Pub intempestive [Résolu]

Réponse 1 / 28

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

Salut,

XP ou Vista ?

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1

vista

verni29 Messages postés 6699 Date d'inscription Statut Contributeur sécurité Dernière intervention 180

Salut,

Vu que tu étais le premier à lui répondre, poursuis.
Bonne continuation.

@+

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1 > verni29 Messages postés 6699 Date d'inscription Statut Contributeur sécurité Dernière intervention

ba atan verni29 je suis entraint de faire ce que tu me demander parceque sa me dit quelque chose vu que j'ai deja eu un soucis comme sa sur un autre pc et que la personne qui mavai aider aver besoin de rappor ...

verni29 Messages postés 6699 Date d'inscription Statut Contributeur sécurité Dernière intervention 180 > mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention

Destrio5 t'a donné des consignes qui correspondent à ton système d'exploitation, Vista ( désactivation de l'UAC ).

Commence par cela.

Salut.

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1 > verni29 Messages postés 6699 Date d'inscription Statut Contributeur sécurité Dernière intervention

oué desoler j'avai pas vu j'te remercie quand meme bonne continuation et bonne année salut

Réponse 2 / 28

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

Salut,

---> Désactive l'UAC le temps de la désinfection.

---> Télécharge Lop S&D sur ton Bureau.
---> Double-clique dessus pour lancer l'installation.
---> Clique droit sur le raccourci Lop S&D présent sur ton Bureau et choisis Exécuter en tant qu'administrateur.
---> Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche).
---> Patiente jusqu'à la fin du scan.
---> Poste le rapport généré (C:\lopR.txt).

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz )
BIOS : Default System BIOS
USER : chacha ( Administrator )
BOOT : Normal boot
Antivirus : AVG Anti-Virus Free 8.0 (Activated)
C:\ (Local Disk) - NTFS - Total:110 Go (Free:51 Go)
D:\ (Local Disk) - NTFS - Total:110 Go (Free:101 Go)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 15/01/2009|14:59 )

[ UAC => 1 ]

--------------------\\ Listing des dossiers dans Local

[13/09/2008|15:22] C:\Users\chacha\AppData\Local\Acer Arcade Deluxe
[13/09/2008|10:38] C:\Users\chacha\AppData\Local\acer eNM
[17/09/2008|12:12] C:\Users\chacha\AppData\Local\Adobe
[15/09/2008|17:24] C:\Users\chacha\AppData\Local\Apple
[29/10/2008|19:51] C:\Users\chacha\AppData\Local\Apple Computer
[13/09/2008|10:37] C:\Users\chacha\AppData\Local\Application Data
[15/01/2009|14:59] C:\Users\chacha\AppData\Local\cossqmk.dat
[11/01/2009|15:58] C:\Users\chacha\AppData\Local\cossqmk.exe
[26/12/2008|10:40] C:\Users\chacha\AppData\Local\cossqmk_nav.dat
[15/01/2009|14:58] C:\Users\chacha\AppData\Local\cossqmk_navps.dat
[28/10/2008|19:22] C:\Users\chacha\AppData\Local\CounterPath
[17/09/2008|14:00] C:\Users\chacha\AppData\Local\CyberLink
[23/12/2008|18:41] C:\Users\chacha\AppData\Local\d3d9caps.dat
[15/01/2009|11:01] C:\Users\chacha\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[13/09/2008|15:22] C:\Users\chacha\AppData\Local\DVDivine
[30/12/2008|15:52] C:\Users\chacha\AppData\Local\eMule
[27/12/2008|11:09] C:\Users\chacha\AppData\Local\GDIPFONTCACHEV1.DAT
[13/09/2008|10:37] C:\Users\chacha\AppData\Local\Historique
[17/09/2008|14:00] C:\Users\chacha\AppData\Local\HomeMedia
[15/01/2009|00:13] C:\Users\chacha\AppData\Local\IconCache.db
[26/11/2008|21:56] C:\Users\chacha\AppData\Local\Lphant
[26/11/2008|23:00] C:\Users\chacha\AppData\Local\LphantBar
[17/12/2008|16:09] C:\Users\chacha\AppData\Local\Microsoft
[17/09/2008|12:22] C:\Users\chacha\AppData\Local\Microsoft Games
[16/09/2008|16:53] C:\Users\chacha\AppData\Local\MigWiz
[30/09/2008|18:23] C:\Users\chacha\AppData\Local\PlayMovie
[13/09/2008|15:22] C:\Users\chacha\AppData\Local\PowerCinema
[28/09/2008|21:11] C:\Users\chacha\AppData\Local\Shareaza
[15/01/2009|14:55] C:\Users\chacha\AppData\Local\Temp
[13/09/2008|10:37] C:\Users\chacha\AppData\Local\Temporary Internet Files
[27/12/2008|11:10] C:\Users\chacha\AppData\Local\vembkl.bat
[15/09/2008|19:54] C:\Users\chacha\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[15/01/2009 14:55][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{510145BF-3E7D-4405-8277-B864E21A6D19}.job
[15/01/2009 10:45][--ah-----] C:\Windows\tasks\SA.DAT
[15/01/2009 00:14][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[19/03/2008|06:20] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[30/12/2008|17:38] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[18/03/2008|13:20] C:\ProgramData\Acer GameZone Console
[26/12/2008|13:13] C:\ProgramData\Adobe
[13/09/2008|10:21] C:\ProgramData\Apple
[13/09/2008|10:23] C:\ProgramData\Apple Computer
[02/11/2006|14:02] C:\ProgramData\Application Data
[23/12/2008|16:34] C:\ProgramData\avg8
[08/12/2008|17:29] C:\ProgramData\book this clock drv
[11/09/2008|12:37] C:\ProgramData\Bureau
[17/09/2008|13:54] C:\ProgramData\CyberLink
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[30/12/2008|15:53] C:\ProgramData\eMule
[11/09/2008|12:37] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[18/03/2008|13:09] C:\ProgramData\FloodLightGames
[15/12/2008|19:48] C:\ProgramData\Grid tray tray.05e5mcq
[11/12/2008|20:00] C:\ProgramData\Grid tray tray.05qbua
[12/12/2008|21:16] C:\ProgramData\Grid tray tray.09g0fe
[14/12/2008|21:52] C:\ProgramData\Grid tray tray.0l5qpmh
[10/12/2008|13:04] C:\ProgramData\Grid tray tray.0mjxj
[16/12/2008|17:58] C:\ProgramData\Grid tray tray.0mvqn
[12/12/2008|13:10] C:\ProgramData\Grid tray tray.0oib6
[16/12/2008|20:09] C:\ProgramData\Grid tray tray.0pyis9
[16/12/2008|13:34] C:\ProgramData\Grid tray tray.0wsnhf
[11/12/2008|00:13] C:\ProgramData\Grid tray tray.19e12f
[12/12/2008|13:32] C:\ProgramData\Grid tray tray.1mfh8
[13/12/2008|16:28] C:\ProgramData\Grid tray tray.1pjpkg
[08/12/2008|17:28] C:\ProgramData\Grid tray tray.1sxa0a
[14/12/2008|20:03] C:\ProgramData\Grid tray tray.228djl
[15/12/2008|16:54] C:\ProgramData\Grid tray tray.2dc0n
[15/12/2008|20:32] C:\ProgramData\Grid tray tray.2deohh
[09/12/2008|20:37] C:\ProgramData\Grid tray tray.2kt3t
[12/12/2008|22:45] C:\ProgramData\Grid tray tray.2pyapt
[14/12/2008|20:47] C:\ProgramData\Grid tray tray.2pykb
[16/12/2008|16:52] C:\ProgramData\Grid tray tray.305vlo
[14/12/2008|15:19] C:\ProgramData\Grid tray tray.31frn0
[16/12/2008|18:41] C:\ProgramData\Grid tray tray.32ew0o0
[16/12/2008|16:30] C:\ProgramData\Grid tray tray.3eru18p
[10/12/2008|18:21] C:\ProgramData\Grid tray tray.3nhv0
[12/12/2008|00:47] C:\ProgramData\Grid tray tray.3rwbk
[12/12/2008|19:27] C:\ProgramData\Grid tray tray.3sip2
[16/12/2008|23:49] C:\ProgramData\Grid tray tray.46iik
[13/12/2008|15:00] C:\ProgramData\Grid tray tray.4itq6fd
[09/12/2008|18:26] C:\ProgramData\Grid tray tray.4x8tu9
[09/12/2008|21:42] C:\ProgramData\Grid tray tray.577pv
[09/12/2008|22:04] C:\ProgramData\Grid tray tray.5dne94
[11/12/2008|22:13] C:\ProgramData\Grid tray tray.5elmcy6
[11/12/2008|18:11] C:\ProgramData\Grid tray tray.5qsbwjt
[09/12/2008|18:47] C:\ProgramData\Grid tray tray.6i1wgf
[16/12/2008|19:47] C:\ProgramData\Grid tray tray.6iakze3
[08/12/2008|23:43] C:\ProgramData\Grid tray tray.6u7cv
[08/12/2008|18:56] C:\ProgramData\Grid tray tray.6ufie4
[15/12/2008|11:44] C:\ProgramData\Grid tray tray.6yggrc2
[14/12/2008|19:19] C:\ProgramData\Grid tray tray.7869u
[16/12/2008|22:20] C:\ProgramData\Grid tray tray.7ddhb
[11/12/2008|19:17] C:\ProgramData\Grid tray tray.7lbhjon
[16/12/2008|15:47] C:\ProgramData\Grid tray tray.844ckw6
[10/12/2008|23:51] C:\ProgramData\Grid tray tray.9jptznf
[10/12/2008|21:39] C:\ProgramData\Grid tray tray.9ze05r
[08/12/2008|21:31] C:\ProgramData\Grid tray tray.a3z5x7
[15/12/2008|21:37] C:\ProgramData\Grid tray tray.a5uoea
[14/12/2008|20:25] C:\ProgramData\Grid tray tray.abszr
[16/12/2008|00:33] C:\ProgramData\Grid tray tray.ajaozr
[10/12/2008|20:11] C:\ProgramData\Grid tray tray.anqsye
[16/12/2008|20:31] C:\ProgramData\Grid tray tray.aoxwg
[10/12/2008|22:23] C:\ProgramData\Grid tray tray.awm71c
[09/12/2008|19:31] C:\ProgramData\Grid tray tray.b0bsgi
[11/12/2008|18:55] C:\ProgramData\Grid tray tray.b6fou3
[16/12/2008|15:02] C:\ProgramData\Grid tray tray.b7hoka
[08/12/2008|23:21] C:\ProgramData\Grid tray tray.bbtyx7
[16/12/2008|20:52] C:\ProgramData\Grid tray tray.bl7twa1
[10/12/2008|20:55] C:\ProgramData\Grid tray tray.bmn52d
[10/12/2008|17:15] C:\ProgramData\Grid tray tray.bmo4ew
[16/12/2008|00:55] C:\ProgramData\Grid tray tray.c345e0t
[10/12/2008|17:59] C:\ProgramData\Grid tray tray.c5rujtj
[10/12/2008|17:37] C:\ProgramData\Grid tray tray.c975t
[08/12/2008|20:02] C:\ProgramData\Grid tray tray.crhwb
[16/12/2008|19:03] C:\ProgramData\Grid tray tray.ct1ljz
[10/12/2008|22:46] C:\ProgramData\Grid tray tray.d5bai
[10/12/2008|19:50] C:\ProgramData\Grid tray tray.d6kjydl
[09/12/2008|23:11] C:\ProgramData\Grid tray tray.d6ks4e
[17/12/2008|12:19] C:\ProgramData\Grid tray tray.d7fdn
[08/12/2008|19:40] C:\ProgramData\Grid tray tray.ddq0s
[16/12/2008|17:14] C:\ProgramData\Grid tray tray.dkksy8
[09/12/2008|23:33] C:\ProgramData\Grid tray tray.dlia2b
[24/12/2008|13:11] C:\ProgramData\Grid tray tray.dlxuqe
[08/12/2008|20:47] C:\ProgramData\Grid tray tray.dmetkc
[12/12/2008|00:25] C:\ProgramData\Grid tray tray.do97mi
[15/12/2008|23:47] C:\ProgramData\Grid tray tray.drd1a3
[16/12/2008|22:43] C:\ProgramData\Grid tray tray.dzq1k
[15/12/2008|17:37] C:\ProgramData\Grid tray tray.e13aj
[10/12/2008|22:01] C:\ProgramData\Grid tray tray.eegg5a7
[11/12/2008|19:38] C:\ProgramData\Grid tray tray.ezblx
[13/12/2008|13:55] C:\ProgramData\Grid tray tray.fcfoyq
[14/12/2008|23:20] C:\ProgramData\Grid tray tray.fh5lc
[11/12/2008|23:20] C:\ProgramData\Grid tray tray.fr0iyb
[12/12/2008|12:05] C:\ProgramData\Grid tray tray.fyresu8
[09/12/2008|13:08] C:\ProgramData\Grid tray tray.g38w9l7
[12/12/2008|01:09] C:\ProgramData\Grid tray tray.g3biwp1
[13/12/2008|16:50] C:\ProgramData\Grid tray tray.g4aiby
[08/12/2008|22:36] C:\ProgramData\Grid tray tray.g7ts9
[14/12/2008|21:08] C:\ProgramData\Grid tray tray.g8jum
[13/12/2008|15:44] C:\ProgramData\Grid tray tray.gar6bp
[13/12/2008|16:06] C:\ProgramData\Grid tray tray.gbl69w
[14/12/2008|19:41] C:\ProgramData\Grid tray tray.gfvd3zi
[15/12/2008|21:16] C:\ProgramData\Grid tray tray.ghduh
[16/12/2008|13:56] C:\ProgramData\Grid tray tray.gw6tn
[12/12/2008|01:31] C:\ProgramData\Grid tray tray.h7d60v1
[08/12/2008|18:34] C:\ProgramData\Grid tray tray.h9pwr
[08/12/2008|21:09] C:\ProgramData\Grid tray tray.hd0b73
[08/12/2008|19:18] C:\ProgramData\Grid tray tray.he4fuo
[14/12/2008|21:30] C:\ProgramData\Grid tray tray.i8rk5je
[16/12/2008|15:25] C:\ProgramData\Grid tray tray.i9yy3
[11/12/2008|20:22] C:\ProgramData\Grid tray tray.ivj488
[12/12/2008|21:38] C:\ProgramData\Grid tray tray.ix00m
[09/12/2008|19:09] C:\ProgramData\Grid tray tray.jd83d
[13/12/2008|17:35] C:\ProgramData\Grid tray tray.jjsofq
[14/12/2008|15:41] C:\ProgramData\Grid tray tray.jrt0ya
[15/12/2008|19:05] C:\ProgramData\Grid tray tray.jxsofz
[16/12/2008|21:58] C:\ProgramData\Grid tray tray.jz7z3
[14/12/2008|14:14] C:\ProgramData\Grid tray tray.k1y7g
[15/12/2008|19:26] C:\ProgramData\Grid tray tray.kf0f9
[10/12/2008|19:27] C:\ProgramData\Grid tray tray.kpw1d
[12/12/2008|22:00] C:\ProgramData\Grid tray tray.kuynp7
[11/12/2008|20:44] C:\ProgramData\Grid tray tray.l1vyk
[12/12/2008|22:21] C:\ProgramData\Grid tray tray.lbuxmn7
[12/12/2008|12:27] C:\ProgramData\Grid tray tray.leeud96
[15/12/2008|20:10] C:\ProgramData\Grid tray tray.lqgcdf
[11/12/2008|18:33] C:\ProgramData\Grid tray tray.lyjrc
[14/12/2008|22:58] C:\ProgramData\Grid tray tray.m2ewv
[10/12/2008|20:33] C:\ProgramData\Grid tray tray.me2znks
[08/12/2008|20:24] C:\ProgramData\Grid tray tray.mj4wd
[16/12/2008|23:27] C:\ProgramData\Grid tray tray.mkqi81g
[11/12/2008|21:29] C:\ProgramData\Grid tray tray.mmnflsr
[11/12/2008|22:35] C:\ProgramData\Grid tray tray.mrvlp6c
[09/12/2008|21:20] C:\ProgramData\Grid tray tray.mth9s
[24/12/2008|13:33] C:\ProgramData\Grid tray tray.mxh4i1
[09/12/2008|18:04] C:\ProgramData\Grid tray tray.nl2nnh8
[15/12/2008|23:05] C:\ProgramData\Grid tray tray.nm94b
[15/12/2008|00:25] C:\ProgramData\Grid tray tray.nwgtm
[11/12/2008|21:07] C:\ProgramData\Grid tray tray.o0mbs
[11/12/2008|17:27] C:\ProgramData\Grid tray tray.oaob8d
[24/12/2008|14:17] C:\ProgramData\Grid tray tray.oe8ghlh
[15/12/2008|13:36] C:\ProgramData\Grid tray tray.ovujrl0
[15/12/2008|18:21] C:\ProgramData\Grid tray tray.p03v0m4
[13/12/2008|17:56] C:\ProgramData\Grid tray tray.p70fn9
[09/12/2008|22:26] C:\ProgramData\Grid tray tray.pch5u
[16/12/2008|11:20] C:\ProgramData\Grid tray tray.posghhe
[13/12/2008|14:17] C:\ProgramData\Grid tray tray.pq2ws
[08/12/2008|22:59] C:\ProgramData\Grid tray tray.prrol
[16/12/2008|14:18] C:\ProgramData\Grid tray tray.pzob1
[16/12/2008|21:15] C:\ProgramData\Grid tray tray.q06uanu
[08/12/2008|17:51] C:\ProgramData\Grid tray tray.q1ht39
[13/12/2008|17:11] C:\ProgramData\Grid tray tray.q9el0l6
[10/12/2008|16:54] C:\ProgramData\Grid tray tray.qa45ca
[16/12/2008|21:36] C:\ProgramData\Grid tray tray.qcy4ue
[11/12/2008|17:49] C:\ProgramData\Grid tray tray.qlh29
[24/12/2008|13:55] C:\ProgramData\Grid tray tray.qnng4hp
[08/12/2008|21:52] C:\ProgramData\Grid tray tray.qwk1pzz
[10/12/2008|21:17] C:\ProgramData\Grid tray tray.r0f5xm6
[15/12/2008|22:21] C:\ProgramData\Grid tray tray.r2vvq
[15/12/2008|17:59] C:\ProgramData\Grid tray tray.r8gb040
[08/12/2008|22:14] C:\ProgramData\Grid tray tray.rmwa77
[16/12/2008|17:36] C:\ProgramData\Grid tray tray.rpvl6m5
[14/12/2008|18:57] C:\ProgramData\Grid tray tray.s0hij6
[14/12/2008|22:36] C:\ProgramData\Grid tray tray.s1j5og
[08/12/2008|18:13] C:\ProgramData\Grid tray tray.sb2i3
[12/12/2008|20:32] C:\ProgramData\Grid tray tray.shagof
[14/12/2008|14:36] C:\ProgramData\Grid tray tray.skk5s4
[24/12/2008|12:27] C:\ProgramData\Grid tray tray.snrotj
[16/12/2008|19:25] C:\ProgramData\Grid tray tray.sp2ut1
[12/12/2008|13:54] C:\ProgramData\Grid tray tray.spqwdu
[15/12/2008|00:03] C:\ProgramData\Grid tray tray.svn25
[09/12/2008|19:53] C:\ProgramData\Grid tray tray.t4plbaj
[16/12/2008|18:20] C:\ProgramData\Grid tray tray.t7v7i4q
[10/12/2008|23:08] C:\ProgramData\Grid tray tray.tmqpbtp
[10/12/2008|18:43] C:\ProgramData\Grid tray tray.tr82ym
[10/12/2008|23:29] C:\ProgramData\Grid tray tray.tydxr1s
[11/12/2008|22:57] C:\ProgramData\Grid tray tray.tzxpz2r
[13/12/2008|15:22] C:\ProgramData\Grid tray tray.uil7d
[09/12/2008|22:49] C:\ProgramData\Grid tray tray.unkkw1b
[12/12/2008|01:54] C:\ProgramData\Grid tray tray.uqnf5zp
[11/12/2008|21:51] C:\ProgramData\Grid tray tray.utr20y
[12/12/2008|19:48] C:\ProgramData\Grid tray tray.v4p73
[16/12/2008|11:41] C:\ProgramData\Grid tray tray.vjlnde0
[14/12/2008|22:14] C:\ProgramData\Grid tray tray.vo3cj19
[15/12/2008|11:22] C:\ProgramData\Grid tray tray.vzgsm4a
[15/12/2008|18:43] C:\ProgramData\Grid tray tray.wfgsked
[12/12/2008|20:54] C:\ProgramData\Grid tray tray.wh1k7z
[15/12/2008|20:54] C:\ProgramData\Grid tray tray.whz0bg
[13/12/2008|14:38] C:\ProgramData\Grid tray tray.woe1rf8
[15/12/2008|22:43] C:\ProgramData\Grid tray tray.wuubf
[09/12/2008|20:15] C:\ProgramData\Grid tray tray.ww6cy8
[11/12/2008|23:42] C:\ProgramData\Grid tray tray.wwb3032
[15/12/2008|21:59] C:\ProgramData\Grid tray tray.x07nqj
[16/12/2008|16:08] C:\ProgramData\Grid tray tray.x7leqrn
[08/12/2008|17:28] C:\ProgramData\Grid tray tray.xbvmtqs
[12/12/2008|19:05] C:\ProgramData\Grid tray tray.xe43n
[16/12/2008|23:05] C:\ProgramData\Grid tray tray.xeudwcm
[24/12/2008|12:49] C:\ProgramData\Grid tray tray.xp6pm4a
[15/12/2008|17:15] C:\ProgramData\Grid tray tray.xrltbj
[12/12/2008|12:49] C:\ProgramData\Grid tray tray.xuia9
[12/12/2008|00:04] C:\ProgramData\Grid tray tray.xv1v98
[09/12/2008|20:58] C:\ProgramData\Grid tray tray.xvujfnq
[14/12/2008|23:41] C:\ProgramData\Grid tray tray.ygwn9dx
[16/12/2008|12:03] C:\ProgramData\Grid tray tray.ypenmj
[10/12/2008|19:05] C:\ProgramData\Grid tray tray.z4k7kb
[14/12/2008|14:58] C:\ProgramData\Grid tray tray.zf4b0n
[14/12/2008|13:52] C:\ProgramData\Grid tray tray.zj3jepc
[16/12/2008|00:09] C:\ProgramData\Grid tray tray.zm0d3
[12/12/2008|20:10] C:\ProgramData\Grid tray tray.zq8sxep
[16/12/2008|14:40] C:\ProgramData\Grid tray tray.zurd3
[23/12/2008|15:28] C:\ProgramData\McAfee
[11/09/2008|12:37] C:\ProgramData\Menu D‚marrer
[30/11/2008|21:23] C:\ProgramData\Messenger Plus!
[04/12/2008|21:28] C:\ProgramData\Microsoft
[24/09/2008|20:27] C:\ProgramData\Microsoft Help
[11/09/2008|12:37] C:\ProgramData\ModŠles
[17/12/2008|11:55] C:\ProgramData\ntuser.pol
[26/10/2008|15:38] C:\ProgramData\Oberon Games
[11/11/2008|10:14] C:\ProgramData\SiteAdvisor
[02/11/2006|14:02] C:\ProgramData\Start Menu
[16/11/2008|12:10] C:\ProgramData\TEMP
[02/11/2006|14:02] C:\ProgramData\Templates
[08/12/2008|17:29] C:\ProgramData\The Bend Clock.rrw57gz
[24/12/2008|12:07] C:\ProgramData\trans wave bind
[27/09/2008|14:10] C:\ProgramData\WindowsSearch
[08/12/2008|21:03] C:\ProgramData\WLInstaller
[13/09/2008|10:44] C:\ProgramData\Yahoo! Companion

--------------------\\ Listing des dossiers dans C:\Program Files

[13/01/2009|21:38] C:\Program Files\123 Free Puzzle
[09/01/2009|18:43] C:\Program Files\2M Games
[11/09/2008|12:40] C:\Program Files\Acer
[12/06/2008|10:51] C:\Program Files\Acer Arcade Deluxe
[18/03/2008|13:21] C:\Program Files\Acer GameZone
[12/06/2008|10:56] C:\Program Files\Acer Inc
[19/03/2008|06:20] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[30/12/2008|15:49] C:\Program Files\Adobe
[26/11/2008|21:45] C:\Program Files\AdVantage
[12/06/2008|10:54] C:\Program Files\Apoint2K
[29/09/2008|18:30] C:\Program Files\Apple Software Update
[03/01/2009|15:38] C:\Program Files\Auslogics
[23/12/2008|16:34] C:\Program Files\AVG
[18/03/2008|13:20] C:\Program Files\Big Kahuna Reef
[15/11/2008|15:17] C:\Program Files\Bonjour
[03/01/2009|15:17] C:\Program Files\CCleaner
[08/12/2008|17:28] C:\Program Files\Circle Developement
[23/12/2008|15:32] C:\Program Files\Common Files
[26/11/2008|21:49] C:\Program Files\Conduit
[18/03/2008|12:33] C:\Program Files\CONEXANT
[28/10/2008|19:20] C:\Program Files\CounterPath
[18/03/2008|12:58] C:\Program Files\CyberLink
[14/12/2008|22:54] C:\Program Files\DivX
[25/11/2008|20:20] C:\Program Files\DJ Mix Lite
[02/12/2008|12:51] C:\Program Files\EasyPHP 2.0b1
[30/12/2008|15:52] C:\Program Files\eMule
[11/09/2008|12:37] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[26/12/2008|13:32] C:\Program Files\Gimp-2.0
[11/09/2008|12:41] C:\Program Files\InstallShield Installation Information
[12/06/2008|10:45] C:\Program Files\Intel
[13/09/2008|10:23] C:\Program Files\Internet Explorer
[27/11/2008|16:27] C:\Program Files\InternetGameBox
[30/12/2008|17:37] C:\Program Files\iPod
[30/12/2008|17:38] C:\Program Files\iTunes
[23/11/2008|18:00] C:\Program Files\Java
[15/12/2008|13:21] C:\Program Files\Launch Manager
[09/10/2008|12:52] C:\Program Files\LimeWire
[26/11/2008|21:49] C:\Program Files\Lphant
[26/11/2008|23:00] C:\Program Files\LphantBar
[29/12/2008|12:43] C:\Program Files\Messenger Plus! Live
[28/12/2008|21:44] C:\Program Files\Microsoft
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[24/09/2008|20:26] C:\Program Files\Microsoft Office
[24/09/2008|20:26] C:\Program Files\Microsoft Works
[21/01/2008|03:35] C:\Program Files\Movie Maker
[02/11/2006|13:37] C:\Program Files\MSBuild
[11/09/2008|14:03] C:\Program Files\MSXML 4.0
[23/12/2008|15:32] C:\Program Files\Network Associates
[18/03/2008|12:43] C:\Program Files\NewTech Infosystems
[09/01/2009|18:57] C:\Program Files\Oneplayer
[02/10/2008|16:19] C:\Program Files\OpenOffice.org 2.4
[30/12/2008|17:34] C:\Program Files\QuickTime
[18/03/2008|12:27] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[28/09/2008|21:11] C:\Program Files\Shareaza
[13/01/2009|22:15] C:\Program Files\SuperOthello
[27/11/2008|22:52] C:\Program Files\Technodev
[13/01/2009|21:58] C:\Program Files\TLKGAMES
[08/12/2008|17:28] C:\Program Files\trans wave bind
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[02/10/2008|13:11] C:\Program Files\wamp
[21/01/2008|03:35] C:\Program Files\Windows Calendar
[21/01/2008|03:35] C:\Program Files\Windows Collaboration
[21/01/2008|03:35] C:\Program Files\Windows Defender
[21/01/2008|03:35] C:\Program Files\Windows Journal
[28/12/2008|21:45] C:\Program Files\Windows Live
[28/12/2008|21:43] C:\Program Files\Windows Live SkyDrive
[14/01/2009|14:04] C:\Program Files\Windows Mail
[21/01/2008|03:35] C:\Program Files\Windows Media Player
[11/09/2008|12:37] C:\Program Files\Windows NT
[21/01/2008|03:35] C:\Program Files\Windows Photo Gallery
[21/01/2008|03:35] C:\Program Files\Windows Sidebar
[18/03/2008|13:22] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[03/11/2008|17:12] C:\Program Files\Common Files\Adobe
[30/12/2008|17:37] C:\Program Files\Common Files\Apple
[19/03/2008|06:16] C:\Program Files\Common Files\DESIGNER
[18/03/2008|12:58] C:\Program Files\Common Files\InstallShield
[28/10/2008|19:20] C:\Program Files\Common Files\Intel
[02/10/2008|16:18] C:\Program Files\Common Files\Java
[18/03/2008|12:43] C:\Program Files\Common Files\LightScribe
[28/12/2008|21:44] C:\Program Files\Common Files\microsoft shared
[18/03/2008|12:42] C:\Program Files\Common Files\muvee Technologies
[23/12/2008|15:38] C:\Program Files\Common Files\Network Associates
[18/03/2008|12:43] C:\Program Files\Common Files\NewTech Infosystems
[18/03/2008|13:09] C:\Program Files\Common Files\Oberon Media
[14/12/2008|22:54] C:\Program Files\Common Files\PX Storage Engine
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[17/09/2008|17:22] C:\Program Files\Common Files\SWF Studio
[14/09/2008|18:40] C:\Program Files\Common Files\System
[04/12/2008|20:35] C:\Program Files\Common Files\Windows Live
[08/12/2008|21:05] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 83 Processes )

iexplore.exe ~ [PID:2216]
iexplore.exe ~ [PID:5796]

--------------------\\ Recherche avec S_Lop

C:\ProgramData\Grid tray tray.0mjxj
C:\ProgramData\Grid tray tray.0mvqn
C:\ProgramData\Grid tray tray.0oib6
C:\ProgramData\Grid tray tray.1mfh8
C:\ProgramData\Grid tray tray.2dc0n
C:\ProgramData\Grid tray tray.2kt3t
C:\ProgramData\Grid tray tray.2pykb
C:\ProgramData\Grid tray tray.3nhv0
C:\ProgramData\Grid tray tray.3rwbk
C:\ProgramData\Grid tray tray.3sip2
C:\ProgramData\Grid tray tray.46iik
C:\ProgramData\Grid tray tray.577pv
C:\ProgramData\Grid tray tray.6u7cv
C:\ProgramData\Grid tray tray.7869u
C:\ProgramData\Grid tray tray.7ddhb
C:\ProgramData\Grid tray tray.abszr
C:\ProgramData\Grid tray tray.aoxwg
C:\ProgramData\Grid tray tray.c975t
C:\ProgramData\Grid tray tray.crhwb
C:\ProgramData\Grid tray tray.d5bai
C:\ProgramData\Grid tray tray.d7fdn
C:\ProgramData\Grid tray tray.ddq0s
C:\ProgramData\Grid tray tray.dzq1k
C:\ProgramData\Grid tray tray.e13aj
C:\ProgramData\Grid tray tray.ezblx
C:\ProgramData\Grid tray tray.fh5lc
C:\ProgramData\Grid tray tray.g7ts9
C:\ProgramData\Grid tray tray.g8jum
C:\ProgramData\Grid tray tray.ghduh
C:\ProgramData\Grid tray tray.gw6tn
C:\ProgramData\Grid tray tray.h9pwr
C:\ProgramData\Grid tray tray.i9yy3
C:\ProgramData\Grid tray tray.ix00m
C:\ProgramData\Grid tray tray.jd83d
C:\ProgramData\Grid tray tray.jz7z3
C:\ProgramData\Grid tray tray.k1y7g
C:\ProgramData\Grid tray tray.kf0f9
C:\ProgramData\Grid tray tray.kpw1d
C:\ProgramData\Grid tray tray.l1vyk
C:\ProgramData\Grid tray tray.lyjrc
C:\ProgramData\Grid tray tray.m2ewv
C:\ProgramData\Grid tray tray.mj4wd
C:\ProgramData\Grid tray tray.mth9s
C:\ProgramData\Grid tray tray.nm94b
C:\ProgramData\Grid tray tray.nwgtm
C:\ProgramData\Grid tray tray.o0mbs
C:\ProgramData\Grid tray tray.pch5u
C:\ProgramData\Grid tray tray.pq2ws
C:\ProgramData\Grid tray tray.prrol
C:\ProgramData\Grid tray tray.pzob1
C:\ProgramData\Grid tray tray.qlh29
C:\ProgramData\Grid tray tray.r2vvq
C:\ProgramData\Grid tray tray.sb2i3
C:\ProgramData\Grid tray tray.svn25
C:\ProgramData\Grid tray tray.uil7d
C:\ProgramData\Grid tray tray.v4p73
C:\ProgramData\Grid tray tray.wuubf
C:\ProgramData\Grid tray tray.xe43n
C:\ProgramData\Grid tray tray.xuia9
C:\ProgramData\Grid tray tray.zm0d3
C:\ProgramData\Grid tray tray.zurd3
C:\ProgramData\Grid tray tray.05qbua
C:\ProgramData\Grid tray tray.09g0fe
C:\ProgramData\Grid tray tray.0pyis9
C:\ProgramData\Grid tray tray.0wsnhf
C:\ProgramData\Grid tray tray.19e12f
C:\ProgramData\Grid tray tray.1pjpkg
C:\ProgramData\Grid tray tray.1sxa0a
C:\ProgramData\Grid tray tray.228djl
C:\ProgramData\Grid tray tray.2deohh
C:\ProgramData\Grid tray tray.2pyapt
C:\ProgramData\Grid tray tray.305vlo
C:\ProgramData\Grid tray tray.31frn0
C:\ProgramData\Grid tray tray.4x8tu9
C:\ProgramData\Grid tray tray.5dne94
C:\ProgramData\Grid tray tray.6i1wgf
C:\ProgramData\Grid tray tray.6ufie4
C:\ProgramData\Grid tray tray.9ze05r
C:\ProgramData\Grid tray tray.a3z5x7
C:\ProgramData\Grid tray tray.a5uoea
C:\ProgramData\Grid tray tray.ajaozr
C:\ProgramData\Grid tray tray.anqsye
C:\ProgramData\Grid tray tray.awm71c
C:\ProgramData\Grid tray tray.b0bsgi
C:\ProgramData\Grid tray tray.b6fou3
C:\ProgramData\Grid tray tray.b7hoka
C:\ProgramData\Grid tray tray.bbtyx7
C:\ProgramData\Grid tray tray.bmn52d
C:\ProgramData\Grid tray tray.bmo4ew
C:\ProgramData\Grid tray tray.ct1ljz
C:\ProgramData\Grid tray tray.d6ks4e
C:\ProgramData\Grid tray tray.dkksy8
C:\ProgramData\Grid tray tray.dlia2b
C:\ProgramData\Grid tray tray.dlxuqe
C:\ProgramData\Grid tray tray.dmetkc
C:\ProgramData\Grid tray tray.do97mi
C:\ProgramData\Grid tray tray.drd1a3
C:\ProgramData\Grid tray tray.fcfoyq
C:\ProgramData\Grid tray tray.fr0iyb
C:\ProgramData\Grid tray tray.g4aiby
C:\ProgramData\Grid tray tray.gar6bp
C:\ProgramData\Grid tray tray.gbl69w
C:\ProgramData\Grid tray tray.hd0b73
C:\ProgramData\Grid tray tray.he4fuo
C:\ProgramData\Grid tray tray.ivj488
C:\ProgramData\Grid tray tray.jjsofq
C:\ProgramData\Grid tray tray.jrt0ya
C:\ProgramData\Grid tray tray.jxsofz
C:\ProgramData\Grid tray tray.kuynp7
C:\ProgramData\Grid tray tray.lqgcdf
C:\ProgramData\Grid tray tray.mxh4i1
C:\ProgramData\Grid tray tray.oaob8d
C:\ProgramData\Grid tray tray.p70fn9
C:\ProgramData\Grid tray tray.q1ht39
C:\ProgramData\Grid tray tray.qa45ca
C:\ProgramData\Grid tray tray.qcy4ue
C:\ProgramData\Grid tray tray.rmwa77
C:\ProgramData\Grid tray tray.s0hij6
C:\ProgramData\Grid tray tray.s1j5og
C:\ProgramData\Grid tray tray.shagof
C:\ProgramData\Grid tray tray.skk5s4
C:\ProgramData\Grid tray tray.snrotj
C:\ProgramData\Grid tray tray.sp2ut1
C:\ProgramData\Grid tray tray.spqwdu
C:\ProgramData\Grid tray tray.tr82ym
C:\ProgramData\Grid tray tray.utr20y
C:\ProgramData\Grid tray tray.wh1k7z
C:\ProgramData\Grid tray tray.whz0bg
C:\ProgramData\Grid tray tray.ww6cy8
C:\ProgramData\Grid tray tray.x07nqj
C:\ProgramData\Grid tray tray.xrltbj
C:\ProgramData\Grid tray tray.xv1v98
C:\ProgramData\Grid tray tray.ypenmj
C:\ProgramData\Grid tray tray.z4k7kb
C:\ProgramData\Grid tray tray.zf4b0n
C:\ProgramData\Grid tray tray.05e5mcq
C:\ProgramData\Grid tray tray.0l5qpmh
C:\ProgramData\Grid tray tray.32ew0o0
C:\ProgramData\Grid tray tray.3eru18p
C:\ProgramData\Grid tray tray.4itq6fd
C:\ProgramData\Grid tray tray.5elmcy6
C:\ProgramData\Grid tray tray.5qsbwjt
C:\ProgramData\Grid tray tray.6iakze3
C:\ProgramData\Grid tray tray.6yggrc2
C:\ProgramData\Grid tray tray.7lbhjon
C:\ProgramData\Grid tray tray.844ckw6
C:\ProgramData\Grid tray tray.9jptznf
C:\ProgramData\Grid tray tray.bl7twa1
C:\ProgramData\Grid tray tray.c345e0t
C:\ProgramData\Grid tray tray.c5rujtj
C:\ProgramData\Grid tray tray.d6kjydl
C:\ProgramData\Grid tray tray.eegg5a7
C:\ProgramData\Grid tray tray.fyresu8
C:\ProgramData\Grid tray tray.g38w9l7
C:\ProgramData\Grid tray tray.g3biwp1
C:\ProgramData\Grid tray tray.gfvd3zi
C:\ProgramData\Grid tray tray.h7d60v1
C:\ProgramData\Grid tray tray.i8rk5je
C:\ProgramData\Grid tray tray.lbuxmn7
C:\ProgramData\Grid tray tray.leeud96
C:\ProgramData\Grid tray tray.me2znks
C:\ProgramData\Grid tray tray.mkqi81g
C:\ProgramData\Grid tray tray.mmnflsr
C:\ProgramData\Grid tray tray.mrvlp6c
C:\ProgramData\Grid tray tray.nl2nnh8
C:\ProgramData\Grid tray tray.oe8ghlh
C:\ProgramData\Grid tray tray.ovujrl0
C:\ProgramData\Grid tray tray.p03v0m4
C:\ProgramData\Grid tray tray.posghhe
C:\ProgramData\Grid tray tray.q06uanu
C:\ProgramData\Grid tray tray.q9el0l6
C:\ProgramData\Grid tray tray.qnng4hp
C:\ProgramData\Grid tray tray.qwk1pzz
C:\ProgramData\Grid tray tray.r0f5xm6
C:\ProgramData\Grid tray tray.r8gb040
C:\ProgramData\Grid tray tray.rpvl6m5
C:\ProgramData\Grid tray tray.t4plbaj
C:\ProgramData\Grid tray tray.t7v7i4q
C:\ProgramData\Grid tray tray.tmqpbtp
C:\ProgramData\Grid tray tray.tydxr1s
C:\ProgramData\Grid tray tray.tzxpz2r
C:\ProgramData\Grid tray tray.unkkw1b
C:\ProgramData\Grid tray tray.uqnf5zp
C:\ProgramData\Grid tray tray.vjlnde0
C:\ProgramData\Grid tray tray.vo3cj19
C:\ProgramData\Grid tray tray.vzgsm4a
C:\ProgramData\Grid tray tray.wfgsked
C:\ProgramData\Grid tray tray.woe1rf8
C:\ProgramData\Grid tray tray.wwb3032
C:\ProgramData\Grid tray tray.x7leqrn
C:\ProgramData\Grid tray tray.xbvmtqs
C:\ProgramData\Grid tray tray.xeudwcm
C:\ProgramData\Grid tray tray.xp6pm4a
C:\ProgramData\Grid tray tray.xvujfnq
C:\ProgramData\Grid tray tray.ygwn9dx
C:\ProgramData\Grid tray tray.zj3jepc
C:\ProgramData\Grid tray tray.zq8sxep
C:\ProgramData\The Bend Clock.rrw57gz

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\Program Files\Circle Developement
C:\Program Files\Circle Developement\Uninstall.exe

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TestBin"="\"C:\\ProgramData\\Grid tray tray.46iik\""
"clock drv coal bird"="\"C:\\ProgramData\\The Bend Clock.rrw57gz\""

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-15 15:00:40
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

C:\Program Files\InternetGameBox
C:\Program Files\InternetGameBox\InternetGameBox.exe
C:\Program Files\InternetGameBox\language
C:\Program Files\InternetGameBox\ressources
C:\Program Files\InternetGameBox\skins
C:\Program Files\InternetGameBox\uninst.exe
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Conditions g‚n‚rales.url
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Confidentialit‚.url
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\D‚sinstaller.lnk
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\InternetGameBox.lnk
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Website.url

C:\Users\chacha\AppData\Local\cossqmk.dat
C:\Users\chacha\AppData\Local\cossqmk.exe
C:\Users\chacha\AppData\Local\cossqmk_nav.dat
C:\Users\chacha\AppData\Local\cossqmk_navps.dat
[b]==> EGDACCESS <==/b

[F:74][D:13]-> C:\Users\chacha\AppData\Local\Temp
[F:393][D:1]-> C:\Users\chacha\AppData\Roaming\MICROS~1\Windows\Cookies
[F:310][D:10]-> C:\Users\chacha\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:84][D:5]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 15/01/2009|15:02 - Option : [1]

--------------------\\ Fin du rapport a 15:02:48
[ UAC => 1 ]

ok jte suis voila le rapport Lop S&D

Réponse 3 / 28

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

---> Relance Lop S&D (En tant qu'administrateur).
---> Choisis cette fois-ci l'option 2 (Suppression).
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt).

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1

voila le rappot

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz )
BIOS : Default System BIOS
USER : chacha ( Administrator )
BOOT : Normal boot
Antivirus : AVG Anti-Virus Free 8.0 (Activated)
C:\ (Local Disk) - NTFS - Total:110 Go (Free:51 Go)
D:\ (Local Disk) - NTFS - Total:110 Go (Free:101 Go)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 15/01/2009|15:08 )

[ UAC => 1 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
Supprime! - C:\ProgramData\Grid tray tray.0mjxj
Supprime! - C:\ProgramData\Grid tray tray.0mvqn
Supprime! - C:\ProgramData\Grid tray tray.0oib6
Supprime! - C:\ProgramData\Grid tray tray.1mfh8
Supprime! - C:\ProgramData\Grid tray tray.2dc0n
Supprime! - C:\ProgramData\Grid tray tray.2kt3t
Supprime! - C:\ProgramData\Grid tray tray.2pykb
Supprime! - C:\ProgramData\Grid tray tray.3nhv0
Supprime! - C:\ProgramData\Grid tray tray.3rwbk
Supprime! - C:\ProgramData\Grid tray tray.3sip2
Supprime! - C:\ProgramData\Grid tray tray.46iik
Supprime! - C:\ProgramData\Grid tray tray.577pv
Supprime! - C:\ProgramData\Grid tray tray.6u7cv
Supprime! - C:\ProgramData\Grid tray tray.7869u
Supprime! - C:\ProgramData\Grid tray tray.7ddhb
Supprime! - C:\ProgramData\Grid tray tray.abszr
Supprime! - C:\ProgramData\Grid tray tray.aoxwg
Supprime! - C:\ProgramData\Grid tray tray.c975t
Supprime! - C:\ProgramData\Grid tray tray.crhwb
Supprime! - C:\ProgramData\Grid tray tray.d5bai
Supprime! - C:\ProgramData\Grid tray tray.d7fdn
Supprime! - C:\ProgramData\Grid tray tray.ddq0s
Supprime! - C:\ProgramData\Grid tray tray.dzq1k
Supprime! - C:\ProgramData\Grid tray tray.e13aj
Supprime! - C:\ProgramData\Grid tray tray.ezblx
Supprime! - C:\ProgramData\Grid tray tray.fh5lc
Supprime! - C:\ProgramData\Grid tray tray.g7ts9
Supprime! - C:\ProgramData\Grid tray tray.g8jum
Supprime! - C:\ProgramData\Grid tray tray.ghduh
Supprime! - C:\ProgramData\Grid tray tray.gw6tn
Supprime! - C:\ProgramData\Grid tray tray.h9pwr
Supprime! - C:\ProgramData\Grid tray tray.i9yy3
Supprime! - C:\ProgramData\Grid tray tray.ix00m
Supprime! - C:\ProgramData\Grid tray tray.jd83d
Supprime! - C:\ProgramData\Grid tray tray.jz7z3
Supprime! - C:\ProgramData\Grid tray tray.k1y7g
Supprime! - C:\ProgramData\Grid tray tray.kf0f9
Supprime! - C:\ProgramData\Grid tray tray.kpw1d
Supprime! - C:\ProgramData\Grid tray tray.l1vyk
Supprime! - C:\ProgramData\Grid tray tray.lyjrc
Supprime! - C:\ProgramData\Grid tray tray.m2ewv
Supprime! - C:\ProgramData\Grid tray tray.mj4wd
Supprime! - C:\ProgramData\Grid tray tray.mth9s
Supprime! - C:\ProgramData\Grid tray tray.nm94b
Supprime! - C:\ProgramData\Grid tray tray.nwgtm
Supprime! - C:\ProgramData\Grid tray tray.o0mbs
Supprime! - C:\ProgramData\Grid tray tray.pch5u
Supprime! - C:\ProgramData\Grid tray tray.pq2ws
Supprime! - C:\ProgramData\Grid tray tray.prrol
Supprime! - C:\ProgramData\Grid tray tray.pzob1
Supprime! - C:\ProgramData\Grid tray tray.qlh29
Supprime! - C:\ProgramData\Grid tray tray.r2vvq
Supprime! - C:\ProgramData\Grid tray tray.sb2i3
Supprime! - C:\ProgramData\Grid tray tray.svn25
Supprime! - C:\ProgramData\Grid tray tray.uil7d
Supprime! - C:\ProgramData\Grid tray tray.v4p73
Supprime! - C:\ProgramData\Grid tray tray.wuubf
Supprime! - C:\ProgramData\Grid tray tray.xe43n
Supprime! - C:\ProgramData\Grid tray tray.xuia9
Supprime! - C:\ProgramData\Grid tray tray.zm0d3
Supprime! - C:\ProgramData\Grid tray tray.zurd3
Supprime! - C:\ProgramData\Grid tray tray.05qbua
Supprime! - C:\ProgramData\Grid tray tray.09g0fe
Supprime! - C:\ProgramData\Grid tray tray.0pyis9
Supprime! - C:\ProgramData\Grid tray tray.0wsnhf
Supprime! - C:\ProgramData\Grid tray tray.19e12f
Supprime! - C:\ProgramData\Grid tray tray.1pjpkg
Supprime! - C:\ProgramData\Grid tray tray.1sxa0a
Supprime! - C:\ProgramData\Grid tray tray.228djl
Supprime! - C:\ProgramData\Grid tray tray.2deohh
Supprime! - C:\ProgramData\Grid tray tray.2pyapt
Supprime! - C:\ProgramData\Grid tray tray.305vlo
Supprime! - C:\ProgramData\Grid tray tray.31frn0
Supprime! - C:\ProgramData\Grid tray tray.4x8tu9
Supprime! - C:\ProgramData\Grid tray tray.5dne94
Supprime! - C:\ProgramData\Grid tray tray.6i1wgf
Supprime! - C:\ProgramData\Grid tray tray.6ufie4
Supprime! - C:\ProgramData\Grid tray tray.9ze05r
Supprime! - C:\ProgramData\Grid tray tray.a3z5x7
Supprime! - C:\ProgramData\Grid tray tray.a5uoea
Supprime! - C:\ProgramData\Grid tray tray.ajaozr
Supprime! - C:\ProgramData\Grid tray tray.anqsye
Supprime! - C:\ProgramData\Grid tray tray.awm71c
Supprime! - C:\ProgramData\Grid tray tray.b0bsgi
Supprime! - C:\ProgramData\Grid tray tray.b6fou3
Supprime! - C:\ProgramData\Grid tray tray.b7hoka
Supprime! - C:\ProgramData\Grid tray tray.bbtyx7
Supprime! - C:\ProgramData\Grid tray tray.bmn52d
Supprime! - C:\ProgramData\Grid tray tray.bmo4ew
Supprime! - C:\ProgramData\Grid tray tray.ct1ljz
Supprime! - C:\ProgramData\Grid tray tray.d6ks4e
Supprime! - C:\ProgramData\Grid tray tray.dkksy8
Supprime! - C:\ProgramData\Grid tray tray.dlia2b
Supprime! - C:\ProgramData\Grid tray tray.dlxuqe
Supprime! - C:\ProgramData\Grid tray tray.dmetkc
Supprime! - C:\ProgramData\Grid tray tray.do97mi
Supprime! - C:\ProgramData\Grid tray tray.drd1a3
Supprime! - C:\ProgramData\Grid tray tray.fcfoyq
Supprime! - C:\ProgramData\Grid tray tray.fr0iyb
Supprime! - C:\ProgramData\Grid tray tray.g4aiby
Supprime! - C:\ProgramData\Grid tray tray.gar6bp
Supprime! - C:\ProgramData\Grid tray tray.gbl69w
Supprime! - C:\ProgramData\Grid tray tray.hd0b73
Supprime! - C:\ProgramData\Grid tray tray.he4fuo
Supprime! - C:\ProgramData\Grid tray tray.ivj488
Supprime! - C:\ProgramData\Grid tray tray.jjsofq
Supprime! - C:\ProgramData\Grid tray tray.jrt0ya
Supprime! - C:\ProgramData\Grid tray tray.jxsofz
Supprime! - C:\ProgramData\Grid tray tray.kuynp7
Supprime! - C:\ProgramData\Grid tray tray.lqgcdf
Supprime! - C:\ProgramData\Grid tray tray.mxh4i1
Supprime! - C:\ProgramData\Grid tray tray.oaob8d
Supprime! - C:\ProgramData\Grid tray tray.p70fn9
Supprime! - C:\ProgramData\Grid tray tray.q1ht39
Supprime! - C:\ProgramData\Grid tray tray.qa45ca
Supprime! - C:\ProgramData\Grid tray tray.qcy4ue
Supprime! - C:\ProgramData\Grid tray tray.rmwa77
Supprime! - C:\ProgramData\Grid tray tray.s0hij6
Supprime! - C:\ProgramData\Grid tray tray.s1j5og
Supprime! - C:\ProgramData\Grid tray tray.shagof
Supprime! - C:\ProgramData\Grid tray tray.skk5s4
Supprime! - C:\ProgramData\Grid tray tray.snrotj
Supprime! - C:\ProgramData\Grid tray tray.sp2ut1
Supprime! - C:\ProgramData\Grid tray tray.spqwdu
Supprime! - C:\ProgramData\Grid tray tray.tr82ym
Supprime! - C:\ProgramData\Grid tray tray.utr20y
Supprime! - C:\ProgramData\Grid tray tray.wh1k7z
Supprime! - C:\ProgramData\Grid tray tray.whz0bg
Supprime! - C:\ProgramData\Grid tray tray.ww6cy8
Supprime! - C:\ProgramData\Grid tray tray.x07nqj
Supprime! - C:\ProgramData\Grid tray tray.xrltbj
Supprime! - C:\ProgramData\Grid tray tray.xv1v98
Supprime! - C:\ProgramData\Grid tray tray.ypenmj
Supprime! - C:\ProgramData\Grid tray tray.z4k7kb
Supprime! - C:\ProgramData\Grid tray tray.zf4b0n
Supprime! - C:\ProgramData\Grid tray tray.05e5mcq
Supprime! - C:\ProgramData\Grid tray tray.0l5qpmh
Supprime! - C:\ProgramData\Grid tray tray.32ew0o0
Supprime! - C:\ProgramData\Grid tray tray.3eru18p
Supprime! - C:\ProgramData\Grid tray tray.4itq6fd
Supprime! - C:\ProgramData\Grid tray tray.5elmcy6
Supprime! - C:\ProgramData\Grid tray tray.5qsbwjt
Supprime! - C:\ProgramData\Grid tray tray.6iakze3
Supprime! - C:\ProgramData\Grid tray tray.6yggrc2
Supprime! - C:\ProgramData\Grid tray tray.7lbhjon
Supprime! - C:\ProgramData\Grid tray tray.844ckw6
Supprime! - C:\ProgramData\Grid tray tray.9jptznf
Supprime! - C:\ProgramData\Grid tray tray.bl7twa1
Supprime! - C:\ProgramData\Grid tray tray.c345e0t
Supprime! - C:\ProgramData\Grid tray tray.c5rujtj
Supprime! - C:\ProgramData\Grid tray tray.d6kjydl
Supprime! - C:\ProgramData\Grid tray tray.eegg5a7
Supprime! - C:\ProgramData\Grid tray tray.fyresu8
Supprime! - C:\ProgramData\Grid tray tray.g38w9l7
Supprime! - C:\ProgramData\Grid tray tray.g3biwp1
Supprime! - C:\ProgramData\Grid tray tray.gfvd3zi
Supprime! - C:\ProgramData\Grid tray tray.h7d60v1
Supprime! - C:\ProgramData\Grid tray tray.i8rk5je
Supprime! - C:\ProgramData\Grid tray tray.lbuxmn7
Supprime! - C:\ProgramData\Grid tray tray.leeud96
Supprime! - C:\ProgramData\Grid tray tray.me2znks
Supprime! - C:\ProgramData\Grid tray tray.mkqi81g
Supprime! - C:\ProgramData\Grid tray tray.mmnflsr
Supprime! - C:\ProgramData\Grid tray tray.mrvlp6c
Supprime! - C:\ProgramData\Grid tray tray.nl2nnh8
Supprime! - C:\ProgramData\Grid tray tray.oe8ghlh
Supprime! - C:\ProgramData\Grid tray tray.ovujrl0
Supprime! - C:\ProgramData\Grid tray tray.p03v0m4
Supprime! - C:\ProgramData\Grid tray tray.posghhe
Supprime! - C:\ProgramData\Grid tray tray.q06uanu
Supprime! - C:\ProgramData\Grid tray tray.q9el0l6
Supprime! - C:\ProgramData\Grid tray tray.qnng4hp
Supprime! - C:\ProgramData\Grid tray tray.qwk1pzz
Supprime! - C:\ProgramData\Grid tray tray.r0f5xm6
Supprime! - C:\ProgramData\Grid tray tray.r8gb040
Supprime! - C:\ProgramData\Grid tray tray.rpvl6m5
Supprime! - C:\ProgramData\Grid tray tray.t4plbaj
Supprime! - C:\ProgramData\Grid tray tray.t7v7i4q
Supprime! - C:\ProgramData\Grid tray tray.tmqpbtp
Supprime! - C:\ProgramData\Grid tray tray.tydxr1s
Supprime! - C:\ProgramData\Grid tray tray.tzxpz2r
Supprime! - C:\ProgramData\Grid tray tray.unkkw1b
Supprime! - C:\ProgramData\Grid tray tray.uqnf5zp
Supprime! - C:\ProgramData\Grid tray tray.vjlnde0
Supprime! - C:\ProgramData\Grid tray tray.vo3cj19
Supprime! - C:\ProgramData\Grid tray tray.vzgsm4a
Supprime! - C:\ProgramData\Grid tray tray.wfgsked
Supprime! - C:\ProgramData\Grid tray tray.woe1rf8
Supprime! - C:\ProgramData\Grid tray tray.wwb3032
Supprime! - C:\ProgramData\Grid tray tray.x7leqrn
Supprime! - C:\ProgramData\Grid tray tray.xbvmtqs
Supprime! - C:\ProgramData\Grid tray tray.xeudwcm
Supprime! - C:\ProgramData\Grid tray tray.xp6pm4a
Supprime! - C:\ProgramData\Grid tray tray.xvujfnq
Supprime! - C:\ProgramData\Grid tray tray.ygwn9dx
Supprime! - C:\ProgramData\Grid tray tray.zj3jepc
Supprime! - C:\ProgramData\Grid tray tray.zq8sxep
Supprime! - C:\ProgramData\The Bend Clock.rrw57gz
Supprime! - C:\Program Files\Circle Developement
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans Local

[13/09/2008|15:22] C:\Users\chacha\AppData\Local\Acer Arcade Deluxe
[13/09/2008|10:38] C:\Users\chacha\AppData\Local\acer eNM
[17/09/2008|12:12] C:\Users\chacha\AppData\Local\Adobe
[15/09/2008|17:24] C:\Users\chacha\AppData\Local\Apple
[29/10/2008|19:51] C:\Users\chacha\AppData\Local\Apple Computer
[13/09/2008|10:37] C:\Users\chacha\AppData\Local\Application Data
[15/01/2009|15:10] C:\Users\chacha\AppData\Local\cossqmk.dat
[11/01/2009|15:58] C:\Users\chacha\AppData\Local\cossqmk.exe
[26/12/2008|10:40] C:\Users\chacha\AppData\Local\cossqmk_nav.dat
[15/01/2009|15:11] C:\Users\chacha\AppData\Local\cossqmk_navps.dat
[28/10/2008|19:22] C:\Users\chacha\AppData\Local\CounterPath
[17/09/2008|14:00] C:\Users\chacha\AppData\Local\CyberLink
[23/12/2008|18:41] C:\Users\chacha\AppData\Local\d3d9caps.dat
[15/01/2009|11:01] C:\Users\chacha\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[13/09/2008|15:22] C:\Users\chacha\AppData\Local\DVDivine
[30/12/2008|15:52] C:\Users\chacha\AppData\Local\eMule
[27/12/2008|11:09] C:\Users\chacha\AppData\Local\GDIPFONTCACHEV1.DAT
[13/09/2008|10:37] C:\Users\chacha\AppData\Local\Historique
[17/09/2008|14:00] C:\Users\chacha\AppData\Local\HomeMedia
[15/01/2009|00:13] C:\Users\chacha\AppData\Local\IconCache.db
[26/11/2008|21:56] C:\Users\chacha\AppData\Local\Lphant
[26/11/2008|23:00] C:\Users\chacha\AppData\Local\LphantBar
[17/12/2008|16:09] C:\Users\chacha\AppData\Local\Microsoft
[17/09/2008|12:22] C:\Users\chacha\AppData\Local\Microsoft Games
[16/09/2008|16:53] C:\Users\chacha\AppData\Local\MigWiz
[30/09/2008|18:23] C:\Users\chacha\AppData\Local\PlayMovie
[13/09/2008|15:22] C:\Users\chacha\AppData\Local\PowerCinema
[28/09/2008|21:11] C:\Users\chacha\AppData\Local\Shareaza
[15/01/2009|15:10] C:\Users\chacha\AppData\Local\Temp
[13/09/2008|10:37] C:\Users\chacha\AppData\Local\Temporary Internet Files
[27/12/2008|11:10] C:\Users\chacha\AppData\Local\vembkl.bat
[15/09/2008|19:54] C:\Users\chacha\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[15/01/2009 15:10][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{510145BF-3E7D-4405-8277-B864E21A6D19}.job
[15/01/2009 10:45][--ah-----] C:\Windows\tasks\SA.DAT
[15/01/2009 00:14][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[19/03/2008|06:20] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[30/12/2008|17:38] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[18/03/2008|13:20] C:\ProgramData\Acer GameZone Console
[26/12/2008|13:13] C:\ProgramData\Adobe
[13/09/2008|10:21] C:\ProgramData\Apple
[13/09/2008|10:23] C:\ProgramData\Apple Computer
[02/11/2006|14:02] C:\ProgramData\Application Data
[23/12/2008|16:34] C:\ProgramData\avg8
[08/12/2008|17:29] C:\ProgramData\book this clock drv
[11/09/2008|12:37] C:\ProgramData\Bureau
[17/09/2008|13:54] C:\ProgramData\CyberLink
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[30/12/2008|15:53] C:\ProgramData\eMule
[11/09/2008|12:37] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[18/03/2008|13:09] C:\ProgramData\FloodLightGames
[23/12/2008|15:28] C:\ProgramData\McAfee
[11/09/2008|12:37] C:\ProgramData\Menu D‚marrer
[30/11/2008|21:23] C:\ProgramData\Messenger Plus!
[04/12/2008|21:28] C:\ProgramData\Microsoft
[24/09/2008|20:27] C:\ProgramData\Microsoft Help
[11/09/2008|12:37] C:\ProgramData\ModŠles
[17/12/2008|11:55] C:\ProgramData\ntuser.pol
[26/10/2008|15:38] C:\ProgramData\Oberon Games
[11/11/2008|10:14] C:\ProgramData\SiteAdvisor
[02/11/2006|14:02] C:\ProgramData\Start Menu
[16/11/2008|12:10] C:\ProgramData\TEMP
[02/11/2006|14:02] C:\ProgramData\Templates
[24/12/2008|12:07] C:\ProgramData\trans wave bind
[27/09/2008|14:10] C:\ProgramData\WindowsSearch
[08/12/2008|21:03] C:\ProgramData\WLInstaller
[13/09/2008|10:44] C:\ProgramData\Yahoo! Companion

--------------------\\ Listing des dossiers dans C:\Program Files

[13/01/2009|21:38] C:\Program Files\123 Free Puzzle
[09/01/2009|18:43] C:\Program Files\2M Games
[11/09/2008|12:40] C:\Program Files\Acer
[12/06/2008|10:51] C:\Program Files\Acer Arcade Deluxe
[18/03/2008|13:21] C:\Program Files\Acer GameZone
[12/06/2008|10:56] C:\Program Files\Acer Inc
[19/03/2008|06:20] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[30/12/2008|15:49] C:\Program Files\Adobe
[26/11/2008|21:45] C:\Program Files\AdVantage
[12/06/2008|10:54] C:\Program Files\Apoint2K
[29/09/2008|18:30] C:\Program Files\Apple Software Update
[03/01/2009|15:38] C:\Program Files\Auslogics
[23/12/2008|16:34] C:\Program Files\AVG
[18/03/2008|13:20] C:\Program Files\Big Kahuna Reef
[15/11/2008|15:17] C:\Program Files\Bonjour
[03/01/2009|15:17] C:\Program Files\CCleaner
[23/12/2008|15:32] C:\Program Files\Common Files
[26/11/2008|21:49] C:\Program Files\Conduit
[18/03/2008|12:33] C:\Program Files\CONEXANT
[28/10/2008|19:20] C:\Program Files\CounterPath
[18/03/2008|12:58] C:\Program Files\CyberLink
[14/12/2008|22:54] C:\Program Files\DivX
[25/11/2008|20:20] C:\Program Files\DJ Mix Lite
[02/12/2008|12:51] C:\Program Files\EasyPHP 2.0b1
[30/12/2008|15:52] C:\Program Files\eMule
[11/09/2008|12:37] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[26/12/2008|13:32] C:\Program Files\Gimp-2.0
[11/09/2008|12:41] C:\Program Files\InstallShield Installation Information
[12/06/2008|10:45] C:\Program Files\Intel
[13/09/2008|10:23] C:\Program Files\Internet Explorer
[27/11/2008|16:27] C:\Program Files\InternetGameBox
[30/12/2008|17:37] C:\Program Files\iPod
[30/12/2008|17:38] C:\Program Files\iTunes
[23/11/2008|18:00] C:\Program Files\Java
[15/12/2008|13:21] C:\Program Files\Launch Manager
[09/10/2008|12:52] C:\Program Files\LimeWire
[26/11/2008|21:49] C:\Program Files\Lphant
[26/11/2008|23:00] C:\Program Files\LphantBar
[29/12/2008|12:43] C:\Program Files\Messenger Plus! Live
[28/12/2008|21:44] C:\Program Files\Microsoft
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[24/09/2008|20:26] C:\Program Files\Microsoft Office
[24/09/2008|20:26] C:\Program Files\Microsoft Works
[21/01/2008|03:35] C:\Program Files\Movie Maker
[02/11/2006|13:37] C:\Program Files\MSBuild
[11/09/2008|14:03] C:\Program Files\MSXML 4.0
[23/12/2008|15:32] C:\Program Files\Network Associates
[18/03/2008|12:43] C:\Program Files\NewTech Infosystems
[09/01/2009|18:57] C:\Program Files\Oneplayer
[02/10/2008|16:19] C:\Program Files\OpenOffice.org 2.4
[30/12/2008|17:34] C:\Program Files\QuickTime
[18/03/2008|12:27] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[28/09/2008|21:11] C:\Program Files\Shareaza
[13/01/2009|22:15] C:\Program Files\SuperOthello
[27/11/2008|22:52] C:\Program Files\Technodev
[13/01/2009|21:58] C:\Program Files\TLKGAMES
[08/12/2008|17:28] C:\Program Files\trans wave bind
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[02/10/2008|13:11] C:\Program Files\wamp
[21/01/2008|03:35] C:\Program Files\Windows Calendar
[21/01/2008|03:35] C:\Program Files\Windows Collaboration
[21/01/2008|03:35] C:\Program Files\Windows Defender
[21/01/2008|03:35] C:\Program Files\Windows Journal
[28/12/2008|21:45] C:\Program Files\Windows Live
[28/12/2008|21:43] C:\Program Files\Windows Live SkyDrive
[14/01/2009|14:04] C:\Program Files\Windows Mail
[21/01/2008|03:35] C:\Program Files\Windows Media Player
[11/09/2008|12:37] C:\Program Files\Windows NT
[21/01/2008|03:35] C:\Program Files\Windows Photo Gallery
[21/01/2008|03:35] C:\Program Files\Windows Sidebar
[18/03/2008|13:22] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[03/11/2008|17:12] C:\Program Files\Common Files\Adobe
[30/12/2008|17:37] C:\Program Files\Common Files\Apple
[19/03/2008|06:16] C:\Program Files\Common Files\DESIGNER
[18/03/2008|12:58] C:\Program Files\Common Files\InstallShield
[28/10/2008|19:20] C:\Program Files\Common Files\Intel
[02/10/2008|16:18] C:\Program Files\Common Files\Java
[18/03/2008|12:43] C:\Program Files\Common Files\LightScribe
[28/12/2008|21:44] C:\Program Files\Common Files\microsoft shared
[18/03/2008|12:42] C:\Program Files\Common Files\muvee Technologies
[23/12/2008|15:38] C:\Program Files\Common Files\Network Associates
[18/03/2008|12:43] C:\Program Files\Common Files\NewTech Infosystems
[18/03/2008|13:09] C:\Program Files\Common Files\Oberon Media
[14/12/2008|22:54] C:\Program Files\Common Files\PX Storage Engine
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[17/09/2008|17:22] C:\Program Files\Common Files\SWF Studio
[14/09/2008|18:40] C:\Program Files\Common Files\System
[04/12/2008|20:35] C:\Program Files\Common Files\Windows Live
[08/12/2008|21:05] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 83 Processes )

iexplore.exe ~ [PID:6004]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-15 15:12:10
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

C:\Program Files\InternetGameBox
C:\Program Files\InternetGameBox\InternetGameBox.exe
C:\Program Files\InternetGameBox\language
C:\Program Files\InternetGameBox\ressources
C:\Program Files\InternetGameBox\skins
C:\Program Files\InternetGameBox\uninst.exe
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Conditions g‚n‚rales.url
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Confidentialit‚.url
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\D‚sinstaller.lnk
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\InternetGameBox.lnk
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Website.url

C:\Users\chacha\AppData\Local\cossqmk.dat
C:\Users\chacha\AppData\Local\cossqmk.exe
C:\Users\chacha\AppData\Local\cossqmk_nav.dat
C:\Users\chacha\AppData\Local\cossqmk_navps.dat
[b]==> EGDACCESS <==/b

[F:73][D:13]-> C:\Users\chacha\AppData\Local\Temp
[F:393][D:1]-> C:\Users\chacha\AppData\Roaming\MICROS~1\Windows\Cookies
[F:310][D:10]-> C:\Users\chacha\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:84][D:5]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 15/01/2009|15:02 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 15/01/2009|15:14 - Option : [2]

--------------------\\ Fin du rapport a 15:14:05
[ UAC => 1 ]

Réponse 4 / 28

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

Tu as encore des dossiers infectés par Lop mais on s'en occupera après.

- Télécharge Navilog1 (de IL-MAFIOSO) et enregistre-le sur le Bureau.

- Double-clique sur Navilog1.exe afin de lancer l'installation.

- Une fois l'installation finie, clique droit sur le raccourci de Navilog1 présent sur le Bureau et choisis Exécuter en tant qu'administrateur.

- Appuie sur F ou f puis valide par Entrée.

- Appuie sur une touche de ton clavier à chaque fois que cela est demandé, tu arriveras au menu des options.

- Choisis l'option 1 et appuie sur la touche Entrée pour valider ton choix.

- Patiente jusqu'au message : *** Analyse terminée le ..... ***

- Le scan fini, le Bloc-notes contenant le rapport sera affiché, poste le contenu de ce rapport dans ta prochaine réponse.

- Si le résultat du scan ne s'affiche pas, tu le trouveras dans C:\fixnavi.txt

N'utilise pas l'option 2, 3 et 4 sans notre accord, des fichiers légitimes peuvent être inclus dans ce scan.

Réponse 5 / 28

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1

le rapport

Search Navipromo version 3.7.1 commencé le 15/01/2009 à 15:21:59,50

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz )
BIOS : Default System BIOS
USER : chacha ( Administrator )
BOOT : Normal boot

Antivirus : AVG Anti-Virus Free 8.0 (Activated)

C:\ (Local Disk) - NTFS - Total:110 Go (Free:51 Go)
D:\ (Local Disk) - NTFS - Total:110 Go (Free:101 Go)
E:\ (CD or DVD)

Recherche executé en mode normal

*** Recherche Programmes installés ***

*** Recherche dossiers dans "C:\Windows" ***

*** Recherche dossiers dans "C:\Program Files" ***

...\InternetGameBox trouvé !

*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" ***

...\InternetGameBox trouvé !

*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1" ***

*** Recherche dossiers dans "C:\ProgramData" ***

*** Recherche dossiers dans "c:\users\chacha\appdata\roaming\micros~1\windows\startm~1\programs" ***

*** Recherche dossiers dans "C:\Users\chacha\AppData\Local\virtualstore\Program Files" ***

*** Recherche dossiers dans "C:\Users\chacha\AppData\Local" ***

*** Recherche dossiers dans "C:\Users\chacha\AppData\Roaming" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Fichier(s) caché(s) :

C:\Users\chacha\AppData\Local\cossqmk.dat
C:\Users\chacha\AppData\Local\cossqmk.exe
C:\Users\chacha\AppData\Local\cossqmk_nav.dat
C:\Users\chacha\AppData\Local\cossqmk_navps.dat

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\Windows\system32" *

* Recherche dans "C:\Users\chacha\AppData\Local\Microsoft" *

* Recherche dans "C:\Users\chacha\AppData\Local\virtualstore\windows\system32" *

* Recherche dans "C:\Users\chacha\AppData\Local" *

*** Recherche fichiers ***

*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cossqmk"="\"c:\\users\\chacha\\appdata\\local\\cossqmk.exe\" cossqmk"

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

2)Recherche Heuristique :

* Dans "C:\Windows\system32" :

* Dans "C:\Users\chacha\AppData\Local\Microsoft" :

* Dans "C:\Users\chacha\AppData\Local\virtualstore\windows\system32" :

* Dans "C:\Users\chacha\AppData\Local" :

cossqmk.exe trouvé !
cossqmk.dat trouvé !
cossqmk_nav.dat trouvé !
cossqmk_navps.dat trouvé !

3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche autres dossiers et fichiers connus :

*** Analyse terminée le 15/01/2009 à 15:31:51,49 ***

Réponse 6 / 28

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

---> Relance Navilog1 (En tant qu'administrateur), choisis l'option 2 et poste le rapport.

Réponse 7 / 28

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1

voila

Clean Navipromo version 3.7.1 commencé le 15/01/2009 à 15:36:21,32

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz )
BIOS : Default System BIOS
USER : chacha ( Administrator )
BOOT : Normal boot

Antivirus : AVG Anti-Virus Free 8.0 (Activated)

C:\ (Local Disk) - NTFS - Total:110 Go (Free:51 Go)
D:\ (Local Disk) - NTFS - Total:110 Go (Free:101 Go)
E:\ (CD or DVD)

Mode suppression automatique
avec prise en charge résultats Catchme et GNS

Nettoyage exécuté au redémarrage de l'ordinateur

*** Creation backups fichiers trouvés par Catchme ***

Copie vers "C:\Program Files\navilog1\Backupnavi"

Copie C:\Users\chacha\AppData\Local\cossqmk.dat réalisée avec succès !
Copie C:\Users\chacha\AppData\Local\cossqmk.exe réalisée avec succès !
Copie C:\Users\chacha\AppData\Local\cossqmk_nav.dat réalisée avec succès !
Copie C:\Users\chacha\AppData\Local\cossqmk_navps.dat réalisée avec succès !

*** Suppression des fichiers trouvés avec Catchme ***

C:\Users\chacha\AppData\Local\cossqmk.dat supprimé !
C:\Users\chacha\AppData\Local\cossqmk.exe supprimé !
C:\Users\chacha\AppData\Local\cossqmk_nav.dat supprimé !
C:\Users\chacha\AppData\Local\cossqmk_navps.dat supprimé !

** 2ème passage avec résultats Catchme **

* Dans "C:\Windows\system32" *

C:\Windows\prefetch\cossqmk*.pf trouvé !
Copie C:\Windows\prefetch\cossqmk*.pf réalisée avec succès !
C:\Windows\prefetch\cossqmk*.pf supprimé !

* Dans "C:\Users\chacha\AppData\Local\Microsoft" *

* Dans "C:\Users\chacha\AppData\Local\virtualstore\windows\system32" *

* Dans "C:\Users\chacha\AppData\Local" *

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\Windows\System32" *

* Suppression dans "C:\Users\chacha\AppData\Local\Microsoft" *

* Suppression dans "C:\Users\chacha\AppData\Local\virtualstore\windows\system32" *

* Suppression dans "C:\Users\chacha\AppData\Local" *

*** Suppression dossiers dans "C:\Windows" ***

*** Suppression dossiers dans "C:\Program Files" ***

...\InternetGamebox ...suppression...
...\InternetGamebox supprimé !

*** Suppression dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" ***

...\InternetGamebox ...suppression...
...\InternetGamebox supprimé !

*** Suppression dossiers dans "c:\progra~2\micros~1\windows\startm~1" ***

*** Suppression dossiers dans "C:\ProgramData" ***

*** Suppression dossiers dans c:\users\chacha\appdata\roaming\micros~1\windows\startm~1\programs ***

*** Suppression dossiers dans "C:\Users\chacha\AppData\Local\virtualstore\Program Files" ***

*** Suppression dossiers dans "C:\Users\chacha\AppData\Local" ***

*** Suppression dossiers dans "C:\Users\chacha\AppData\Roaming" ***

*** Suppression fichiers ***

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\Windows\Temp effectué !
Nettoyage contenu C:\Users\chacha\AppData\Local\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :

* Dans "C:\Windows\system32" *

* Dans "C:\Users\chacha\AppData\Local\Microsoft" *

* Dans "C:\Users\chacha\AppData\Local\virtualstore\windows\system32" *

* Dans "C:\Users\chacha\AppData\Local" *

*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok

*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group supprimé !
Certificat Montorgueil absent !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Recherche autres dossiers et fichiers connus ***

*** Nettoyage terminé le 15/01/2009 à 15:42:03,39 ***

Réponse 8 / 28

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

---> Désinstalle Navilog1.

---> Puis fais ceci :

- Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

- Clique droit sur RSIT.exe et choisis Exécuter en tant qu'administrateur.

- Clique sur Continue à l'écran Disclaimer.

- Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : Les rapports sont sauvegardés dans le dossier C:\rsit.

Réponse 9 / 28

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1

log.txt

Logfile of random's system information tool 1.05 (written by random/random)
Run by chacha at 2009-01-15 15:48:08
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 53 GB (46%) free of 113 GB
Total RAM: 3061 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:48:59, on 15/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\conime.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\BR040286.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\chacha\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Users\chacha\Desktop\RSIT.exe
C:\Program Files\trend micro\chacha.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://selfcare.wifirst.net/sessions/new
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = www.google.fr:80
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: LphantBar Toolbar - {6b284373-1765-4464-a587-80fbc2b2eefa} - C:\Program Files\LphantBar\tbLph1.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: LphantBar Toolbar - {6b284373-1765-4464-a587-80fbc2b2eefa} - C:\Program Files\LphantBar\tbLph1.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: LphantBar Toolbar - {6b284373-1765-4464-a587-80fbc2b2eefa} - C:\Program Files\LphantBar\tbLph1.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [BisonInst0402] C:\Windows\BR040286.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [eAudio] "C:\Acer\Empowering Technology\eAudio\eAudio.exe"
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [ALaunch] C:\Acer\ALaunch\AlaunchClient.exe
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O13 - Gopher Prefix:
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: AVSync Manager (AvSynMgr) - Unknown owner - C:\Program Files\Network Associates\VirusScan\Avsynmgr.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McShield - Network Associates, Inc. - C:\Program Files\Common Files\Network Associates\McShield\Mcshield.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: wampapache - Apache Software Foundation - C:\Program Files\wamp\apache2\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - C:\Program Files\wamp\mysql\bin\mysqld-nt.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

Réponse 10 / 28

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort.

---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
http://oldtimer.geekstogo.com/OTMoveIt3.exe

---> Double-clique sur OTMoveIt3.exe afin de le lancer.

---> Copie (Ctrl+C) le texte suivant ci-dessous :

:processes
explorer.exe

:files
C:\ProgramData\trans wave bind
C:\ProgramData\book this clock drv
C:\Program Files\AdVantage
C:\Program Files\trans wave bind

:reg
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TestBin]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\imwwwsk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

:commands
[purity]
[emptytemp]
[reboot]

---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

Réponse 11 / 28

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
Folder move failed. C:\ProgramData\trans wave bind scheduled to be moved on reboot.
Folder move failed. C:\ProgramData\book this clock drv scheduled to be moved on reboot.
Folder move failed. C:\Program Files\AdVantage scheduled to be moved on reboot.
Folder move failed. C:\Program Files\trans wave bind scheduled to be moved on reboot.
========== REGISTRY ==========
Unable to delete registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TestBin\\ .
Unable to delete registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\imwwwsk\\ .
Unable to delete registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\\ .
========== COMMANDS ==========
File delete failed. C:\Users\chacha\AppData\Local\Temp\Low\~DF270D.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\chacha\AppData\Local\Temp\Low\~DF2713.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\chacha\AppData\Local\Temp\RtkBtMnt.exe scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Temp folders emptied.

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 01152009_160303

Réponse 12 / 28

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

Refais la même manip' sauf que tu lances OTMoveIt en tant qu'administrateur.

Réponse 13 / 28

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\ProgramData\trans wave bind moved successfully.
C:\ProgramData\book this clock drv moved successfully.
C:\Program Files\AdVantage moved successfully.
C:\Program Files\trans wave bind moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TestBin\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\imwwwsk\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\\ deleted successfully.
========== COMMANDS ==========
File delete failed. C:\Users\chacha\AppData\Local\Temp\RtkBtMnt.exe scheduled to be deleted on reboot.
File delete failed. C:\Users\chacha\AppData\Local\Temp\~DFC8F9.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\chacha\AppData\Local\Temp\~DFC903.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\Windows\temp\TMP000000536FB89D86C8D68D15 scheduled to be deleted on reboot.
Windows Temp folder emptied.
Temp folders emptied.

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 01152009_160959

Files moved on Reboot...
C:\Users\chacha\AppData\Local\Temp\RtkBtMnt.exe moved successfully.
File C:\Users\chacha\AppData\Local\Temp\~DFC8F9.tmp not found!
File C:\Users\chacha\AppData\Local\Temp\~DFC903.tmp not found!
File C:\Windows\temp\TMP000000536FB89D86C8D68D15 not found!

Réponse 14 / 28

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

Ça a fonctionné cette fois-ci.

1/

---> Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
---> Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
---> Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
---> Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
---> Sélectionne Exécuter un examen rapide.
---> Clique sur Rechercher. L'analyse démarre.

A la fin de l'analyse, un message s'affiche :

L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

---> Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
---> Ferme tes navigateurs.
Si des malwares ont été détectés, clique sur Afficher les résultats.
---> Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
---> MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

2/

---> Désinstalle les programmes suivants :
Java(TM) 6 Update 4
Java(TM) 6 Update 7
Java 6 Update 10

---> Mets à jour Adobe Reader :
https://acrobat.adobe.com/fr/fr/acrobat/pdf-reader.html

---> Mets à jour Java :
https://www.java.com/fr/

Réponse 15 / 28

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1654
Windows 6.0.6001 Service Pack 1

15/01/2009 16:31:29
mbam-log-2009-01-15 (16-31-29).txt

Type de recherche: Examen rapide
Eléments examinés: 45568
Temps écoulé: 7 minute(s), 55 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 5
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 32
Fichier(s) infecté(s): 488

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\2m words collection (Adware.WebHancer) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{94a1cc24-f9d8-4f24-ba35-19084dce257f} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{35cd119c-b6c1-46f7-8403-53e8337320ec} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{6f662691-d05b-458e-b223-27dc1ad46dfc} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{197a8585-9fb4-4cf3-90ca-03892e68c7eb} (Trojan.Agent) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Windows\System32\VolumeControl.ocx (Trojan.Agent) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\2M Games (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin\client (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\applet (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\audio (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\cmm (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\ext (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\fonts (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\i386 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\images (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\images\cursors (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\security (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Indiana (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Kentucky (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\North_Dakota (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Antarctica (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Atlantic (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Australia (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Indian (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Pacific (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\music (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\skins (Adware.WebHancer) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\2M Games\Words Collection\LicenseFR.txt (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\ReadmeFR.txt (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\uninstall.exe (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\uninstall.ini (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\words.jar (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\buttonEasy.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\buttonExit.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\buttonFullscreen.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\buttonHard.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\buttonHelp.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\buttonMusic.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\buttonPause.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\buttonPlay.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\buttonReplay.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\buttonSounds.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\buttonStats.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\cd.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\cdWords.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\dotIcon.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\help.htm (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\help\register.htm (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin\awt.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin\fontmanager.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin\game.ico (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin\hpi.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin\java.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin\javaw.exe (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin\jpeg.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin\jsound.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin\msvcrt.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin\verify.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin\zip.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin\client\jvm.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\bin\client\Xusage.txt (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\content-types.properties (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\flavormap.properties (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.CP1250 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.CP1251 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.CP1253 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.CP1254 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.CP1256 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.CP1257 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.GB18030 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.hi (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.iw (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.ja (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.ko (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.ru (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.th (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.zh (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.zh.NT (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.zh_TW (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\font.properties.zh_TW.95 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\jawt.lib (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\jvm.hprof.txt (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\jvm.jcov.txt (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\logging.properties (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\psfont.properties.ja (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\psfontj2d.properties (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\rt.jar (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\sunrsasign.jar (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\tzmappings (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\audio\soundbank.gm (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\cmm\CIEXYZ.pf (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\cmm\GRAY.pf (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\cmm\LINEAR_RGB.pf (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\cmm\sRGB.pf (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\fonts\LucidaSansRegular.ttf (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\i386\jvm.cfg (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\images\cursors\cursors.properties (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\images\cursors\invalid32x32.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\images\cursors\win32_CopyDrop32x32.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\images\cursors\win32_LinkDrop32x32.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\images\cursors\win32_MoveDrop32x32.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\images\cursors\win32_MoveNoDrop32x32.gif (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\security\cacerts (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\security\java.policy (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\security\java.security (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\security\local_policy.jar (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\security\US_export_policy.jar (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\CET (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\EET (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\GMT (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\MET (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\WET (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\ZoneInfoMappings (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Abidjan (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Accra (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Addis_Ababa (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Algiers (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Asmera (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Bamako (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Bangui (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Banjul (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Bissau (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Blantyre (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Brazzaville (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Bujumbura (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Cairo (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Casablanca (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Ceuta (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Conakry (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Dakar (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Dar_es_Salaam (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Djibouti (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Douala (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\El_Aaiun (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Freetown (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Gaborone (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Harare (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Johannesburg (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Kampala (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Khartoum (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Kigali (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Kinshasa (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Lagos (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Libreville (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Lome (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Luanda (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Lubumbashi (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Lusaka (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Malabo (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Maputo (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Maseru (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Mbabane (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Mogadishu (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Monrovia (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Nairobi (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Ndjamena (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Niamey (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Nouakchott (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Ouagadougou (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Porto-Novo (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Sao_Tome (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Timbuktu (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Tripoli (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Tunis (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Africa\Windhoek (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Adak (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Anchorage (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Anguilla (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Antigua (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Araguaina (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Aruba (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Asuncion (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Barbados (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Belem (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Belize (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Boa_Vista (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Bogota (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Boise (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Buenos_Aires (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Cambridge_Bay (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Cancun (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Caracas (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Catamarca (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Cayenne (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Cayman (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Chicago (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Chihuahua (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Cordoba (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Costa_Rica (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Cuiaba (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Curacao (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Danmarkshavn (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Dawson (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Dawson_Creek (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Denver (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Detroit (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Dominica (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Edmonton (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Eirunepe (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\El_Salvador (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Fortaleza (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Glace_Bay (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Godthab (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Goose_Bay (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Grand_Turk (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Grenada (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Guadeloupe (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Guatemala (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Guayaquil (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Guyana (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Halifax (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Havana (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Hermosillo (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Indianapolis (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Inuvik (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Iqaluit (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Jamaica (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Jujuy (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Juneau (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\La_Paz (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Lima (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Los_Angeles (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Louisville (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Maceio (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Managua (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Manaus (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Martinique (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Mazatlan (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Mendoza (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Menominee (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Merida (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Mexico_City (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Miquelon (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Monterrey (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Montevideo (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Montreal (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Montserrat (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Nassau (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\New_York (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Nipigon (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Nome (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Noronha (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Panama (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Pangnirtung (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Paramaribo (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Phoenix (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Port-au-Prince (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Porto_Velho (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Port_of_Spain (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Puerto_Rico (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Rainy_River (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Rankin_Inlet (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Recife (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Regina (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Rio_Branco (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Rosario (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Santiago (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Santo_Domingo (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Sao_Paulo (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Scoresbysund (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\St_Johns (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\St_Kitts (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\St_Lucia (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\St_Thomas (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\St_Vincent (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Swift_Current (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Tegucigalpa (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Thule (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Thunder_Bay (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Tijuana (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Tortola (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Vancouver (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Whitehorse (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Winnipeg (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Yakutat (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Yellowknife (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Indiana\Knox (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Indiana\Marengo (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Indiana\Vevay (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\Kentucky\Monticello (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\America\North_Dakota\Center (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Antarctica\Casey (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Antarctica\Davis (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Antarctica\DumontDUrville (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Antarctica\Mawson (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Antarctica\McMurdo (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Antarctica\Palmer (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Antarctica\Syowa (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Antarctica\Vostok (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Aden (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Almaty (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Amman (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Anadyr (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Aqtau (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Aqtobe (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Ashgabat (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Baghdad (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Bahrain (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Baku (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Bangkok (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Beirut (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Bishkek (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Brunei (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Calcutta (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Choibalsan (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Chongqing (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Colombo (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Damascus (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Dhaka (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Dili (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Dubai (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Dushanbe (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Gaza (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Harbin (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Hong_Kong (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Hovd (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Irkutsk (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Jakarta (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Jayapura (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Jerusalem (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Kabul (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Kamchatka (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Karachi (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Kashgar (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Katmandu (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Krasnoyarsk (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Kuala_Lumpur (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Kuching (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Kuwait (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Macao (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Magadan (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Manila (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Muscat (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Nicosia (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Novosibirsk (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Omsk (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Phnom_Penh (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Pontianak (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Pyongyang (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Qatar (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Rangoon (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Riyadh (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Riyadh87 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Riyadh88 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Riyadh89 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Saigon (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Sakhalin (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Samarkand (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Seoul (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Shanghai (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Singapore (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Taipei (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Tashkent (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Tbilisi (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Tehran (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Thimphu (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Tokyo (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Ujung_Pandang (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Ulaanbaatar (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Urumqi (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Vientiane (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Vladivostok (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Yakutsk (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Yekaterinburg (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Asia\Yerevan (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Atlantic\Azores (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Atlantic\Bermuda (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Atlantic\Canary (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Atlantic\Cape_Verde (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Atlantic\Faeroe (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Atlantic\Madeira (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Atlantic\Reykjavik (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Atlantic\South_Georgia (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Atlantic\Stanley (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Atlantic\St_Helena (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Australia\Adelaide (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Australia\Brisbane (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Australia\Broken_Hill (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Australia\Darwin (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Australia\Hobart (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Australia\Lindeman (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Australia\Lord_Howe (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Australia\Melbourne (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Australia\Perth (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Australia\Sydney (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT+1 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT+10 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT+11 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT+12 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT+2 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT+3 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT+4 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT+5 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT+6 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT+7 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT+8 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT+9 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT-1 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT-10 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT-11 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT-12 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT-13 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT-14 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT-2 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT-3 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT-4 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT-5 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT-6 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT-7 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT-8 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\GMT-9 (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\UCT (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Etc\UTC (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Amsterdam (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Andorra (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Athens (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Belfast (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Belgrade (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Berlin (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Brussels (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Bucharest (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Budapest (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Chisinau (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Copenhagen (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Dublin (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Gibraltar (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Helsinki (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Istanbul (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Kaliningrad (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Kiev (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Lisbon (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\London (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Luxembourg (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Madrid (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Malta (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Minsk (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Monaco (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Moscow (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Oslo (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Paris (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Prague (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Riga (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Rome (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Samara (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Simferopol (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Sofia (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Stockholm (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Tallinn (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Tirane (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Uzhgorod (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Program Files\2M Games\Words Collection\jre\lib\zi\Europe\Vaduz (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\Pro

Réponse 16 / 28

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

---> Relance MBAM, va dans Quarantaine et supprime tout.

Quand tu auras fait l'étape 2, dis-le moi ;)

Réponse 17 / 28

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1

bon ba voila java adob mi a jour et quarentaine vider

Réponse 18 / 28

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

- Fais un scan en ligne ici https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr (Avec Internet Explorer).

- En bas à droite, clique sur Démarrer Online-scanner.

- Dans la nouvelle fenêtre qui s'affiche, clique sur J'accepte.

- Accepte les Contrôles ActiveX.

- Choisis Poste de travail pour le scan.

- Celui-ci terminé, sauvegarde (Choisis fichier texte) et poste le rapport.

- Pour t'aider à utiliser le scan en ligne :
https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId291566

NOTE : Si tu reçois le message La licence de Kaspersky On-line Scanner est périmée, va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner, reconnecte-toi sur le site de Kaspersky pour retenter le scan en ligne.

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1

la mise a jour a planter deja que c'est long. je reessai demain car la je doi partir donc je reposte le rappor demain si sa marche jte remerci en tt k j'ai plus de pub bon ba a demain bone soirer et merci encore

Réponse 19 / 28

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

Si ça ne fonctionne toujours pas, dis-le moi ;)

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1

Bonjour Destrio5, voila ojourd'hui j'ai donc reesayer de reinstaler kaspersky mais sans succes il me dit que des fichier son endomages et ne veut pas poursuivre ... que doi-je faire en attente de ta reponce merci a++

Réponse 20 / 28

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

Essaie le scan suivant :
https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan

mwa0270 Messages postés 107 Date d'inscription Statut Membre Dernière intervention 1

jtenvoi le rapport mais bon je sai pas sil affiche tous et la je compren pas ce qu'il met donc

;***********************************************************************************************************************************************************************************
ANALYSIS: 2009-01-16 14:21:59
PROTECTIONS: 1
MALWARE: 30
SUSPECTS: 10
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
Windows Defender 1.1.4205.0 No No
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@doubleclick[2].txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@doubleclick[1].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\chacha@atdmt[3].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\chacha@atdmt[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@atdmt[3].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@atdmt[2].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@tradedoubler[1].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@tradedoubler[2].txt
00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@247realmedia[1].txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@fastclick[1].txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@mediaplex[2].txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@mediaplex[1].txt
00147814 Cookie/AspinallsOnlineCasino TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@pacificpoker[1].txt
00149046 Cookie/Casinotropez TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@casinotropez[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@xiti[1].txt
00167753 Cookie/Statcounter TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@statcounter[1].txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@ad.yieldmanager[2].txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@ad.yieldmanager[1].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@apmebf[1].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@apmebf[2].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@serving-sys[2].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@serving-sys[3].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@bs.serving-sys[3].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@bs.serving-sys[2].txt
00168095 Cookie/888 TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@888[1].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@weborama[2].txt
00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@adtech[1].txt
00168110 Cookie/Server.iad.Liveperson TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@server.iad.liveperson[1].txt
00168116 Cookie/Comclick TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@fl01.ct2.comclick[2].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@advertising[1].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@advertising[3].txt
00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@zedo[1].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@bluestreak[1].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@bluestreak[2].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\chacha@bluestreak[2].txt
00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@adrevolver[3].txt
00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@adrevolver[2].txt
00207936 Cookie/Adviva TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@adviva[2].txt
00207936 Cookie/Adviva TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@adviva[1].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Users\chacha\AppData\Roaming\Microsoft\Windows\Cookies\Low\chacha@smartadserver[1].txt
00457938 Trj/Dropper.AEW Virus/Trojan No 0 Yes No C:\Users\chacha\Documents\LimeWire\Saved\1000 logos et sonneries pour portable TRACKERSURFER french.zip[keymaker.exe]
00457938 Trj/Dropper.AEW Virus/Trojan No 0 Yes No C:\Users\chacha\Documents\LimeWire\Saved\1000 logos et sonneries pour portable TRACKERSURFER french.zip[Setup.exe]
02941683 ASF/GetaCodec.A Virus No 0 Yes No C:\Users\chacha\Documents\LimeWire\Saved\trahison sultan ft croma.mp3
02941683 ASF/GetaCodec.A Virus No 0 Yes No C:\Users\chacha\Documents\LimeWire\Saved\sultan ft croma.mp3
03074964 Trj/CI.A Virus/Trojan No 0 Yes No C:\Users\chacha\Downloads\msnspymonitor.exe
03480795 Adware/MediaAdvantage Adware No 0 Yes No C:\_OTMoveIt\MovedFiles\01152009_160959\Program Files\AdVantage\AdVantage.exe
04212725 Generic Trojan Virus/Trojan No 0 Yes No C:\Lop SD\Backup-Lop\Program Files\Circle Developement\Uninstall.exe
;===================================================================================================================================================================================
SUSPECTS
Sent Location �;��C5

;===================================================================================================================================================================================
No C:\Lop SD\catchme.exe �;��C5

No C:\Program Files\Acer GameZone\Big Kahuna Reef\Big Kahuna Reef.exe �;��C5

No C:\Program Files\Acer GameZone\Bricks of Egypt\Bricks of Egypt.exe �;��C5

No C:\Program Files\Acer GameZone\Diner Dash Flo on the Go\Diner_Dash_Flo_On_The_Go.exe �;��C5

No C:\Program Files\Acer GameZone\Jewel Quest Solitaire\aJewelQuestSolitaire.exe �;��C5

No C:\Program Files\Acer GameZone\Mahjong Escape Ancient China\MahjongEscape.exe �;��C5

No C:\Program Files\Acer GameZone\Mahjongg Artifacts\mahjongg_artifacts.exe �;��C5

No C:\Program Files\Acer GameZone\Zuma Deluxe\Zuma.exe �;��C5

No C:\Users\chacha\Desktop\LopSD.exe �;��C5

No C:\Users\chacha\Desktop\OTMoveIt3.exe �;��C5

;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description �;��C5

;===================================================================================================================================================================================
;===================================================================================================================================================================================

Pub intempestive

28 réponses

Votre réponse

Discussions similaires