14:14 d-------- c:\program files\directx 2008-12-04 20:57 . 2008-12-04 20:57 107,888 --a------ c:\windows\system32\CmdLineExt.dll 2008-12-04 20:55 . 2008-12-04 20:55 d--h----- c:\documents and settings\All Users\Application Data\KONAMI 2008-12-04 20:51 . 2008-12-04 20:51 d-------- c:\program files\KONAMI 2008-12-01 16:55 . 2008-12-01 16:55 d-------- c:\windows\Sun 2008-11-29 13:19 . 2008-11-29 13:19 37,440 --a------ c:\windows\system32\drivers\pssdklbf.drv 2008-11-29 13:19 . 2008-11-29 13:19 30,272 --a------ c:\windows\system32\drivers\pssdk31.drv 2008-11-29 12:31 . 2008-11-29 12:31 5,760,054 --a------ c:\windows\BricoPack Wallpaper.bmp 2008-11-29 12:31 . 2008-11-29 12:31 64,535 --a------ c:\windows\BricoPackUninst.cmd 2008-11-29 12:30 . 2008-11-29 12:31 6,118 --a------ c:\windows\BricoPackFoldersDelete.cmd 2008-11-29 12:29 . 2008-11-29 12:29 d-------- c:\windows\BricoPacks 2008-11-28 10:18 . 2008-11-28 10:18 d--h----- c:\documents and settings\clement\Application Data\TransRender 2008-11-28 10:18 . 2008-11-28 10:18 d--h----- c:\documents and settings\clement\Application Data\Temporary 2008-11-28 10:18 . 2008-12-23 21:47 d--h----- c:\documents and settings\clement\Application Data\Samsung 2008-11-28 10:18 . 2008-11-28 10:18 d--h----- c:\documents and settings\clement\Application Data\ConvertTemp 2008-11-28 10:15 . 2008-11-28 10:15 d-------- c:\windows\system32\Samsung_USB_Drivers 2008-11-28 10:15 . 2008-11-28 10:15 d-------- c:\windows\system32\Samsung PC Studio Codecs 2008-11-28 10:15 . 2005-08-30 17:59 94,000 --a------ c:\windows\system32\drivers\ss_mdm.sys 2008-11-28 10:15 . 2005-08-30 17:57 58,320 --a------ c:\windows\system32\drivers\ss_bus.sys 2008-11-28 10:15 . 2005-08-30 17:58 8,304 --a------ c:\windows\system32\drivers\ss_mdfl.sys 2008-11-28 10:15 . 2005-08-30 17:58 6,144 --a------ c:\windows\system32\drivers\ss_cmnt.sys 2008-11-28 10:15 . 2005-08-30 17:58 6,144 --a------ c:\windows\system32\drivers\ss_cm.sys 2008-11-28 10:15 . 2005-08-30 17:57 5,808 --a------ c:\windows\system32\drivers\ss_whnt.sys 2008-11-28 10:15 . 2005-08-30 17:57 5,808 --a------ c:\windows\system32\drivers\ss_wh.sys 2008-11-28 10:15 . 2005-08-28 20:51 766 --a------ c:\windows\system32\Uninstall.ico 2008-11-27 21:42 . 2008-11-27 21:42 d--h----- c:\documents and settings\clement\WINDOWS 2008-11-27 21:42 . 1996-11-05 16:13 299,008 --a------ c:\windows\uninst.exe . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-25 17:16 --------- d--h--w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2008-12-25 16:45 --------- d-----w c:\program files\Spybot - Search & Destroy 2008-12-25 15:01 --------- d-----w c:\program files\Windows Live Safety Center 2008-12-25 15:00 --------- d-----w c:\program files\adslTV 2008-12-24 14:09 --------- d-----w c:\program files\The KMPlayer 2008-12-23 20:47 --------- d--h--w c:\program files\InstallShield Installation Information 2008-12-23 12:09 --------- d--h--w c:\documents and settings\clement\Application Data\uTorrent 2008-12-21 22:01 --------- d-----w c:\program files\TuneUp Utilities 2008 2008-12-21 20:24 --------- d--h--w c:\documents and settings\clement\Application Data\vlc 2008-12-14 14:40 --------- d-----w c:\program files\a-squared Free 2008-11-24 19:59 410,976 ----a-w c:\windows\system32\deploytk.dll 2008-11-24 19:59 --------- d-----w c:\program files\Java 2008-11-23 12:42 --------- d--h--w c:\program files\Zero G Registry 2008-11-20 12:02 --------- d--h--w c:\documents and settings\clement\Application Data\Lavasoft 2008-11-20 12:02 --------- d-----w c:\program files\Lavasoft 2008-11-19 21:38 --------- d--h--w c:\documents and settings\All Users\Application Data\Lavasoft 2008-11-19 21:37 --------- d-----w c:\program files\Fichiers communs\Wise Installation Wizard 2008-11-19 21:21 --------- d-----w c:\program files\RamBooster 2.0 2008-11-19 21:11 --------- d-----w c:\program files\Glary Utilities 2008-11-18 17:48 --------- d-----w c:\program files\microsoft frontpage 2008-11-16 21:24 --------- d-----w c:\program files\Microsoft CAPICOM 2.1.0.2 2008-11-16 16:18 74,752 ----a-w c:\windows\ST6UNST.EXE 2008-11-16 16:18 253,952 ------w c:\windows\Setup1.exe 2008-11-16 11:14 --------- d--h--w c:\documents and settings\clement\Application Data\GlarySoft 2008-11-16 09:39 --------- d--h--w c:\documents and settings\All Users\Application Data\Messenger Plus! 2008-11-15 21:40 --------- dcsh--w c:\program files\Fichiers communs\WindowsLiveInstaller 2008-11-15 21:38 --------- d--h--w c:\documents and settings\All Users\Application Data\WLInstaller 2008-11-15 21:38 --------- d-----w c:\program files\Windows Live 2008-11-15 16:38 --------- d-----w c:\program files\EA GAMES 2008-11-15 11:50 --------- d-----w c:\program files\AxBx 2008-11-15 11:46 --------- d--h--w c:\documents and settings\clement\Application Data\RetinaX 2008-11-15 11:05 --------- d--h--w c:\documents and settings\All Users\Application Data\Grisoft 2008-11-10 22:44 --------- d-----w c:\program files\MSXML 4.0 2008-11-09 14:21 --------- d--h--w c:\documents and settings\clement\Application Data\Ahead 2008-11-09 09:35 --------- d--h--w c:\documents and settings\All Users\Application Data\Ahead 2008-11-09 09:34 --------- d-----w c:\program files\Fichiers communs\Ahead 2008-11-09 09:33 --------- d--h--w c:\documents and settings\All Users\Application Data\Nero 2008-11-09 09:33 --------- d-----w c:\program files\Nero 2008-11-08 10:09 2,287,104 ----a-w c:\windows\system32\TUKernel.exe 2008-11-08 08:59 43,520 ----a-w c:\windows\system32\CmdLineExt03.dll 2008-11-06 14:49 --------- d--h--w c:\documents and settings\All Users\Application Data\Yahoo! Companion 2008-11-04 20:49 --------- d-----w c:\program files\VideoLAN 2008-11-04 08:39 --------- d-----w c:\program files\Winamp 2008-11-04 08:30 --------- d--h--w c:\documents and settings\All Users\Application Data\OrbNetworks 2008-11-03 19:04 --------- d--h--w c:\documents and settings\clement\Application Data\Winamp 2008-11-03 18:56 --------- d-----w c:\program files\Winamp Remote 2008-11-03 14:05 --------- d--h--w c:\documents and settings\clement\Application Data\FastStone 2008-11-03 14:05 --------- d-----w c:\program files\FastStone Image Viewer 2008-11-01 14:11 --------- d-----w c:\program files\Fichiers communs\Adobe 2008-10-31 16:40 --------- d-----w c:\program files\Messenger Plus! Live 2008-10-31 16:40 --------- d-----w c:\program files\Circle Developement 2008-10-31 09:36 --------- d-----w c:\program files\Thrustmaster 2008-10-30 18:06 --------- d--h--w c:\documents and settings\clement\Application Data\dvdcss 2008-10-30 13:58 355,584 ----a-w c:\windows\system32\TuneUpDefragService.exe 2008-10-30 13:58 --------- d--h--w c:\documents and settings\clement\Application Data\TuneUp Software 2008-10-30 13:58 --------- d--h--w c:\documents and settings\All Users\Application Data\TuneUp Software 2008-10-29 21:03 --------- d-----w c:\program files\Saitek 2008-10-29 21:03 --------- d-----w c:\program files\Fichiers communs\InstallShield 2008-10-29 15:15 --------- d-----w c:\program files\Yahoo! 2008-10-29 13:29 --------- d--h--w c:\documents and settings\clement\Application Data\Leadertech 2008-10-29 13:25 --------- d-----w c:\program files\EA Sports 2008-10-29 13:16 --------- d-----w c:\program files\Microsoft 2008-10-29 13:07 --------- d-----w c:\program files\Fichiers communs\Windows Live 2008-10-29 12:52 --------- d-----w c:\program files\Alcohol Soft 2008-10-29 12:46 --------- d-----w c:\program files\Alwil Software 2008-10-29 12:35 --------- d-----w c:\program files\AGEIA Technologies 2008-10-29 12:25 --------- d-----w c:\program files\Intel 2008-10-29 12:23 315,392 ----a-w c:\windows\HideWin.exe 2008-10-29 12:23 --------- d-----w c:\program files\Realtek 2008-10-29 12:22 --------- d--h--w c:\documents and settings\clement\Application Data\InstallShield 2008-10-29 12:06 --------- d-----w c:\program files\Services en ligne 2008-10-23 12:36 286,720 ----a-w c:\windows\system32\gdi32.dll 2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll 2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll 2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll 2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll 2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll 2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe 2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll 2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll 2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll 2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll 2008-10-16 01:01 670,208 ----a-w c:\windows\system32\wininet.dll 2008-10-03 10:03 247,326 ----a-w c:\windows\system32\strmdll.dll 2008-10-02 09:07 453,152 ----a-w c:\windows\system32\NVUNINST.EXE 2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll 2008-04-14 12:00 93,184 --sha-w c:\windows\BricoPacks\SysFiles\79_iexplore.exe 2008-04-14 12:00 60,416 --sha-w c:\windows\BricoPacks\SysFiles\80_msimn.exe . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016] "Profiler"="c:\program files\Saitek\Software\Profiler.exe" [2005-06-14 159744] "SaiMfd"="c:\program files\Saitek\Software\SaiMfd.exe" [2005-06-17 126976] "NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-24 136600] "Ad-Aware"="c:\program files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe" [2005-05-27 865280] "RTHDCPL"="RTHDCPL.EXE" [2007-09-19 c:\windows\RTHDCPL.exe] "nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "MaxRecentDocs"= 15 (0xf) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe"= "%windir%\system32\sessmgr.exe"= "c:\Program Files\adslTV\adsltv.exe"= "c:\Program Files\adslTV\vlc.exe"= "c:\Program Files\Winamp Remote\bin\Orb.exe"= "c:\Program Files\Winamp Remote\bin\OrbTray.exe"= "c:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe"= "c:\Program Files\EA Sports\FIFA 09\FIFA09.exe"= "c:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "c:\Program Files\Windows Live\Messenger\livecall.exe"= "c:\Program Files\KONAMI\Pro Evolution Soccer 2009\pes2009.exe"= "c:\Program Files\MyFreeTV\MyFreeTV.exe"= R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\system32\drivers\sfdrv01a.sys [2006-07-05 63352] S2 WinDefend;Windows Defender;"c:\program files\Windows Defender\MsMpEng.exe" [2006-11-03 13592] S3 maconfservice;Ma-Config Service;"c:\program files\ma-config.com\maconfservice.exe" [2008-12-19 195752] S3 PsSdk31;PsSdk31;\??\c:\windows\system32\Drivers\pssdk31.drv [2008-11-29 30272] S3 PsSdkLBF;PsSdkLBF;\??\c:\windows\system32\Drivers\pssdklbf.drv [2008-11-29 37440] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp *Newly Created Service* - EAPHOST *Newly Created Service* - IP6FW *Newly Created Service* - PROCEXP90 . Contenu du dossier 'Tâches planifiées' 2008-12-25 c:\windows\Tasks\GlaryInitialize.job - c:\program files\Glary Utilities\initialize.exe [2008-10-29 17:58] 2008-12-25 c:\windows\Tasks\Maintenance en 1 clic.job - c:\program files\TuneUp Utilities 2008\OneClickStarter.exe [2008-06-20 09:23] 2008-12-25 c:\windows\Tasks\MP Scheduled Scan.job - c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 19:20] . - - - - ORPHELINS SUPPRIMES - - - - URLSearchHooks-{E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - (no file) BHO-{E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - (no file) Toolbar-{D0523BB4-21E7-11DD-9AB7-415B56D89593} - (no file) . ------- Examen supplémentaire ------- . IE: {{3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} IE: {{3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - - FF - ProfilePath - c:\documents and settings\clement\Application Data\Mozilla\Firefox\Profiles\y35onwqj.default\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://fr.blackle.com/ FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q= FF - plugin: c:\program files\Yahoo!\Common\npyaxmpb.dll [color=red]ATTENTION: FIREFOX POLICES IS IN FORCE /color FF - user.js: yahoo.homepage.dontask - true. ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-25 18:18:30 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\system\ControlSet002\Services\PsSdk31] "ImagePath"="\??\c:\windows\system32\Drivers\pssdk31.drv" [HKEY_LOCAL_MACHINE\system\ControlSet002\Services\PsSdkLBF] "ImagePath"="\??\c:\windows\system32\Drivers\pssdklbf.drv" . Heure de fin: 2008-12-25 18:18:56 ComboFix-quarantined-files.txt 2008-12-25 17:18:44 Avant-CF: 435 767 336 960 octets libres Après-CF: 435,755,749,376 octets libres WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect /TUTag=RKID3A 271 --- E O F --- 2008-12-25 16:43:55

Destrio5 · Answer

---> Désinstalle FindyKill.

---> Télécharge Lop S&D sur ton Bureau.
---> Double-clique dessus pour lancer l'installation.
---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau.
---> Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche).
---> Patiente jusqu'à la fin du scan.
---> Poste le rapport généré (C:\lopR.txt).

pirlo · Answer

--------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : Processeur Intel Pentium III Xeon )
   BIOS : Default System BIOS
   USER : clement ( Administrator )
   BOOT : Normal boot
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:465 Go (Free:405 Go)
   D:\ (CD or DVD)
   F:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 25/12/2008|18:24 )
 
   --------------------\  Listing des dossiers dans APPLIC~1

   [01/11/2008|15:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [09/11/2008|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
   [24/12/2008|19:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
   [15/11/2008|12:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
   [04/12/2008|20:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\KONAMI
   [19/11/2008|22:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [24/12/2008|11:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
   [16/11/2008|10:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [23/12/2008|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [09/11/2008|10:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
   [04/11/2008|09:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OrbNetworks
   [25/12/2008|18:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [30/10/2008|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
   [31/10/2008|18:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [15/11/2008|22:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [06/11/2008|15:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [02/11/2008|19:02] C:\DOCUME~1\clement\APPLIC~1\Adobe
   [09/11/2008|15:21] C:\DOCUME~1\clement\APPLIC~1\Ahead
   [24/12/2008|19:14] C:\DOCUME~1\clement\APPLIC~1\AVS4YOU
   [28/11/2008|10:18] C:\DOCUME~1\clement\APPLIC~1\ConvertTemp
   [30/10/2008|19:06] C:\DOCUME~1\clement\APPLIC~1\dvdcss
   [03/11/2008|15:05] C:\DOCUME~1\clement\APPLIC~1\FastStone
   [16/11/2008|12:14] C:\DOCUME~1\clement\APPLIC~1\GlarySoft
   [29/10/2008|13:11] C:\DOCUME~1\clement\APPLIC~1\Identities
   [29/10/2008|13:22] C:\DOCUME~1\clement\APPLIC~1\InstallShield
   [20/11/2008|13:02] C:\DOCUME~1\clement\APPLIC~1\Lavasoft
   [29/10/2008|14:29] C:\DOCUME~1\clement\APPLIC~1\Leadertech
   [20/12/2008|15:46] C:\DOCUME~1\clement\APPLIC~1\LG Electronics
   [29/10/2008|14:03] C:\DOCUME~1\clement\APPLIC~1\Macromedia
   [15/12/2008|21:07] C:\DOCUME~1\clement\APPLIC~1\Microsoft
   [29/10/2008|13:42] C:\DOCUME~1\clement\APPLIC~1\Mozilla
   [15/11/2008|12:46] C:\DOCUME~1\clement\APPLIC~1\RetinaX
   [23/12/2008|21:47] C:\DOCUME~1\clement\APPLIC~1\Samsung
   [24/11/2008|20:57] C:\DOCUME~1\clement\APPLIC~1\Sun
   [28/11/2008|10:18] C:\DOCUME~1\clement\APPLIC~1\Temporary
   [28/11/2008|10:18] C:\DOCUME~1\clement\APPLIC~1\TransRender
   [30/10/2008|14:58] C:\DOCUME~1\clement\APPLIC~1\TuneUp Software
   [23/12/2008|13:09] C:\DOCUME~1\clement\APPLIC~1\uTorrent
   [21/12/2008|21:24] C:\DOCUME~1\clement\APPLIC~1\vlc
   [03/11/2008|20:04] C:\DOCUME~1\clement\APPLIC~1\Winamp
   [23/12/2008|21:45] C:\DOCUME~1\clement\APPLIC~1\Windows Search
   [30/10/2008|14:57] C:\DOCUME~1\clement\APPLIC~1\WinRAR

   [29/10/2008|13:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [15/11/2008|11:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [23/12/2008|22:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS\tasks

   [25/12/2008 02:25][--ah-----] C:\WINDOWS\tasks\MP Scheduled Scan.job
   [25/12/2008 18:21][--a------] C:\WINDOWS\tasks\GlaryInitialize.job
   [25/12/2008 18:21][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
   [25/12/2008 18:21][--ah-----] C:\WINDOWS\tasks\SA.DAT
   [14/04/2008 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [01/11/2008|15:11] C:\Program Files\Adobe
   [25/12/2008|16:00] C:\Program Files\adslTV
   [29/10/2008|13:35] C:\Program Files\AGEIA Technologies
   [29/10/2008|13:52] C:\Program Files\Alcohol Soft
   [29/10/2008|13:46] C:\Program Files\Alwil Software
   [14/12/2008|15:40] C:\Program Files\a-squared Free
   [24/12/2008|19:25] C:\Program Files\AVS4YOU
   [15/11/2008|12:50] C:\Program Files\AxBx
   [25/12/2008|16:01] C:\Program Files\Back it up!
   [25/12/2008|16:01] C:\Program Files\CCleaner
   [31/10/2008|17:40] C:\Program Files\Circle Developement
   [29/10/2008|13:04] C:\Program Files\ComPlus Applications
   [10/12/2008|14:14] C:\Program Files\directx
   [15/11/2008|17:38] C:\Program Files\EA GAMES
   [29/10/2008|14:25] C:\Program Files\EA Sports
   [24/12/2008|19:33] C:\Program Files\eMule
   [03/11/2008|15:05] C:\Program Files\FastStone Image Viewer
   [25/12/2008|18:18] C:\Program Files\Fichiers communs
   [25/12/2008|18:23] C:\Program Files\FindyKill
   [13/12/2008|20:05] C:\Program Files\FreeGo
   [13/12/2008|20:03] C:\Program Files\FreeMultiPosteTV
   [19/11/2008|22:11] C:\Program Files\Glary Utilities
   [15/11/2008|17:37] C:\Program Files\GRISOFT
   [23/12/2008|21:47] C:\Program Files\InstallShield Installation Information
   [29/10/2008|13:25] C:\Program Files\Intel
   [25/12/2008|16:01] C:\Program Files\Internet Explorer
   [24/11/2008|20:59] C:\Program Files\Java
   [04/12/2008|20:51] C:\Program Files\KONAMI
   [20/11/2008|13:02] C:\Program Files\Lavasoft
   [20/12/2008|15:44] C:\Program Files\LG Electronics
   [20/12/2008|15:44] C:\Program Files\LG PC Suite 2
   [24/12/2008|11:26] C:\Program Files\ma-config.com
   [23/12/2008|14:38] C:\Program Files\Messenger
   [31/10/2008|17:40] C:\Program Files\Messenger Plus! Live
   [29/10/2008|14:16] C:\Program Files\Microsoft
   [16/11/2008|22:24] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [18/11/2008|18:48] C:\Program Files\microsoft frontpage
   [18/11/2008|18:48] C:\Program Files\Microsoft Office
   [25/12/2008|16:01] C:\Program Files\Movie Maker
   [25/12/2008|18:22] C:\Program Files\Mozilla Firefox
   [23/12/2008|13:48] C:\Program Files\MSBuild
   [29/10/2008|13:03] C:\Program Files\MSN
   [29/10/2008|13:04] C:\Program Files\MSN Gaming Zone
   [10/11/2008|23:44] C:\Program Files\MSXML 4.0
   [13/12/2008|19:26] C:\Program Files\MyFreeTV
   [09/11/2008|10:33] C:\Program Files\Nero
   [29/10/2008|13:06] C:\Program Files\NetMeeting
   [25/12/2008|16:01] C:\Program Files\Outlook Express
   [19/11/2008|22:21] C:\Program Files\RamBooster 2.0
   [29/10/2008|13:23] C:\Program Files\Realtek
   [23/12/2008|13:48] C:\Program Files\Reference Assemblies
   [29/10/2008|22:03] C:\Program Files\Saitek
   [29/10/2008|13:06] C:\Program Files\Services en ligne
   [25/12/2008|17:45] C:\Program Files\Spybot - Search & Destroy
   [24/12/2008|15:09] C:\Program Files\The KMPlayer
   [31/10/2008|10:36] C:\Program Files\Thrustmaster
   [24/12/2008|11:30] C:\Program Files\TrackMania Sunrise
   [25/12/2008|17:53] C:\Program Files\trend micro
   [21/12/2008|23:01] C:\Program Files\TuneUp Utilities 2008
   [29/10/2008|13:11] C:\Program Files\Uninstall Information
   [04/11/2008|21:49] C:\Program Files\VideoLAN
   [04/11/2008|09:39] C:\Program Files\Winamp
   [03/11/2008|19:56] C:\Program Files\Winamp Remote
   [24/12/2008|11:19] C:\Program Files\Windows Defender
   [24/12/2008|10:43] C:\Program Files\Windows Desktop Search
   [15/11/2008|22:38] C:\Program Files\Windows Live
   [25/12/2008|16:01] C:\Program Files\Windows Live Safety Center
   [23/12/2008|14:16] C:\Program Files\Windows Media Player
   [29/10/2008|13:04] C:\Program Files\Windows NT
   [29/10/2008|13:06] C:\Program Files\WindowsUpdate
   [30/10/2008|14:51] C:\Program Files\WinRAR
   [29/10/2008|13:08] C:\Program Files\xerox
   [29/10/2008|16:15] C:\Program Files\Yahoo!
   [23/11/2008|13:42] C:\Program Files\Zero G Registry

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [01/11/2008|15:11] C:\Program Files\Fichiers communs\Adobe
   [09/11/2008|10:34] C:\Program Files\Fichiers communs\Ahead
   [24/12/2008|19:25] C:\Program Files\Fichiers communs\AVSMedia
   [18/11/2008|18:49] C:\Program Files\Fichiers communs\Designer
   [29/10/2008|22:03] C:\Program Files\Fichiers communs\InstallShield
   [18/11/2008|18:49] C:\Program Files\Fichiers communs\Microsoft Shared
   [29/10/2008|13:06] C:\Program Files\Fichiers communs\MSSoap
   [29/10/2008|20:52] C:\Program Files\Fichiers communs\ODBC
   [29/10/2008|13:06] C:\Program Files\Fichiers communs\Services
   [29/10/2008|20:52] C:\Program Files\Fichiers communs\SpeechEngines
   [29/10/2008|13:05] C:\Program Files\Fichiers communs\System
   [29/10/2008|14:07] C:\Program Files\Fichiers communs\Windows Live
   [15/11/2008|22:40] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [19/11/2008|22:37] C:\Program Files\Fichiers communs\Wise Installation Wizard

   --------------------\  Process

   ( 27 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\Program Files\Circle Developement
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-12-25 18:24:54
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\clement\Application Data\uTorrent\PES2009NOCD CRACK.rar.torrent
   C:\DOCUME~1\clement\Application Data\uTorrent\[Pc game] Football Manager 2009 [FM2009 + crack + ita,eng,fr,de].iso.torrent
   C:\DOCUME~1\clement\Mes documents\Downloads\Pro.Evolution.Soccer.2009-RELOADED\PES2009NOCD CRACK.rar


   [F:26][D:1]-> C:\DOCUME~1\clement\LOCALS~1\Temp
   [F:4][D:0]-> C:\DOCUME~1\clement\Cookies
   [F:2][D:0]-> C:\DOCUME~1\clement\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 25/12/2008|18:25 - Option : [1]

   --------------------\  Fin du rapport a 18:25:14

Destrio5 · Answer

---> Relance Lop S&D.
---> Choisis cette fois-ci l'option 2 (Suppression).
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt).

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

pirlo · Answer

-------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : Processeur Intel Pentium III Xeon )
   BIOS : Default System BIOS
   USER : clement ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1296 [VPS 081224-0] 4.8.1296 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:465 Go (Free:405 Go)
   D:\ (CD or DVD)
   F:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [2] ( 25/12/2008|18:30 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\Program Files\Circle Developement
   -
   [ Fichier Hosts ] .. Restaure!
 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1

   [01/11/2008|15:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [09/11/2008|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
   [24/12/2008|19:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
   [15/11/2008|12:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
   [04/12/2008|20:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\KONAMI
   [19/11/2008|22:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [24/12/2008|11:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
   [16/11/2008|10:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [23/12/2008|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [09/11/2008|10:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
   [04/11/2008|09:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OrbNetworks
   [25/12/2008|18:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [30/10/2008|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
   [31/10/2008|18:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [15/11/2008|22:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [06/11/2008|15:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [02/11/2008|19:02] C:\DOCUME~1\clement\APPLIC~1\Adobe
   [09/11/2008|15:21] C:\DOCUME~1\clement\APPLIC~1\Ahead
   [24/12/2008|19:14] C:\DOCUME~1\clement\APPLIC~1\AVS4YOU
   [28/11/2008|10:18] C:\DOCUME~1\clement\APPLIC~1\ConvertTemp
   [30/10/2008|19:06] C:\DOCUME~1\clement\APPLIC~1\dvdcss
   [03/11/2008|15:05] C:\DOCUME~1\clement\APPLIC~1\FastStone
   [16/11/2008|12:14] C:\DOCUME~1\clement\APPLIC~1\GlarySoft
   [29/10/2008|13:11] C:\DOCUME~1\clement\APPLIC~1\Identities
   [29/10/2008|13:22] C:\DOCUME~1\clement\APPLIC~1\InstallShield
   [20/11/2008|13:02] C:\DOCUME~1\clement\APPLIC~1\Lavasoft
   [29/10/2008|14:29] C:\DOCUME~1\clement\APPLIC~1\Leadertech
   [20/12/2008|15:46] C:\DOCUME~1\clement\APPLIC~1\LG Electronics
   [29/10/2008|14:03] C:\DOCUME~1\clement\APPLIC~1\Macromedia
   [15/12/2008|21:07] C:\DOCUME~1\clement\APPLIC~1\Microsoft
   [29/10/2008|13:42] C:\DOCUME~1\clement\APPLIC~1\Mozilla
   [15/11/2008|12:46] C:\DOCUME~1\clement\APPLIC~1\RetinaX
   [23/12/2008|21:47] C:\DOCUME~1\clement\APPLIC~1\Samsung
   [24/11/2008|20:57] C:\DOCUME~1\clement\APPLIC~1\Sun
   [28/11/2008|10:18] C:\DOCUME~1\clement\APPLIC~1\Temporary
   [28/11/2008|10:18] C:\DOCUME~1\clement\APPLIC~1\TransRender
   [30/10/2008|14:58] C:\DOCUME~1\clement\APPLIC~1\TuneUp Software
   [23/12/2008|13:09] C:\DOCUME~1\clement\APPLIC~1\uTorrent
   [21/12/2008|21:24] C:\DOCUME~1\clement\APPLIC~1\vlc
   [03/11/2008|20:04] C:\DOCUME~1\clement\APPLIC~1\Winamp
   [23/12/2008|21:45] C:\DOCUME~1\clement\APPLIC~1\Windows Search
   [30/10/2008|14:57] C:\DOCUME~1\clement\APPLIC~1\WinRAR

   [29/10/2008|13:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [15/11/2008|11:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [23/12/2008|22:00] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS\tasks

   [25/12/2008 02:25][--ah-----] C:\WINDOWS\tasks\MP Scheduled Scan.job
   [25/12/2008 18:27][--a------] C:\WINDOWS\tasks\GlaryInitialize.job
   [25/12/2008 18:26][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
   [25/12/2008 18:26][--ah-----] C:\WINDOWS\tasks\SA.DAT
   [14/04/2008 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [01/11/2008|15:11] C:\Program Files\Adobe
   [25/12/2008|16:00] C:\Program Files\adslTV
   [29/10/2008|13:35] C:\Program Files\AGEIA Technologies
   [29/10/2008|13:52] C:\Program Files\Alcohol Soft
   [29/10/2008|13:46] C:\Program Files\Alwil Software
   [14/12/2008|15:40] C:\Program Files\a-squared Free
   [24/12/2008|19:25] C:\Program Files\AVS4YOU
   [15/11/2008|12:50] C:\Program Files\AxBx
   [25/12/2008|16:01] C:\Program Files\Back it up!
   [25/12/2008|16:01] C:\Program Files\CCleaner
   [29/10/2008|13:04] C:\Program Files\ComPlus Applications
   [10/12/2008|14:14] C:\Program Files\directx
   [15/11/2008|17:38] C:\Program Files\EA GAMES
   [29/10/2008|14:25] C:\Program Files\EA Sports
   [24/12/2008|19:33] C:\Program Files\eMule
   [03/11/2008|15:05] C:\Program Files\FastStone Image Viewer
   [25/12/2008|18:18] C:\Program Files\Fichiers communs
   [25/12/2008|18:23] C:\Program Files\FindyKill
   [13/12/2008|20:05] C:\Program Files\FreeGo
   [13/12/2008|20:03] C:\Program Files\FreeMultiPosteTV
   [19/11/2008|22:11] C:\Program Files\Glary Utilities
   [15/11/2008|17:37] C:\Program Files\GRISOFT
   [23/12/2008|21:47] C:\Program Files\InstallShield Installation Information
   [29/10/2008|13:25] C:\Program Files\Intel
   [25/12/2008|16:01] C:\Program Files\Internet Explorer
   [24/11/2008|20:59] C:\Program Files\Java
   [04/12/2008|20:51] C:\Program Files\KONAMI
   [20/11/2008|13:02] C:\Program Files\Lavasoft
   [20/12/2008|15:44] C:\Program Files\LG Electronics
   [20/12/2008|15:44] C:\Program Files\LG PC Suite 2
   [24/12/2008|11:26] C:\Program Files\ma-config.com
   [23/12/2008|14:38] C:\Program Files\Messenger
   [31/10/2008|17:40] C:\Program Files\Messenger Plus! Live
   [29/10/2008|14:16] C:\Program Files\Microsoft
   [16/11/2008|22:24] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [18/11/2008|18:48] C:\Program Files\microsoft frontpage
   [18/11/2008|18:48] C:\Program Files\Microsoft Office
   [25/12/2008|16:01] C:\Program Files\Movie Maker
   [25/12/2008|18:27] C:\Program Files\Mozilla Firefox
   [23/12/2008|13:48] C:\Program Files\MSBuild
   [29/10/2008|13:03] C:\Program Files\MSN
   [29/10/2008|13:04] C:\Program Files\MSN Gaming Zone
   [10/11/2008|23:44] C:\Program Files\MSXML 4.0
   [13/12/2008|19:26] C:\Program Files\MyFreeTV
   [09/11/2008|10:33] C:\Program Files\Nero
   [29/10/2008|13:06] C:\Program Files\NetMeeting
   [25/12/2008|16:01] C:\Program Files\Outlook Express
   [19/11/2008|22:21] C:\Program Files\RamBooster 2.0
   [29/10/2008|13:23] C:\Program Files\Realtek
   [23/12/2008|13:48] C:\Program Files\Reference Assemblies
   [29/10/2008|22:03] C:\Program Files\Saitek
   [29/10/2008|13:06] C:\Program Files\Services en ligne
   [25/12/2008|17:45] C:\Program Files\Spybot - Search & Destroy
   [24/12/2008|15:09] C:\Program Files\The KMPlayer
   [31/10/2008|10:36] C:\Program Files\Thrustmaster
   [24/12/2008|11:30] C:\Program Files\TrackMania Sunrise
   [25/12/2008|17:53] C:\Program Files\trend micro
   [21/12/2008|23:01] C:\Program Files\TuneUp Utilities 2008
   [29/10/2008|13:11] C:\Program Files\Uninstall Information
   [04/11/2008|21:49] C:\Program Files\VideoLAN
   [04/11/2008|09:39] C:\Program Files\Winamp
   [03/11/2008|19:56] C:\Program Files\Winamp Remote
   [24/12/2008|11:19] C:\Program Files\Windows Defender
   [24/12/2008|10:43] C:\Program Files\Windows Desktop Search
   [15/11/2008|22:38] C:\Program Files\Windows Live
   [25/12/2008|16:01] C:\Program Files\Windows Live Safety Center
   [23/12/2008|14:16] C:\Program Files\Windows Media Player
   [29/10/2008|13:04] C:\Program Files\Windows NT
   [29/10/2008|13:06] C:\Program Files\WindowsUpdate
   [30/10/2008|14:51] C:\Program Files\WinRAR
   [29/10/2008|13:08] C:\Program Files\xerox
   [29/10/2008|16:15] C:\Program Files\Yahoo!
   [23/11/2008|13:42] C:\Program Files\Zero G Registry

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [01/11/2008|15:11] C:\Program Files\Fichiers communs\Adobe
   [09/11/2008|10:34] C:\Program Files\Fichiers communs\Ahead
   [24/12/2008|19:25] C:\Program Files\Fichiers communs\AVSMedia
   [18/11/2008|18:49] C:\Program Files\Fichiers communs\Designer
   [29/10/2008|22:03] C:\Program Files\Fichiers communs\InstallShield
   [18/11/2008|18:49] C:\Program Files\Fichiers communs\Microsoft Shared
   [29/10/2008|13:06] C:\Program Files\Fichiers communs\MSSoap
   [29/10/2008|20:52] C:\Program Files\Fichiers communs\ODBC
   [29/10/2008|13:06] C:\Program Files\Fichiers communs\Services
   [29/10/2008|20:52] C:\Program Files\Fichiers communs\SpeechEngines
   [29/10/2008|13:05] C:\Program Files\Fichiers communs\System
   [29/10/2008|14:07] C:\Program Files\Fichiers communs\Windows Live
   [15/11/2008|22:40] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [19/11/2008|22:37] C:\Program Files\Fichiers communs\Wise Installation Wizard

   --------------------\  Process

   ( 30 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-12-25 18:30:54
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\clement\Application Data\uTorrent\PES2009NOCD CRACK.rar.torrent
   C:\DOCUME~1\clement\Application Data\uTorrent\[Pc game] Football Manager 2009 [FM2009 + crack + ita,eng,fr,de].iso.torrent
   C:\DOCUME~1\clement\Mes documents\Downloads\Pro.Evolution.Soccer.2009-RELOADED\PES2009NOCD CRACK.rar


   [F:31][D:2]-> C:\DOCUME~1\clement\LOCALS~1\Temp
   [F:4][D:0]-> C:\DOCUME~1\clement\Cookies
   [F:32][D:4]-> C:\DOCUME~1\clement\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 25/12/2008|18:25 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 25/12/2008|18:31 - Option : [2]

   --------------------\  Fin du rapport a 18:31:17

Destrio5 · Answer

---> Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
---> Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
---> Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
---> Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
---> Sélectionne Exécuter un examen rapide.
---> Clique sur Rechercher. L'analyse démarre.

A la fin de l'analyse, un message s'affiche :

L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

---> Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
---> Ferme tes navigateurs.
Si des malwares ont été détectés, clique sur Afficher les résultats.
---> Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
---> MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

pirlo · Answer

Malwarebytes' Anti-Malware 1.31
Version de la base de données: 1544
Windows 5.1.2600 Service Pack 3

25/12/2008 18:38:32
mbam-log-2008-12-25 (18-38-32).txt

Type de recherche: Examen rapide
Eléments examinés: 48065
Temps écoulé: 1 minute(s), 42 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Destrio5 · Answer

---> Désinstalle Java 6 Update 10.

---> Mets à jour Java :
https://www.java.com/fr/download/manual.jsp

---> Mets à jour Internet Explorer :
http://www.microsoft.com/downloads/details.aspx?FamilyId=9AE91EBE-3385-447C-8A30-081805B2F90B&displaylang=fr

Comme tu as le SP3, regarde ici :
http://www.technos-sources.com/tutorial-installer-ie7-apres-avoir-installe-sp3-windows-xp-98.aspx

pirlo · Answer

C'est fini apres ?
Merci en tout cas !
enorme Merci

Destrio5 · Answer

Non, ce n'est pas fini après.

pirlo · Answer

c'est bon j'ai a jour.

Destrio5 · Answer

- Fais un scan en ligne ici https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr (Avec Internet Explorer).

- En bas à droite, clique sur Démarrer Online-scanner.

- Dans la nouvelle fenêtre qui s'affiche, clique sur J'accepte.

- Accepte les Contrôles ActiveX.

- Choisis Poste de travail pour le scan.

- Celui-ci terminé, sauvegarde (Choisis fichier texte) et poste le rapport.

- Pour t'aider à utiliser le scan en ligne :
https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId291566

NOTE : Si tu reçois le message La licence de Kaspersky On-line Scanner est périmée, va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner, reconnecte-toi sur le site de Kaspersky pour retenter le scan en ligne.

pirlo · Answer

-------------------------------------------------------------------------------
 KASPERSKY ON-LINE SCANNER REPORT
 Thursday, December 25, 2008 8:50:41 PM
 Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 3 (Build 2600)
 Kaspersky On-line Scanner version : 5.0.84.2
 Dernière mise à jour de la base antivirus Kaspersky : 25/12/2008
 Enregistrements dans la base antivirus Kaspersky : 1354987
-------------------------------------------------------------------------------

Paramètres d'analyse:
	Analyser avec la base antivirus suivante: standard
	Analyser les archives: vrai
	Analyser les bases de messagerie: vrai

Cible de l'analyse - Poste de travail:
	A:\
	C:\
	D:\
	F:\

Statistiques de l'analyse:
	Total d'objets analysés: 65554
	Nombre de virus trouvés: 4
	Nombre d'objets infectés: 210 / 0
	Nombre d'objets suspects: 0
	Durée de l'analyse: 00:38:09

Nom de l'objet infecté / Nom du virus / Dernière action
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\00292c48371d7f99170efaeaf1199ca4_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\00b0b459deefbbafddc638583281dd2f_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\02b65c0f40e0067ea9b59fcf64ed2e75_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0507c720721d4f48c7e97ebe4af7a19a_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06362b9a308799fa3bdc4c91e0012c31_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\063f5d7b1e5cf132aa5c8932abf62705_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06bcb77980f476159a6e1f5effc176e6_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\099030a4356ef7142c865fd8a71f009c_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ae493812cb0583e5c3b2f61fbd1ef1b_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0bc40ef19948b59a7152b15a498cb1e5_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0c25b3e7b95b301b47a7302693ddda3b_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0d410f1f26659ca5ab66b65cac237e47_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0fac6a80cd95cb3108fd6c8b2ba9aa71_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\10860a1887530f4f80c204a4892eaf49_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\10db62e7d375faf3f4b247690801ac35_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1100933ae8b94b8531a820522937b91c_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\114278da75e4e3c34cff93ac3e634ee7_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\12befb8cfa07dafc5a429a9e1ff68e0a_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\13807b5b161db04eb6c266d0ce54d37f_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1567b691b483e9e22c2bae69c62fbb6c_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1590ccd171044a001b8e731e555debe7_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1652192364b5d9ffe3a443afcf43931c_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1993d0ffe1af73b3a00d2d07decf36ab_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a77b5253902b8a54cedfe58c56f1dfb_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1d00f8a1179301aa45db643857bc8cc0_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f5ff69e6ab326fbe4f76e5aa3071fbe_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fd40d1cc3ceb74374ea0efe05c2f331_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2058a1fabdc68a768b83397dbecb7eb9_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\215cab99715bd0491f90a8a5e5d6a336_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\22bff80a9573637a6065d6bd324b67cb_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\245adae69cca54e5ac87dbb5e978986e_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\25533097f6abe87da937405065490ed9_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26177ff0868eefc66d7c28f8a801a113_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\27a9c7d35586dcaad91560e8851b2812_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\28853801a019fc1ccc08eb52bbad80ff_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2990e00c910c50766878260308db9604_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29f7769d28aa91d4d459f545ccadce0f_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e6b9036e93b9bceb7957afdb4ccb538_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2e77a47f66a6ce9d02030d4aee74bd65_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30cad5995f479e92388cb3dba2521fde_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\36664bec547daad41be92cf306441077_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3687864003db32da7fe1a8b41757afd9_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\38ce55e0a5a1501db18cec8d6f390e7c_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ef4b68686e2fe308e4d733b12c8ff05_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3f45a54643a7f33ee086cc9cce3d1bdb_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3f51d92995037a55812e571528798b95_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3f60dc3c25706a9573e155949b96fa64_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4016c3b10d861c96fe94a902731bb093_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\403fe78b6561ae83ab12e72225167693_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\405798aabc4e0d4c9ae54280498db378_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\41503433a97a32cf1c91b6cd5c269300_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\41a10b15d671e26e80c92c7989d5488a_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\42455a60942f4b81418d0d2c8bd5470a_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\43c8d7407692455d9f9e601c54d32dc7_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\43fd20749bce11a8016e6ce91c1d4c36_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\44e8ab9761d1574c4f1deb718102c537_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4525b5485e10f3361c0af0d26674f12c_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\478505c1fceff9125638df3373c2a758_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\48216be92299dd254853aee1ad3b81ec_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\49d1b0882a3f38cf480293c259c10419_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\49d4134dc2b415f9e7a14a41d2c39ba6_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a09b791a1903f75bd0dce5831fd977b_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4b163049dcc392d3270e2331ffe5d74e_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4e2e0767c968bd33cf42381371516a17_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\50b37c15b151bb52afc0e9530e7c50f7_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\51bf7e95d4b344083731d50c398f7d9a_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\52bb065189cd13332b5afcc785ab309f_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5437da33c75b9dfa0178fd5df57611cb_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\553f859ad5f8fc36f35d80532fb22907_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5675dfdf00c090abd6d095f56d871c78_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\569d645e76c7797e4f7dd3362d310d6d_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\592f7a28c3a4a367c5304331baac83b5_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\59869225c5d4f659651a9848fd550017_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\599a6fa143a1283530a26f8d38d73844_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5a7d4b09ac0af999da6e4e302bb43c6a_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5eef0276dfc2c1c1468b2b3c3359314c_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5f3323663a84e98443dded05ff9a7ec9_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5fb612ee9be9bb7ded67d9a28fb14bae_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6009e99cc296d78a9d90277cc247ba72_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\61355dde0f9e83dc62393d85b632acf9_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\642705ed9dcae4fd81e5c344dd92ab16_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\65868ae25f1212c7696783720e45d313_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6697df71580233cce3682bbf4528b3ec_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\683b804c55e983eaf203bd4a61d5c346_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6a6bed00b758c1046f8d6dfe801f63b7_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6ce2dfbe1c7729837fe07f328c915013_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6e38aaf339e6323011504a9b5f4c45e6_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6f83f3499bc88fb1f37dacdec4962773_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\711e066edbaebbe7ec7dad0f8c0d556f_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\71f6c9e4b8c2273759d6e8dd38ce3c8c_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\725b7fcf5839de83b54dca3732c1f534_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\736ae81cb5a8b99a4078e2db37e1a0b0_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7462d804d1ecde07492e17685362a0f8_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\76c4118eaa4cd3403ec2f97f6f6d4550_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7737e6cc96682c4e68009040b74afbb5_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\78160aa41b01fd05e60f3739f85465da_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7a071f8e9f8884a92b115085cd503c30_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7cfe06af7fbd191d54aee577ab54b32b_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7d6f90c10f2bdffa7d487baf1671a866_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\809df5051674015b8e98d58bce3ff274_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\82ef9438ab65f58340b3d25c10939337_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\83d9dfc158f62da53d0937fa9003b861_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\842bdd48a1c82bb4b92a9539c306f7d3_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\877ceb16e67b6ff61c7fc4ad64e03e2c_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8881d374a62bc59a9547f2798956838f_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\888d7abbc9d382264a835bf5c68e8555_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8baf88cf14c2c3f7d4c427386c40d1b4_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8d776624615eb49688b783b6b075415b_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8f01ffa9fdaa15a5156e5529764fb0e8_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9034ffe7bec9490851829af971367131_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\903661cafad33e42807f0d8941ea28ac_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\905799233d2c6ee2af818e2450495297_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9278a972856196280c76df9341a0f865_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\92cef4d083137012df354b1338caa31b_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9b2ad019f8dcfab043d030951928cd35_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9e777a471ac0f070d0a6853f1be070e6_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a155bd189b8979167ac478c4c165f652_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a1da755acf02be90f860cd3ffe02b43a_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a6a4d478d38af5201bb080dea517f976_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a6c2ae03f306582592de7115ba5b38ed_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a7ab2753ca44c0d326b329a28d7ecb89_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ac08cc89c92c2dc08b255e50b6159ce4_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ad21a5dfb193fa69b5ca31d40f621f7d_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ae36e213341d6ab02a495f69d49d7b99_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\af05a667d096b838dde0d094b64fcb5f_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aff9cc1ce8e0a84082aa8f708692b4d0_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b0258fa6472e0d14557143f9e93511a7_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b194d6bc2fffddd59cd96cb2e1b8b5fe_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b7c99e240ebeed8580c0e84e0061ec49_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b8d79c2fa4631523955a0b695b8423b5_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bb8d19c66552f623dd754a2bd086bc75_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bbd9d01e867538c63328f72073a24984_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bc3c7c3c4e2f67bf68ebc8825aa64769_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bc7078092445771e8010216ffe2a05af_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bcea6511c2fa0972ab68e6e307c4d808_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\beec8b30d3aef8af5b900a4ee5a38016_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c2ec556ce5d9e414822b82db5298714d_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c54816f85603933d9a53247e90cde0b9_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c70bef83f0b832e5ab2eaad03faf2544_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c7877413a318d1190f128de638e0bc65_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c7cf474f3fa391db2d36e986f1036a98_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ca27d012c8ae29c3b712edbe08734f24_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ca522b7589cd6f623f845fce7a7ef39c_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cb521e93022204bced1ed8ee1efb9fc3_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cb9e0f407d96225fd8a14a62faac1ab8_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d0a094f7b98d095a64291479b9b4d60a_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d43c4881b9b8aa8406d97d28a611a1af_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d5503419d1959f53dd0d85e48df403b2_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d587d5a9d30a8d8d934ddb950b11236b_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d71f470c628c8e7520015eb5267188dc_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\de63616d78db7580948be8479abc828c_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e232acca51a5f9a5c12303a05d1d02a6_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e3539dcab8c6e04df231b5c96d959fe9_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e37cf819ce6c061a01a8257098afc33b_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e55810eb69729abe34ea9724b1a4585f_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e5a5194aae18bd7f2f216a91d6d1361d_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e5b51e53026d59d6223c66b8046d8d2e_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e5d64a0ba6101cc057f9223708b4b952_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e5f2973e35fe18898ffed1212629795d_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e8fbdfdfe1c19259e31c502c65daf334_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e97ac2c60706db8418da892978de9831_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ebd1b18a4855d4d9d062c34adec9de99_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\efcfb90637b8fc1ff97d7d08caf3643c_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f0340106811ca2f387f1b3e633d88f2e_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f21062b2fa90dd35f9f58f7d459b4922_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f21f2e0f4fc2e84f2de4465d886026fe_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f30575cfdc920e8438e070c3c182a042_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f3b9cd96a9f168e0edc8b90eb8140ee7_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f71e0b885a780002770792ca5c11b471_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f89dd6c9e01413ca72888767ceb48fbb_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f9634c6dc3847ed39af09679a36cc1fd_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\faf983597072885dab6bdb61a92814e0_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\febd17b9d5fcad10fe557396fa11f145_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ff480f383c898fdb3793d66b4b602c3f_6ca5b26c-a2dc-4df8-995a-66c4ae84cb0f	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\clement\Cookies\index.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\clement\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\clement\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG	L'objet est verrouillé	ignoré
C:\Documents and Settings\clement\Local Settings\Historique\History.IE5\index.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\clement\Local Settings\Temporary Internet Files\Content.IE5\index.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\clement\NTUSER.DAT	L'objet est verrouillé	ignoré
C:\Documents and Settings\clement
tuser.dat.LOG	L'objet est verrouillé	ignoré
C:\Documents and Settings\LocalService\Cookies\index.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG	L'objet est verrouillé	ignoré
C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\LocalService\NTUSER.DAT	L'objet est verrouillé	ignoré
C:\Documents and Settings\LocalService
tuser.dat.LOG	L'objet est verrouillé	ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG	L'objet est verrouillé	ignoré
C:\Documents and Settings\NetworkService\NTUSER.DAT	L'objet est verrouillé	ignoré
C:\Documents and Settings\NetworkService
tuser.dat.LOG	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\log
shield.log	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\log\selfdef.log	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATAeport\Protection résidente.txt	L'objet est verrouillé	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP141\A0021596.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP141\A0021598.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP141\A0021599.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP141\A0021612.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP143\A0021776.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP143\A0021779.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP143\A0021784.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP143\A0021785.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP144\A0021789.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP144\A0021790.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP144\A0021794.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP144\A0021799.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP144\A0021800.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP144\A0021805.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP145\A0021850.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP145\A0021851.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP145\A0021855.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP145\A0021860.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP145\A0021861.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP145\A0021866.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP145\A0021900.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP145\A0021911.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP146\A0021916.exe	Infecté : Email-Worm.Win32.Bagle.majc	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP146\A0021931.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP146\A0021936.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP146\A0021949.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP146\A0021962.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP146\A0021966.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP146\A0021967.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP146\A0021968.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP146\A0022000.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP146\A0022008.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP146\A0022009.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP146\A0022014.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP147\A0022026.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP147\A0022027.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP147\A0022035.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP147\A0022036.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP147\A0022037.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP147\A0022048.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP147\A0022062.exe	Infecté : Email-Worm.Win32.Bagle.majc	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP147\A0022077.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP147\A0022089.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP147\A0022093.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP148\A0022136.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP148\A0022137.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP148\A0022145.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP148\A0022146.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP148\A0022147.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP148\A0022158.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP148\A0022166.exe	Infecté : Email-Worm.Win32.Bagle.majc	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP148\A0022181.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP148\A0022193.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP148\A0022197.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP149\A0022246.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP149\A0022247.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP149\A0022252.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP149\A0022253.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP149\A0022254.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP149\A0022265.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP149\A0022270.exe	Infecté : Email-Worm.Win32.Bagle.majc	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP149\A0022285.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP149\A0022297.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP149\A0022301.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP149\A0022337.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP149\A0022341.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0022368.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0022371.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0022380.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0022404.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0022410.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0022411.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0022412.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0022423.exe	Infecté : Email-Worm.Win32.Bagle.majc	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0022438.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0022450.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0022454.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0022488.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0022492.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0022494.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0023486.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0023487.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0023488.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP150\A0023495.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023546.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023548.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023558.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023559.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023560.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023564.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023602.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023631.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023650.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023656.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023666.exe	Infecté : Email-Worm.Win32.Bagle.majc	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023681.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023693.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023697.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023728.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023730.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023731.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP151\A0023732.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0023833.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0023837.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0023895.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0023896.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0023900.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0023901.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0023902.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0023906.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0023949.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0023958.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0023985.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0024013.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0024032.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0024036.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0024046.exe	Infecté : Email-Worm.Win32.Bagle.majc	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0024061.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0024073.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0024077.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP152\A0024107.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024118.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024175.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024179.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024236.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024237.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024241.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024242.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024243.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024278.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024287.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024314.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024342.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024361.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024365.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024375.exe	Infecté : Email-Worm.Win32.Bagle.majc	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024390.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024402.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024406.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024436.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024438.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024439.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024440.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024461.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024462.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024463.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024570.exe	Infecté : Trojan-Downloader.Win32.Bagle.aik	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024586.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024587.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024588.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024589.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024650.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP153\A0024656.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026119.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026120.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026164.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026196.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026200.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026201.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026202.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026233.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026260.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026264.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026295.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026299.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026355.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026359.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026393.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026402.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026427.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026455.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026473.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026486.exe	Infecté : Email-Worm.Win32.Bagle.majc	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026501.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026513.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026517.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026700.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026703.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026704.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026705.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026748.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026749.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026750.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026751.sys	Infecté : Trojan-Downloader.Win32.Bagle.afl	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026753.exe	Infecté : Trojan-Downloader.Win32.Bagle.aik	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A0-A296-E1ABF0EB003E}\RP154\A0026758.exe	Infecté : Email-Worm.Win32.Bagle.of	ignoré
C:\System Volume Information\_restore{48361BFB-817A-42A

Destrio5 · Answer

Le rapport est trop grand pour être posté.

---> Uploader un fichier sur Mediafire :
&#9679; Rends-toi sur ce lien : https://www.mediafire.com/
&#9679; Clique en haut sur Upload files To Media fire. Choisis ensuite I want to upload without an account.
&#9679; Une fenêtre de ton explorateur windows va s'ouvrir. Navigue jusqu'au rapport que je te demande d'uploader, sélectionne-le puis clique sur ouvrir.
&#9679; Clique ensuite sur Upload.
&#9679; A droite de l'écran, choisis : upload to a new folder. Laisse le nom par défaut (= la date).
&#9679; Valide et laisse l'upload se faire.
&#9679; Clique sur View uploaded file et copie-moi l'url (= le lien) du nouvel onglet ou de la nouvelle fenêtre qui va s'ouvrir dans ton prochain message. Ainsi, je pourrais télécharger le rapport demandé.

pirlo · Answer

https://www.mediafire.com/?sharekey=f57270854e43250b91b20cc0d07ba4d2c88a48ed22f6e9d4

Destrio5 · Answer

---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort.

---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
http://oldtimer.geekstogo.com/OTMoveIt3.exe

---> Double-clique sur OTMoveIt3.exe afin de le lancer.

---> Copie (Ctrl+C) le texte suivant ci-dessous : 





:processes
explorer.exe 

:files 
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat	

:commands
[purity]
[emptytemp]
[start explorer]
[reboot]





---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

pirlo · Answer

C'est bien terminé ? C'est grave ou pas finalement ? rapport Error: Unable to interpret in the current context! Error: Unable to interpret in the current context! ========== FILES ========== File move failed. C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat scheduled to be moved on reboot. File move failed. C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat scheduled to be moved on reboot. ========== COMMANDS ========== File delete failed. C:\DOCUME~1\clement\LOCALS~1\Temp\etilqs_liWBiDRcbQhPvYcLv4Jn scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\clement\LOCALS~1\Temp\~DF43DB.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\clement\LOCALS~1\Temp\~DF43F4.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\clement\LOCALS~1\Temp\~DF4EA8.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\clement\LOCALS~1\Temp\~DF4EBA.tmp scheduled to be deleted on reboot. User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. Local Service Temp folder emptied. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. Local Service Temporary Internet Files folder emptied. File delete failed. C:\WINDOWS emp\Perflib_Perfdata_56c.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS emp\Perflib_Perfdata_65c.dat scheduled to be deleted on reboot. Windows Temp folder emptied. Java cache emptied. File delete failed. C:\Documents and Settings\clement\Local Settings\Application Data\Mozilla\Firefox\Profiles\y35onwqj.default\Cache\_CACHE_001_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\clement\Local Settings\Application Data\Mozilla\Firefox\Profiles\y35onwqj.default\Cache\_CACHE_002_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\clement\Local Settings\Application Data\Mozilla\Firefox\Profiles\y35onwqj.default\Cache\_CACHE_003_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\clement\Local Settings\Application Data\Mozilla\Firefox\Profiles\y35onwqj.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\clement\Local Settings\Application Data\Mozilla\Firefox\Profiles\y35onwqj.default\urlclassifier3.sqlite scheduled to be deleted on reboot. FireFox cache emptied. Temp folders emptied. Explorer started successfully OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12252008_210826 Files moved on Reboot... File move failed. C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat scheduled to be moved on reboot. File move failed. C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat scheduled to be moved on reboot. File C:\DOCUME~1\clement\LOCALS~1\Temp\etilqs_liWBiDRcbQhPvYcLv4Jn not found! File C:\DOCUME~1\clement\LOCALS~1\Temp\~DF43DB.tmp not found! File C:\DOCUME~1\clement\LOCALS~1\Temp\~DF43F4.tmp not found! File C:\DOCUME~1\clement\LOCALS~1\Temp\~DF4EA8.tmp not found! File C:\DOCUME~1\clement\LOCALS~1\Temp\~DF4EBA.tmp not found! File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot. File C:\WINDOWS emp\Perflib_Perfdata_56c.dat not found! File C:\WINDOWS emp\Perflib_Perfdata_65c.dat not found! C:\Documents and Settings\clement\Local Settings\Application Data\Mozilla\Firefox\Profiles\y35onwqj.default\Cache\_CACHE_001_ moved successfully. C:\Documents and Settings\clement\Local Settings\Application Data\Mozilla\Firefox\Profiles\y35onwqj.default\Cache\_CACHE_002_ moved successfully. C:\Documents and Settings\clement\Local Settings\Application Data\Mozilla\Firefox\Profiles\y35onwqj.default\Cache\_CACHE_003_ moved successfully. C:\Documents and Settings\clement\Local Settings\Application Data\Mozilla\Firefox\Profiles\y35onwqj.default\Cache\_CACHE_MAP_ moved successfully. C:\Documents and Settings\clement\Local Settings\Application Data\Mozilla\Firefox\Profiles\y35onwqj.default\urlclassifier3.sqlite moved successfully.

Destrio5 · Answer

Non, ça va, c'est la fin bientôt.

Ton PC va comment ?

Peux-tu refaire la manip' avec OTMoveIt en mode sans échec ?

pirlo · Answer

Je dois faire quoi la ?
Démarrer en mode sans echec avec prise réseau.


Cependant, lors du mode sans échec, on me demande de sélectionner soit 
Console ...
Soit XP familiale

Destrio5 · Answer

XP Familiale.

Voici la manip' à refaire en MSE :
http://www.commentcamarche.net/forum/affich 10089262 exe n est pas une accplication win32 valide?page=2#23

pirlo · Answer

Voila, j'ai refait ça en mode sans echec :
Voici le rapport :


========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat moved successfully.
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\etilqs_bpde0GNMH9qQ2bI07dr2 scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\zfq2k2ej.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\zfq2k2ej.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\zfq2k2ej.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\zfq2k2ej.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\zfq2k2ej.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully
 
OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12252008_212654

Files moved on Reboot...
File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\etilqs_bpde0GNMH9qQ2bI07dr2 not found!
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\zfq2k2ej.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\zfq2k2ej.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\zfq2k2ej.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\zfq2k2ej.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\zfq2k2ej.default\urlclassifier3.sqlite moved successfully.

Destrio5 · Answer

---> Supprime le dossier RSIT situé dans C:\

- Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

- Double-clique sur RSIT.exe afin de lancer le programme.

- Clique sur Continue à l'écran Disclaimer.

- Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : Les rapports sont sauvegardés dans le dossier C:\rsit.

pirlo · Answer

nfo.txt logfile of random's system information tool 1.05 2008-12-25 21:34:23

======Uninstall list======

            -->MsiExec.exe /X{E9F81423-211E-46B6-9AE0-38568BC5CF6F}
-->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->MsiExec /X{A7E07C2B-2220-4415-87E3-784D5814BC93}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware SE Professional-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
adsl TV-->C:\Program Files\adslTV\Uninstal.exe
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
a-squared Free 3.5-->"C:\Program Files\a-squared Free\unins000.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{8984E374-6C93-427C-A3B9-AD92472FDCA0}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
AVG Anti-Rootkit Free-->C:\Program Files\GRISOFT\AVG Anti-Rootkit Free\Uninstall.exe
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Choice Guard-->MsiExec.exe /I{EBD5E7A9-DBB8-4E24-AE3A-CF9390AF1CCB}
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
FastStone Image Viewer 3.6-->C:\Program Files\FastStone Image Viewer\uninst.exe
FIFA 09-->MsiExec.exe /X{2315B23D-3E21-4920-837D-AE6460934ECB}
FreeGo version 4-->"C:\Program Files\FreeGo\unins000.exe"
FreeMultiPosteTV-->"C:\Program Files\FreeMultiPosteTV\Desinstallation\unins000.exe"
Glary Utilities 2.8.0.366-->"C:\Program Files\Glary Utilities\unins000.exe"
HijackThis 2.0.2-->"C:\Program Files	rend micro\HijackThis.exe" /uninstall
Hotfix for Windows XP (KB915800-v4)-->"C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.exe"
IGI 2-->C:\WINDOWS\unvise32.exe C:\Program Files\Codemasters\IGI 2\uninstal.log
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
Language pack for Ad-Aware SE-->C:\PROGRA~1\Lavasoft\Ad-Aware\Plugins\Langs\UNWISE.EXE C:\PROGRA~1\Lavasoft\Ad-Aware\Plugins\Langs\INSTALL.LOG
LG PC Suite-->C:\Program Files\InstallShield Installation Information\{993960EE-CA4D-443F-8F88-E24260DD5FD2}\setup.exe -runfromtemp -l0x040c -removeonly
LG USB Modem driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c LG -removeonly
Ma-Config.com-->MsiExec.exe /X{EC7FE2ED-F305-41B7-90B8-3DAE9E35307A}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8}
Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
Microsoft .NET Framework 3.5 Language Pack - fra-->MsiExec.exe /I{5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}
Microsoft .NET Framework 3.5-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
Microsoft Office 2000 Premium-->MsiExec.exe /I{0000040C-78E1-11D2-B60F-006097C998E7}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Module linguistique Microsoft .NET Framework 3.5 - fra-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\setup.exe
Mozilla Firefox (3.0.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Need for Speed™ Most Wanted-->C:\Program Files\EA GAMES\Need for Speed Most Wanted\EAUninstall.exe
Nero 7 Premium-->MsiExec.exe /X{22FB6750-ADDF-4726-B67F-6901E1991036}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NVIDIA Drivers-->C:\WINDOWS\system32
vuninst.exe UninstallGUI
NVIDIA PhysX v8.09.04-->MsiExec.exe /X{A7E07C2B-2220-4415-87E3-784D5814BC93}
Pro Evolution Soccer 2009-->MsiExec.exe /X{A8DB611A-D80E-450D-85F6-3ACDD164BE31}
RamBooster-->MsiExec.exe /I{ADE3CACC-EC31-480C-83A0-587EE60CE8DF}
REALTEK GbE & FE Ethernet PCI-E NIC Driver-->C:\Program Files\InstallShield Installation Information\{C9BED750-1211-4480-B1A5-718A3BE15525}\Setup.exe -runfromtemp -l0x040c -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c  -removeonly
Saitek SST Programming Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{655EE3B7-0113-4C5E-B147-B82BA325643F}\setup.exe" AddRem
SAMSUNG CDMA Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
The KMPlayer (remove only)-->"C:\Program Files\The KMPlayer\uninstall.exe"
Thrustmaster Force Feedback Driver-->C:\Program Files\InstallShield Installation Information\{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}\setup.exe -runfromtemp -l0x040c -removeonly
TrackMania Sunrise Extreme 1.5.1-->"C:\Program Files\TrackMania Sunrise\unins000.exe"
TuneUp Utilities 2008-->MsiExec.exe /I{5888428E-699C-4E71-BF71-94EE06B497DA}
VideoLAN VLC media player 0.8.5-freehd-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Winamp Remote-->"C:\Program Files\Winamp Remote\uninstall.exe"
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Defender-->MsiExec.exe /I{A06275F4-324B-4E85-95E6-87B2CD729401}
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
Yahoo! Install Manager-->C:\WINDOWS\system32egsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL
Yahoo! Toolbar avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

======Hosts File======

127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com

======Security center information======

AV: avast! antivirus 4.8.1296 [VPS 081225-0]

System event log

Computer Name: MARTINESE
Event Code: 7023
Message: Le service Gestion d'applications s'est arrêté avec l'erreur : 
Le module spécifié est introuvable.


Record Number: 7228
Source Name: Service Control Manager
Time Written: 20081223140037.000000+060
Event Type: erreur
User: 

Computer Name: MARTINESE
Event Code: 7036
Message: Le service Gestion d'applications est entré dans l'état : arrêté.

Record Number: 7227
Source Name: Service Control Manager
Time Written: 20081223140037.000000+060
Event Type: Informations
User: 

Computer Name: MARTINESE
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Gestion d'applications.

Record Number: 7226
Source Name: Service Control Manager
Time Written: 20081223140037.000000+060
Event Type: Informations
User: MARTINESE\clement

Computer Name: MARTINESE
Event Code: 7023
Message: Le service Gestion d'applications s'est arrêté avec l'erreur : 
Le module spécifié est introuvable.


Record Number: 7225
Source Name: Service Control Manager
Time Written: 20081223140037.000000+060
Event Type: erreur
User: 

Computer Name: MARTINESE
Event Code: 7036
Message: Le service Gestion d'applications est entré dans l'état : arrêté.

Record Number: 7224
Source Name: Service Control Manager
Time Written: 20081223140037.000000+060
Event Type: Informations
User: 

Application event log

Computer Name: MARTINESE
Event Code: 103
Message: msnmsgr (3160) \.\C:\Documents and Settings\clement\Local Settings\Application Data\Microsoft\Messenger\martinese.clement@free.fr\SharingMetadata\Working\database_4D4_837D_D483_702A\dfsr.db: Le moteur de base de données a arrêté une instance (0).

Record Number: 896
Source Name: ESENT
Time Written: 20081205092649.000000+060
Event Type: Informations
User: 

Computer Name: MARTINESE
Event Code: 102
Message: msnmsgr (3160) \.\C:\Documents and Settings\clement\Local Settings\Application Data\Microsoft\Messenger\martinese.clement@free.fr\SharingMetadata\Working\database_4D4_837D_D483_702A\dfsr.db: Le moteur de base de données a démarré une nouvelle instance (0).

Record Number: 895
Source Name: ESENT
Time Written: 20081205092633.000000+060
Event Type: Informations
User: 

Computer Name: MARTINESE
Event Code: 100
Message: msnmsgr (3160) Le moteur de base de données 5.01.2600.5512 est démarré.

Record Number: 894
Source Name: ESENT
Time Written: 20081205092633.000000+060
Event Type: Informations
User: 

Computer Name: MARTINESE
Event Code: 12001
Message: The Messenger Sharing USN Journal Reader service started successfully.

Record Number: 893
Source Name: usnjsvc
Time Written: 20081205092632.000000+060
Event Type: 
User: 

Computer Name: MARTINESE
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 892
Source Name: SecurityCenter
Time Written: 20081205092252.000000+060
Event Type: Informations
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\Samsung\Samsung PC Studio 3
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 23 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=1706
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------



voici l'autre 

Logfile of random's system information tool 1.05 (written by random/random)
Run by clement at 2008-12-25 21:34:16
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 415 GB (87%) free of 477 GB
Total RAM: 3263 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:34:22, on 25/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\adslTV\adsltv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\clement\Bureau\RSIT.exe
C:\Program Files	rend micro\clement.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: XBTBPos00 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - (no file)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Ad-Aware] "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe" +c
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - (no file)
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

Destrio5 · Answer

---> Relance HijackThis et choisis Do a system scan only.

---> Coche les cases qui sont devant les lignes suivantes :

O2 - BHO: XBTBPos00 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - (no file) 

O9 - Extra button: (no name) - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - (no file) 

O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file) 

O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file) 

---> Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose.

---> Redémarre ton PC et poste un nouveau rapport HijackThis.

pirlo · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:34:22, on 25/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\adslTV\adsltv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\clement\Bureau\RSIT.exe
C:\Program Files	rend micro\clement.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: XBTBPos00 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - (no file)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Ad-Aware] "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe" +c
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - (no file)
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

Destrio5 · Answer

"Scan saved at 21:34:22, on 25/12/2008"

---> Vu l'heure, il y a un soucis.

pirlo · Answer

J'ai fait ce que tu m'as dis mais il m'a pas affiché de rapport, alors j'ai fait un recherche dans le dossier HijackThis

Destrio5 · Answer

Refais simplement un rapport HijackThis comme on a fait au début.

pirlo · Answer

Logfile of random's system information tool 1.05 (written by random/random)
Run by clement at 2008-12-25 22:07:04
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 415 GB (87%) free of 477 GB
Total RAM: 3263 MB (79% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:07:09, on 25/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Saitek\Software\Profiler.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\clement\Bureau\RSIT.exe
C:\Documents and Settings\clement\Bureau\clement.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

Destrio5 · Answer

Ton PC fonctionne bien ?

pirlo · Answer

Oui. Avast fonctionne, spy bot aussi.
Puis-je supprimé tous les logiciel nécessaire a réparer windows aujourd'hui ?
y'a t-il d'autres taches a effectuer ou non ?
Si c'est fini ...MERCi !

Destrio5 · Answer

1/

---> Je te conseille de mettre à jour Internet Explorer même si tu ne t'en sers pas.

---> Menu Démarrer > Exécuter > Tape combofix /u et valide.

---> Désinstalle HijackThis.

---> Télécharge ToolsCleaner2 sur ton Bureau.
* Double-clique sur ToolsCleaner2.exe pour le lancer.
* Clique sur Recherche et laisse le scan agir.
* Clique sur Suppression pour finaliser. 
* Tu peux, si tu le souhaites, te servir des Options Facultatives.
* Clique sur Quitter pour obtenir le rapport. 
* Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).


2/

---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
* Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
* Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage. 
* Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).


3/

---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger :
http://www.infos-du-net.com/forum/272480-11-desactiver-activer-restauration-systeme

---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
https://www.vulgarisation-informatique.com/creer-point-restauration.php


4/

Pour moi, Antivir est mieux qu'Avast :
http://www.commentcamarche.net/telecharger/telecharger 55 antivir

Surtout, n'installe pas deux antivirus.

Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

Comme navigateur, utilise plutôt Mozilla Firefox qu'Internet Explorer. Tu peux utiliser l'extension Noscript pour plus de sécurité.

Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, Onglet Mises à jour automatiques).

Tu peux aussi modifier le fichier Hosts pour améliorer la sécurité de ton PC :
http://www.commentcamarche.net/faq/sujet 5993 modifier son fichier hosts
https://blog.sosordi.net/category/articles

Par rapport au P2P :
http://www.libellules.ch/...

Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) :
https://www.malekal.com/fichiers/projetantimalwares/prevention-protection.pdf


Sois plus vigilant sur Internet ;)

pirlo · Answer

Alors est-ce que je peux supprimer les logiciel utile aujourd'hui pour réparer windows.
Et CClaener quand j'analyse le registre me mets des erreurs de référence de désinstallation invalide et de référence de MUI manquante. puis-je tot supprimer ?

Destrio5 · Answer

"Alors est-ce que je peux supprimer les logiciel utile aujourd'hui pour réparer windows."
---> ToolsCleaner va en supprimer.

"Et CClaener quand j'analyse le registre me mets des erreurs de référence de désinstallation invalide et de référence de MUI manquante. puis-je tot supprimer ?"
---> Répare tout.

pirlo · Answer

Merci pour tout
A +

Destrio5 · Answer

Tu as le rapport de ToolsCleaner ?

pirlo · Answer

J'ai utlisé toolscleaner, ça ma supprimé les logiciel utilisé hier.
Que dois-je faire maintetant ?
Est-ce que mon PC est encore infecté ?

Destrio5 · Answer

Si tu as fait les manip', c'est OK à part si tu as un truc à me dire ;)

pirlo · Answer

Je dirai juste MERCI !

Sinon  a tu des logiciels pour les virus / trojans a me conseillé ...

Destrio5 · Answer

Comme antivirus, tu as Antivir.

Et pour le reste, tu as Spybot, MBAM mais sois vigilant, un logiciel ne peut pas remplacer le comportement de la personne sur Internet.

.exe n'est pas une accplication win32 valide - Page 3

Discussions similaires

Newsletters