Antivirus 360 supprimer mais pti problÃ©me Fermé

Question

Bonjour,
J'ai ete invecte pas antivirus 360, j'ai reussi a le supprime mais depuis j'ai du mal a pouvoir alle sur internet.
Lorsque j'ouvre une page, ce message ce mets:
"Internet Explorer Warning - visiting this web site may harm your computer!"

Est ce que cela vient de antivirus 360, si oui, il faut que je fasse quoi?

Help, ou je vais devenir folle

Merci d'avance!!

jacques.gache · Answer

bonjour, si tu peux télécharger et passer malwarebytes fais le , Merci

Telecharge malwarebytes 

-> https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ 

Tu l´instales; le programme va se mettre automatiquement a jour. 

Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression". 

Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet". 

Puis click sur "rechercher". 

Laisse le scanner le pc... 

Si des elements on ete trouvés > click sur supprimer la selection. 

si il t´es demandé de redemarrer > click sur "yes". 

A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum. 

Copie et colle le rapport stp. 

ps : les rapport sont aussi rangé dans l onglet rapport/log

foufie · Answer

bonjour, voila le rapport:

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1705
Windows 5.1.2600 Service Pack 3

30/01/2009 08:27:52
mbam-log-2009-01-30 (08-27-07).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 156010
Temps écoulé: 1 hour(s), 15 minute(s), 36 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 20
Valeur(s) du Registre infectée(s): 5
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 141

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\winsystems.dll (Trojan.FakeAlert) -> No action taken.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9b2b6962-67c9-453b-aa79-892f9c26b498} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{9b2b6962-67c9-453b-aa79-892f9c26b498} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06c7ca52-d6e5-4015-812b-cbc0262b4242} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{06c7ca52-d6e5-4015-812b-cbc0262b4242} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\solution.solution (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\solution.solution.1 (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{892b2785-b0d0-4aa2-ae6a-0ed60b00a979} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{0b014b81-4e12-46f9-806f-55867af8fd3c} (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{0b014b81-4e12-46f9-806f-55867af8fd3c} (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0b014b81-4e12-46f9-806f-55867af8fd3c} (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\AppID\{e81cf86b-f683-422a-b742-3f2427ea9d6a} (Trojan.BHO) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{99c6d1bb-7555-474c-91da-d8fb62a9cc75} (Trojan.BHO) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1a93c934-025b-4c3a-b38e-9654a7003239} (Adware.Gamesbar) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6f282b65-56bf-4bd1-a8b2-a4449a05863d} (Adware.Gamesbar) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\zoralepefo (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cpm77e2ae41 (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.BHO) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ssodl (Trojan.BHO) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\71690521397891865757278224542194 (Rogue.A360Antivirus) -> No action taken.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\kogezp.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\winsystems.dll (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP624\A0092860.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP624\A0092887.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP632\A0094064.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP633\A0094086.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP634\A0094113.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094513.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094514.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094515.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094516.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094517.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094518.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094519.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094520.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094521.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094522.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094524.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094528.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094532.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094538.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094539.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094544.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094562.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094546.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094548.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094550.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094551.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094554.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094561.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094563.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094565.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094567.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094568.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094571.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094577.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094581.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094582.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094583.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094586.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094589.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094590.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094592.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094595.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094597.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094599.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094605.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094606.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094607.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094609.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094612.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP644\A0094613.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP604\A0085373.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP604\A0085391.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP604\A0085414.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP604\A0085442.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP604\A0086466.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP604\A0086483.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP606\A0086625.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP606\A0086627.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP606\A0086638.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP607\A0086642.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP607\A0086645.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP607\A0086665.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP607\A0086666.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP608\A0086713.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP608\A0086720.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP608\A0086735.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP608\A0086736.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP609\A0086742.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP610\A0086783.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP610\A0086786.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP610\A0086801.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP611\A0086820.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP611\A0086818.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP611\A0086824.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP611\A0086837.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP612\A0086885.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP613\A0086887.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP613\A0086888.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP614\A0086984.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP614\A0087921.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP614\A0087949.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP614\A0086985.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP615\A0087952.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP615\A0087953.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP615\A0087955.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088031.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088048.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088114.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088122.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088123.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088125.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088126.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088128.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088111.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088130.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088141.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088142.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088144.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088146.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088184.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088185.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088186.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088187.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088190.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088205.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088210.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088227.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP616\A0088229.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP617\A0088240.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP617\A0088245.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP617\A0088457.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP617\A0088458.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP617\A0088459.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP618\A0088588.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP618\A0088584.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP619\A0088649.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP619\A0088671.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP620\A0088682.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP620\A0088691.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP620\A0089675.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP620\A0089687.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP620\A0089692.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP620\A0090698.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP621\A0091724.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP621\A0091753.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP621\A0091762.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP622\A0092783.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP622\A0092784.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP623\A0092825.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP623\A0092828.dll (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP623\A0092851.exe (Trojan.Clicker) -> No action taken.
C:\System Volume Information\_restore{C370A3D6-7A0C-4DE3-89DA-0B58CEBE3529}\RP623\A0092852.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\jaditibi.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\payezavu.dll.tmp (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\rodugema.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\Kr51fc82.exe.a_a (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\PaLbAYBV.exe.a_a (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\ieupdates.exe (Trojan.Agent) -> No action taken.
C:\Program Files\EoRezo (Rogue.Eorezo) -> No action taken.

chimay8 · Answer

Salut,
pour faire avancer jacques,

No action taken. tu n'as fais aucune suppression...

va dans la quarantaine de MBAM et supprime tout

ensuite

- Télécharge TrendMicro&#8482; HijackThis&#8482; de Merijn(prog de diagnostic) sur ton bureau. 
- Cette version est sans installateur! ( Zip à décompresser )
- Enregistre le sur ton bureau.

-A l'installation,
****Place le dans son répertoire par défaut, c'est à dire : C:\program files***

Important : Sous Vista, clic droit sur le fichier Hijackthis.exe ou sur le raccourci, Propriétés, Onglet Compatibilité, cocher :
"Exécuter ce programme en tant qu'administrateur"

installer hijackthis correctement:
https://forums.cnetfrance.fr 

*** Ferme toute les fenêtres ouvertes , et déconnecte toi du web***

- Double-clique dessus
- Génère un rapport en suivant ces indications :
- Exécute le et clique sur "Do a scan and save log file".
- Le rapport s'ouvre sur le Bloc-Note.
- Colle le rapport ici, pour cela :
- Menu Edition / Selectionner Tout
- Menu Edition / copier
- Ici dans un nouveau message : clic droit / coller
- ** ne pas fixer de lignes sans notre avis **
Aide : N'hésite pas à consulter l'aide HiJackThis de Malekal_morte   
En image

jacques.gache · Answer

chimay8 bonjour , merci pour l'aide 

foufie bonjour fais comme demande chimay8, Merci

foufie · Answer

Hello,
voila le rapport de TrendMicro™ HijackThis™ 


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:49:28, on 31/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: EoBho - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [List Multi Knob Inside] C:\Documents and Settings\All Users\Application Data\64 01 list multi\Drive Four.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Creative Live! Cam Manager] "C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [HOPE DELETE] C:\DOCUME~1\mourier\APPLIC~1\NURBDE~1\Default Cash 2.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [zoralepefo] Rundll32.exe "C:\WINDOWS\system32\kanelewu.dll",s (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?803be4d502b9453fb26ba95c67738ed8
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?803be4d502b9453fb26ba95c67738ed8
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/...
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5392B545-31A5-4724-BEF3-4FED1D56FDAC} (CPlayFirstDinerDash2_frControl Object) - http://msnfr.oberon-media.com/...
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6715D12F-213F-4C6E-ACE1-8A363F550B96} (CPlayFirstDoggieDashControl Object) - http://www.gamehouse.com/realarcade-webgames/doggiedash/DoggieDash.cab
O16 - DPF: {97E71027-0BA2-44F2-97DB-F84D808ED0B6} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab55762.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab55579.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O20 - AppInit_DLLs: kogezp.dll C:\WINDOWS\system32	esirolo.dll c:\windows\system32\lehebofi.dll c:\windows\system32egoyivu.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

jacques.gache · Answer

bonjour, il y a encore du boulot tu fais ce qui suit dans l'ordre tu postes les rapports dans l'ordre de leur création , Merci 

1)  Télécharge AD-Remover de C_XX sur ton Bureau :
http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe

Ferme toutes les applications en cours, y compris ton navigateur *.
Désactive ton antivirus.

Double-clique sur AD-R.exe et installe-le dans le répertoire par défaut. ( C:\Program files )

Double clique sur l'icône Ad-remover 
https://i75.servimg.com/u/f75/11/05/93/83/ad-r10.jpg

Au menu principal choisis l'option A

Poste le rapport qui apparait à la fin du scan.
Il est sauvegardé ici : C:\Ad-report(date).log

* Process.exe, un composant de l'outil, est détecté par certains antivirus, (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
C'est pourquoi il faut désactiver provisoirement ton antivirus.



2) suppression:

Fermes toutes les applications en cours, y compris ton navigateur
.
Relances "Ad-remover". tu choisis l'option B 

et tu coches tout et tu le lances laissesle travailler en appuyant sur S

et postes le rapport générer 


Il est sauvegardé ici : C:\Ad-report(date).log



 3) désinstallation de ad-renover:


Via l'Explorateur Windows, ouvre le répertoire C:\Program Files\Ad-remover.
Double-clique sur le fichier Uninstal.exe.

Supprime les fichiers : C:\Ad-report(date).log
Supprime ensuite le répertoire C:\Program Files\AD-Remover qui sera vide.



4)  Télécharge Lop S&D (de Angeldark et Eric71) sur le Bureau : 
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2 

.Double-cliques sur Lop S&D.exe pour lancer l'installation, 
.Puis double-cliques sur le raccourci Lop S&D présent sur le Bureau. 
.Séléctionnes la langue souhaitée , puis choisis l'Option 1 (Recherche) 
Le scan prend moins d'une minute. 
.A l'issue du scan, le bloc-notes va s'ouvrir avec le résultat de la recherche. 
.Enregistres le rapport LopR.txt sur le Bureau pour le retrouver facilement, sinon il sauvegardé à la racine de la partition système : C:\LopR.txt 

TUTO: http://bibou0007.com/outils-specifiques-f78/tutorial-lop-sd-t956.htm#11431

foufie · Answer

Bonjour, voila le premier rapport!!


------- LOGFILE OF AD-REMOVER 1.1.0.1 | ONLY XP/VISTA -------


Updated by C_XX on 30/01/2009 at 15:30

Start at: 11:33:22 | Dim 01/02/2009 | Microsoft® Windows XP™  SP3 (V5.1.2600)
Boot mode: Normal
Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Pc: NOM-79E1ACAE668 | User: mourier ( Current user is an administrator)
Drive(s): 
- C:\  (File System: NTFS)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\

--- Running Processes: 55

+--------------------| Boonty/Boonty Games Elements Found:

.
.

+--------------------| Eorezo Elements Found:

HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCU\SOFTWARE\EoRezo
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\SOFTWARE\EoRezo
HKLM\SOFTWARE\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKLM\SOFTWARE\Classes\AppID\EoRezoBHO.DLL
HKLM\SOFTWARE\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\SOFTWARE\Classes\EoRezoBHO.EoBho
HKLM\SOFTWARE\Classes\EoRezoBHO.EoBho.1
HKLM\SOFTWARE\Classes\TypeLib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKLM\SOFTWARE\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
HKLM\SOFTWARE\Classes\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Eoengine
.
C:\Program Files\EoRezo
C:\Program Files\EoRezo\EoAdv
C:\Program Files\EoRezo\lang
C:\Documents and Settings\mourier\Application Data\EoRezo
C:\Documents and Settings\mourier\Application Data\EoRezo\db
C:\Documents and Settings\mourier\Application Data\EoRezo\eoDesktop
C:\Documents and Settings\mourier\Cookies\mourier@eorezo[1].txt

+--------------------| Infected Poker Softwares Elements Found:

.
C:\Documents and Settings\mourier\Cookies\mourier@partygaming.122.2o7[1].txt
C:\Documents and Settings\mourier\Cookies\mourier@partypoker[2].txt

+--------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Found:

.
.

+--------------------| It's TV Elements Found:

HKCU\SOFTWARE\ItsLabel
HKLM\SOFTWARE\ItsLabel
"HKU\S-1-5-21-3146037061-2259463409-3037317202-1005\Software\ItsLabel"
.
C:\Documents and Settings\mourier\Application Data\ItsLabel
C:\Documents and Settings\mourier\Application Data\ItsLabel\ItsTV

+--------------------| Sweetim Elements Found:

.

+--------------------| Added Scan:

---- Mozilla FireFox Version  [Unable to get version] ----

ProfilePath: z2i3odgt.default
.
Prefs.js: Browser.Startup.HomePage:  "http://www.lo.st"
.
(Prefs.js) FOUND: user_pref("browser.startup.homepage", "http://www.lo.st");ces, you can visit the URL about:config
.
.
.
.

---- Internet Explorer Version 7.0.5730.11 ----

+--[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Search bar: hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
Search Page: hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
Start page: hxxp://www.google.fr/

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Search bar: hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start page: hxxp://go.microsoft.com/fwlink/?LinkId=69157

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: hxxp://www.lo.st/?tabs

+---------------------------------------------------------------------------+

[~3799 Bytes] - "C:\Ad-Report-Scan-01.02.2009.log"

End at: 11:39:36 | 01/02/2009
.
+--------------------| E.O.F - 83 Lines
.

jacques.gache · Answer

bonjour fais la supression et la désinstallation de ad-remover et puis le rapport lop S&D

foufie · Answer

bonsoir, voici le second rapport!!


------- LOGFILE OF AD-REMOVER 1.1.0.1 | ONLY XP/VISTA -------

Updated by C_XX on 30/01/2009 at 15:30

*** LIMITED TO ***

Boonty/BoontyGames
Eorezo
Infected Poker Softwares
FunWebProduct/MyWay/MyWebSearch
It's TV
Sweetim

******************

Start at: 21:10:37 | Dim 01/02/2009 | Microsoft® Windows XP™  SP3 (V5.1.2600)
Boot mode: Normal
Option: CLEAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Pc: NOM-79E1ACAE668 | User: mourier ( Current user is an administrator)
Drive(s): 
- C:\  (File System: NTFS)
System Drive: C:\
Windows Directory: C:\WINDOWS\
System Directory: C:\WINDOWS\System32\

--- Running Processes: 50

(!) ---- IE start pages reset

+--------------------| Boonty/Boonty Games Elements Deleted :

.
.

+--------------------| Eorezo Elements Deleted :

.

+--------------------| Infected Poker Softwares Elements Deleted :

.

+--------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Deleted :

.
.

+--------------------| It's TV Elements Deleted :

.

+--------------------| Sweetim Elements Deleted :

.

(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.


+--------------------| Added Scan :

---- Mozilla FireFox Version  [Unable to get version] ----

ProfilePath: z2i3odgt.default
.
.
.
.
.
.

---- Internet Explorer Version 7.0.5730.11 ----

+--[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start page: hxxp://fr.msn.com/

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: hxxp://ieframe.dll/tabswelcome.htm

+---------------------------------------------------------------------------+

[~2376 Bytes] - "C:\Ad-Report-Clean-01.02.2009.log"
[~3931 Bytes] - "C:\Ad-Report-Scan-01.02.2009.log"

End at: 21:18:44 | 01/02/2009
.
+--------------------| E.O.F - 62 Lines
.

jacques.gache · Answer

ok mets moi le rapport lop pour voir si il trouve ce que je pense , Merci

foufie · Answer

et la fin:


   --------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ )
   BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
   USER : mourier ( Administrator )
   BOOT : Normal boot
   Antivirus : Bitdefender Antivirus 8.0 (Activated)
   Firewall  : Sunbelt Personal Firewall 4.6.1861 T (Not Activated)
   C:\ (Local Disk) - NTFS - Total:227 Go (Free:169 Go)
   D:\ (CD or DVD)
   E:\ (USB)
   F:\ (USB)
   G:\ (USB)
   H:\ (USB)
   J:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 01/02/2009|21:29 )
 
   --------------------\  Listing des dossiers dans APPLIC~1

   [09/10/2006|14:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\AOL
   [09/10/2006|14:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
   [09/10/2006|14:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
   [09/10/2006|14:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [09/10/2006|14:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\SampleView
   [09/10/2006|14:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

   [29/01/2009|14:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\64 01 list multi
   [09/10/2006|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [21/12/2006|14:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
   [15/07/2008|13:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Astar Games
   [07/11/2008|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BitDefender
   [22/07/2008|13:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\blg
   [10/12/2006|13:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [28/07/2008|12:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EscapeTheMuseum
   [29/07/2008|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fashion Solitaire 1.2
   [22/07/2008|14:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fitn17
   [24/10/2008|11:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games
   [16/12/2007|16:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FloodLightGames
   [22/07/2008|10:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FreshGames
   [23/07/2008|14:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Go Go Gourmet
   [25/08/2008|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Gogii
   [27/01/2009|13:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [21/07/2008|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HiddenSecretsNightmare
   [13/08/2008|13:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft
   [04/01/2009|23:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [06/11/2008|20:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IM
   [06/11/2008|20:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IncrediMail
   [09/10/2006|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [13/08/2008|12:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\JollyBear
   [23/07/2008|13:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ludia
   [29/01/2009|19:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [04/01/2009|13:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [31/05/2008|13:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [01/11/2008|12:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
   [19/06/2008|20:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla
   [17/10/2008|14:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MysteryChronicles
   [15/12/2008|16:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NeptunesAdve
   [11/07/2008|11:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games
   [09/10/2006|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
   [07/04/2008|11:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
   [03/02/2007|14:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
   [03/11/2008|17:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
   [25/06/2007|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [28/07/2008|11:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
   [20/08/2008|11:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Slapdash Games
   [14/01/2007|12:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
   [09/11/2008|11:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpinTop Games
   [09/03/2007|18:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [16/12/2008|11:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [08/09/2008|12:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TheRace_dev
   [21/11/2008|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
   [09/10/2006|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VadeRetro
   [07/04/2008|12:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Valusoft
   [09/10/2006|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
   [06/01/2007|12:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [26/12/2006|18:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [31/05/2008|13:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [19/05/2008|13:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

   [09/10/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AOL
   [09/10/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [09/10/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
   [09/10/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [09/10/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
   [09/10/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

   [02/01/2009|17:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
   [30/11/2008|12:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\agi
   [30/12/2008|12:30] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
   [24/12/2008|12:29] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [28/09/2008|16:37] C:\DOCUME~1\mourier\APPLIC~1\123 Free Solitaire
   [26/12/2006|17:52] C:\DOCUME~1\mourier\APPLIC~1\Adobe
   [26/12/2006|17:53] C:\DOCUME~1\mourier\APPLIC~1\AdobeUM
   [06/05/2008|13:42] C:\DOCUME~1\mourier\APPLIC~1\Ahead
   [23/07/2008|11:32] C:\DOCUME~1\mourier\APPLIC~1\Alawar
   [16/12/2008|11:40] C:\DOCUME~1\mourier\APPLIC~1\Ancient Quest of Saqqarah__bfg
   [09/10/2006|14:02] C:\DOCUME~1\mourier\APPLIC~1\AOL
   [19/10/2008|18:06] C:\DOCUME~1\mourier\APPLIC~1\Big Fish Games
   [07/11/2008|18:22] C:\DOCUME~1\mourier\APPLIC~1\Bitdefender
   [22/07/2008|13:14] C:\DOCUME~1\mourier\APPLIC~1\blg
   [08/09/2008|12:14] C:\DOCUME~1\mourier\APPLIC~1\Boomzap
   [16/11/2008|17:16] C:\DOCUME~1\mourier\APPLIC~1\CamfrogWEB
   [28/07/2008|14:46] C:\DOCUME~1\mourier\APPLIC~1\cerasus.media
   [26/12/2006|21:55] C:\DOCUME~1\mourier\APPLIC~1\Creative
   [14/06/2007|12:27] C:\DOCUME~1\mourier\APPLIC~1\CyberLink
   [17/11/2008|14:05] C:\DOCUME~1\mourier\APPLIC~1\Dragon Altar Games
   [24/10/2008|11:25] C:\DOCUME~1\mourier\APPLIC~1\Flood Light Games
   [16/12/2007|16:16] C:\DOCUME~1\mourier\APPLIC~1\FloodLightGames
   [20/08/2008|13:39] C:\DOCUME~1\mourier\APPLIC~1\ForgottenRiddles2
   [15/07/2008|12:06] C:\DOCUME~1\mourier\APPLIC~1\Friday's games
   [19/05/2008|14:12] C:\DOCUME~1\mourier\APPLIC~1\Fuzzy Games
   [22/08/2008|19:50] C:\DOCUME~1\mourier\APPLIC~1\Gamelab
   [15/12/2008|15:43] C:\DOCUME~1\mourier\APPLIC~1\Games
   [25/02/2007|17:13] C:\DOCUME~1\mourier\APPLIC~1\Google
   [23/07/2008|12:53] C:\DOCUME~1\mourier\APPLIC~1\Home Sweet Home
   [14/01/2007|12:58] C:\DOCUME~1\mourier\APPLIC~1\HP
   [19/05/2008|14:20] C:\DOCUME~1\mourier\APPLIC~1\Identities
   [24/02/2007|15:45] C:\DOCUME~1\mourier\APPLIC~1\Leadertech
   [23/07/2008|13:20] C:\DOCUME~1\mourier\APPLIC~1\Ludia
   [26/12/2006|18:13] C:\DOCUME~1\mourier\APPLIC~1\Macromedia
   [29/01/2009|19:45] C:\DOCUME~1\mourier\APPLIC~1\Malwarebytes
   [03/10/2008|13:58] C:\DOCUME~1\mourier\APPLIC~1\Meridian93
   [02/06/2008|21:00] C:\DOCUME~1\mourier\APPLIC~1\Microsoft
   [19/06/2008|20:13] C:\DOCUME~1\mourier\APPLIC~1\Mozilla
   [26/12/2006|18:39] C:\DOCUME~1\mourier\APPLIC~1\MSNInstaller
   [30/07/2008|12:17] C:\DOCUME~1\mourier\APPLIC~1\My Games
   [31/08/2008|14:21] C:\DOCUME~1\mourier\APPLIC~1\MysteryStudio
   [29/01/2009|11:06] C:\DOCUME~1\mourier\APPLIC~1\Nurb dead bold
   [11/07/2008|11:42] C:\DOCUME~1\mourier\APPLIC~1\Oberon Games
   [10/12/2006|13:25] C:\DOCUME~1\mourier\APPLIC~1\OD2
   [10/01/2009|18:33] C:\DOCUME~1\mourier\APPLIC~1\OpenOffice.org
   [24/10/2008|21:23] C:\DOCUME~1\mourier\APPLIC~1\PetShowCraze
   [03/11/2008|17:14] C:\DOCUME~1\mourier\APPLIC~1\PlayFirst
   [30/08/2008|10:51] C:\DOCUME~1\mourier\APPLIC~1\PlayFirst_DressUpRush
   [24/10/2008|21:05] C:\DOCUME~1\mourier\APPLIC~1\Pogo Games
   [20/10/2008|13:16] C:\DOCUME~1\mourier\APPLIC~1\Reflexivev1005
   [09/10/2006|14:02] C:\DOCUME~1\mourier\APPLIC~1\SampleView
   [06/08/2008|11:34] C:\DOCUME~1\mourier\APPLIC~1\SecondLife
   [06/03/2008|20:43] C:\DOCUME~1\mourier\APPLIC~1\SecuROM
   [24/02/2007|15:45] C:\DOCUME~1\mourier\APPLIC~1\Sonic
   [15/12/2006|21:15] C:\DOCUME~1\mourier\APPLIC~1\Sports Interactive
   [04/08/2008|17:06] C:\DOCUME~1\mourier\APPLIC~1\SultansLabyrinth
   [10/12/2006|15:06] C:\DOCUME~1\mourier\APPLIC~1\Sun
   [19/06/2008|20:13] C:\DOCUME~1\mourier\APPLIC~1\Talkback
   [04/08/2008|11:53] C:\DOCUME~1\mourier\APPLIC~1\TheScruffs
   [31/07/2008|11:21] C:\DOCUME~1\mourier\APPLIC~1\Total Eclipse
   [06/08/2008|13:37] C:\DOCUME~1\mourier\APPLIC~1\UNOUndercover
   [26/01/2009|21:41] C:\DOCUME~1\mourier\APPLIC~1\uTorrent
   [28/12/2006|13:57] C:\DOCUME~1\mourier\APPLIC~1\VadeRetro
   [07/04/2008|12:40] C:\DOCUME~1\mourier\APPLIC~1\Valusoft
   [10/09/2008|12:48] C:\DOCUME~1\mourier\APPLIC~1\Viewpoint
   [10/12/2006|18:46] C:\DOCUME~1\mourier\APPLIC~1\vlc
   [06/11/2007|15:19] C:\DOCUME~1\mourier\APPLIC~1\WinRAR
   [09/10/2006|14:02] C:\DOCUME~1\mourier\APPLIC~1\You've Got Pictures Screensaver
   [19/05/2008|14:20] C:\DOCUME~1\mourier\APPLIC~1\Zylom

   [25/12/2008|11:35] C:\DOCUME~1\NETWOR~1\APPLIC~1\Adobe
   [15/12/2008|11:16] C:\DOCUME~1\NETWOR~1\APPLIC~1\Google
   [15/12/2008|00:53] C:\DOCUME~1\NETWOR~1\APPLIC~1\Macromedia
   [16/12/2008|17:29] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [29/01/2009 23:00][--a------] C:\WINDOWS	asks\At192.job
   [31/01/2009 22:00][--a------] C:\WINDOWS	asks\At191.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At190.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At189.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At188.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At187.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At186.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At185.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At184.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At180.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At181.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At182.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At183.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At177.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At176.job
   [30/01/2009 09:00][--a------] C:\WINDOWS	asks\At178.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At179.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At172.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At171.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At175.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At173.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At174.job
   [30/01/2009 00:27][--a------] C:\WINDOWS	asks\At169.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At170.job
   [31/01/2009 22:00][--a------] C:\WINDOWS	asks\At167.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At166.job
   [29/01/2009 23:00][--a------] C:\WINDOWS	asks\At168.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At163.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At162.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At161.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At164.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At165.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At159.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At158.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At160.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At156.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At155.job
   [30/01/2009 09:00][--a------] C:\WINDOWS	asks\At154.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At153.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At157.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At152.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At151.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At150.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At149.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At147.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At146.job
   [30/01/2009 00:45][--a------] C:\WINDOWS	asks\At145.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At148.job
   [29/01/2009 23:00][--a------] C:\WINDOWS	asks\At144.job
   [31/01/2009 22:00][--a------] C:\WINDOWS	asks\At143.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At142.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At140.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At141.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At139.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At138.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At137.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At135.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At136.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At134.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At133.job
   [30/01/2009 09:00][--a------] C:\WINDOWS	asks\At130.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At132.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At131.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At127.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At128.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At129.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At123.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At124.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At125.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At126.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At122.job
   [30/01/2009 00:12][--a------] C:\WINDOWS	asks\At121.job
   [29/01/2009 23:00][--a------] C:\WINDOWS	asks\At120.job
   [31/01/2009 22:00][--a------] C:\WINDOWS	asks\At119.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At118.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At117.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At115.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At116.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At114.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At112.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At113.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At111.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At110.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At109.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At107.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At108.job
   [30/01/2009 09:00][--a------] C:\WINDOWS	asks\At106.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At105.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At103.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At104.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At101.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At102.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At100.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At99.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At98.job
   [30/01/2009 00:07][--a------] C:\WINDOWS	asks\At97.job
   [31/01/2009 22:00][--a------] C:\WINDOWS	asks\At95.job
   [29/01/2009 23:00][--a------] C:\WINDOWS	asks\At96.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At94.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At92.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At93.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At91.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At89.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At90.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At88.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At87.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At85.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At84.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At83.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At86.job
   [30/01/2009 09:00][--a------] C:\WINDOWS	asks\At82.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At81.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At80.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At78.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At79.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At77.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At76.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At75.job
   [30/01/2009 00:15][--a------] C:\WINDOWS	asks\At73.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At74.job
   [29/01/2009 23:00][--a------] C:\WINDOWS	asks\At72.job
   [31/01/2009 22:00][--a------] C:\WINDOWS	asks\At71.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At69.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At68.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At67.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At70.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At66.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At65.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At64.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At63.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At62.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At60.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At59.job
   [30/01/2009 09:00][--a------] C:\WINDOWS	asks\At58.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At61.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At56.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At55.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At54.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At57.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At53.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At50.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At51.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At52.job
   [30/01/2009 00:42][--a------] C:\WINDOWS	asks\At49.job
   [01/02/2009 21:00][--ah-----] C:\WINDOWS	asks\B60652E59189FBD9.job
   [29/01/2009 23:00][--a------] C:\WINDOWS	asks\At48.job
   [31/01/2009 22:00][--a------] C:\WINDOWS	asks\At47.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At46.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At45.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At43.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At44.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At42.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At41.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At39.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At40.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At37.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At38.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At36.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At35.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At33.job
   [30/01/2009 09:00][--a------] C:\WINDOWS	asks\At34.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At30.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At32.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At31.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At28.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At29.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At27.job
   [30/01/2009 00:34][--a------] C:\WINDOWS	asks\At25.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At26.job
   [29/01/2009 23:00][--a------] C:\WINDOWS	asks\At24.job
   [31/01/2009 22:00][--a------] C:\WINDOWS	asks\At23.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At22.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At21.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At20.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At19.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At18.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At17.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At16.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At15.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At14.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At13.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At12.job
   [30/01/2009 09:00][--a------] C:\WINDOWS	asks\At10.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At9.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At11.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At8.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At7.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At4.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At6.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At5.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At3.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At2.job
   [30/01/2009 00:30][--a------] C:\WINDOWS	asks\At1.job
   [01/02/2009 21:25][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{4194C4B1-72FE-4AC0-A597-F537B8C0FA8A}.job
   [01/02/2009 12:36][--ah-----] C:\WINDOWS	asks\SA.DAT
   [24/03/2006 20:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   ( B60652E59189FBD9.job )=( c:\docume~1\mourier\applic~1
urbde~1\bowsplandog.exe )

   --------------------\  Listing des dossiers dans C:\Program Files

   [09/10/2006|14:03] C:\Program Files\Adobe
   [09/03/2007|18:42] C:\Program Files\Alwil Software
   [09/10/2006|14:02] C:\Program Files\AMD
   [21/07/2008|14:36] C:\Program Files\AOL 9.0
   [09/10/2006|14:03] C:\Program Files\AOL Compagnon
   [22/07/2008|11:43] C:\Program Files\Baby Luv
   [16/11/2008|13:41] C:\Program Files\CFWebAdvancedU
   [29/01/2009|11:23] C:\Program Files\Circle Developement
   [30/11/2008|13:41] C:\Program Files\Common Files
   [21/07/2008|14:36] C:\Program Files\Creative
   [09/10/2006|14:03] C:\Program Files\CyberLink
   [29/01/2009|11:24] C:\Program Files\DAEMON Tools
   [29/01/2009|11:24] C:\Program Files\DaemonTools_WhenUSave_Installer
   [04/08/2008|11:33] C:\Program Files\Delicious 2 Deluxe
   [02/10/2008|09:30] C:\Program Files\directx
   [31/12/2008|11:03] C:\Program Files\EA SPORTS
   [27/07/2008|12:47] C:\Program Files\eMule
   [01/02/2009|12:55] C:\Program Files\eMule2
   [31/07/2008|11:50] C:\Program Files\Fab Fashion
   [31/07/2008|13:33] C:\Program Files\Fashion Boutique
   [29/07/2008|11:38] C:\Program Files\Fashion Dash
   [29/07/2008|11:30] C:\Program Files\Fashion Solitaire
   [16/12/2008|16:55] C:\Program Files\Fichiers communs
   [09/11/2008|11:38] C:\Program Files\GamesBar
   [13/07/2007|18:28] C:\Program Files\GOA
   [27/01/2009|14:03] C:\Program Files\Google
   [09/10/2006|14:05] C:\Program Files\Goto Software
   [14/01/2007|12:46] C:\Program Files\Hewlett-Packard
   [14/01/2007|12:47] C:\Program Files\HP
   [25/11/2007|14:03] C:\Program Files\Ihsv
   [30/12/2008|22:13] C:\Program Files\InstallShield Installation Information
   [10/12/2008|23:08] C:\Program Files\Internet Explorer
   [28/09/2008|11:16] C:\Program Files\Java
   [31/07/2008|11:56] C:\Program Files\Jojos Fashion Show
   [10/01/2009|18:29] C:\Program Files\JRE
   [09/10/2006|14:06] C:\Program Files\Learn2.com
   [11/08/2008|11:40] C:\Program Files\Little Shop Road Trip
   [20/10/2008|14:41] C:\Program Files\Magic Encyclopedia
   [29/01/2009|22:22] C:\Program Files\Malwarebytes' Anti-Malware
   [28/09/2008|10:52] C:\Program Files\Messenger
   [04/01/2009|11:09] C:\Program Files\Messenger Plus! Live
   [01/04/2008|21:15] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [09/10/2006|14:06] C:\Program Files\microsoft frontpage
   [10/01/2009|12:18] C:\Program Files\Microsoft Office
   [15/12/2006|15:09] C:\Program Files\Monte Cristo
   [23/11/2008|13:06] C:\Program Files\Mortimer Beckett And The Secrets Of Spooky Manor
   [28/09/2008|10:48] C:\Program Files\Movie Maker
   [10/01/2009|12:16] C:\Program Files\MSECache
   [26/12/2006|19:02] C:\Program Files\MSN
   [21/07/2008|14:36] C:\Program Files\MSN Games
   [09/10/2006|14:06] C:\Program Files\MSN Gaming Zone
   [13/11/2008|17:32] C:\Program Files\MSXML 4.0
   [23/12/2006|18:14] C:\Program Files\Nero
   [28/09/2008|10:43] C:\Program Files\NetMeeting
   [04/01/2009|11:10] C:\Program Files\Nurb dead bold
   [09/11/2008|11:37] C:\Program Files\Oberon Media
   [09/10/2006|14:07] C:\Program Files\Online Services
   [10/01/2009|18:29] C:\Program Files\OpenOffice.org 3
   [24/10/2008|11:24] C:\Program Files\orange
   [28/09/2008|10:43] C:\Program Files\Outlook Express
   [29/01/2009|11:44] C:\Program Files\Oval Office
   [10/01/2009|12:15] C:\Program Files\PhotoFiltre Studio
   [31/08/2008|15:57] C:\Program Files\PlayFirst
   [23/08/2008|11:44] C:\Program Files\Pogo FR
   [20/08/2008|14:50] C:\Program Files\Pogo Jeux
   [09/10/2006|14:07] C:\Program Files\QuickTime
   [21/05/2008|15:05] C:\Program Files\Real
   [02/11/2008|15:08] C:\Program Files\RealArcade
   [09/10/2006|14:07] C:\Program Files\Realtek
   [21/07/2008|13:33] C:\Program Files\ReflexiveArcade
   [11/08/2008|11:51] C:\Program Files\Sallys Spa
   [11/12/2006|19:58] C:\Program Files\Samsung
   [09/10/2006|14:07] C:\Program Files\Services en ligne
   [11/08/2008|11:41] C:\Program Files\Shopping Blocks
   [26/12/2006|21:48] C:\Program Files\SightSpeed
   [16/12/2008|16:55] C:\Program Files\Skype
   [07/11/2008|18:20] C:\Program Files\Softwin
   [09/10/2006|14:08] C:\Program Files\Sonic
   [15/12/2006|21:09] C:\Program Files\Sports Interactive
   [29/01/2009|21:59] C:\Program Files\Sunbelt Software
   [08/09/2008|08:21] C:\Program Files\The Great Chocolate Chase
   [23/10/2008|16:58] C:\Program Files\The Mystery Of The Crystal Portal
   [31/01/2009|18:46] C:\Program Files\Trend Micro
   [30/12/2008|22:13] C:\Program Files\Ubi soft
   [14/12/2008|22:18] C:\Program Files\uTorrent
   [10/12/2006|18:45] C:\Program Files\VideoLAN
   [09/10/2006|14:08] C:\Program Files\Viewpoint
   [31/05/2008|13:52] C:\Program Files\Windows Live
   [26/12/2006|18:20] C:\Program Files\Windows Live Toolbar
   [09/01/2007|20:50] C:\Program Files\Windows Media Connect 2
   [02/10/2008|09:51] C:\Program Files\Windows Media Player
   [28/09/2008|10:43] C:\Program Files\Windows NT
   [09/10/2006|14:08] C:\Program Files\Windows Plus
   [18/01/2009|12:42] C:\Program Files\WinRAR
   [09/10/2006|14:08] C:\Program Files\xerox

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [09/10/2006|14:03] C:\Program Files\Fichiers communs\Adobe
   [23/12/2006|18:14] C:\Program Files\Fichiers communs\Ahead
   [09/10/2006|14:03] C:\Program Files\Fichiers communs\AOL
   [21/07/2008|14:36] C:\Program Files\Fichiers communs\aolshare
   [14/01/2007|12:46] C:\Program Files\Fichiers communs\Hewlett-Packard
   [14/01/2007|12:50] C:\Program Files\Fichiers communs\HP
   [20/06/2008|11:52] C:\Program Files\Fichiers communs\InstallShield
   [09/10/2006|14:04] C:\Program Files\Fichiers communs\Java
   [10/01/2009|12:18] C:\Program Files\Fichiers communs\Microsoft Shared
   [09/10/2006|14:04] C:\Program Files\Fichiers communs\MSSoap
   [09/10/2006|14:04] C:\Program Files\Fichiers communs\Nullsoft
   [24/10/2008|11:24] C:\Program Files\Fichiers communs\Oberon Media
   [21/05/2008|15:05] C:\Program Files\Fichiers communs\Real
   [24/08/2006|22:01] C:\Program Files\Fichiers communs\Services
   [07/11/2008|18:21] C:\Program Files\Fichiers communs\Softwin
   [14/01/2007|12:50] C:\Program Files\Fichiers communs\Sonic Shared
   [09/10/2006|14:04] C:\Program Files\Fichiers communs\SpeechEngines
   [09/10/2006|14:04] C:\Program Files\Fichiers communs\SureThing Shared
   [09/03/2007|18:39] C:\Program Files\Fichiers communs\Symantec Shared
   [28/09/2008|10:43] C:\Program Files\Fichiers communs\System
   [09/10/2006|14:05] C:\Program Files\Fichiers communs\TiVo Shared
   [31/05/2008|13:51] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   --------------------\  Process

   ( 49 Processes )

   iexplore.exe ~ [PID:1072]

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\DOCUME~1\mourier\APPLIC~1
urbde~1
   C:\Program Files
urbde~1
   C:\Program Files\Circle Developement
   C:\DOCUME~1\mourier\Cookies\mourier@advertising[2].txt
   C:\WINDOWS\Tasks\B60652E59189FBD9.job
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
   "HOPE DELETE"="C:\DOCUME~1\mourier\APPLIC~1\NURBDE~1\Default Cash 2.exe"

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-02-01 21:33:56
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 46
 
   --------------------\  Recherche d'autres infections

   C:\WINDOWS\Tasks\At1.job
   C:\WINDOWS\Tasks\At10.job
   C:\WINDOWS\Tasks\At11.job
   C:\WINDOWS\Tasks\At12.job
   C:\WINDOWS\Tasks\At13.job
   C:\WINDOWS\Tasks\At14.job
   C:\WINDOWS\Tasks\At15.job
   C:\WINDOWS\Tasks\At16.job
   C:\WINDOWS\Tasks\At17.job
   C:\WINDOWS\Tasks\At18.job
   C:\WINDOWS\Tasks\At19.job
   C:\WINDOWS\Tasks\At2.job
   C:\WINDOWS\Tasks\At20.job
   C:\WINDOWS\Tasks\At21.job
   C:\WINDOWS\Tasks\At22.job
   C:\WINDOWS\Tasks\At23.job
   C:\WINDOWS\Tasks\At24.job
   C:\WINDOWS\Tasks\At25.job
   C:\WINDOWS\Tasks\At26.job
   C:\WINDOWS\Tasks\At27.job
   C:\WINDOWS\Tasks\At28.job
   C:\WINDOWS\Tasks\At29.job
   C:\WINDOWS\Tasks\At3.job
   C:\WINDOWS\Tasks\At30.job
   C:\WINDOWS\Tasks\At31.job
   C:\WINDOWS\Tasks\At32.job
   C:\WINDOWS\Tasks\At33.job
   C:\WINDOWS\Tasks\At34.job
   C:\WINDOWS\Tasks\At35.job
   C:\WINDOWS\Tasks\At36.job
   C:\WINDOWS\Tasks\At37.job
   C:\WINDOWS\Tasks\At38.job
   C:\WINDOWS\Tasks\At39.job
   C:\WINDOWS\Tasks\At4.job
   C:\WINDOWS\Tasks\At40.job
   C:\WINDOWS\Tasks\At41.job
   C:\WINDOWS\Tasks\At42.job
   C:\WINDOWS\Tasks\At43.job
   C:\WINDOWS\Tasks\At44.job
   C:\WINDOWS\Tasks\At45.job
   C:\WINDOWS\Tasks\At46.job
   C:\WINDOWS\Tasks\At47.job
   C:\WINDOWS\Tasks\At48.job
   C:\WINDOWS\Tasks\At49.job
   C:\WINDOWS\Tasks\At5.job
   C:\WINDOWS\Tasks\At50.job
   C:\WINDOWS\Tasks\At51.job
   C:\WINDOWS\Tasks\At52.job
   C:\WINDOWS\Tasks\At53.job
   C:\WINDOWS\Tasks\At54.job
   C:\WINDOWS\Tasks\At55.job
   C:\WINDOWS\Tasks\At56.job
   C:\WINDOWS\Tasks\At57.job
   C:\WINDOWS\Tasks\At58.job
   C:\WINDOWS\Tasks\At59.job
   C:\WINDOWS\Tasks\At6.job
   C:\WINDOWS\Tasks\At60.job
   C:\WINDOWS\Tasks\At61.job
   C:\WINDOWS\Tasks\At62.job
   C:\WINDOWS\Tasks\At63.job
   C:\WINDOWS\Tasks\At64.job
   C:\WINDOWS\Tasks\At65.job
   C:\WINDOWS\Tasks\At66.job
   C:\WINDOWS\Tasks\At67.job
   C:\WINDOWS\Tasks\At68.job
   C:\WINDOWS\Tasks\At69.job
   C:\WINDOWS\Tasks\At7.job
   C:\WINDOWS\Tasks\At70.job
   C:\WINDOWS\Tasks\At71.job
   C:\WINDOWS\Tasks\At72.job
   C:\WINDOWS\Tasks\At73.job
   C:\WINDOWS\Tasks\At74.job
   C:\WINDOWS\Tasks\At75.job
   C:\WINDOWS\Tasks\At76.job
   C:\WINDOWS\Tasks\At77.job
   C:\WINDOWS\Tasks\At78.job
   C:\WINDOWS\Tasks\At79.job
   C:\WINDOWS\Tasks\At8.job
   C:\WINDOWS\Tasks\At80.job
   C:\WINDOWS\Tasks\At81.job
   C:\WINDOWS\Tasks\At82.job
   C:\WINDOWS\Tasks\At83.job
   C:\WINDOWS\Tasks\At84.job
   C:\WINDOWS\Tasks\At85.job
   C:\WINDOWS\Tasks\At86.job
   C:\WINDOWS\Tasks\At87.job
   C:\WINDOWS\Tasks\At88.job
   C:\WINDOWS\Tasks\At89.job
   C:\WINDOWS\Tasks\At9.job
   C:\WINDOWS\Tasks\At90.job
   C:\WINDOWS\Tasks\At91.job
   C:\WINDOWS\Tasks\At92.job
   C:\WINDOWS\Tasks\At93.job
   C:\WINDOWS\Tasks\At94.job
   C:\WINDOWS\Tasks\At95.job
   C:\WINDOWS\Tasks\At96.job
   C:\WINDOWS\Tasks\At97.job
   C:\WINDOWS\Tasks\At98.job
   C:\WINDOWS\Tasks\At99.job

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\mourier\Mes documents\Music t‚l‚charger\Eminem - Crack A Bottle Feat Dr Dre & 50 Cent-MIXFIEND-2009(1).mp3
   C:\DOCUME~1\mourier\Recent\Football_Manager_2008.CRACK-Hassanoul.lnk


   [F:4][D:28]-> C:\DOCUME~1\mourier\LOCALS~1\Temp
   [F:137][D:0]-> C:\DOCUME~1\mourier\Cookies
   [F:157][D:48]-> C:\DOCUME~1\mourier\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 01/02/2009|21:36 - Option : [1]

   --------------------\  Fin du rapport a 21:36:07

jacques.gache · Answer

ok , c'est bien se que je pensais tu vas relancer lop et option 2 tu postes le rapport , et puis tu passeras smitfraudfix, merci

1) Relance Lop S&D 
· Choisis cette fois ci l'Option 2 ( Suppression ) 
· Ne ferme pas la fenêtre lors de la suppression ! 
· Poste le rapport généré ( C:\lopR.txt ) 

( Si le Bureau ne réapparît pas presse Ctrl + Alt + Suppr , Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide ) 



2)  Ouvre ce lien  (merci a S!RI pour ce programme). http://siri.urz.free.fr/Fix/SmitfraudFix.php 

le mieux serait que tu désactives tes protections résidente "anti-virus et anti-spyware" 
le temps d'installer smitfraudfix et de faire l'analyse.

et télécharge SmitfraudFix.exe.

Regarde le tuto

Double-clique sur SmitfraudFix.exe (Sous Vista, il faut cliquer droit sur SmitfraudFix et choisir Exécuter en tant qu'administrateur). 

Exécute le en choisissant l’option 1

il va générer un rapport

Copie/colle le sur le poste stp.

Process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus, ect...) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus. 


une petites démo en vidéo :http://pagesperso-orange.fr/rginformatique/section%20virus/smitfraudfix.htm

geoffrey5 · Answer

Bonsoir,

juste de passage pour une remarque...

Jacques.gaches : je ne sais pas si tu as remarqué le rapport de suppression d'AD-Remover mais les fichiers supprimés n'apparaîssent pas  :s

http://www.commentcamarche.net/forum/affich 10770639 antivirus 360 supprimer mais pti probla me#9

jacques.gache · Answer

geoffrey5 bonsoir, oui j'avais vu et je ne vois pas ce qui c'est passé lol  c'est pour cela que je passe smitfraudfix je pense qu'il devrait réglé le problème de Eorezo et puis je referais passé ad-remover pour le reste je pense que cette salopperie est en train de nous déjouer ad-remover j'ai déjà eu un cas comme ça et j'ai passé malwarebytes et après ad-remover , à suivre lol!!!

geoffrey5 · Answer

Ok lol... Je m'en doutais un peu que tu ai remarqué l'anormalité du rapport mais je tenais quand même te le signaler au cas où tu serais passer à côté  ;-)

Oui SmitfraudFix devrait arranger ce problème d'Antivirus 360... Cette infection n'est pas encore très courante par rapport à ses grands frères mais j'ai vu dans le changelog de SmitfraudFix il y a quelques semaines qu'il était mis à jour pour le supprimer..

Bonne continuation  ;-)

@+

foufie · Answer

Voila le rapport de lop!!   


--------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ )
   BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
   USER : mourier ( Administrator )
   BOOT : Normal boot
   Antivirus : Bitdefender Antivirus 8.0 (Activated)
   Firewall  : Sunbelt Personal Firewall 4.6.1861 T (Activated)
   C:\ (Local Disk) - NTFS - Total:227 Go (Free:169 Go)
   D:\ (CD or DVD)
   E:\ (USB)
   F:\ (USB)
   G:\ (USB)
   H:\ (USB)
   J:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [2] ( 02/02/2009| 9:09 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\DOCUME~1\mourier\Cookies\mourier@advertising[2].txt
   Supprime! - C:\WINDOWS\Tasks\B60652E59189FBD9.job 
   Supprime! - C:\DOCUME~1\mourier\APPLIC~1
urbde~1
   Supprime! - C:\Program Files
urbde~1
   Supprime! - C:\Program Files\Circle Developement
 
   \\\\\\\\\\\\\\\ 

   Supprime! - C:\Program Files\Viewpoint
   Supprime! - C:\DOCUME~1\mourier\APPLIC~1\Viewpoint
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
 
   \\\\\\\\\\\\\\\

 
   --------------------\  Listing des dossiers dans APPLIC~1

   [09/10/2006|14:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\AOL
   [09/10/2006|14:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
   [09/10/2006|14:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
   [09/10/2006|14:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [09/10/2006|14:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\SampleView
   [09/10/2006|14:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

   [29/01/2009|14:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\64 01 list multi
   [09/10/2006|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [21/12/2006|14:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
   [15/07/2008|13:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Astar Games
   [07/11/2008|18:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BitDefender
   [22/07/2008|13:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\blg
   [10/12/2006|13:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [28/07/2008|12:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EscapeTheMuseum
   [29/07/2008|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fashion Solitaire 1.2
   [22/07/2008|14:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fitn17
   [24/10/2008|11:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Flood Light Games
   [16/12/2007|16:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FloodLightGames
   [22/07/2008|10:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FreshGames
   [23/07/2008|14:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Go Go Gourmet
   [25/08/2008|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Gogii
   [27/01/2009|13:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [21/07/2008|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HiddenSecretsNightmare
   [13/08/2008|13:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft
   [04/01/2009|23:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [06/11/2008|20:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IM
   [06/11/2008|20:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IncrediMail
   [09/10/2006|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
   [13/08/2008|12:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\JollyBear
   [23/07/2008|13:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ludia
   [29/01/2009|19:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [04/01/2009|13:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [31/05/2008|13:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [01/11/2008|12:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
   [19/06/2008|20:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mozilla
   [17/10/2008|14:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MysteryChronicles
   [15/12/2008|16:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NeptunesAdve
   [11/07/2008|11:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Oberon Games
   [09/10/2006|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
   [07/04/2008|11:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
   [03/02/2007|14:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
   [03/11/2008|17:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
   [25/06/2007|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [28/07/2008|11:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
   [20/08/2008|11:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Slapdash Games
   [14/01/2007|12:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
   [09/11/2008|11:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpinTop Games
   [09/03/2007|18:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [16/12/2008|11:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [08/09/2008|12:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TheRace_dev
   [21/11/2008|21:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
   [09/10/2006|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VadeRetro
   [07/04/2008|12:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Valusoft
   [06/01/2007|12:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [26/12/2006|18:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [31/05/2008|13:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [19/05/2008|13:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

   [09/10/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AOL
   [09/10/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [09/10/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
   [09/10/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [09/10/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
   [09/10/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

   [02/01/2009|17:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
   [30/11/2008|12:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\agi
   [30/12/2008|12:30] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
   [24/12/2008|12:29] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [28/09/2008|16:37] C:\DOCUME~1\mourier\APPLIC~1\123 Free Solitaire
   [26/12/2006|17:52] C:\DOCUME~1\mourier\APPLIC~1\Adobe
   [26/12/2006|17:53] C:\DOCUME~1\mourier\APPLIC~1\AdobeUM
   [06/05/2008|13:42] C:\DOCUME~1\mourier\APPLIC~1\Ahead
   [23/07/2008|11:32] C:\DOCUME~1\mourier\APPLIC~1\Alawar
   [16/12/2008|11:40] C:\DOCUME~1\mourier\APPLIC~1\Ancient Quest of Saqqarah__bfg
   [09/10/2006|14:02] C:\DOCUME~1\mourier\APPLIC~1\AOL
   [19/10/2008|18:06] C:\DOCUME~1\mourier\APPLIC~1\Big Fish Games
   [07/11/2008|18:22] C:\DOCUME~1\mourier\APPLIC~1\Bitdefender
   [22/07/2008|13:14] C:\DOCUME~1\mourier\APPLIC~1\blg
   [08/09/2008|12:14] C:\DOCUME~1\mourier\APPLIC~1\Boomzap
   [16/11/2008|17:16] C:\DOCUME~1\mourier\APPLIC~1\CamfrogWEB
   [28/07/2008|14:46] C:\DOCUME~1\mourier\APPLIC~1\cerasus.media
   [26/12/2006|21:55] C:\DOCUME~1\mourier\APPLIC~1\Creative
   [14/06/2007|12:27] C:\DOCUME~1\mourier\APPLIC~1\CyberLink
   [17/11/2008|14:05] C:\DOCUME~1\mourier\APPLIC~1\Dragon Altar Games
   [24/10/2008|11:25] C:\DOCUME~1\mourier\APPLIC~1\Flood Light Games
   [16/12/2007|16:16] C:\DOCUME~1\mourier\APPLIC~1\FloodLightGames
   [20/08/2008|13:39] C:\DOCUME~1\mourier\APPLIC~1\ForgottenRiddles2
   [15/07/2008|12:06] C:\DOCUME~1\mourier\APPLIC~1\Friday's games
   [19/05/2008|14:12] C:\DOCUME~1\mourier\APPLIC~1\Fuzzy Games
   [22/08/2008|19:50] C:\DOCUME~1\mourier\APPLIC~1\Gamelab
   [15/12/2008|15:43] C:\DOCUME~1\mourier\APPLIC~1\Games
   [25/02/2007|17:13] C:\DOCUME~1\mourier\APPLIC~1\Google
   [23/07/2008|12:53] C:\DOCUME~1\mourier\APPLIC~1\Home Sweet Home
   [14/01/2007|12:58] C:\DOCUME~1\mourier\APPLIC~1\HP
   [19/05/2008|14:20] C:\DOCUME~1\mourier\APPLIC~1\Identities
   [24/02/2007|15:45] C:\DOCUME~1\mourier\APPLIC~1\Leadertech
   [23/07/2008|13:20] C:\DOCUME~1\mourier\APPLIC~1\Ludia
   [26/12/2006|18:13] C:\DOCUME~1\mourier\APPLIC~1\Macromedia
   [29/01/2009|19:45] C:\DOCUME~1\mourier\APPLIC~1\Malwarebytes
   [03/10/2008|13:58] C:\DOCUME~1\mourier\APPLIC~1\Meridian93
   [02/06/2008|21:00] C:\DOCUME~1\mourier\APPLIC~1\Microsoft
   [19/06/2008|20:13] C:\DOCUME~1\mourier\APPLIC~1\Mozilla
   [26/12/2006|18:39] C:\DOCUME~1\mourier\APPLIC~1\MSNInstaller
   [30/07/2008|12:17] C:\DOCUME~1\mourier\APPLIC~1\My Games
   [31/08/2008|14:21] C:\DOCUME~1\mourier\APPLIC~1\MysteryStudio
   [11/07/2008|11:42] C:\DOCUME~1\mourier\APPLIC~1\Oberon Games
   [10/12/2006|13:25] C:\DOCUME~1\mourier\APPLIC~1\OD2
   [10/01/2009|18:33] C:\DOCUME~1\mourier\APPLIC~1\OpenOffice.org
   [24/10/2008|21:23] C:\DOCUME~1\mourier\APPLIC~1\PetShowCraze
   [03/11/2008|17:14] C:\DOCUME~1\mourier\APPLIC~1\PlayFirst
   [30/08/2008|10:51] C:\DOCUME~1\mourier\APPLIC~1\PlayFirst_DressUpRush
   [24/10/2008|21:05] C:\DOCUME~1\mourier\APPLIC~1\Pogo Games
   [20/10/2008|13:16] C:\DOCUME~1\mourier\APPLIC~1\Reflexivev1005
   [09/10/2006|14:02] C:\DOCUME~1\mourier\APPLIC~1\SampleView
   [06/08/2008|11:34] C:\DOCUME~1\mourier\APPLIC~1\SecondLife
   [06/03/2008|20:43] C:\DOCUME~1\mourier\APPLIC~1\SecuROM
   [24/02/2007|15:45] C:\DOCUME~1\mourier\APPLIC~1\Sonic
   [15/12/2006|21:15] C:\DOCUME~1\mourier\APPLIC~1\Sports Interactive
   [04/08/2008|17:06] C:\DOCUME~1\mourier\APPLIC~1\SultansLabyrinth
   [10/12/2006|15:06] C:\DOCUME~1\mourier\APPLIC~1\Sun
   [19/06/2008|20:13] C:\DOCUME~1\mourier\APPLIC~1\Talkback
   [04/08/2008|11:53] C:\DOCUME~1\mourier\APPLIC~1\TheScruffs
   [31/07/2008|11:21] C:\DOCUME~1\mourier\APPLIC~1\Total Eclipse
   [06/08/2008|13:37] C:\DOCUME~1\mourier\APPLIC~1\UNOUndercover
   [26/01/2009|21:41] C:\DOCUME~1\mourier\APPLIC~1\uTorrent
   [28/12/2006|13:57] C:\DOCUME~1\mourier\APPLIC~1\VadeRetro
   [07/04/2008|12:40] C:\DOCUME~1\mourier\APPLIC~1\Valusoft
   [10/12/2006|18:46] C:\DOCUME~1\mourier\APPLIC~1\vlc
   [06/11/2007|15:19] C:\DOCUME~1\mourier\APPLIC~1\WinRAR
   [09/10/2006|14:02] C:\DOCUME~1\mourier\APPLIC~1\You've Got Pictures Screensaver
   [19/05/2008|14:20] C:\DOCUME~1\mourier\APPLIC~1\Zylom

   [25/12/2008|11:35] C:\DOCUME~1\NETWOR~1\APPLIC~1\Adobe
   [15/12/2008|11:16] C:\DOCUME~1\NETWOR~1\APPLIC~1\Google
   [15/12/2008|00:53] C:\DOCUME~1\NETWOR~1\APPLIC~1\Macromedia
   [16/12/2008|17:29] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [01/02/2009 23:00][--a------] C:\WINDOWS	asks\At192.job
   [01/02/2009 22:00][--a------] C:\WINDOWS	asks\At191.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At190.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At189.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At188.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At186.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At187.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At185.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At184.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At181.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At180.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At182.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At183.job
   [02/02/2009 09:00][--a------] C:\WINDOWS	asks\At178.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At177.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At179.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At176.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At173.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At172.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At171.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At174.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At175.job
   [30/01/2009 00:27][--a------] C:\WINDOWS	asks\At169.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At170.job
   [01/02/2009 22:00][--a------] C:\WINDOWS	asks\At167.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At166.job
   [01/02/2009 23:00][--a------] C:\WINDOWS	asks\At168.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At165.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At164.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At163.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At162.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At161.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At159.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At158.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At160.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At156.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At155.job
   [02/02/2009 09:00][--a------] C:\WINDOWS	asks\At154.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At153.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At157.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At152.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At151.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At150.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At149.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At147.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At146.job
   [30/01/2009 00:45][--a------] C:\WINDOWS	asks\At145.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At148.job
   [01/02/2009 23:00][--a------] C:\WINDOWS	asks\At144.job
   [01/02/2009 22:00][--a------] C:\WINDOWS	asks\At143.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At142.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At140.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At141.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At139.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At138.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At137.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At135.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At136.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At134.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At133.job
   [02/02/2009 09:00][--a------] C:\WINDOWS	asks\At130.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At132.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At131.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At127.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At128.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At129.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At123.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At124.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At125.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At126.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At122.job
   [30/01/2009 00:12][--a------] C:\WINDOWS	asks\At121.job
   [01/02/2009 23:00][--a------] C:\WINDOWS	asks\At120.job
   [01/02/2009 22:00][--a------] C:\WINDOWS	asks\At119.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At118.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At117.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At115.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At116.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At114.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At112.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At113.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At111.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At110.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At109.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At107.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At108.job
   [02/02/2009 09:00][--a------] C:\WINDOWS	asks\At106.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At105.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At103.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At104.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At102.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At101.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At100.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At99.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At98.job
   [30/01/2009 00:07][--a------] C:\WINDOWS	asks\At97.job
   [01/02/2009 22:00][--a------] C:\WINDOWS	asks\At95.job
   [01/02/2009 23:00][--a------] C:\WINDOWS	asks\At96.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At94.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At93.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At92.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At91.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At89.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At90.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At88.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At87.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At85.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At84.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At83.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At86.job
   [02/02/2009 09:00][--a------] C:\WINDOWS	asks\At82.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At81.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At80.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At78.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At79.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At77.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At76.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At75.job
   [30/01/2009 00:15][--a------] C:\WINDOWS	asks\At73.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At74.job
   [01/02/2009 23:00][--a------] C:\WINDOWS	asks\At72.job
   [01/02/2009 22:00][--a------] C:\WINDOWS	asks\At71.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At69.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At68.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At67.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At70.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At66.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At65.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At64.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At63.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At62.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At60.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At59.job
   [02/02/2009 09:00][--a------] C:\WINDOWS	asks\At58.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At61.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At56.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At55.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At54.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At57.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At53.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At50.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At51.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At52.job
   [30/01/2009 00:42][--a------] C:\WINDOWS	asks\At49.job
   [01/02/2009 23:00][--a------] C:\WINDOWS	asks\At48.job
   [01/02/2009 22:00][--a------] C:\WINDOWS	asks\At47.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At45.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At46.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At44.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At43.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At42.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At41.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At40.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At39.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At38.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At37.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At36.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At35.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At33.job
   [02/02/2009 09:00][--a------] C:\WINDOWS	asks\At34.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At31.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At32.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At30.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At29.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At28.job
   [30/01/2009 00:34][--a------] C:\WINDOWS	asks\At25.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At26.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At27.job
   [01/02/2009 23:00][--a------] C:\WINDOWS	asks\At24.job
   [01/02/2009 22:00][--a------] C:\WINDOWS	asks\At23.job
   [01/02/2009 21:00][--a------] C:\WINDOWS	asks\At22.job
   [01/02/2009 20:00][--a------] C:\WINDOWS	asks\At21.job
   [01/02/2009 18:00][--a------] C:\WINDOWS	asks\At19.job
   [01/02/2009 19:00][--a------] C:\WINDOWS	asks\At20.job
   [01/02/2009 17:00][--a------] C:\WINDOWS	asks\At18.job
   [01/02/2009 16:00][--a------] C:\WINDOWS	asks\At17.job
   [01/02/2009 14:00][--a------] C:\WINDOWS	asks\At15.job
   [01/02/2009 15:00][--a------] C:\WINDOWS	asks\At16.job
   [01/02/2009 13:00][--a------] C:\WINDOWS	asks\At14.job
   [31/01/2009 11:00][--a------] C:\WINDOWS	asks\At12.job
   [01/02/2009 12:00][--a------] C:\WINDOWS	asks\At13.job
   [31/01/2009 10:00][--a------] C:\WINDOWS	asks\At11.job
   [02/02/2009 09:00][--a------] C:\WINDOWS	asks\At10.job
   [30/01/2009 08:00][--a------] C:\WINDOWS	asks\At9.job
   [30/01/2009 06:00][--a------] C:\WINDOWS	asks\At7.job
   [30/01/2009 07:00][--a------] C:\WINDOWS	asks\At8.job
   [30/01/2009 05:00][--a------] C:\WINDOWS	asks\At6.job
   [30/01/2009 03:00][--a------] C:\WINDOWS	asks\At4.job
   [30/01/2009 04:00][--a------] C:\WINDOWS	asks\At5.job
   [30/01/2009 01:00][--a------] C:\WINDOWS	asks\At2.job
   [30/01/2009 02:00][--a------] C:\WINDOWS	asks\At3.job
   [30/01/2009 00:30][--a------] C:\WINDOWS	asks\At1.job
   [02/02/2009 09:05][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{4194C4B1-72FE-4AC0-A597-F537B8C0FA8A}.job
   [02/02/2009 08:55][--ah-----] C:\WINDOWS	asks\SA.DAT
   [24/03/2006 20:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [09/10/2006|14:03] C:\Program Files\Adobe
   [09/03/2007|18:42] C:\Program Files\Alwil Software
   [09/10/2006|14:02] C:\Program Files\AMD
   [21/07/2008|14:36] C:\Program Files\AOL 9.0
   [09/10/2006|14:03] C:\Program Files\AOL Compagnon
   [22/07/2008|11:43] C:\Program Files\Baby Luv
   [16/11/2008|13:41] C:\Program Files\CFWebAdvancedU
   [30/11/2008|13:41] C:\Program Files\Common Files
   [21/07/2008|14:36] C:\Program Files\Creative
   [09/10/2006|14:03] C:\Program Files\CyberLink
   [29/01/2009|11:24] C:\Program Files\DAEMON Tools
   [29/01/2009|11:24] C:\Program Files\DaemonTools_WhenUSave_Installer
   [04/08/2008|11:33] C:\Program Files\Delicious 2 Deluxe
   [02/10/2008|09:30] C:\Program Files\directx
   [31/12/2008|11:03] C:\Program Files\EA SPORTS
   [27/07/2008|12:47] C:\Program Files\eMule
   [01/02/2009|12:55] C:\Program Files\eMule2
   [31/07/2008|11:50] C:\Program Files\Fab Fashion
   [31/07/2008|13:33] C:\Program Files\Fashion Boutique
   [29/07/2008|11:38] C:\Program Files\Fashion Dash
   [29/07/2008|11:30] C:\Program Files\Fashion Solitaire
   [16/12/2008|16:55] C:\Program Files\Fichiers communs
   [09/11/2008|11:38] C:\Program Files\GamesBar
   [13/07/2007|18:28] C:\Program Files\GOA
   [27/01/2009|14:03] C:\Program Files\Google
   [09/10/2006|14:05] C:\Program Files\Goto Software
   [14/01/2007|12:46] C:\Program Files\Hewlett-Packard
   [14/01/2007|12:47] C:\Program Files\HP
   [25/11/2007|14:03] C:\Program Files\Ihsv
   [30/12/2008|22:13] C:\Program Files\InstallShield Installation Information
   [10/12/2008|23:08] C:\Program Files\Internet Explorer
   [28/09/2008|11:16] C:\Program Files\Java
   [31/07/2008|11:56] C:\Program Files\Jojos Fashion Show
   [10/01/2009|18:29] C:\Program Files\JRE
   [09/10/2006|14:06] C:\Program Files\Learn2.com
   [11/08/2008|11:40] C:\Program Files\Little Shop Road Trip
   [20/10/2008|14:41] C:\Program Files\Magic Encyclopedia
   [29/01/2009|22:22] C:\Program Files\Malwarebytes' Anti-Malware
   [28/09/2008|10:52] C:\Program Files\Messenger
   [04/01/2009|11:09] C:\Program Files\Messenger Plus! Live
   [01/04/2008|21:15] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [09/10/2006|14:06] C:\Program Files\microsoft frontpage
   [10/01/2009|12:18] C:\Program Files\Microsoft Office
   [15/12/2006|15:09] C:\Program Files\Monte Cristo
   [23/11/2008|13:06] C:\Program Files\Mortimer Beckett And The Secrets Of Spooky Manor
   [28/09/2008|10:48] C:\Program Files\Movie Maker
   [10/01/2009|12:16] C:\Program Files\MSECache
   [26/12/2006|19:02] C:\Program Files\MSN
   [21/07/2008|14:36] C:\Program Files\MSN Games
   [09/10/2006|14:06] C:\Program Files\MSN Gaming Zone
   [13/11/2008|17:32] C:\Program Files\MSXML 4.0
   [23/12/2006|18:14] C:\Program Files\Nero
   [28/09/2008|10:43] C:\Program Files\NetMeeting
   [09/11/2008|11:37] C:\Program Files\Oberon Media
   [09/10/2006|14:07] C:\Program Files\Online Services
   [10/01/2009|18:29] C:\Program Files\OpenOffice.org 3
   [24/10/2008|11:24] C:\Program Files\orange
   [28/09/2008|10:43] C:\Program Files\Outlook Express
   [29/01/2009|11:44] C:\Program Files\Oval Office
   [10/01/2009|12:15] C:\Program Files\PhotoFiltre Studio
   [31/08/2008|15:57] C:\Program Files\PlayFirst
   [23/08/2008|11:44] C:\Program Files\Pogo FR
   [20/08/2008|14:50] C:\Program Files\Pogo Jeux
   [09/10/2006|14:07] C:\Program Files\QuickTime
   [21/05/2008|15:05] C:\Program Files\Real
   [02/11/2008|15:08] C:\Program Files\RealArcade
   [09/10/2006|14:07] C:\Program Files\Realtek
   [21/07/2008|13:33] C:\Program Files\ReflexiveArcade
   [11/08/2008|11:51] C:\Program Files\Sallys Spa
   [11/12/2006|19:58] C:\Program Files\Samsung
   [09/10/2006|14:07] C:\Program Files\Services en ligne
   [11/08/2008|11:41] C:\Program Files\Shopping Blocks
   [26/12/2006|21:48] C:\Program Files\SightSpeed
   [16/12/2008|16:55] C:\Program Files\Skype
   [07/11/2008|18:20] C:\Program Files\Softwin
   [09/10/2006|14:08] C:\Program Files\Sonic
   [15/12/2006|21:09] C:\Program Files\Sports Interactive
   [29/01/2009|21:59] C:\Program Files\Sunbelt Software
   [08/09/2008|08:21] C:\Program Files\The Great Chocolate Chase
   [23/10/2008|16:58] C:\Program Files\The Mystery Of The Crystal Portal
   [31/01/2009|18:46] C:\Program Files\Trend Micro
   [30/12/2008|22:13] C:\Program Files\Ubi soft
   [14/12/2008|22:18] C:\Program Files\uTorrent
   [10/12/2006|18:45] C:\Program Files\VideoLAN
   [31/05/2008|13:52] C:\Program Files\Windows Live
   [26/12/2006|18:20] C:\Program Files\Windows Live Toolbar
   [09/01/2007|20:50] C:\Program Files\Windows Media Connect 2
   [02/10/2008|09:51] C:\Program Files\Windows Media Player
   [28/09/2008|10:43] C:\Program Files\Windows NT
   [09/10/2006|14:08] C:\Program Files\Windows Plus
   [18/01/2009|12:42] C:\Program Files\WinRAR
   [09/10/2006|14:08] C:\Program Files\xerox

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [09/10/2006|14:03] C:\Program Files\Fichiers communs\Adobe
   [23/12/2006|18:14] C:\Program Files\Fichiers communs\Ahead
   [09/10/2006|14:03] C:\Program Files\Fichiers communs\AOL
   [21/07/2008|14:36] C:\Program Files\Fichiers communs\aolshare
   [14/01/2007|12:46] C:\Program Files\Fichiers communs\Hewlett-Packard
   [14/01/2007|12:50] C:\Program Files\Fichiers communs\HP
   [20/06/2008|11:52] C:\Program Files\Fichiers communs\InstallShield
   [09/10/2006|14:04] C:\Program Files\Fichiers communs\Java
   [10/01/2009|12:18] C:\Program Files\Fichiers communs\Microsoft Shared
   [09/10/2006|14:04] C:\Program Files\Fichiers communs\MSSoap
   [09/10/2006|14:04] C:\Program Files\Fichiers communs\Nullsoft
   [24/10/2008|11:24] C:\Program Files\Fichiers communs\Oberon Media
   [21/05/2008|15:05] C:\Program Files\Fichiers communs\Real
   [24/08/2006|22:01] C:\Program Files\Fichiers communs\Services
   [07/11/2008|18:21] C:\Program Files\Fichiers communs\Softwin
   [14/01/2007|12:50] C:\Program Files\Fichiers communs\Sonic Shared
   [09/10/2006|14:04] C:\Program Files\Fichiers communs\SpeechEngines
   [09/10/2006|14:04] C:\Program Files\Fichiers communs\SureThing Shared
   [09/03/2007|18:39] C:\Program Files\Fichiers communs\Symantec Shared
   [28/09/2008|10:43] C:\Program Files\Fichiers communs\System
   [09/10/2006|14:05] C:\Program Files\Fichiers communs\TiVo Shared
   [31/05/2008|13:51] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   --------------------\  Process

   ( 52 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-02-02 09:14:10
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 46
 
   --------------------\  Recherche d'autres infections

   C:\WINDOWS\Tasks\At1.job
   C:\WINDOWS\Tasks\At10.job
   C:\WINDOWS\Tasks\At11.job
   C:\WINDOWS\Tasks\At12.job
   C:\WINDOWS\Tasks\At13.job
   C:\WINDOWS\Tasks\At14.job
   C:\WINDOWS\Tasks\At15.job
   C:\WINDOWS\Tasks\At16.job
   C:\WINDOWS\Tasks\At17.job
   C:\WINDOWS\Tasks\At18.job
   C:\WINDOWS\Tasks\At19.job
   C:\WINDOWS\Tasks\At2.job
   C:\WINDOWS\Tasks\At20.job
   C:\WINDOWS\Tasks\At21.job
   C:\WINDOWS\Tasks\At22.job
   C:\WINDOWS\Tasks\At23.job
   C:\WINDOWS\Tasks\At24.job
   C:\WINDOWS\Tasks\At25.job
   C:\WINDOWS\Tasks\At26.job
   C:\WINDOWS\Tasks\At27.job
   C:\WINDOWS\Tasks\At28.job
   C:\WINDOWS\Tasks\At29.job
   C:\WINDOWS\Tasks\At3.job
   C:\WINDOWS\Tasks\At30.job
   C:\WINDOWS\Tasks\At31.job
   C:\WINDOWS\Tasks\At32.job
   C:\WINDOWS\Tasks\At33.job
   C:\WINDOWS\Tasks\At34.job
   C:\WINDOWS\Tasks\At35.job
   C:\WINDOWS\Tasks\At36.job
   C:\WINDOWS\Tasks\At37.job
   C:\WINDOWS\Tasks\At38.job
   C:\WINDOWS\Tasks\At39.job
   C:\WINDOWS\Tasks\At4.job
   C:\WINDOWS\Tasks\At40.job
   C:\WINDOWS\Tasks\At41.job
   C:\WINDOWS\Tasks\At42.job
   C:\WINDOWS\Tasks\At43.job
   C:\WINDOWS\Tasks\At44.job
   C:\WINDOWS\Tasks\At45.job
   C:\WINDOWS\Tasks\At46.job
   C:\WINDOWS\Tasks\At47.job
   C:\WINDOWS\Tasks\At48.job
   C:\WINDOWS\Tasks\At49.job
   C:\WINDOWS\Tasks\At5.job
   C:\WINDOWS\Tasks\At50.job
   C:\WINDOWS\Tasks\At51.job
   C:\WINDOWS\Tasks\At52.job
   C:\WINDOWS\Tasks\At53.job
   C:\WINDOWS\Tasks\At54.job
   C:\WINDOWS\Tasks\At55.job
   C:\WINDOWS\Tasks\At56.job
   C:\WINDOWS\Tasks\At57.job
   C:\WINDOWS\Tasks\At58.job
   C:\WINDOWS\Tasks\At59.job
   C:\WINDOWS\Tasks\At6.job
   C:\WINDOWS\Tasks\At60.job
   C:\WINDOWS\Tasks\At61.job
   C:\WINDOWS\Tasks\At62.job
   C:\WINDOWS\Tasks\At63.job
   C:\WINDOWS\Tasks\At64.job
   C:\WINDOWS\Tasks\At65.job
   C:\WINDOWS\Tasks\At66.job
   C:\WINDOWS\Tasks\At67.job
   C:\WINDOWS\Tasks\At68.job
   C:\WINDOWS\Tasks\At69.job
   C:\WINDOWS\Tasks\At7.job
   C:\WINDOWS\Tasks\At70.job
   C:\WINDOWS\Tasks\At71.job
   C:\WINDOWS\Tasks\At72.job
   C:\WINDOWS\Tasks\At73.job
   C:\WINDOWS\Tasks\At74.job
   C:\WINDOWS\Tasks\At75.job
   C:\WINDOWS\Tasks\At76.job
   C:\WINDOWS\Tasks\At77.job
   C:\WINDOWS\Tasks\At78.job
   C:\WINDOWS\Tasks\At79.job
   C:\WINDOWS\Tasks\At8.job
   C:\WINDOWS\Tasks\At80.job
   C:\WINDOWS\Tasks\At81.job
   C:\WINDOWS\Tasks\At82.job
   C:\WINDOWS\Tasks\At83.job
   C:\WINDOWS\Tasks\At84.job
   C:\WINDOWS\Tasks\At85.job
   C:\WINDOWS\Tasks\At86.job
   C:\WINDOWS\Tasks\At87.job
   C:\WINDOWS\Tasks\At88.job
   C:\WINDOWS\Tasks\At89.job
   C:\WINDOWS\Tasks\At9.job
   C:\WINDOWS\Tasks\At90.job
   C:\WINDOWS\Tasks\At91.job
   C:\WINDOWS\Tasks\At92.job
   C:\WINDOWS\Tasks\At93.job
   C:\WINDOWS\Tasks\At94.job
   C:\WINDOWS\Tasks\At95.job
   C:\WINDOWS\Tasks\At96.job
   C:\WINDOWS\Tasks\At97.job
   C:\WINDOWS\Tasks\At98.job
   C:\WINDOWS\Tasks\At99.job

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\mourier\Mes documents\Music t‚l‚charger\Eminem - Crack A Bottle Feat Dr Dre & 50 Cent-MIXFIEND-2009(1).mp3
   C:\DOCUME~1\mourier\Recent\Football_Manager_2008.CRACK-Hassanoul.lnk


   [F:14][D:28]-> C:\DOCUME~1\mourier\LOCALS~1\Temp
   [F:138][D:0]-> C:\DOCUME~1\mourier\Cookies
   [F:481][D:48]-> C:\DOCUME~1\mourier\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 01/02/2009|21:36 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 02/02/2009| 9:16 - Option : [2]

   --------------------\  Fin du rapport a  9:16:55

foufie · Answer

SmitFraudFix v2.392

Rapport fait à  9:24:02,07, 02/02/2009
Executé à partir de C:\Documents and Settings\mourier\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

C:\WINDOWS\Tasks\At?.job PRESENT !
C:\WINDOWS\Tasks\At??.job PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\mourier


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\mourier\LOCALS~1\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\mourier\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\mourier\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="kogezp.dll C:\WINDOWS\system32\tesirolo.dll c:\windows\system32\lehebofi.dll c:\windows\system32\regoyivu.dll"
"LoadAppInit_DLLs"=dword:00000001


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\WINDOWS\system32\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» RK



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Scientific-Atlanta WebSTAR 2000 series Cable Modem - Miniport d'ordonnancement de paquets
DNS Server Search Order: 89.2.0.1
DNS Server Search Order: 89.2.0.2

HKLM\SYSTEM\CCS\Services\Tcpip\..\{BA2C26BE-B1DA-48C0-997B-DE57B04C0A48}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS1\Services\Tcpip\..\{BA2C26BE-B1DA-48C0-997B-DE57B04C0A48}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS2\Services\Tcpip\..\{BA2C26BE-B1DA-48C0-997B-DE57B04C0A48}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS3\Services\Tcpip\..\{BA2C26BE-B1DA-48C0-997B-DE57B04C0A48}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

jacques.gache · Answer

bonjour, tu vas faire le  Nettoyage des fichiers infectieux en mode sans echec et poster le rapport ainsi qu'un  
Hijackthis

pour redémarrer en mode sans échec : /!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\ 
 
.Cliques sur Démarrer
.Cliques sur Arrêter
.Sélectionnes Redémarrer et au redémarrage
.Appuis sur la touche F8 sans discontinuer "1 appuis seconde" dès qu'un écran de texte apparaît puis disparaît
.Utilises les touches de direction pour sélectionner mode sans échec
.puis appuis sur ENTRÉE
.Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre
une fois démarré ne t'inquiette pas si les couleurs et les icônes ne sont pas comme d'abitude 


Ensuite relancez SmitfraudFix, et dans le menu, tapez 2, puis appuyez sur la touche Entrée de votre clavier. 

A la question : voulez-vous nettoyer le registre ? tapez O (oui) et appuyez sur la touche Entrée de votre clavier. 

A la question : corriger le fichier infecté ? tapez O (oui) et appuyez sur la touche Entrée de votre clavier. 

Soyez ensuite patients, SmitfraudFix va supprimer les fichiers infectieux détectés dans la recherche effectuée précédemment. 

Un redemarrage sera peut être necessaire pour terminer la procédure de nettoyage (SmitfraudFix vous le dira si besoin).

 Le rapport se trouve à la racine du disque système  C:\rapport.txt 

poste le rapport dans ton prochain message. Si ton fond d'écran est disparru il suffira d'en remettre un 

petite démo en vidéo : http://pagesperso-orange.fr/rginformatique/section%20virus/smitfraudfix.htm

Antivirus 360 supprimer mais pti problÃ©me

18 réponses

Discussions similaires