Virus MAZEBAT B : Problème...

Bouboule -  
Bonjour,

Voila mon problème est quelque peu compliqué, je suis infecté par le virus Mazebat B qui s'attaque aux fichiers .exe entre autre ; certains problèmes similaires dans le forum ont été résolus j'espere qu'il en sera de même pour le miens..

Alors voila après avoir vu le virus j'ai installé Avast qui n'a rien trouvé de mieux que de supprimé tout les .exe de mon disque dur système (j'ai 4 disques durs) j'ai donc du reformater mon disque dur (que le disque dur système), ce qui n'a pas suffit puisque meme apres la réinstallation de windows XP pro revoila mon virus (qui s'était logé dans les autres disques durs); j'ai donc regardé dans les forums voir ce qu'il en était dis j'ai donc utiliser : rmmabez, malwarebytes anti malware et le scan de bit defender en ligne qui était tout trois conseillé ; il me retire quelques infections par ci par là mais le virus reste toujours (et encore il faut que le scan aille jusqu'a la fin ce qui est très souvent pas le cas même en mode sans échec)... donc voila apres un formatage et des dizaines de scan j'en suis toujours au même point, je pense donc avoir besoin de l'aide des plus grands :D, à vous la parole...

Merci beaucoup :)
Configuration: Windws XP edition professionelles

20 réponses

Résumé de la discussion

Mazebat B, un ver pirate qui s’attaque notamment aux fichiers .exe, a été décrit comme persistant après une suppression par Avast et un reformatage du disque système, les autres volumes restant touchés. Plusieurs outils ont été essayés, tels que Malwarebytes Anti-Malware, MBAM, ainsi que Bitdefender en ligne, qui suppriment quelques infections mais ne lèvent pas le voile sur l’origine et la persistance. Des conseils complémentaires évoquent des outils comme RSIT et HijackThis pour générer des rapports et identifier des éléments d’auto démarrage ou des clés de registre potentiellement contaminées. En parallèle, l’échange suggère de prendre en compte les infections associées (Mazebat J et Mazebat Gen) et d’établir une stratégie de nettoyage sur les supports amovibles et les futures protections antivirus.

Bobot (l’IA à votre service)
  1. afideg Contributeur sécurité
    Salut kevin05,

    Mal embarqué...

    Virus MAZEBAT B s'attrape par disques amovibles

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{94543c00-f9c4-11dd-991a-0018f3077186}]
    shell\AutoRun\command - K:\zPharaoh.exe
    shell\explore\command - K:\zPharaoh.exe
    shell\open\command - K:\zPharaoh.exe

    C:\WINDOWS\iun6002.exe -- > VirusTotal ??

    C:\Program Files\SpywareDetector
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "SDActiveMonitor"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDNotify]

    O23 - Service: SDMainSvc
    O23 - Service: SDService
    S1 (stoppé) : SDManager

    C:\Program Files\Java\jre1.5.0_07 ==> 6.0.12
    C:\Program Files\Adobe\Acrobat 7.0 ==> 9

    O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_01] à [nlpo_07] => Windows Version nLite non officielle
    O4 - HKUS\S-1-5-20\..\RunOnce: [nlpo_01] => Windows Version nLite non officielle

    Bonne chance
    Al. ==> juste pour suivre. Merci
    1. Bouboule
      ouai j'ai bien vu que j'était mal embarqué.. j'ai attrappé le virus par un disque dur externe effectivement... tu as une solution ?
  2. crapoulou Modérateur
    Salut,
    En effet tu te souviens bien :
    http://toolbarsd.googlepages.com/Changelog.txt

    Mais fichiers systèmes infectés avec mabezat il me semble ...
    AVP Tools et Dr Web cure it!
    1. kevin05 Contributeur sécurité
      Salut,

      - Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

      - Double-clique sur RSIT.exe afin de lancer le programme.

      - Clique sur Continue à l'écran Disclaimer.

      - Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

      - Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

      Note : Les rapports sont sauvegardés dans le dossier C:\rsit.
      1. ludsfa
        Salut,

        * Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau:

        http://images.malwareremoval.com/random/RSIT.exe

        * Double-clique sur RSIT.exe afin de lancer le programme.
        * Clique sur Continue à l'écran Disclaimer.
        * Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
        * Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparait à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

        Note : les rapports sont sauvegardés dans le dossier C:\rsit\.
        1. Bouboule
          Ah une réponse rapide ça fais plaisir :)

          Voila les logs...

          Info.txt :

          info.txt logfile of random's system information tool 1.05 2009-02-15 21:29:55

          ======Uninstall list======

          -->"C:\Program Files\Creative Professional\Digital Audio System\Program\SETUP.EXE" /S /U /W /L:FRN
          -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5633D266-6BAE-41CE-987F-0FE5F5F92D64}\setup.exe" -l0x40c
          -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5633D266-6BAE-41CE-987F-0FE5F5F92D64}\setup.exe" -l0x40c /remove
          -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
          Adobe Reader 7.0.8 - FranÁais-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70800000002}
          Antares Autotune DX v4.12-->C:\PROGRA~1\Antares\AUTOTU~1\ANTARE~1\UNWISE.EXE C:\PROGRA~1\Antares\AUTOTU~1\ANTARE~1\INSTALL.LOG
          Antares Autotune VST RTAS TDM v5.08-->"C:\Program Files\Antares Audio Technologies\unins000.exe"
          Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
          ASUS GameFace Library-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{92B07938-0550-4937-9447-E0ECC04AB99D}
          ASUS Gamer OSD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}\setup.exe" -l0x40c -removeonly
          ASUS Smart Doctor-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{12E11FBB-7CA6-4A86-834D-5E6390D51009} /l1036
          ASUS VideoSecurity Online-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{7A529246-912F-4C40-A82A-E608DB702FD7}
          Codeur Windows Media SÈrie 9-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
          Codeur Windows Media SÈrie 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
          Correctif Windows XP - KB867282-->C:\WINDOWS\$NtUninstallKB867282$\spuninst\spuninst.exe
          Correctif Windows XP - KB885894-->C:\WINDOWS\$NtUninstallKB885894$\spuninst\spuninst.exe
          Digital Audio System-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6ACBC6E4-03D0-422E-A0CA-3BA1A8EF8374}\SETUP.EXE" -l0x40c /remove
          DMC-Control 1.12a-->MsiExec.exe /I{F282BB83-7AB5-4CC6-9876-5CCB365B3B61}
          Easy CD-DA Extractor 12-->"C:\WINDOWS\Easy CD-DA Extractor 12.0\uninstall.exe" "/U:C:\Program Files\Easy CD-DA Extractor 12\irunin.xml"
          GameFace Messenger-->C:\WINDOWS\iun6002.exe "C:\Program Files\GameFace Messenger\irunin.ini"
          High Definition Audio Driver Package - KB888111-->C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe
          HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
          Hotfix for Windows Media Format SDK (KB902344)-->"C:\WINDOWS\$NtUninstallKB902344$\spuninst\spuninst.exe"
          J2SE Runtime Environment 5.0 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150070}
          JRAID-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}\setup.exe" -l0x40c -removeonly
          Lecteur Windows Media†10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
          Macromedia Flash Player 8 Plugin-->MsiExec.exe /X{E3D278BD-FC97-4F87-BB1F-689AE0CB9122}
          Macromedia Flash Player 8-->C:\WINDOWS\system32\Macromed\Flash\UninstFl.exe
          Macromedia Shockwave Player-->MsiExec.exe /X{838A1BC9-95CA-4880-9BE3-2A7D23600A2B}
          Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
          Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
          Microsoft .NET Framework 1.1 Hotfix (KB886903)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M886903\M886903Uninstall.msp"
          Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
          Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
          Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
          Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
          Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
          Microsoft Windows Media Video 9 VCM-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmv9vcm.inf, Uninstall
          Mise ‡ jour de sÈcuritÈ pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
          Mise ‡ jour de sÈcuritÈ pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
          Mise ‡ jour de sÈcuritÈ pour Windows XP (KB913433)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB913433.inf
          Mise ‡ jour de sÈcuritÈ pour Windows XP (KB917953)-->"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
          Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
          Nero Micro 9.2.6-->"C:\WINDOWS\Nero Micro 9.2.6\uninstall.exe" "/U:C:\Program Files\Nero\Uninstall\uninstall.xml"
          NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
          Philips Flat Panel Adjust-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23430AE3-6FFF-47CF-B7E7-1552FC61DF39}\Setup.exe" -l0x9
          PhotorÈcit 3 pour Windows-->MsiExec.exe /I{4F41AD68-89F2-4262-A32C-2F70B01FCE9E}
          REALTEK GbE & FE Ethernet PCI-E NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9BED750-1211-4480-B1A5-718A3BE15525}\Setup.exe" -l0x40c -removeonly
          RME DIGICheck-->"C:\Program Files\RME\Digicheck45\Uninstall.exe" "C:\Program Files\RME\Digicheck45\install.log"
          RME Fireface-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\system32\fireface.inf
          RME MIDI Remote-->"C:\Program Files\RME\MIDIRemote14\Uninstall.exe" "C:\Program Files\RME\MIDIRemote14\install.log"
          Spyware Detector-->"C:\Program Files\SpywareDetector\unins000.exe"
          Steinberg Cubase SX v2.01-->C:\PROGRA~1\STEINB~1\CUBASE~1\UNWISE.EXE C:\PROGRA~1\STEINB~1\CUBASE~1\INSTALL.LOG
          Visionneuse Journal Windows Microsoft-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA8}
          VLC media player 0.9.8a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
          Waves 4.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4C4D25EB-6513-4702-8355-F4194DE2E1D9}\setup.exe" -l0x9
          Waves Diamond Bundle 4.05-->C:\PROGRA~1\Waves\DIAMON~1\UNWISE.EXE C:\PROGRA~1\Waves\DIAMON~1\INSTALL.LOG
          Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
          Windows Media Player 10 Hotfix - KB888656-->"C:\WINDOWS\$NtUninstallKB888656$\spuninst\spuninst.exe"
          Windows Messenger 5.1-->MsiExec.exe /I{9D1C26BD-E792-4159-9D16-07EA222D8EF0}
          XviD MPEG-4 Video Codec-->C:\WINDOWS\system32\rundll32.exe setupapi,InstallHinfSection Remove_XviD 132 C:\WINDOWS\INF\xvid.inf

          Securitycenter WMI appears to be broken

          System event log

          Computer Name: XPSP2-0181848AE
          Event Code: 3260
          Message: Cet ordinateur a correctement ÈtÈ joint au workgroup 'WORKGROUP'.

          Record Number: 5
          Source Name: Workstation
          Time Written: 20090212094547.000000+060
          Event Type: Informations
          User:

          Computer Name: XPSP2-0181848AE
          Event Code: 6011
          Message: Le nom NetBIOS et le nom de l'hÙte DNS de cet ordinateur ont ÈtÈ modifiÈs de MACHINENAME vers XPSP2-0181848AE.

          Record Number: 4
          Source Name: EventLog
          Time Written: 20090212094003.000000+060
          Event Type: Informations
          User:

          Computer Name: MACHINENAME
          Event Code: 2
          Message: Pendant la validation de \Device\Serial0 en tant que port sÈrie, une FIFO a ÈtÈ dÈtectÈe. La FIFO sera utilisÈe.

          Record Number: 3
          Source Name: Serial
          Time Written: 20090212102204.000000+060
          Event Type: Informations
          User:

          Computer Name: MACHINENAME
          Event Code: 6005
          Message: Le service d'Enregistrement d'ÈvÈnement a dÈmarrÈ.

          Record Number: 2
          Source Name: EventLog
          Time Written: 20090212102148.000000+060
          Event Type: Informations
          User:

          Computer Name: MACHINENAME
          Event Code: 6009
          Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free.

          Record Number: 1
          Source Name: EventLog
          Time Written: 20090212102148.000000+060
          Event Type: Informations
          User:

          Application event log

          Computer Name: XPSP2-0181848AE
          Event Code: 1000
          Message: Les compteurs de performances pour le service MSDTC (MSDTC) ont ÈtÈ chargÈs.
          Les donnÈes d'enregistrement contiennent les nouvelles valeurs d'index
          assignÈes ‡ ce service.

          Record Number: 5
          Source Name: LoadPerf
          Time Written: 20090212094652.000000+060
          Event Type: Informations
          User:

          Computer Name: XPSP2-0181848AE
          Event Code: 1000
          Message: Les compteurs de performances pour le service TermService (Services Terminal Server) ont ÈtÈ chargÈs.
          Les donnÈes d'enregistrement contiennent les nouvelles valeurs d'index
          assignÈes ‡ ce service.

          Record Number: 4
          Source Name: LoadPerf
          Time Written: 20090212094649.000000+060
          Event Type: Informations
          User:

          Computer Name: XPSP2-0181848AE
          Event Code: 1000
          Message: Les compteurs de performances pour le service RemoteAccess (Routage et accËs distant) ont ÈtÈ chargÈs.
          Les donnÈes d'enregistrement contiennent les nouvelles valeurs d'index
          assignÈes ‡ ce service.

          Record Number: 3
          Source Name: LoadPerf
          Time Written: 20090212094046.000000+060
          Event Type: Informations
          User:

          Computer Name: XPSP2-0181848AE
          Event Code: 1000
          Message: Les compteurs de performances pour le service PSched (PSched) ont ÈtÈ chargÈs.
          Les donnÈes d'enregistrement contiennent les nouvelles valeurs d'index
          assignÈes ‡ ce service.

          Record Number: 2
          Source Name: LoadPerf
          Time Written: 20090212094015.000000+060
          Event Type: Informations
          User:

          Computer Name: XPSP2-0181848AE
          Event Code: 1000
          Message: Les compteurs de performances pour le service RSVP (QoS RSVP) ont ÈtÈ chargÈs.
          Les donnÈes d'enregistrement contiennent les nouvelles valeurs d'index
          assignÈes ‡ ce service.

          Record Number: 1
          Source Name: LoadPerf
          Time Written: 20090212094014.000000+060
          Event Type: Informations
          User:

          ======Environment variables======

          "ComSpec"=%SystemRoot%\system32\cmd.exe
          "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
          "windir"=%SystemRoot%
          "FP_NO_HOST_CHECK"=NO
          "OS"=Windows_NT
          "PROCESSOR_ARCHITECTURE"=x86
          "PROCESSOR_LEVEL"=6
          "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel
          "PROCESSOR_REVISION"=0f06
          "NUMBER_OF_PROCESSORS"=2
          "TEMP"=%USERPROFILE%\Local Settings\Temp
          "TMP"=%USERPROFILE%\Local Settings\Temp
          "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

          -----------------EOF-----------------

          Log.txt :

          Logfile of random's system information tool 1.05 (written by random/random)
          Run by Administrateur at 2009-02-15 21:29:27
          Microsoft Windows XP Professionnel Service Pack 2
          System drive C: has 146 GB (96%) free of 153 GB
          Total RAM: 3007 MB (68% free)

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 21:29:53, on 15/02/2009
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\WINDOWS\ATKKBService.exe
          C:\WINDOWS\system32\nvsvc32.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\fireface.exe
          C:\WINDOWS\system32\firefacemix.exe
          C:\WINDOWS\CTHELPER.EXE
          C:\WINDOWS\system32\RUNDLL32.EXE
          C:\Program Files\GameFace Messenger\GameFace.exe
          C:\Program Files\WinTV\Ir.exe
          C:\Program Files\Creative Professional\Digital Audio System\E-MU PatchMix DSP\EmuPatchMixDSP.exe
          C:\WINDOWS\system32\wuauclt.exe
          C:\Program Files\Steinberg\Cubase SX\Cubasesx.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Internet Explorer\IEXPLORE.EXE
          C:\Program Files\SpywareDetector\SDService.exe
          C:\Program Files\SpywareDetector\SDMainService.exe
          C:\Program Files\SpywareDetector\SpywareDetector.exe
          C:\Program Files\Internet Explorer\IEXPLORE.EXE
          C:\Program Files\SpywareDetector\SDActiveMonitor.exe
          C:\Program Files\VideoLAN\VLC\vlc.exe
          K:\RSIT.exe
          C:\Program Files\trend micro\Administrateur.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/toolbar/ie8/sidebar.html
          R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/search?q=%s
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
          O4 - HKLM\..\Run: [FirefaceTray] fireface.exe
          O4 - HKLM\..\Run: [FirefaceMixTray] firefacemix.exe
          O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
          O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
          O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
          O4 - HKLM\..\Run: [SDActiveMonitor] C:\Program Files\SpywareDetector\SDActiveMonitor.exe -AUTO
          O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
          O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
          O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Srchasst" (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_02] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\msagent" (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_03] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Help\Tours" (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_04] cmd.exe /c md "%USERPROFILE%\Local Settings\Temp" (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_05] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_06] rundll32 advpack.dll,LaunchINFSection nlite.inf,nLiteReg (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_07] rundll32 advpack.dll,LaunchINFSection nlite.inf,S (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Srchasst" (User 'SERVICE R…SEAU')
          O4 - Global Startup: AutoStart IR.lnk = C:\Program Files\WinTV\Ir.exe
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
          O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
          O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
          O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
          O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
          O23 - Service: SDMainSvc - Max Secure Software - C:\Program Files\SpywareDetector\SDMainService.exe
          O23 - Service: SDService - Max Secure Software - C:\Program Files\SpywareDetector\SDService.exe
      6. kevin05 Contributeur sécurité
        Hello al

        C:\WINDOWS\iun6002.exe

        Si je me souviens toolbar S&D le supprime...
        1. kevin05 Contributeur sécurité
          Et vue que t'as plus d'experience que moi intervient quand tu veux ;-)
          1. Bouboule
            Ok j'ai pris note de tout, je refais un scan malwarebytes', pour l'instant il ne trouve rien ; et j'ai un scan Dr Web en cours aussi il trouve quelques trucs, je vous post les rapport quand c'est fini également pour UsbFix.

            Sinon j'ai pas bien compris le problème avec C:\WINDOWS\iun6002.exe, Dr Web doit le suppr ?

            Merci encore
            1. Bouboule
              et apparemment pour l'instant j'ai du Mazebat B, du Mazebat J et du Mazebat Gen (bitdefender)..
          2. Bouboule
            -------------- UsbFix V2.414.3 ---------------

            * User : Administrateur - XPSP2-0181848AE
            * Outils mis a jours le 18/01/2009 par Chiquitine29 et Chimay8
            * Recherche effectuÈe ‡ 23:16:49 le 15/02/2009
            * Windows Xp - Internet Explorer 6.0.2900.2180

            --------------- [ Processus actifs ] ----------------

            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\csrss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\logonui.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\WINDOWS\ATKKBService.exe
            C:\WINDOWS\system32\nvsvc32.exe
            C:\Program Files\SpywareDetector\SDMainService.exe
            C:\Program Files\SpywareDetector\SDService.exe
            C:\WINDOWS\system32\userinit.exe
            C:\WINDOWS\Explorer.EXE
            C:\WINDOWS\System32\alg.exe

            --------------- [ Informations lecteurs ] ----------------

            C: - Lecteur fixe

            D: - Lecteur fixe

            E: - Lecteur fixe

            F: - Lecteur de CD-ROM

            K: - Lecteur fixe

            L: - Lecteur fixe

            M: - Lecteur amovible

            N: - Lecteur amovible

            O: - Lecteur amovible

            +- Contenu de l'autorun : K:\autorun.inf

            [AutoRun]
            ShellExecute=zPharaoh.exe
            shell\open\command=zPharaoh.exe
            shell\explore\command=zPharaoh.exe
            open=zPharaoh.exe

            +- Contenu de l'autorun : M:\autorun.inf

            [AutoRun]
            ShellExecute=zPharaoh.exe
            shell\open\command=zPharaoh.exe
            shell\explore\command=zPharaoh.exe
            open=zPharaoh.exe

            +- Contenu de l'autorun : N:\autorun.inf

            [autorun]
            open=.\RECYCLER\RECYCLER\autorun.exe
            shell\1=Open
            shell\1\Command=.\RECYCLER\RECYCLER\autorun.exe
            shell\2\=Browser
            shell\2\Command=.\RECYCLER\RECYCLER\autorun.exe
            shellexecute=.\RECYCLER\RECYCLER\autorun.exe

            --------------- [ Lecteur C ] ----------------

            C: - Lecteur fixe

            +- Listing des fichiers prÈsents :

            [12/02/2009 09:50][--a------] C:\AUTOEXEC.BAT
            [03/08/2004 23:38][-rahs----] C:\NTDETECT.COM
            [12/02/2009 09:40][---hs----] C:\boot.ini
            [15/02/2009 23:17][--a------] C:\UsbFix.txt
            [15/02/2009 23:17][--a------] C:\XPSP2+_Version.txt
            [12/02/2009 09:50][--a------] C:\CONFIG.SYS
            [12/02/2009 09:50][--a------] C:\IO.SYS
            [12/02/2009 09:50][--a------] C:\MSDOS.SYS
            [12/02/2009 09:50][--a------] C:\pagefile.sys

            --------------- [ Lecteur D ] ----------------

            D: - Lecteur fixe

            +- Listing des fichiers prÈsents :

            [12/01/2007 21:51][--a------] D:\AUTOEXEC.BAT
            [12/01/2007 21:51][--a------] D:\CONFIG.SYS
            [12/01/2007 21:51][--a------] D:\IO.SYS
            [12/01/2007 21:51][--a------] D:\MSDOS.SYS

            --------------- [ Lecteur E ] ----------------

            E: - Lecteur fixe

            +- Listing des fichiers prÈsents :

            --------------- [ Lecteur F ] ----------------

            F: - Lecteur de CD-ROM

            +- Listing des fichiers prÈsents :

            --------------- [ Lecteur K ] ----------------

            K: - Lecteur fixe

            +- Listing des fichiers prÈsents :

            [15/02/2009 12:53][-r-hs----] K:\zPharaoh.exe
            [15/02/2009 13:21][-r-hs----] K:\autorun.inf

            --------------- [ Lecteur L ] ----------------

            L: - Lecteur fixe

            +- Listing des fichiers prÈsents :

            --------------- [ Lecteur M ] ----------------

            M: - Lecteur amovible

            +- Listing des fichiers prÈsents :

            [09/02/2009 14:20][-r-hs----] M:\zPharaoh.exe
            [10/02/2009 14:00][-r-hs----] M:\autorun.inf

            --------------- [ Lecteur N ] ----------------

            N: - Lecteur amovible

            +- Listing des fichiers prÈsents :

            [24/01/2009 18:37][--ahs----] N:\autorun.inf

            --------------- [ Lecteur O ] ----------------

            O: - Lecteur amovible

            +- Listing des fichiers prÈsents :

            [13/02/2009 12:38][--a------] O:\easy_cdda_extractor_12_trial_.exe
            [13/02/2009 12:38][--a------] O:\rmmabez-1.exe
            [13/02/2009 12:38][--a------] O:\mbam-setup.exe
            [13/02/2009 12:38][--a------] O:\spywaredetector.exe
            [13/02/2009 12:38][--a------] O:\RSIT.exe
            [13/02/2009 12:38][--a------] O:\UsbFix.exe
            [15/02/2009 21:30][--a------] O:\log.txt
            [15/02/2009 21:30][--a------] O:\info.txt

            --------------- [ Registre / Startup ] ----------------

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
            "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

            [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
            "Search Page"="https://www.google.fr/?gws_rd=ssl"
            "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

            [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
            SetDefaultMIDI=MIDIDef.exe

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
            FirefaceTray=fireface.exe
            FirefaceMixTray=firefacemix.exe
            CTHelper=CTHELPER.EXE
            UpdReg=C:\WINDOWS\UpdReg.EXE
            NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
            nwiz=nwiz.exe /install
            NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
            SDActiveMonitor=C:\Program Files\SpywareDetector\SDActiveMonitor.exe -AUTO

            --------------- [ Registre / Mountpoint2 ] ----------------

            SupprimÈ ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{793bbfd1-f8f0-11dd-a252-ac3a0aec51b6}\Shell\AutoRun\command
            SupprimÈ ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{94543c00-f9c4-11dd-991a-0018f3077186}\Shell\AutoRun\command
            SupprimÈ ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{94543c00-f9c4-11dd-991a-0018f3077186}\Shell\explore\Command
            SupprimÈ ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{94543c00-f9c4-11dd-991a-0018f3077186}\Shell\open\Command

            --------------- [ Nettoyage des disques ] ----------------

            SupprimÈ ! - [14/05/2006 00:25][--a------] C:\WINDOWS\system32\Autoruns.exe
            SupprimÈ ! - [14/02/2009 03:32][--a------] "C:\Documents and Settings\Administrateur\Application Data\tazebama\tazebama.log"
            SupprimÈ ! - [14/02/2009 15:06][--a------] "C:\Documents and Settings\Administrateur\Application Data\tazebama\zPharaoh.dat"
            SupprimÈ ! - [15/02/2009 23:17][d--------] "C:\Documents and Settings\Administrateur\Application Data\tazebama"
            K:\autorun.inf ~> fichier appelÈ : "K:\zPharaoh.exe" ( prÈsent ! )
            SupprimÈ ! - K:\zPharaoh.exe
            M:\autorun.inf ~> fichier appelÈ : "M:\zPharaoh.exe" ( prÈsent ! )
            SupprimÈ ! - M:\zPharaoh.exe
            SupprimÈ ! - [15/02/2009 13:21][-r-hs----] K:\autorun.inf
            SupprimÈ ! - [24/10/2006 18:07][-r-hs----] M:\Recycled\ctfmon.exe
            SupprimÈ ! - [10/02/2009 14:00][-r-hs----] M:\autorun.inf
            SupprimÈ ! - [18/11/2008 16:02][d--hs----] M:\Recycler\Recycler
            SupprimÈ ! - [24/10/2006 18:07][-r-hs----] N:\Recycled\ctfmon.exe
            SupprimÈ ! - [24/01/2009 18:37][--ahs----] N:\autorun.inf
            SupprimÈ ! - [19/07/2008 17:04][d--hs----] N:\Recycler\Recycler

            --------------- [ ResumÈ ] ----------------

            -> /!\ Le resultat doit etre interprÈtÈ par un spÈcialiste /!\

            [12/02/2009 09:50][--a------] C:\AUTOEXEC.BAT
            [03/08/2004 23:38][-rahs----] C:\NTDETECT.COM
            [12/02/2009 09:40][---hs----] C:\boot.ini
            [12/01/2007 21:51][--a------] D:\AUTOEXEC.BAT
            [13/02/2009 12:38][--a------] O:\easy_cdda_extractor_12_trial_.exe
            [13/02/2009 12:38][--a------] O:\rmmabez-1.exe
            [13/02/2009 12:38][--a------] O:\mbam-setup.exe
            [13/02/2009 12:38][--a------] O:\spywaredetector.exe
            [13/02/2009 12:38][--a------] O:\RSIT.exe
            [13/02/2009 12:38][--a------] O:\UsbFix.exe

            --------------- [ Vaccination ] ----------------

            C:\autorun.inf -> Dossier autorun.inf crÈe par UsbFix !
            D:\autorun.inf -> Dossier autorun.inf crÈe par UsbFix !
            E:\autorun.inf -> Dossier autorun.inf crÈe par UsbFix !
            K:\autorun.inf -> Dossier autorun.inf crÈe par UsbFix !
            L:\autorun.inf -> Dossier autorun.inf crÈe par UsbFix !
            M:\autorun.inf -> Dossier autorun.inf crÈe par UsbFix !
            N:\autorun.inf -> Dossier autorun.inf crÈe par UsbFix !
            O:\autorun.inf -> Dossier autorun.inf crÈe par UsbFix !

            --------------- ! Fin du rapport ! ----------------
            2. Bouboule
              Je refais un Dr Web pr l'instant, et je pense faire tout ceux que j'ai mais bon ça prend du temp... en parlant de temp, merci pour celui que vous consacrez pour résoudre mon problème :)

              Je vous poste le log de Dr Web quand il se fini (pour l'instant tout ce qu'il a trouvé comme problème c'est UsbFix que j'ai désinstallé juste après :))...

              Merci encore !
              1. Bouboule
                Voici le log de Spyware détector ;

                Information :
                Date: 2/16/2009 00-38-14
                OS Version: Windows XP Professional Edition
                Computer Name: XPSP2-0181848AE

                Log:
                Spyware Name Threat Type Threat Action
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@ad.yieldmanager[2].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@ad.zanox[1].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@advertising[1].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@bitdefender[2].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@cybermonitor[1].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@desb.opt.fimserve[2].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@doubleclick[2].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@estat[1].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@gigya[1].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@mediaplex[1].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@myspace[1].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@opt.fimserve[2].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@smartadserver[1].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@social.bidsystem[1].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@verify[2].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@weborama[1].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@xiti[1].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@yadro[1].txt Scan
                Tracking.Cookie Cookie c:\documents and settings\administrateur\cookies\administrateur@zedo[2].txt Scan
                Worm.Legmir Folder c:\autorun.inf Scan
                Worm.Legmir File c:\autorun.inf\autorun.inf Scan
                Worm.Legmir Folder d:\autorun.inf Scan
                Worm.Legmir File d:\autorun.inf\autorun.inf Scan
                Worm.Legmir Folder e:\autorun.inf Scan
                Worm.Legmir File e:\autorun.inf\autorun.inf Scan
                Worm.Legmir Folder k:\autorun.inf Scan
                Worm.Legmir File k:\autorun.inf\autorun.inf Scan
                Worm.Legmir Folder l:\autorun.inf Scan
                Worm.Legmir File l:\autorun.inf\autorun.inf Scan
                Worm.Legmir Folder m:\autorun.inf Scan
                Worm.Legmir File m:\autorun.inf\autorun.inf Scan
                Worm.Legmir Folder n:\autorun.inf Scan
                Worm.Legmir File n:\autorun.inf\autorun.inf Scan
                Backdoor.GGDoor Registry Value hkey_local_machine\software\microsoft\windows\currentversion\run :: updreg Scan
                Backdoor.Agent Fix: Registry Data hkey_users\s-1-5-21-1202660629-1303643608-839522115-500\software\microsoft\windows\currentversion\policies\explorer :: disallowcpl :: 1 | 0 Scan
                DoS.BBDoS File c:\documents and settings\administrateur\doctorweb\quarantine\a0000001.exe Scan
                Backdoor.Zebrat File c:\system volume information\_restore{d1f5a16b-9d14-43be-9bf4-0184f262a12b}\rp0\a0000002.exe Scan
                Worm.Mabezat File d:\system volume information\nokian73tools.exe Scan
                Worm.Mabezat File e:\system volume information\winrrarserialinstall.exe Scan
                Worm.Mabezat File m:\recycler\jetaudio dump.exe Scan

                C'est une démo donc il repère juste les fichiers sans les désinfectés...fin bon ça peut peut etre vous aider.. les autres scans (Dr Web) et rmmabez sont toujours en cours, rien d'anormal pour le moment...
                2. Bouboule
                  Bonjour, mes post pour les log ont apparament échoué donc je rééssait :

                  Dr Web :

                  UsbFix.exe\data009;C:\Documents and Settings\Administrateur\Bureau\UsbFix.exe;Tool.Prockill;;
                  UsbFix.exe;C:\Documents and Settings\Administrateur\Bureau;Conteneur comporte des objets infectés;Quarantaine.;
                  NokiaN73Tools.exe;D:\System Volume Information;Win32.HLLW.Tazebama;Supprimé.;
                  System Volume Information .exe;D:\System Volume Information;Win32.HLLW.Tazebama;Supprimé.;
                  System Volume Information .exe;E:\System Volume Information;Win32.HLLW.Tazebama;Supprimé.;
                  WinrRarSerialInstall.exe;E:\System Volume Information;Win32.HLLW.Tazebama;Supprimé.;
                  RouterClient.exe;L:\Bureau\cryptload;Win32.Virut.56;Désinfecté.;
                  Restarter.exe;L:\Bureau\cryptload\tools;Win32.Virut.56;Désinfecté.;
                  stealthcaptcha.exe;L:\Bureau\cryptload\ocr\stealth.to\stealthcaptcha;Win32.Virut.56;Désinfecté.;
                  BotCheck.exe;L:\Bureau\cryptload\ocr\rapidshare.de\BotCheck;Win32.Virut.56;Désinfecté.;
                  result.exe;L:\Bureau\cryptload\ocr\megaupload.com\FineReader;Win32.Virut.56;Désinfecté.;
                  PNG2BMP.EXE;L:\Bureau\cryptload\ocr\filer.net\ocr_by_spider_b;Win32.Virut.56;Désinfecté.;
                  zx_bs_d.exe;L:\Image-Line\FL Studio 7\System\Tools\BeatSlicer;Win32.Virut.56;Désinfecté.;
                  Dxfdsetup.exe;L:\Steinberg\Asio;Win32.Virut.56;Désinfecté.;
                  Wpsetup.exe;L:\Steinberg\Asio;Win32.Virut.56;Désinfecté.;

                  Rmmabez :
                  ============ Remover for Win32/Mabezat ===============
                  Date: 16.02.2009 08:45
                  C:\applications\AdobeReader_7.0.8fr.exe; OK
                  C:\applications\MMFlash_8.0.24.0ActiveX_slim.exe; OK
                  C:\applications\WM9Codecs.exe; OK
                  C:\applications\WM9VCM.exe; OK
                  C:\applications\WMP10Setup.exe; OK
                  C:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{E3D278BD-FC97-4F87-BB1F-689AE0CB9122}\ARPPRODUCTICON.exe; OK
                  C:\Documents and Settings\Administrateur\Bureau\launch.exe; OK
                  C:\Documents and Settings\Administrateur\Bureau\MPSetup.exe; OK
                  C:\Documents and Settings\Administrateur\Bureau\nero_micro_europe.exe; OK
                  C:\Documents and Settings\Administrateur\Bureau\OPTIONS\A appliquer en fonction de votre quantité de mémoire\WCPUID\nrkctl32.dll; OK
                  C:\Documents and Settings\Administrateur\Bureau\OPTIONS\A appliquer en fonction de votre quantité de mémoire\WCPUID\nrkctl32.stb; OK
                  C:\Documents and Settings\Administrateur\Bureau\OPTIONS\A appliquer en fonction de votre quantité de mémoire\WCPUID\nrkctl32.sys; OK
                  C:\Documents and Settings\Administrateur\Bureau\OPTIONS\A appliquer en fonction de votre quantité de mémoire\WCPUID\plugins\wcpuid_rclk.wpi; OK
                  C:\Documents and Settings\Administrateur\Bureau\OPTIONS\A appliquer en fonction de votre quantité de mémoire\WCPUID\wcpuclk.exe; OK
                  C:\Documents and Settings\Administrateur\Bureau\OPTIONS\A appliquer en fonction de votre quantité de mémoire\WCPUID\wcpuid.exe; OK
                  C:\Documents and Settings\Administrateur\Bureau\OPTIONS\Firefox - Plugins Macromedia\Firefox_Flash.exe; OK
                  C:\Documents and Settings\Administrateur\Bureau\OPTIONS\Firefox - Plugins Macromedia\Firefox_Shockwave.exe; OK
                  C:\Documents and Settings\Administrateur\Bureau\OPTIONS\Si vous utilisez l'outil de gravure intégré à Windows\KB831240_HighMAT.exe; OK
                  C:\Documents and Settings\Administrateur\Bureau\rmmabez-1.exe; OK
                  C:\Documents and Settings\Administrateur\Cookies\index.dat; Can't open
                  C:\Documents and Settings\Administrateur\DoctorWeb\CureIt.log; Can't open
                  C:\Documents and Settings\Administrateur\DoctorWeb\Quarantine\A0000001.exe; OK
                  C:\Documents and Settings\Administrateur\DoctorWeb\Quarantine\Proc.exe; OK
                  C:\Documents and Settings\Administrateur\DoctorWeb\Quarantine\UsbFix.exe; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat; Can't open
                  C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG; Can't open
                  C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\index.dat; Can't open
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\arctic-loop.exe; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\GLC39A.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\GLF395.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\GLF39E.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\GLF3A5.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\GLF3AB.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\GLF3AF.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\GLF3B3.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\GLJ39B.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\H20.exe; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\H2OWISE.dll; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\hGu8YnFX.dll; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\is-7882A.tmp\CheckDll.dll; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\is-7882A.tmp\CloseAll.dll; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\is-7882A.tmp\_isetup\_RegDLL.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\is-7882A.tmp\_isetup\_shfoldr.dll; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\is-HP3FK.tmp\is-7KL6H.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\is-UK782.tmp\is-7ETNQ.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\isp164.tmp\_Setup.dll; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\isp1B.tmp\_Setup.dll; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\isp40.tmp\_Setup.dll; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\isp9.tmp\_Setup.dll; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\RarSFX0\dwebio32.dll; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\RarSFX0\setup.dll; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\RarSFX0\setup.exe; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\RarSFX0\_start.exe; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\set160.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\set17.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\set3C.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\Set5.tmp; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\VSDB.tmp\DotNetFX\dotnetchk.exe; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\Waves4\setup.exe; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\Waves4\Unregister.exe; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\{E2D27B84-6365-11D6-9BAF-0090271AF8A4}\CTCabEx.DLL; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\{E2D27B84-6365-11D6-9BAF-0090271AF8A4}\isrt.dll; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\{E2D27B84-6365-11D6-9BAF-0090271AF8A4}\_IsRes.dll; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temp\{E2D27B84-6365-11D6-9BAF-0090271AF8A4}\_IsUser.dll; OK
                  C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\index.dat; Can't open
                  C:\Documents and Settings\Administrateur\NTUSER.DAT; Can't open
                  C:\Documents and Settings\Administrateur\ntuser.dat.LOG; Can't open
                  C:\Documents and Settings\All Users\Application Data\Nero\Nero\DrWeb\DrWeb32.dll; OK
                  C:\Documents and Settings\All Users\Application Data\Nero\Nero 9\DrWeb\DrWeb32.dll; OK
                  C:\Documents and Settings\LocalService\Cookies\index.dat; Can't open
                  C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat; Can't open
                  C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG; Can't open
                  C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat; Can't open
                  C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat; Can't open
                  C:\Documents and Settings\LocalService\NTUSER.DAT; Can't open
                  C:\Documents and Settings\LocalService\ntuser.dat.LOG; Can't open
                  C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat; Can't open
                  C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG; Can't open
                  C:\Documents and Settings\NetworkService\NTUSER.DAT; Can't open
                  C:\Documents and Settings\NetworkService\ntuser.dat.LOG; Can't open
                  C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroPDF.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroPDF.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\ActiveX\GbDetect.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\ActiveX\pdfshell.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Esl\AiodLite.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\ACE.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\Acrofx32.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32Info.exe; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRdIF.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeLinguistic.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\agldt28l.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\AGM.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\atl.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\AXE16SharedExpat.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\AXE8SharedExpat.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\AXEParser.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\AXSLE.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\BIB.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\CoolType.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\edb1drv.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\edb500x.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\epic_eula.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\esdupdate.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\eularesen_US.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\eularesfr_FR.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\JP2KLib.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\libaglcnv28.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\Onix32.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Accessibility.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\accessibility.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\AcroForm\PMP\AdobePDF417.pmp; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\AcroForm\PMP\DataMatrix.pmp; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\AcroForm\PMP\QRCode.pmp; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\AcroForm.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Acroform.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Annots.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Annots.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Checkers.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Checkers.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\DigSig.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\DigSig.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\eBook.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\eBook.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\EScript.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\EScript.fra; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\EWH32.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\EWH32.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\HLS.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Hls.fra; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\IA32.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\IA32.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\ImageViewer\en_US\svgrsrc.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\ImageViewer\fr_FR\svgrsrc.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\ImageViewer\SVGCore.DLL; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\ImageViewer.API; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\ImageViewer.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\LegalPDF.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\legalpdf.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\MakeAccessible.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\makeaccessible.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia\MPP\Flash.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia\MPP\Flash.mpp; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia\MPP\Mcimpp.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia\MPP\MCIMPP.mpp; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia\MPP\QuickTime.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia\MPP\QuickTime.mpp; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia\MPP\Real.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia\MPP\Real.mpp; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia\MPP\WindowsMedia.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia\MPP\WindowsMedia.mpp; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Multimedia.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PDDom.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\pddom.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks\OLS\OnlineServices.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PictureTasks.fra; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PPKLite.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\PPKLITE.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\reflow.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\reflow.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\SaveAsRTF.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\SaveAsRTF.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Search.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Search.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Search5.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Search5.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\SendMail.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\SendMail.fra; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Soap.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Soap.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Spelling.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Spelling.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Updater.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\updater.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\weblink.api; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins\Weblink.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins3d\2d.x3d; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins3d\3difr.x3d; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins3d\drvDX8.x3d; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins3d\drvDX9.x3d; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins3d\drvSOFT.x3d; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\plug_ins3d\tesselate.x3d; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\RdLang32.FRA; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\rt3d.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\SPPlugins\ADMPlugin.apl; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\Updater\acroaum.exe; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\vdk150.dll; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Setup Files\RdrBig708\FRA\instmsiw.exe; OK
                  C:\Program Files\Adobe\Acrobat 7.0\Setup Files\RdrBig708\FRA\setup.exe; OK
                  C:\Program Files\Altiris\Setup Files\Altiris Philips Smart Manage Administrator\Agent\AeXSetup.exe; OK
                  C:\Program Files\Antares\AutoTuneDX\Antares Autotune DX Uninstall\UNWISE.EXE; OK
                  C:\Program Files\Antares\AutoTuneDX\AutoTune.ax; OK
                  C:\Program Files\Antares\AutoTuneDX\autotune13.ax; OK
                  C:\Program Files\Antares\AutoTuneDX\DirectXRegister.exe; OK
                  C:\Program Files\Antares Audio Technologies\Auto-Tune 5 RTAS\mfc71.dll; OK
                  C:\Program Files\Antares Audio Technologies\Auto-Tune 5 RTAS\mfc71u.dll; OK
                  C:\Program Files\Antares Audio Technologies\Auto-Tune 5 RTAS\msvcp71.dll; OK
                  C:\Program Files\Antares Audio Technologies\Auto-Tune 5 RTAS\msvcr71.dll; OK
                  C:\Program Files\Antares Audio Technologies\Auto-Tune 5 TDM\mfc71.dll; OK
                  C:\Program Files\Antares Audio Technologies\Auto-Tune 5 TDM\mfc71u.dll; OK
                  C:\Program Files\Antares Audio Technologies\Auto-Tune 5 TDM\msvcp71.dll; OK
                  C:\Program Files\Antares Audio Technologies\Auto-Tune 5 TDM\msvcr71.dll; OK
                  C:\Program Files\Antares Audio Technologies\unins000.exe; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\ASUSASV2.ax; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\ASUSASV2.DLL; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\AsusVRC.sys; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\asus_converter.ax; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\converter.dll; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\devcon.exe; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\EMail.exe; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\h263_32.ax; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\msvcp60.dll; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\RtpSender.ax; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\Skins\default_Eng.skn; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\Skins\default_Fr.skn; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\Skins\default_Ger.skn; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\Skins\default_Jap.skn; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\Skins\default_Kor.skn; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\Skins\default_Ru.skn; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\Skins\default_SC.skn; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\Skins\default_TC.skn; OK
                  C:\Program Files\ASUS\ASUS VideoSecurity\VideoSecurity.exe; OK
                  C:\Program Files\ASUS\GameFaceLibrary\ball.ax; OK
                  C:\Program Files\ASUS\GameFaceLibrary\CustomFilterGraph.dll; OK
                  C:\Program Files\ASUS\GameFaceLibrary\GameFaceNode.dll; OK
                  C:\Program Files\ASUS\GameFaceLibrary\GFLocalCore.dll; OK
                  C:\Program Files\ASUS\GameFaceLibrary\GFNetworkCore.dll; OK
                  C:\Program Files\ASUS\GameFaceLibrary\msvcr71.dll; OK
                  C:\Program Files\ASUS\GameFaceLibrary\NetVideo.ax; OK
                  C:\Program Files\ASUS\GameFaceLibrary\SpyFilter.ax; OK
                  C:\Program Files\ASUS\GameFaceLibrary\VIGR.ax; OK
                  C:\Program Files\ASUS\GamerOSD\AudioOnVistaDLL.dll; OK
                  C:\Program Files\ASUS\GamerOSD\GamerOSD.exe; OK
                  C:\Program Files\ASUS\GamerOSD\ImageTransform.dll; OK
                  C:\Program Files\ASUS\GamerOSD\SBS.exe; OK
                  C:\Program Files\ASUS\SmartDoctor\2DTEST.EXE; OK
                  C:\Program Files\ASUS\SmartDoctor\AiPanelUtilityDLL.dll; OK
                  C:\Program Files\ASUS\SmartDoctor\ASUSRC.dll; OK
                  C:\Program Files\ASUS\SmartDoctor\aticlocklib.dll; OK
                  C:\Program Files\ASUS\SmartDoctor\atidgllk.sys; OK
                  C:\Program Files\ASUS\SmartDoctor\atipdlxx.dll; OK
                  C:\Program Files\ASUS\SmartDoctor\atistclk.dll; OK
                  C:\Program Files\ASUS\SmartDoctor\EIO.dll; OK
                  C:\Program Files\ASUS\SmartDoctor\EIO.sys; OK
                  C:\Program Files\ASUS\SmartDoctor\HyperDrive.exe; OK
                  C:\Program Files\ASUS\SmartDoctor\msvcp60.dll; OK
                  C:\Program Files\ASUS\SmartDoctor\nvgpio.dll; OK
                  C:\Program Files\ASUS\SmartDoctor\R5ClkLib.dll; OK
                  C:\Program Files\ASUS\SmartDoctor\ResDLL.dll; OK
                  C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe; OK
                  C:\Program Files\ASUS\SmartDoctor\VOV32.dll; OK
                  C:\Program Files\ASUS\SmartDoctor\xgctl.dll; OK
                  C:\Program Files\Creative\Shared Files\CTRegSvr.exe; OK
                  C:\Program Files\Creative\Shared Files\EmuAudio.pid; OK
                  C:\Program Files\Creative\Shared Files\PdtIdMgr.pid; OK
                  C:\Program Files\Creative Professional\Digital Audio System\E-MU PatchMix DSP\EmuPatchmixDsp.dll; OK
                  C:\Program Files\Creative Professional\Digital Audio System\E-MU PatchMix DSP\EmuPatchMixDSP.exe; OK
                  C:\Program Files\Creative Professional\Digital Audio System\E-MU PatchMix DSP\EmuPatchMixDsp_ps.dll; OK
                  C:\Program Files\Creative Professional\Digital Audio System\E-MU PatchMix DSP\VST\E-DelayCompensator.DLL; OK
                  C:\Program Files\Creative Professional\Digital Audio System\E-MU PatchMix DSP\VST\E-Wire.DLL; OK
                  C:\Program Files\Creative Professional\Digital Audio System\E-MU PatchMix DSP\VST\EmuPowerFX.dll; OK
                  C:\Program Files\Creative Professional\Digital Audio System\Program\setup.exe; OK
                  C:\Program Files\Creative Professional\Digital Audio System\Program\support\i386\ctzapxx.exe; OK
                  C:\Program Files\Creative Professional\Digital Audio System\Program\support\i386\instwdm.dll; OK
                  C:\Program Files\Creative Professional\Digital Audio System\Program\wdm\common\i386\OALINST.EXE; OK
                  C:\Program Files\Creative Professional\Digital Audio System\Program\wdm\lang\i386\inRes.dll; OK
                  C:\Program Files\Creative Professional\Digital Audio System\Program\wdm\win2k_xp\i386\ctcoinst.dll; OK
                  C:\Program Files\Creative Professional\Digital Audio System\Program\wdm\win2k_xp\i386\ctdvinst.dll; OK
                  C:\Program Files\Creative Professional\Enregistrement du produit\French\EMUORReg.exe; OK
                  C:\Program Files\Creative Professional\Enregistrement du produit\French\InetReg.crl; OK
                  C:\Program Files\Creative Professional\Enregistrement du produit\French\InetReg.exe; OK
                  C:\Program Files\Digidesign\DAE\Plug-Ins\WaveShell-DAE 4.0.dpm; OK
                  C:\Program Files\Digidesign\DAE\Plug-Ins\WaveShell-DAE 4.3.dpm; OK
                  C:\Program Files\Easy CD-DA Extractor 12\3g2.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\3g2plus.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\3gp.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\3gpplus.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\aac.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\aacplus.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\acdbase.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\adpcm.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\aiff.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\alac.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\ct.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\decoder_ape.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\decoder_flac.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\decoder_mp4.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\decoder_mpc.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\decoder_ogg.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\decoder_wma.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\decoder_wv.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\ezcddax.exe; OK
                  C:\Program Files\Easy CD-DA Extractor 12\ezcddax32.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\flac.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\id3lib.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\lame.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\libmmd.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\m4a.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\m4aplus.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\m4b.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\monkey.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\mp4.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\mp4plus.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\msvcm90.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\msvcp90.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\msvcr90.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\musepack.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\ntaspi32.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\ogg.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\pcm.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\pcmdual.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\register32.exe; OK
                  C:\Program Files\Easy CD-DA Extractor 12\waveout.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\wavpack.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\wma9.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\wma91.dll; OK
                  C:\Program Files\Easy CD-DA Extractor 12\wma92.dll; OK
                  C:\Program Files\Fichiers communs\Digidesign\DAE\Plug-Ins\AutoTune.dpm; OK
                  C:\Program Files\Fichiers communs\Digidesign\DAE\Plug-Ins\AutoTuneTDM.dpm; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\10\Intel 32\IDriver.exe; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\10\Intel 32\iGdiCnv.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\10\Intel 32\IScrCnv.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\10\Intel 32\ISRT.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\10\Intel 32\IUserCnv.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\10\Intel 32\objpscnv.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\10\Intel 32\_ISRES1033.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriver.exe; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriver2.exe; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\iGdiCnv.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IScrCnv.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\ISRT.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IUserCnv.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\objpscnv.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\_ISRES1033.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\IDriver.exe; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\IDriver2.exe; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\iGdiCnv.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\IScrCnv.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\ISRT.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\IUserCnv.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\objpscnv.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\_ISRES1033.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Engine\6\Intel 32\ctor.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Engine\6\Intel 32\IKernel.exe; OK
                  C:\Program Files\Fichiers communs\InstallShield\Engine\6\Intel 32\ILog.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Engine\6\Intel 32\iuser.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Engine\6\Intel 32\objectps.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\IScript\iscript.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\ctor.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\DotNetInstaller.exe; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iGdi.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iKernel.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iscript.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\iuser.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\09\01\Intel32\setup.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\11\00\Intel32\DotNetInstaller.exe; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\11\00\Intel32\iGdi.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\11\00\Intel32\iKernel.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\11\00\Intel32\iscript.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\11\00\Intel32\iuser.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\11\00\Intel32\setup.dll; OK
                  C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\Objectps.dll; OK
                  C:\Program Files\Fichiers communs\IviSDK\Hauppauge\IviAudio_Hauppauge.ax; OK
                  C:\Program Files\Fichiers communs\IviSDK\Hauppauge\IviVideo_Hauppauge.ax; OK
                  C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.5.0.b64\patch-jre1.5.0_07.b03\launcher.exe; OK
                  C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.5.0.b64\patch-jre1.5.0_07.b03\patchjre.exe; OK
                  C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.5.0.b64\patch-jre1.5.0_07.b03\RegUtils.dll; OK
                  C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.5.0.b64\patch-jre1.5.0_07.b03\zipper.exe; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\DAO\dao360.dll; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\DW\1025\DWINTL20.DLL; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\DW\1028\DWINTL20.DLL; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\DW\1031\DWINTL20.DLL; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\DW\1033\DWINTL20.DLL; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\DW\1036\DWINTL20.DLL; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\DW\1040\DWINTL20.DLL; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\DW\1041\DWINTL20.DLL; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\DW\1042\DWINTL20.DLL; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\DW\2052\DWINTL20.DLL; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\DW\3082\DWINTL20.DLL; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\DW\DW20.EXE; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\DW\DWDCW20.DLL; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\DW\DWTRIG20.EXE; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\Ink\inkobj.dll; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\Ink\tpcps.dll; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\MSInfo\IEINFO5.OCX; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\MSInfo\msinfo32.exe; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\Speech\1036\spcplui.dll; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\Speech\sapi.cpl; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\Speech\sapi.dll; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\Speech\sapisvr.exe; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\TextConv\html32.cnv; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\TextConv\msconv97.dll; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\TextConv\mswrd632.wpc; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\TextConv\mswrd832.cnv; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\TextConv\write32.wpc; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\Triedit\dhtmled.ocx; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\Triedit\TRIEDIT.DLL; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\VC\msdia80.dll; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\VGX\vgx.dll; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\1036\nsextint.dll; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\msonsext.dll; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\MSOWS409.DLL; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\MSOWS40c.DLL; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\pkmws.dll; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\web server extensions\40\bin\fp4autl.dll; OK
                  C:\Program Files\Fichiers communs\Microsoft Shared\web server extensions\40\bin\FP4AWEC.DLL; OK
                  C:\Program Files\Fichiers communs\MSSoap\Binaries\mssoap1.dll; OK
                  C:\Program Files\Fichiers communs\MSSoap\Binaries\Resources\1036\mssoapr.dll; OK
                  C:\Program Files\Fichiers communs\MSSoap\Binaries\wisc10.dll; OK
                  C:\Program Files\Fichiers communs\Nero\AdvrCntr4\AdvrCntr4.dll; OK
                  C:\Program Files\Fichiers communs\Nero\AdvrCntr4\iconv.dll; OK
                  C:\Program Files\Fichiers communs\Nero\AdvrCntr4\NeroPatentActivation.exe; OK
                  C:\Program Files\Fichiers communs\Nero\AdvrCntr4\NOSProductRegistration.dll; OK
                  C:\Program Files\Fichiers communs\Nero\AdvrCntr4\NOSUsageStatistics.dll; OK
                  C:\Program Files\Fichiers communs\Nero\DolbyFiles9\NeAcEnc.dll; OK
                  C:\Program Files\Fichiers communs\Nero\DolbyFiles9\NeDDConv.dll; OK
                  C:\Program Files\Fichiers communs\Nero\DolbyFiles9\NeEacDec2.dll; OK
                  C:\Program Files\Fichiers communs\Nero\DolbyFiles9\neroapl.dll; OK
                  C:\Program Files\Fichiers communs\Nero\DolbyFiles9\NeTrueHdDec.dll; OK
                  C:\Program Files\Fichiers communs\Nero\Nero ProductInstaller 4\ipclog.exe; OK
                  C:\Program Files\Fichiers communs\Nero\Nero ProductInstaller 4\LSDriveDetect.exe; OK
                  C:\Program Files\Fichiers communs\Nero\Nero ProductInstaller 4\ResourceManager.dll; OK
                  C:\Program Files\Fichiers communs\Nero\Nero ProductInstaller 4\SetupX.exe; OK
                  C:\Program Files\Fichiers communs\Nero\Nero ProductInstaller 4\unit_app_30\ShellManager.dll; OK
                  C:\Program Files\Fichiers communs\Nero\Nero ProductInstaller 4\unit_app_30\UnitRes.dll; OK
                  C:\Program Files\Fichiers communs\Nero\Nero ProductInstaller 4\unit_app_4\ShellManager.dll; OK
                  C:\Program Files\Fichiers communs\Nero\Nero ProductInstaller 4\unit_app_4\UnitRes.dll; OK
                  C:\Program Files\Fichiers communs\Nero\Nero ProductInstaller 4\unit_app_6\ShellManager.dll; OK
                  C:\Program Files\Fichiers communs\Nero\Nero ProductInstaller 4\unit_app_6\UnitRes.dll; OK
                  C:\Program Files\Fichiers communs\Nero\SMC\NeroDigitalExt.dll; OK
                  C:\Program Files\Fichiers communs\SpeechEngines\Microsoft\spcommon.dll; OK
                  C:\Program Files\Fichiers communs\SpeechEngines\Microsoft\TTS\1033\spttseng.dll; OK
                  C:\Program Files\Fichiers communs\System\ado\msader15.dll; OK
                  C:\Program Files\Fichiers communs\System\ado\msado15.dll; OK
                  C:\Program Files\Fichiers communs\System\ado\msado20.tlb; OK
                  C:\Program Files\Fichiers communs\System\ado\msado21.tlb; OK
                  C:\Program Files\Fichiers communs\System\ado\msado25.tlb; OK
                  C:\Program Files\Fichiers communs\System\ado\msado26.tlb; OK
                  C:\Program Files\Fichiers communs\System\ado\msado27.tlb; OK
                  C:\Program Files\Fichiers communs\System\ado\msadomd.dll; OK
                  C:\Program Files\Fichiers communs\System\ado\msador15.dll; OK
                  C:\Program Files\Fichiers communs\System\ado\msadox.dll; OK
                  C:\Program Files\Fichiers communs\System\ado\msadrh15.dll; OK
                  C:\Program Files\Fichiers communs\System\ado\msjro.dll; OK
                  C:\Program Files\Fichiers communs\System\directdb.dll; OK
                  C:\Program Files\Fichiers communs\System\msadc\msadce.dll; OK
                  C:\Program Files\Fichiers communs\System\msadc\msadcer.dll; OK
                  C:\Program Files\Fichiers communs\System\msadc\msadcf.dll; OK
                  C:\Program Files\Fichiers communs\System\msadc\msadcfr.dll; OK
                  C:\Program Files\Fichiers communs\System\msadc\msadco.dll; OK
                  C:\Program Files\Fichiers communs\System\msadc\msadcor.dll; OK
                  C:\Program Files\Fichiers communs\System\msadc\msadcs.dll; OK
                  C:\Program Files\Fichiers communs\System\msadc\msadds.dll; OK
                  C:\Program Files\Fichiers communs\System\msadc\msaddsr.dll; OK
                  C:\Program Files\Fichiers communs\System\msadc\msdaprsr.dll; OK
                  C:\Program Files\Fichiers communs\System\msadc\msdaprst.dll; OK
                  C:\Program Files\Fichiers communs\System\msadc\msdarem.dll; OK
                  C:\Program Files\Fichiers communs\System\msadc\msdaremr.dll; OK
                  C:\Program Files\Fichiers communs\System\msadc\msdfmap.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdadc.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdaenum.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdaer.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdaora.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdaorar.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdaosp.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdapml.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdaps.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdasc.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdasql.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdasqlr.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdatl3.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdatt.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msdaurl.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\msxactps.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\oledb32.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\oledb32r.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\sqloledb.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\sqloledb.rll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\sqlxmlx.dll; OK
                  C:\Program Files\Fichiers communs\System\Ole DB\sqlxmlx.rll; OK
                  C:\Program Files\Fichiers communs\System\wab32.dll; OK
                  C:\Program Files\Fichiers communs\System\wab32res.dll; OK
                  C:\Program Files\GameFace Messenger\AceClientDLL.dll; OK
                  C:\Program Files\GameFace Messenger\AceFPT.dll; OK
                  C:\Program Files\GameFace Messenger\acelib.dll; OK
                  C:\Program Files\GameFace Messenger\AceSkin.dll; OK
                  C:\Program Files\GameFace Messenger\AceUtility.dll; OK
                  C:\Program Files\GameFace Messenger\AnimationMenu.dll; OK
                  C:\Program Files\GameFace Messenger\ExtenControl.dll; OK
                  C:\Program Files\GameFace Messenger\FlashPlayer.dll; OK
                  C:\Program Files\GameFace Messenger\GameFace.exe; OK
                  C:\Program Files\GameFace Messenger\GameFaceLib.dll; OK
                  C:\Program Files\GameFace Messenger\language\English\DllResource.dll; OK
                  C:\Program Files\GameFace Messenger\language\Simplified Chinese\DllResource.dll; OK
                  C:\Program Files\GameFace Messenger\language\Traditional Chinese\DllResource.dll; OK
                  C:\Program Files\GameFace Messenger\libcurl.dll; OK
                  C:\Program Files\GameFace Messenger\libeay32.dll; OK
                  C:\Program Files\GameFace Messenger\LibInstall\CheckExist\instmsia.exe; OK
                  C:\Program Files\GameFace Messenger\LibInstall\CheckExist\instmsiw.exe; OK
                  C:\Program Files\GameFace Messenger\LibInstall\CheckExist\setup.exe; OK
                  C:\Program Files\GameFace Messenger\LibInstall\instmsia.exe; OK
                  C:\Program Files\GameFace Messenger\LibInstall\instmsiw.exe; OK
                  C:\Program Files\GameFace Messenger\LibInstall\setup.exe; OK
                  C:\Program Files\GameFace Messenger\MediaResource.dll; OK
                  C:\Program Files\GameFace Messenger\mfc71.dll; OK
                  C:\Program Files\GameFace Messenger\mfc71u.dll; OK
                  C:\Program Files\GameFace Messenger\msvcp71.dll; OK
                  C:\Program Files\GameFace Messenger\msvcr71.dll; OK
                  C:\Program Files\GameFace Messenger\OleImageIM.dll; OK
                  C:\Program Files\GameFace Messenger\PfCore.dll; OK
                  C:\Program Files\GameFace Messenger\SafeGuard.dll; OK
                  C:\Program Files\GameFace Messenger\ssleay32.dll; OK
                  C:\Program Files\InstallShield Installation Information\{2227E1FA-01F5-483C-AB0E-2A308E900B3D}\Setup.exe; OK
                  C:\Program Files\InstallShield Installation Information\{23430AE3-6FFF-47CF-B7E7-1552FC61DF39}\Setup.exe; OK
                  C:\Program Files\InstallShield Installation Information\{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}\setup.exe; OK
                  C:\Program Files\InstallShield Installation Information\{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}\_setup.dll; OK
                  C:\Program Files\InstallShield Installation Information\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}\setup.exe; OK
                  C:\Program Files\InstallShield Installation Information\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}\_setup.dll; OK
                  C:\Program Files\InstallShield Installation Information\{4C4D25EB-6513-4702-8355-F4194DE2E1D9}\Setup.exe; OK
                  C:\Program Files\InstallShield Installation Information\{5633D266-6BAE-41CE-987F-0FE5F5F92D64}\CTCABEX.DLL; OK
                  C:\Program Files\InstallShield Installation Information\{5633D266-6BAE-41CE-987F-0FE5F5F92D64}\setup.exe; OK
                  C:\Program Files\InstallShield Installation Information\{5633D266-6BAE-41CE-987F-0FE5F5F92D64}\_setup.dll; OK
                  C:\Program Files\InstallShield Installation Information\{6ACBC6E4-03D0-422E-A0CA-3BA1A8EF8374}\CTCABEX.DLL; OK
                  C:\Program Files\InstallShield Installation Information\{6ACBC6E4-03D0-422E-A0CA-3BA1A8EF8374}\setup.exe; OK
                  C:\Program Files\InstallShield Installation Information\{6ACBC6E4-03D0-422E-A0CA-3BA1A8EF8374}\_setup.dll; OK
                  C:\Program Files\InstallShield Installation Information\{C9BED750-1211-4480-B1A5-718A3BE15525}\setup.exe; OK
                  C:\Program Files\InstallShield Installation Information\{C9BED750-1211-4480-B1A5-718A3BE15525}\_setup.dll; OK
                  C:\Program Files\InstallShield Installation Information\{E2D27B84-6365-11D6-9BAF-0090271AF8A4}\Setup.exe; OK
                  C:\Program Files\Internet Explorer\Connection Wizard\icwconn.dll; OK
                  C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe; OK
                  C:\Program Files\Internet Explorer\Connection Wizard\icwconn2.exe; OK
                  C:\Program Files\Internet Explorer\Connection Wizard\icwdl.dll; OK
                  C:\Program Files\Internet Explorer\Connection Wizard\icwhelp.dll; OK
                  C:\Program Files\Internet Explorer\Connection Wizard\icwres.dll; OK
                  C:\Program Files\Internet Explorer\Connection Wizard\icwrmind.exe; OK
                  C:\Program Files\Internet Explorer\Connection Wizard\icwtutor.exe; OK
                  C:\Program Files\Internet Explorer\Connection Wizard\icwutil.dll; OK
                  C:\Program Files\Internet Explorer\Connection Wizard\inetwiz.exe; OK
                  C:\Program Files\Internet Explorer\Connection Wizard\isignup.exe; OK
                  C:\Program Files\Internet Explorer\Connection Wizard\trialoc.dll; OK
                  C:\Program Files\Internet Explorer\HMMAPI.DLL; OK
                  C:\Program Files\Internet Explorer\iedw.exe; OK
                  C:\Program Files\Internet Explorer\IEXPLORE.EXE; OK
                  C:\Program Files\Internet Explorer\MUI\0409\mscorier.dll; OK
                  C:\Program Files\Internet Explorer\MUI\040C\mscorier.dll; OK
                  C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll; OK
                  C:\Program Files\Internet Explorer\PLUGINS\nppdf32.FRA; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\awt.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\axbridge.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\client\jvm.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\cmm.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\dcpr.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\deploy.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\dt_shmem.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\dt_socket.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\eula.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\fontmanager.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\hpi.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\hprof.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\instrument.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\ioser12.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\j2pkcs11.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\jaas_nt.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\java.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\java.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\javacpl.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\javaw.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\JavaWebStart.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\javaws.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\java_crw_demo.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\jawt.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\JdbcOdbc.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\jdwp.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\jpeg.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\jpicom32.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\jpicpl32.cpl; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\jpiexp32.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\jpinscp.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\jpioji.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\jpishare.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\jsound.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\jsoundds.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\jucheck.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\keytool.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\kinit.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\klist.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\ktab.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\management.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\net.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\nio.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\NPJava11.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\NPJava12.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\NPJava13.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\NPJava14.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\NPJava32.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\NPJPI150_07.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\NPOJI610.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\orbd.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\pack200.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\policytool.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\RegUtils.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\rmi.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\rmid.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\rmiregistry.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\servertool.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\tnameserv.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\unicows.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\unpack.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\unpack200.exe; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\verify.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\w2k_lsa_auth.dll; OK
                  C:\Program Files\Java\jre1.5.0_07\bin\zip.dll; OK
                  C:\Program Files\JEUX\Arcade.exe; OK
                  C:\Program Files\JEUX\Disasteroids3D\Disasteroids3D.exe; OK
                  C:\Program Files\JEUX\Light3D\lights3d.exe; OK
                  C:\Program Files\JEUX\Minesweeper3D\Minesweeper3D.exe; OK
                  C:\Program Files\JEUX\Minesweeper3D\mingwm10.dll; OK
                  C:\Program Files\JEUX\SpaceInvaders3D\SpaceInvadersOpenGL.exe; OK
                  C:\Program Files\Malwarebytes' Anti-Malware\mbam-dor.exe; OK
                  C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll; OK
                  C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe; OK
                  C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll; OK
                  C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe; OK
                  C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe; OK
                  C:\Program Files\Malwarebytes' Anti-Malware\ssubtmr6.dll; OK
                  C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe; OK
                  C:\Program Files\Malwarebytes' Anti-Malware\vbalsgrid6.ocx; OK
                  C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll; OK
                  C:\Program Files\Messenger\custsat.dll; OK
                  C:\Program Files\Messenger\Msgsc.dll; OK
                  C:\Program Files\Messenger\msgslang.dll; OK
                  C:\Program Files\Messenger\msimmsgr.dll; OK
                  C:\Program Files\Messenger\msimnetc.dll; OK
                  C:\Program Files\Messenger\Msmsgs.exe; OK
                  C:\Program Files\Messenger\msvcr71.dll; OK
                  C:\Program Files\Messenger\rtcimsp.dll; OK
                  C:\Program Files\Microsoft Office\PowerPoint Viewer\GDIPLUS.DLL; OK
                  C:\Program Files\Microsoft Office\PowerPoint Viewer\INTLDATE.DLL; OK
                  C:\Program Files\Microsoft Office\PowerPoint Viewer\PPTVIEW.EXE; OK
                  C:\Program Files\Microsoft Office\PowerPoint Viewer\PPVWINTL.DLL; OK
                  C:\Program Files\Microsoft Office\PowerPoint Viewer\SAEXT.DLL; OK
                  C:\Program Files\Microsoft Office\PowerPoint Viewer\UNICOWS.DLL; OK
                  C:\Program Files\Movie Maker\moviemk.exe; OK
                  C:\Program Files\Movie Maker\WMM2AE.dll; OK
                  C:\Program Files\Movie Maker\WMM2ERES.dll; OK
                  C:\Program Files\Movie Maker\WMM2EXT.dll; OK
                  C:\Program Files\Movie Maker\WMM2FILT.dll; OK
                  C:\Program Files\Movie Maker\WMM2FXA.dll; OK
                  C:\Program Files\Movie Maker\WMM2FXB.dll; OK
                  C:\Program Files\Movie Maker\WMM2RES.dll; OK
                  C:\Program Files\Movie Maker\WMM2RES2.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\bckg.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\bckgres.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\bckgzm.exe; OK
                  C:\Program Files\MSN Gaming Zone\Windows\chkr.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\chkrres.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\chkrzm.exe; OK
                  C:\Program Files\MSN Gaming Zone\Windows\Cmnclim.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\Cmnresm.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\hrtz.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\Hrtzres.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\hrtzzm.exe; OK
                  C:\Program Files\MSN Gaming Zone\Windows\rvse.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\Rvseres.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\Rvsezm.exe; OK
                  C:\Program Files\MSN Gaming Zone\Windows\shvl.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\Shvlres.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\shvlzm.exe; OK
                  C:\Program Files\MSN Gaming Zone\Windows\UniAnsi.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\zClientm.exe; OK
                  C:\Program Files\MSN Gaming Zone\Windows\ZCorem.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\zeeverm.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\ZNetM.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\zoneclim.dll; OK
                  C:\Program Files\MSN Gaming Zone\Windows\zonelibM.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\APM_AC3.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\APM_Aiff.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\APM_Audible.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\APM_DefConvertor.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\APM_mp3PP.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\APM_mp3pro.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\APM_MSAxp.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\APM_NeFlac.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\APM_NeroDigital.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\APM_NeroStarter.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\APM_OGG.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\APM_Wav.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\AudioPluginMgr.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\lame_enc.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\lpaccodec.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\lpac_codec_api.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\MusePack\MPPDEC.EXE; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\MusePack\MPPENC.EXE; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\nxLame.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\nxMyAPE.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\nxMyFLA.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\nxMyLPAC.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\nxMyMPC.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\nxMyOFR.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\nxMyOgg.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\nxMySHN.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\OFR.EXE; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\Shorten\CYGWIN1.DLL; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\AudioPluginMgr\Shorten\SHORTEN.EXE; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBPRO860u80.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResCSY.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResDAN.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResDEU.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResELL.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResESP.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResFIN.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResFRA.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResHUN.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResITA.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResNLD.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResNOR.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResPLK.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResPTB.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResRUS.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResSVE.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGCBProResTRK.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\BCGPOleAcc.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\CoverEdCtrl\CoverEdCtrl.ocx; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\DriveLocker.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\InFAudioRippingServer.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\KARAOKE.DLL; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\LLS.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\MPGEnc.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeDwFileHelper.exe; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\Nero.BDGraphic\NeBDGraphic.ax; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\Nero.BDThumbnail\NeBDThumbnail.ax; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\Nero.DiscNavBD\DiscNavBD.ax; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\Nero.DiscNavDvd\DiscNavDvd.ax; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\Nero.DiscNavVcd\DiscNavVcd.ax; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\Nero.exe; Corrupt
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\Nero.HttpManager\NeHttpManager.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\Nero.NeDiscManager\NeDiscManager.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\Nero.NeDiscRecog\NeDiscRecog.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroAPI.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroAPIEngine.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroAPIGlueLayerUnicode.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroAPIUnicode.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroAudioRip.exe; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroCmd.exe; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroCSY.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroDAN.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroDEU.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroELL.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroESP.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroFIN.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroFRA.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroHUN.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroITA.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroNLD.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroNOR.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroPLK.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroPTB.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroRUS.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroStarter.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroSVE.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NeroTRK.nls; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NFD\NeroFileDialog.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NFD\NeroFileDialogCF.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NFD\NeroFileDialogIDLPS.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NFD\NeroFileDialogVista.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NMDllHost.exe; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NScCoreComponents\log4cxx.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NScCoreComponents\NMCoFoundation.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NScCoreComponents\NMDataServices.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NScCoreComponents\NMLogCxx.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NScCoreComponents\NMPluginBase.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NScCoreComponents\NMSearch.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\NScCoreComponents\NMSearchPluginFileSystem.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbAFX3.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbClean.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbCMSig_1_3.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CDDBControl.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbFEX.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbFPX1.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbLangDE.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbLangES.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbLangFR.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbLangIT.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbLangJA.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbLangKO.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbLangNL.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbLangPT_BR.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbLangRU.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbLangSV.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbLangTH.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbLangZH.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbLangZT.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbLink.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbMusicID.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbMusicIDUI.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbPlaylist2.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbS12T.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CDDBUI.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\CddbWOManager.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\iconv.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\NOSHttp.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\NOSInternetServices.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\NOSMetaData.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\NOSMyNeroRegistration.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\NOSWebCommunity.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\OnlineServices\NOSWebDSPlugin.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\PTT\NMCDRip.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\PTT\NMPlaybackComponent.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\PTT\NMSlideShow.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\PTT\NMSSEffects.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\PTT\NMThumbnailIconsGen.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\PTT\NMTTranscoder.dll; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\SecurDisc\discinfo.exe; OK
                  C:\Program Files\Nero\Nero 9\Nero Burning ROM\SMC\AReadyLB_Nero.dll; OK
                  C:\Program
                  1. afideg Contributeur sécurité
                    Bonjour,

                    Euh!
                    C'est quoi ce Rmmabez : Remover for Win32/Mabezat ===
                    Est-ce contenu dans l'analyse de DrWeb ?

                    Ou est-ce plutôt le résultat (incomplet) de ceci: http://www.avg.com/fr.52.ndi-93495
                    Téléchargez les fichiers suivants rmmabez.exe et rmmabez.nt.
                    Qui l'a demandé ?
                    Merci

                    Al.
                    -

                    Patience-Vigilance-Amour.
                    1. Destrio5 Modérateur
                      https://www.avg.com/fr-fr/virus-removal
                      1. afideg Contributeur sécurité
                        Re,
                        Salut Destrio5
                        Ce lien, je l'avais noté plus haut: mais je ne vois pas qui a demandé cette application à l'internaute .

                        Par contre, je trouve bizarre/anormal que cet outil annonce correctes de grosses failles de sécurité sur des programmes non à jour, tels que :

                        -C:\Program Files\Java\jre1.5.0_07\bin\javaw.exe; OK
                        -C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.5.0.b64\patch-jre1.5.0_07.b03\launcher.exe; OK
                        -C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll; OK

                        Bonne semaine
                        Al.
                      2. Bouboule
                        @afidegBonjour,

                        Oui afideg rmmabez c'est bien ce que tu me dis, j'a ifais un scan Bitdefender cette après midi, voici le log :

                        BitDefender Online Scanner

                        Rapport d'analyse généré à: Mon, Feb 16, 2009 - 17:02:29

                        Voie d'analyse: A:\;C:\;D:\;E:\;F:\;G:\;H:\;I:\;J:\;K:\;L:\;M:\;N:\;

                        Statistiques

                        Temps
                        05:17:45

                        Fichiers
                        1212928

                        Directoires
                        16621

                        Secteurs de boot
                        0

                        Archives
                        9430

                        Paquets programmes
                        53745

                        Résultats

                        Virus identifiés
                        6

                        Fichiers infectés
                        222

                        Fichiers suspects
                        0

                        Avertissements
                        0

                        Désinfectés
                        0

                        Fichiers effacés
                        222

                        Info sur les moteurs

                        Définition virus
                        2670015

                        Version des moteurs
                        AVCORE v1.7 (build 8314.19) (i386) (Sep 29 2008 17:19:14)

                        Analyse des plugins
                        17

                        Archive des plugins
                        45

                        Unpack des plugins
                        7

                        E-mail plugins
                        6

                        Système plugins
                        4

                        Paramètres d'analyse

                        Première action
                        Désinfecté

                        Seconde Action
                        Supprimé

                        Heuristique
                        Oui

                        Acceptez les avertissements
                        Oui

                        Extensions analysées
                        *;

                        Excludez les extensions

                        Analyse d'emails
                        Oui

                        Analyse des Archives
                        Oui

                        Analyser paquets programmes
                        Oui

                        Analyse des fichiers
                        Oui

                        Analyse de boot
                        Oui

                        Fichier analysé
                        Statut

                        C:\Documents and Settings\Administrateur\Bureau\Accessoires\Instal\Power.Video.Converter.1.6.2.BY-MAFIAROX.rar=>KEYGEN\PowerVideoConverterKeygen.exe
                        Infecté par: Trojan.Packed.38827

                        C:\Documents and Settings\Administrateur\Bureau\Accessoires\Instal\Power.Video.Converter.1.6.2.BY-MAFIAROX.rar=>KEYGEN\PowerVideoConverterKeygen.exe
                        Supprimé

                        C:\Documents and Settings\Administrateur\Bureau\Accessoires\Instal\Power.Video.Converter.1.6.2.BY-MAFIAROX.rar
                        Echec de la mise à jour

                        D:\Recycled\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\Recycled\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\Recycled\MyDocuments.rar
                        Echec de la mise à jour

                        D:\RECYCLER\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-1957994488-1715567821-725345543-1004\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-1957994488-1715567821-725345543-1004\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-1957994488-1715567821-725345543-1004\office_crack.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-555117014-3899632600-1319491127-1007\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-555117014-3899632600-1319491127-1007\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-555117014-3899632600-1319491127-1007\windows.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df10\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df10\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df10\documents_backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Flangus\Artwork\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Flangus\Artwork\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Flangus\Artwork\MyDocuments.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Formula Controller\Artwork\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Formula Controller\Artwork\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Formula Controller\Artwork\backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity LSD\Artwork\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity LSD\Artwork\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity LSD\Artwork\documents_backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity PanOMatic\Artwork\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity PanOMatic\Artwork\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity PanOMatic\Artwork\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Parametric EQ\Artwork\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Parametric EQ\Artwork\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Parametric EQ\Artwork\source.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Peak Controller\Artwork\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Peak Controller\Artwork\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Peak Controller\Artwork\windows_secrets.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Scratcher\Artwork\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Scratcher\Artwork\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Scratcher\Artwork\passwords.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Send\Artwork\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Send\Artwork\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Send\Artwork\serials.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Soft Clipper\Artwork\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Soft Clipper\Artwork\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Soft Clipper\Artwork\office_crack.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Spectroman\Artwork\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Spectroman\Artwork\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Spectroman\Artwork\windows.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Stereo Enhancer\Artwork\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Stereo Enhancer\Artwork\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Stereo Enhancer\Artwork\MyDocuments.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Vocoder\Artwork\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Vocoder\Artwork\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Vocoder\Artwork\MyDocuments.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity WaveShaper\Artwork\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity WaveShaper\Artwork\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity WaveShaper\Artwork\backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity WaveShaper\Data\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity WaveShaper\Data\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity WaveShaper\Data\documents_backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity WaveShaper\Data\Maps\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity WaveShaper\Data\Maps\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity WaveShaper\Data\Maps\backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Wrapper\Artwork\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Wrapper\Artwork\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity Wrapper\Artwork\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity X-Y Controller\Artwork\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity X-Y Controller\Artwork\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity X-Y Controller\Artwork\documents_backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity X-Y Controller\Artwork\Skins\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity X-Y Controller\Artwork\Skins\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Effects\Fruity X-Y Controller\Artwork\Skins\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\FL Slayer\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\FL Slayer\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\FL Slayer\MyDocuments.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\FPC\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\FPC\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\FPC\documents_backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruit Kick\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruit Kick\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruit Kick\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DrumSynth Live\Artwork\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DrumSynth Live\Artwork\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DrumSynth Live\Artwork\backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DrumSynth Live\Data\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DrumSynth Live\Data\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DrumSynth Live\Data\documents_backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DrumSynth Live\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DrumSynth Live\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DrumSynth Live\source.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DX10\Artwork\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DX10\Artwork\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DX10\Artwork\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DX10\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DX10\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity DX10\passwords.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Granulizer\Artwork\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Granulizer\Artwork\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Granulizer\Artwork\windows_secrets.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Granulizer\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Granulizer\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Granulizer\serials.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Keyboard Controller\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Keyboard Controller\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Keyboard Controller\office_crack.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Slicer\Artwork\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Slicer\Artwork\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Slicer\Artwork\serials.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Slicer\Data\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Slicer\Data\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Fruity Slicer\Data\windows.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Plucked!\Artwork\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Plucked!\Artwork\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Plucked!\Artwork\MyDocuments.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\ReWired\Artwork\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\ReWired\Artwork\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\ReWired\Artwork\backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\SimSynth\Artwork\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\SimSynth\Artwork\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\SimSynth\Artwork\documents_backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Artwork\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Artwork\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Artwork\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\DX7Algos\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\DX7Algos\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\DX7Algos\windows_secrets.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\Envelopes\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\Envelopes\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\Envelopes\passwords.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\LFO\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\LFO\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\LFO\serials.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\Maps\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\Maps\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\Maps\office_crack.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Sytrus\Data\source.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Wasp\Artwork\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Wasp\Artwork\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\Fruity\Generators\Wasp\Artwork\windows.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df11\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\3x Osc\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\3x Osc\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\3x Osc\documents_backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\Automation Clips\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\Automation Clips\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\Automation Clips\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\BeepMap\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\BeepMap\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\BeepMap\source.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\Fruity slicer\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\Fruity slicer\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\Fruity slicer\windows_secrets.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\Layers\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\Layers\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\Layers\serials.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\Plucked!\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\Plucked!\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Channel presets\Plucked!\office_crack.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\D'n'B samples\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\D'n'B samples\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\D'n'B samples\MyDocuments.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Dance\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Dance\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Dance\backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Dance 1 samples\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Dance 1 samples\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Dance 1 samples\documents_backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Dance 2 samples\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Dance 2 samples\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Dance 2 samples\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Destinct samples\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Destinct samples\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Destinct samples\source.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\DrumLoops\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\DrumLoops\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\DrumLoops\windows_secrets.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\DrumSynth\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\DrumSynth\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\DrumSynth\passwords.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Drun'n'Bass samples\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Drun'n'Bass samples\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Drun'n'Bass samples\serials.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Dub samples\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Dub samples\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Dub samples\office_crack.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Earth samples\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Earth samples\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Earth samples\windows.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\FPC\Cymbals\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\FPC\Cymbals\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\FPC\Cymbals\serials.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\FPC\Hi Hats\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\FPC\Hi Hats\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\FPC\Hi Hats\office_crack.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\FPC\Kick Drums\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\FPC\Kick Drums\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\FPC\Kick Drums\windows.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Off Topic samples\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Off Topic samples\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Off Topic samples\documents_backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\ONESHO~1\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\ONESHO~1\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\ONESHO~1\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Pads\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Pads\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Pads\source.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Percs\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Percs\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Percs\windows_secrets.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\PERCUS~1\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\PERCUS~1\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\PERCUS~1\passwords.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\PIANOS\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\PIANOS\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\PIANOS\serials.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\REAKTOR samples\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\REAKTOR samples\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\REAKTOR samples\office_crack.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\RealDrumkits\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\RealDrumkits\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\RealDrumkits\windows.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 B-3 02\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 B-3 02\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 B-3 02\backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 BLP 02\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 BLP 02\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 BLP 02\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 CLA 01\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 CLA 01\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 CLA 01\source.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 DLP 01\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 DLP 01\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 DLP 01\passwords.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 DLP 04\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 DLP 04\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 DLP 04\serials.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 GLK 02\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 GLK 02\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Reggae Sample\Partition A\060 GLK 02\windows.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\12BSNARE\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\12BSNARE\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\12BSNARE\MyDocuments.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\basskt1\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\basskt1\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\basskt1\backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\BITKICKS\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\BITKICKS\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\BITKICKS\documents_backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\CLOSHATS\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\CLOSHATS\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\CLOSHATS\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\DANCEKIC\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\DANCEKIC\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\DANCEKIC\source.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\DRYKICKS\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\DRYKICKS\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\DRYKICKS\windows_secrets.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\DRYSNARE\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\DRYSNARE\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\DRYSNARE\passwords.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\elecdk1\Claps\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\elecdk1\Claps\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\elecdk1\Claps\office_crack.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\elecdk1\Crashes\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\elecdk1\Crashes\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\elecdk1\Crashes\windows.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\elecdk1\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\elecdk1\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\elecdk1\serials.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\hiphopdk1\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\hiphopdk1\office_crack.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\hiphopdk1\office_crack.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\instrkt1\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\instrkt1\windows.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\instrkt1\windows.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\OPENHATS\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\OPENHATS\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\OPENHATS\MyDocuments.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\percukt1\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\percukt1\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\percukt1\backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\RECSNARE\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\RECSNARE\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\RECSNARE\documents_backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\rockdk1\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\rockdk1\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\rockdk1\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\RolandDrRythemDrumMachine\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\RolandDrRythemDrumMachine\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\RolandDrRythemDrumMachine\source.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\SECKICKS\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\SECKICKS\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\SECKICKS\windows_secrets.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\WETKICKS\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\WETKICKS\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\WETKICKS\passwords.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\WETSNARE\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\WETSNARE\serials.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sample Packs\WETSNARE\serials.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\SimSynth\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\SimSynth\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\SimSynth\MyDocuments.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\SimSynth2\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\SimSynth2\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\SimSynth2\backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\SNAREP~1\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\SNAREP~1\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\SNAREP~1\documents_backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Soul samples\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Soul samples\imp_data.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Soul samples\imp_data.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Steveland's Vinylkit samples\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Steveland's Vinylkit samples\source.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Steveland's Vinylkit samples\source.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Strings\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Strings\windows_secrets.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Strings\windows_secrets.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Strom samples\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Strom samples\passwords.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Strom samples\passwords.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sytrus\Bass\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sytrus\Bass\MyDocuments.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sytrus\Bass\MyDocuments.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sytrus\Bell\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sytrus\Bell\backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Supprimé

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sytrus\Bell\backup.rar
                        Echec de la mise à jour

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sytrus\Brass\documents_backup.rar=>Documents and Settings\MyDocuments\Readme.doc .exe
                        Infecté par: Win32.Worm.Mabezat.J

                        D:\RECYCLER\S-1-5-21-583907252-861567501-725345543-1004\Df12\Patches\Packs\Sytrus\Brass\documents_backup
                    2. Bouboule
                      Bonjour, cette nuit j'ai fais un scan avec Avast avant le démarage, j'ai du l'intérompre a 99% mais il n'a trouvé que quelques fichiers infectés (que je n'ai pas supprimé), voici le rapport :

                      16/02/2009 18:45
                      Analyse de tous les lecteurs locaux

                      Fichier C:\Documents and Settings\Administrateur\Mes documents\RCX1C.tmp est infecté par Win32:Mabezat, Supprimé
                      Fichier C:\Program Files\Creative Professional\Digital Audio System\E-MU PatchMix DSP\emupatchmixdsp.exe est infecté par Win32:Mabezat [Wrm], Réparer: Erreur 42060 {Le fichier n'a pas été réparé.}, Supprimé
                      Fichier C:\Program Files\Easy CD-DA Extractor 12\ezcddax.exe est infecté par Win32:Mabezat [Wrm], Supprimé
                      Fichier K:\Archives\Studio (C) 04-11-07\norton\NIS\Support\NSC\NSCCore\SecCon\NSCSRVCE.EXE est infecté par Win32:Mabezat [Wrm], Supprimé
                      Fichier L:\Steinberg\Cubase SX\Cubasesx.exe est infecté par Win32:Mabezat [Wrm]

                      Analyse interrompue
                      Nombre de dossiers parcourus : 14680
                      Nombre de fichiers analysés : 747552
                      Nombre de fichiers infectés : 5

                      Qu'en dites vous ? J'essais de nettoyer ces quelques fichiers et vous pensez que le problème sera alors résolu ?
                      Et pour l'avenir, avec quoi devrais-je scanner les clé USB et disques durs externes de mes clients, Avast suffit ?

                      Merci encore !

                      Discussions similaires

                      Fiabilité B-part ?
                      rachidsa

                      9 réponses
                      Softonic,est-ce un virus ?
                      techmel1

                      6 réponses
                      Chrome://newtab
                      Nova

                      14 réponses
                      boutons B et C allumés sur mon imprimante CANON PIXMA TS3350
                      linotte28

                      1 réponse
                      Désinstaller Softonic
                      Diguimette

                      5 réponses