Desinfector

zanga06 Messages postés 16 Statut Membre -  
crapoulou Messages postés 28002 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
Bonjour,
je sui a la recherche d'un logiciel pour desinfecter mon ordi qui es infecter par un ta de virus. on ma conseiler desinfector mais je sai pas ou le trouver.aider moi s'il vous plais.
Configuration: Windows XP
Internet Explorer 6.0

7 réponses

  1. crapoulou Messages postés 28002 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   8 046
     
    Salut,
    Les logiciels pour désinfecter dépendent de ton infection.
    On va voir ensemble par quoi est infecté ton PC :

    - Télécharge HijackThis Version 2.02 :
    = = = = >>> En cliquant ici <<< = = = =

    - Enregistre HJTInstall.exe sur ton bureau.
    - Fais un double-clic (gauche) sur HJTInstall.exe afin de lancer l’installation
    - Clique sur Install ensuite sur « I Accept »
    - Clique sur « Do a scan system and save log file »
    - Le bloc-notes s’ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse.
    0
  2. crapoulou Messages postés 28002 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   8 046
     
    Je dois m'absenter.
    A + tard.
    0
  3. zanga06 Messages postés 16 Statut Membre
     
    bjr voici ce vous m'aviez demandez merci d'avance :

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 19:17:58, on 26/02/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\issat.exe
    C:\Program Files\Winamp\winampa.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
    C:\Documents and Settings\mous\Menu Démarrer\Programmes\Démarrage\Dos Optimizer.pif
    C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
    C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
    C:\Documents and Settings\tazebama.dl_
    C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ask.askredir.com/search/cfg_redir2.jhtml?id=IF&ptb=D0087022-9CE0-42D0-BC61-7FF16A97B6DF&url=http://www.ask.com/&l=dis&o=13010
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://ask.askredir.com/...
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O4 - HKLM\..\Run: [issat] C:\WINDOWS\system32\issat.exe
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [cdoosoft] C:\WINDOWS\system32\olhrwef.exe
    O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Srchasst" (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [nlpo_05] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [nlpo_06] rundll32 advpack.dll,LaunchINFSection nlite.inf,nLiteReg (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [nlpo_07] rundll32 advpack.dll,LaunchINFSection nlite.inf,S (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\Srchasst" (User 'Default user')
    O4 - S-1-5-20 Startup: Démarrage.exe (User 'SERVICE RÉSEAU')
    O4 - S-1-5-18 Startup: Démarrage.exe (User 'SYSTEM')
    O4 - .DEFAULT Startup: Démarrage.exe (User 'Default user')
    O4 - .DEFAULT User Startup: Démarrage.exe (User 'Default user')
    O4 - Startup: Dos Optimizer.pif = ?
    O4 - Startup: Démarrage.exe
    O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
    O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
    O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
    O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
    O4 - Global Startup: Démarrage.exe
    O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
    0
  4. crapoulou Messages postés 28002 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   8 046
     
    Salut,
    Te version piratée de Windows et ta version pas à jour d'Internet font de ton PC un aimant à virus !

    Relance Hijackthis.
    Clic sur "Do a system scan only".
    Coche ces lignes :
    O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
    Clic ensuite sur fix checked.

    ****************
    Ensuite
    ****************

    ANALYSE DE TON PC AVEC AVP TOOL

    Le scan va s'effectuer en Mode Sans Echec: comme tu n'auras pas accès à Internet, je te conseille d'imprimer cette procédure.

    * Télécharge et enregistre sur ton Bureau le scanner portable AVP TOOL :
    = = = =>>> En cliquant ici <<<= = = =

    Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
    * Redémarre ton ordinateur
    * Après avoir entendu l'ordinateur bipper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
    * A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
    * Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
    * Choisis ton compte.
    * Connecte éventuellement tes clés USB et disques externes.

    * Lance l'exécutable intitulé "setup_7.0xxxxx" en double-cliquant dessus
    * Réponds "Oui" à la question "Do you want to continue installation? "
    * Clique sur "Next" pour les deux fenêtres suivantes : AVP TOOL s’installe sur ton Bureau dans un dossier nommé "Kaspersky Lab Tool".
    * Si nécessaire, branche tes périphériques amovibles (clés USB, disque dur externe...)
    * L’outil se lance tout seul : coche toutes les cases dans l'onglet "Automatic Scan".
    * Clique maintenant sur "Security Level": une fenêtre de configuration s’ouvre : paramètre le scanner comme sur l’image :
    http://www.cijoint.fr/cjlink.php?file=cj200902/cijwizBVEu.pn¬g

    * Valide avec "Apply" puis "OK"
    * L'outil est maintenant configuré: dans la fenêtre principale, clique sur "Scan". Le scan commence, une nouvelle fenêtre s'ouvre indiquant la progression du balayage en pourcentage.
    * A la fin du scan, AVP Tool signale les objets infectés par l'intermédiaire d'une pop-up: coche alors "Apply to all" et clique sur "Delete" ou "Disinfect" selon ce que propose la fenêtre :

    * Une fois les infections traitées par l’intermédiaire des pop-ups, il se peut que des fichiers malsains n'aient pas été supprimés: ils apparaissent en rouge dans la liste: clique alors sur le bouton "Neutralize all" de la fenêtre de progression du scan: si une pop-up indique qu'il faut redémarrer, accepte en cliquant sur "OK".
    * Rends-toi maintenant dans l'onglet "Events" de la fenêtre de progression du scan, et décoche "Show all events"
    * Clique enfin sur "Reports" puis "Save to file" et enregistre le rapport sur ton Bureau sous le nom Rapport AVP TOOL
    * Ferme les fenêtres d’AVP Tool : un message apparaît proposant de désinstaller le logiciel: choisis "YES"

    * Un message d'alerte indique que le PC doit être redémarré pour finir la désinstallation:

    A la question "Would you like to restart now", réponds "OUI" et redémarre ton ordinateur en Mode normal.
    * Poste le rapport en pièce jointe dans ta prochaine réponse.
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. zanga06 Messages postés 16 Statut Membre
     
    bjr tous d'abord je vous remerci de l'aide que vous m'avier aporter 'jai fais tous ce que vous m'avier demander.il a suprimer beaucoup de virus mais après il ya d'autre qui revienne voici ce que vous m'aviez demander:
    Scan
    ----
    Scanned: 100419
    Detected: 2029
    Untreated: 0
    Start time: 01/03/2008 12:53:05
    Duration: 03:42:09
    Finish time: 01/03/2008 16:35:14

    Detected
    --------
    Status Object
    ------ ------
    will be deleted when the computer is restarted: Trojan program Trojan-GameThief.Win32.Magania.avgo File: C:\WINDOWS\system32\nmdfgds0.dll
    will be deleted when the computer is restarted: virus Worm.Win32.VB.aam File: C:\WINDOWS\system32\issat.exe
    will be disinfected when the computer is restarted: virus Virus.Win32.Sality.aa File: C:\Program Files\Winamp\winampa.exe
    will be deleted when the computer is restarted: virus Worm.Win32.Delf.dw File: C:\Documents and Settings\mous\Menu Démarrer\Programmes\Démarrage\Dos Optimizer.pif
    will be deleted when the computer is restarted: virus Worm.Win32.Mabezat.b File: C:\Documents and Settings\tazebama.dll
    deleted: virus Worm.Win32.Mabezat.b File: C:\Documents and Settings\tazebama.dl_
    will be disinfected when the computer is restarted: virus Worm.Win32.Mabezat.b File: C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
    will be disinfected when the computer is restarted: virus Worm.Win32.Mabezat.b File: C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\windows\system32\notepad.exe
    disinfected: virus Virus.Win32.Sality.aa File: c:\program files\windows media player\wmplayer.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\program files\outlook express\wab.exe
    disinfected: virus Virus.Win32.Sality.aa File: c:\program files\gretech\gomplayer\gom.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\program files\internet explorer\iexplore.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\windows\system32\ntbackup.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\program files\windows nt\accessoires\wordpad.exe
    deleted: virus Worm.Win32.VB.aam File: c:\program files\erightsoft\super\super.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\program files\winamp\winamp.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\windows\system32\cmd.exe
    deleted: Trojan program Packed.Win32.Krap.g File: c:\windows\system32\olhrwef.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\program files\netmeeting\conf.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\program files\windows nt\dialer.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\windows\pchealth\helpctr\binaries\helpctr.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\program files\movie maker\moviemk.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\windows\pchealth\helpctr\binaries\msconfig.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\program files\outlook express\msimn.exe
    disinfected: virus Virus.Win32.Sality.aa File: c:\program files\messenger\msmsgs.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\windows\system32\mspaint.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\program files\windows nt\pinball\pinball.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\program files\outlook express\wabmig.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Démarrage.exe
    deleted: virus Worm.Win32.VB.aam File: C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Démarrage\Démarrage.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\NetworkService.AUTORITE NT\Menu Démarrer\Programmes\Démarrage\Démarrage.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\mous\Menu Démarrer\Programmes\Démarrage\Démarrage.exe
    disinfected: virus Worm.Win32.Mabezat.b File: c:\windows\bricopacks\vista inspirat 2\transbar\transbar.exe
    deleted: virus Worm.Win32.VB.aam File: c:\windows\bricopacks\vista inspirat 2\ubericon\ubericon.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\mous\Mes documents\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\mous\Mes documents\Audio\Audio.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\mous\Mes documents\GomPlayer\GomPlayer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\mous\Mes documents\GomPlayer\Capture\Capture.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\mous\Mes documents\Ma musique\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\mous\Mes documents\Ma musique\Artiste inconnu\Artiste inconnu.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\mous\Mes documents\Ma musique\Artiste inconnu\Album inconnu (09-03-2002 13-03-44)\Album inconnu (09-03-2002 13-03-44).exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\mous\Mes documents\Mes images\.exe
    deleted: virus Worm.Win32.Mabezat.b File: C:\1.taz
    deleted: virus Worm.Win32.VB.aam File: C:\host232.exe
    deleted: Trojan program Packed.Win32.Krap.g File: C:\qphdin.com
    deleted: virus Worm.Win32.Mabezat.b File: C:\zPharaoh.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\$WINDOWS.~BT.exe
    disinfected: virus Worm.Win32.Mabezat.b File: C:\$WINDOWS.~BT\Sources\mrt.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\Sources.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\adprep\adprep.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\dlmanifests.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-adfs-dl\microsoft-windows-adfs-dl.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-bluetooth-config\microsoft-windows-bluetooth-config.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-com-complus-setup-dl\microsoft-windows-com-complus-setup-dl.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-com-dtc-setup-dl\microsoft-windows-com-dtc-setup-dl.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-dhcpservermigplugin-dl\microsoft-windows-dhcpservermigplugin-dl.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-directoryservices-adam-dl\microsoft-windows-directoryservices-adam-dl.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-gameuxmig-dl\microsoft-windows-gameuxmig-dl.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-iasserver-migplugin\microsoft-windows-iasserver-migplugin.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-ie-clientnetworkprotocolimplementation\microsoft-windows-ie-clientnetworkprotocolimplementation.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-iis-dl\microsoft-windows-iis-dl.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-international-core-dl\microsoft-windows-international-core-dl.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-mediaplayer\microsoft-windows-mediaplayer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-mediaplayer-drm-dl\microsoft-windows-mediaplayer-drm-dl.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-msmq-messagingcoreservice\microsoft-windows-msmq-messagingcoreservice.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-ndis\microsoft-windows-ndis.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-networkbridge\microsoft-windows-networkbridge.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-offlinefiles-dl\microsoft-windows-offlinefiles-dl.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-performancecounterinfrastructure-dl\microsoft-windows-performancecounterinfrastructure-dl.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-performancecounterinfrastructureconsumer-dl\microsoft-windows-performancecounterinfrastructureconsumer-dl.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-rasapi\microsoft-windows-rasapi.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-rasconnectionmanager\microsoft-windows-rasconnectionmanager.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-rasserver-migplugin\microsoft-windows-rasserver-migplugin.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-shmig-dl\microsoft-windows-shmig-dl.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-storagemigration\microsoft-windows-storagemigration.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-sxs\microsoft-windows-sxs.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-tapisetup\microsoft-windows-tapisetup.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-textservicesframework-migration-dl\microsoft-windows-textservicesframework-migration-dl.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-uddi\microsoft-windows-uddi.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-unimodem-config\microsoft-windows-unimodem-config.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-winsock-core-infrastructure-upgrade\microsoft-windows-winsock-core-infrastructure-upgrade.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\microsoft-windows-wmi-core\microsoft-windows-wmi-core.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\dlmanifests\networking-mpssvc-svc\networking-mpssvc-svc.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\fr-fr\fr-fr.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\fr-fr\dlmanifests\dlmanifests.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\fr-fr\dlmanifests\microsoft-windows-storagemigration\microsoft-windows-storagemigration.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\inf\inf.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\license.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\fr-fr.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\eval\eval.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\eval\business\business.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\eval\businessn\businessn.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\eval\enterprise\enterprise.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\eval\homebasic\homebasic.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\eval\homebasicn\homebasicn.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\eval\homepremium\homepremium.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\eval\starter\starter.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\eval\ultimate\ultimate.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\oem\oem.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\oem\business\business.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\oem\businessn\businessn.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\oem\enterprise\enterprise.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\oem\homebasic\homebasic.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\oem\homebasicn\homebasicn.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\oem\homepremium\homepremium.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\oem\starter\starter.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\oem\ultimate\ultimate.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\_default\_default.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\_default\business\business.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\_default\businessn\businessn.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\_default\enterprise\enterprise.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\_default\homebasic\homebasic.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\_default\homebasicn\homebasicn.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\_default\homepremium\homepremium.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\_default\starter\starter.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\fr-fr\_default\ultimate\ultimate.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\_default.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\eval\eval.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\eval\business\business.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\eval\businessn\businessn.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\eval\enterprise\enterprise.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\eval\homebasic\homebasic.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\eval\homebasicn\homebasicn.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\eval\homepremium\homepremium.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\eval\starter\starter.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\eval\ultimate\ultimate.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\oem\oem.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\oem\business\business.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\oem\businessn\businessn.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\oem\enterprise\enterprise.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\oem\homebasic\homebasic.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\oem\homebasicn\homebasicn.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\oem\homepremium\homepremium.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\oem\starter\starter.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\oem\ultimate\ultimate.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\_default\_default.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\_default\business\business.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\_default\businessn\businessn.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\_default\enterprise\enterprise.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\_default\homebasic\homebasic.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\_default\homebasicn\homebasicn.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\_default\homepremium\homepremium.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\_default\starter\starter.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\license\_default\_default\ultimate\ultimate.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\Panther\Panther.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\Panther\setup.exe\setup.exe.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\servicing\servicing.exe
    deleted: virus Worm.Win32.VB.aam File: C:\$WINDOWS.~BT\Sources\servicing\0.0.0.1\0.0.0.1.exe
    deleted: virus Worm.Win32.VB.aam File: C:\abcc\abcc.exe
    deleted: virus Worm.Win32.VB.aam File: C:\abcc\Output\Output.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Amond Output\Amond Output.exe
    deleted: virus Worm.Win32.VB.aam File: C:\autorun.inf\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\autorun.inf\autorun.inf.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Config.Msi\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Documents and Settings.exe
    deleted: virus Worm.Win32.Mabezat.b File: C:\Documents and Settings\hook.dl_
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\abdel.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\GRETECH\GRETECH.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\GRETECH\GomPlayer\GomPlayer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\Identities\Identities.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\Identities\{B1F988D9-62DD-4D07-9903-A77D2C0F8FC2}\{B1F988D9-62DD-4D07-9903-A77D2C0F8FC2}.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\Microsoft\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\Microsoft\Credentials\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\Microsoft\Credentials\S-1-5-21-1409082233-492894223-1202660629-1004\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\Microsoft\HTML Help\HTML Help.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\Microsoft\Internet Explorer\Quick Launch\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\Microsoft\Media Player\Media Player.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\Microsoft\SystemCertificates\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\Microsoft\SystemCertificates\My\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\Microsoft\SystemCertificates\My\Certificates\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\Microsoft\SystemCertificates\My\CRLs\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\Microsoft\SystemCertificates\My\CTLs\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Application Data\tazebama\tazebama.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Bureau\Bureau.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Cookies\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Favoris\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Favoris\Liens\Liens.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Application Data\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Application Data\Microsoft\Microsoft.exe
    deleted: virus Worm.Win32.Mabezat.b File: C:\Documents and Settings\abdel\Local Settings\Application Data\Microsoft\CD Burning\autorun.inf
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Application Data\Microsoft\CD Burning\CD Burning.exe
    disinfected: virus Worm.Win32.Mabezat.b File: C:\Documents and Settings\abdel\Local Settings\Application Data\Microsoft\CD Burning\zPharaoh.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Application Data\Microsoft\Credentials\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1409082233-492894223-1202660629-1004\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Application Data\Microsoft\Windows\Windows.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Application Data\Microsoft\Windows Media\9.0\9.0.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Historique\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Historique\History.IE5\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Historique\History.IE5\MSHist012002031020020311\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Historique\History.IE5\MSHist012002031020020311\MSHist012002031020020311.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Historique\History.IE5\MSHist012008021820080225\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Historique\History.IE5\MSHist012008022020080221\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Historique\History.IE5\MSHist012008022020080221\MSHist012008022020080221.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Historique\History.IE5\MSHist012008022520080226\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Historique\History.IE5\MSHist012008022620080227\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temp\Temp.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temp\Répertoire temporaire 1 pour kav.zip\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temp\Répertoire temporaire 1 pour kav.zip\kav\kav.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temp\Répertoire temporaire 1 pour kav.zip\kav\kav7.0\kav7.0.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temp\Répertoire temporaire 1 pour kav.zip\kav\kav7.0\french\french.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temp\Répertoire temporaire 2 pour kav.zip\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temp\Répertoire temporaire 2 pour kav.zip\kav\kav.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temp\Répertoire temporaire 2 pour kav.zip\kav\kav7.0\kav7.0.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temp\Répertoire temporaire 2 pour kav.zip\kav\kav7.0\french\french.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temp\_avast4_\_avast4_.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temporary Internet Files\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temporary Internet Files\Content.IE5\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temporary Internet Files\Content.IE5\1PYUR6X4\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temporary Internet Files\Content.IE5\8Q8SF459\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temporary Internet Files\Content.IE5\BN6FQCH4\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Local Settings\Temporary Internet Files\Content.IE5\YOOUWBAC\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Menu Démarrer\Menu Démarrer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Menu Démarrer\Programmes\Programmes.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Menu Démarrer\Programmes\Accessoires\Accessoires.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Menu Démarrer\Programmes\Accessoires\Accessibilité\Accessibilité.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Menu Démarrer\Programmes\Accessoires\Divertissement\Divertissement.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Menu Démarrer\Programmes\Démarrage\Démarrage.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Mes documents\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Mes documents\GomPlayer\GomPlayer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Mes documents\Ma musique\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Mes documents\Mes images\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Modèles\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Recent\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\SendTo\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Voisinage d'impression\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\abdel\Voisinage réseau\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\All Users.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Adobe\Adobe.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Adobe\Updater6\Updater6.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Avira\Avira.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\AVS4YOU\AVS4YOU.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\AVS4YOU\Licence\Licence.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\BitDefender\BitDefender.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\BitDefender\Desktop\Desktop.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\BitDefender\Desktop\Quarantine\Quarantine.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\BVRP Software\BVRP Software.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\CA\CA.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\CA\Consumer\Consumer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\CA\Consumer\CCube\CCube.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Google\Google.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Google\Google Toolbar\Google Toolbar.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Google\Google Toolbar\Component\Component.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\DSS\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\DSS\MachineKeys\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\Dr Watson.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\HTML Help\HTML Help.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Machine Debug Manager\Machine Debug Manager.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Media Index\Media Index.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player\Media Player.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\MSDAIPP\MSDAIPP.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\MSDAIPP\OFFLINE\OFFLINE.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Network.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Connections\Connections.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Connections\Cm\Cm.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Connections\Pbk\Pbk.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\Downloader.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\OFFICE.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA\DATA.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\User Account Pictures\User Account Pictures.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\User Account Pictures\Default Pictures\Default Pictures.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\WIA\WIA.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\WIA\{6BDD1FC6-810F-11D0-BEC7-08002BE2092F}\{6BDD1FC6-810F-11D0-BEC7-08002BE2092F}.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\WIA\{6BDD1FC6-810F-11D0-BEC7-08002BE2092F}\0000\0000.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Windows NT\Windows NT.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Windows NT\NTBackup\NTBackup.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Microsoft\Windows NT\NTBackup\catalogs51\catalogs51.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\NCH Swift Sound\NCH Swift Sound.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\NCH Swift Sound\WavePad\WavePad.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Nero\Nero.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Nero\Nero8\Nero8.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Nero\Nero8\Nero BackItUp\Nero BackItUp.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Nero\Nero8\Nero BackItUp\Cache\Cache.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Nero\Nero8\Nero ScratchBox\Nero ScratchBox.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Nero\Nero8\Nero SoundBox\Nero SoundBox.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Nero\Nero8\OnlineServices\OnlineServices.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Nero\Nero8\PeakFiles\PeakFiles.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Norton\Norton.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Norton\00000082\00000082.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Norton\00000082\000000fc\000000fc.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Norton\00000082\000000fc\000002d3\000002d3.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\NortonInstaller\NortonInstaller.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\Logs.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\02-21-2008-10h05m23s\02-21-2008-10h05m23s.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\02-21-2008-10h05m47s\02-21-2008-10h05m47s.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\02-21-2008-12h48m04s\02-21-2008-12h48m04s.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\02-21-2008-12h55m28s\02-21-2008-12h55m28s.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\02-21-2008-17h15m16s\02-21-2008-17h15m16s.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\02-21-2008-19h06m27s\02-21-2008-19h06m27s.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\NortonInstaller\Logs\02-21-2008-19h15m31s\02-21-2008-19h15m31s.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Symantec\Symantec.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\Ghost.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\GhostStartLogs\GhostStartLogs.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\LiveUpdate.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Application Data\Symantec\SubEng\SubEng.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Bureau\Bureau.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Documents\Documents.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Documents\Ma musique\Ma musique.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Documents\Ma musique\My Playlists\My Playlists.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Documents\Ma musique\Sample Playlists\Sample Playlists.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Documents\Ma musique\Sample Playlists\001331FA\001331FA.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Documents\Ma musique\Échantillons de musique\Échantillons de musique.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Documents\Mes images\Mes images.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Documents\Mes images\Échantillons d'images\Échantillons d'images.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Documents\Mes vidéos\Mes vidéos.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\DRM\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Favoris\Favoris.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Menu Démarrer\Menu Démarrer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Programmes.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Accessoires.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Accessibilité\Accessibilité.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Communications\Communications.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Divertissement\Divertissement.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Outils système\Outils système.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Dactylo\Dactylo.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Démarrage.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux\Jeux.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration\Outils d'administration.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users\Modèles\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\All Users.WINDOWS.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Avira\Avira.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Kaspersky Lab\Kaspersky Lab.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Crypto\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Crypto\DSS\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Crypto\DSS\MachineKeys\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Crypto\RSA\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Crypto\RSA\MachineKeys\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Crypto\RSA\S-1-5-18\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Dr Watson\Dr Watson.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\HTML Help\HTML Help.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Media Index\Media Index.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Media Player\Media Player.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Network.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Connections\Connections.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Connections\Cm\Cm.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Connections\Pbk\Pbk.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\User Account Pictures\User Account Pictures.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\User Account Pictures\Default Pictures\Default Pictures.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Bureau\Bureau.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Documents\Documents.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Documents\Ma musique\Ma musique.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Documents\Ma musique\My Playlists\My Playlists.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Documents\Ma musique\Sample Playlists\Sample Playlists.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Documents\Ma musique\Sample Playlists\0015BF43\0015BF43.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Documents\Ma musique\Échantillons de musique\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Documents\Ma musique\Échantillons de musique\Échantillons de musique.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Documents\Mes images\Mes images.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Documents\Mes images\Échantillons d'images\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Documents\Mes images\Échantillons d'images\Échantillons d'images.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Documents\Mes vidéos\Mes vidéos.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\DRM\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Favoris\Favoris.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Menu Démarrer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Programmes.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Accessoires\Accessoires.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Accessoires\Accessibilité\Accessibilité.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Accessoires\Communications\Communications.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Accessoires\Divertissement\Divertissement.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Accessoires\Outils système\Outils système.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Amond Software\Amond Software.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Amond Software\Amond Video Converter Pro\Amond Video Converter Pro.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\GOM Player\GOM Player.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Jeux\Jeux.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Monkey's Audio\Monkey's Audio.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Outils d'administration\Outils d'administration.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\SUPER © Version 2008.bld.33 (Sep 2, 2008)\SUPER © Version 2008.bld.33 (Sep 2, 2008).exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Total Image Converter\Total Image Converter.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Winamp\Winamp.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\All Users.WINDOWS\Modèles\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Application Data\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Application Data\Microsoft\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\Media Player.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Bureau\Bureau.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Cookies\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Favoris\Favoris.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\Application Data\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Microsoft.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\9.0.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\Historique\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\Historique\History.IE5\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\Temp\Temp.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\GF0G4NDP\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\OLH8O4JL\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\PXQHEX3J\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\Z82IZNS2\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Menu Démarrer\Menu Démarrer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Menu Démarrer\Programmes\Programmes.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Menu Démarrer\Programmes\Accessoires\Accessoires.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Menu Démarrer\Programmes\Accessoires\Accessibilité\Accessibilité.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Menu Démarrer\Programmes\Accessoires\Divertissement\Divertissement.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Menu Démarrer\Programmes\Démarrage\Démarrage.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Mes documents\Mes documents.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Modèles\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Recent\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\SendTo\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Voisinage d'impression\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User\Voisinage réseau\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Application Data\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Application Data\Microsoft\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Application Data\Microsoft\Media Player\Media Player.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Application Data\Microsoft\SystemCertificates\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Application Data\Microsoft\SystemCertificates\My\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Application Data\Microsoft\SystemCertificates\My\Certificates\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Application Data\Microsoft\SystemCertificates\My\CRLs\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Application Data\Microsoft\SystemCertificates\My\CTLs\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Bureau\Bureau.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Cookies\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Favoris\Favoris.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Application Data\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Application Data\Microsoft\Microsoft.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Application Data\Microsoft\Media Player\Media Player.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Application Data\Microsoft\Windows Media\10.0\10.0.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Application Data\Microsoft\Windows Media\9.0\9.0.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Historique\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Historique\History.IE5\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Temp\Temp.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Temporary Internet Files\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Temporary Internet Files\Content.IE5\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Temporary Internet Files\Content.IE5\1PYUR6X4\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Temporary Internet Files\Content.IE5\8Q8SF459\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Temporary Internet Files\Content.IE5\BN6FQCH4\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Local Settings\Temporary Internet Files\Content.IE5\YOOUWBAC\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Menu Démarrer\Menu Démarrer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Menu Démarrer\Programmes\Programmes.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Menu Démarrer\Programmes\Accessoires\Accessoires.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Menu Démarrer\Programmes\Accessoires\Accessibilité\Accessibilité.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Menu Démarrer\Programmes\Accessoires\Divertissement\Divertissement.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Menu Démarrer\Programmes\Démarrage\Démarrage.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Mes documents\Mes documents.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Modèles\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Recent\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\SendTo\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Voisinage d'impression\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\Default User.WINDOWS\Voisinage réseau\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Application Data\Application Data.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Application Data\Microsoft\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Application Data\Microsoft\HTML Help\HTML Help.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\Media Player.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Cookies\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Local Settings\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Local Settings\Application Data\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Microsoft.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\Windows.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows Media\Windows Media.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows Media\10.0\10.0.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Local Settings\Historique\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\MSHist012008022420080225\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Local Settings\Temp\Temp.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService.AUTORITE NT\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService.AUTORITE NT\Application Data\Application Data.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService.AUTORITE NT\Application Data\Microsoft\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService.AUTORITE NT\Application Data\Microsoft\Credentials\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService.AUTORITE NT\Application Data\Microsoft\Credentials\S-1-5-19\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService.AUTORITE NT\Application Data\Microsoft\Internet Explorer\Internet Explorer.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService.AUTORITE NT\Application Data\Microsoft\Media Player\Media Player.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService.AUTORITE NT\Application Data\Microsoft\SystemCertificates\.exe
    deleted: virus Worm.Win32.VB.aam File: C:\Documents and Settings\LocalService.AUTORITE NT\Appli
    0
  7. crapoulou Messages postés 28002 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   8 046
     
    Relance hijackthis pour générer un nouveau rapport que tu posteras ici stp.
    0
    1. ANNIE
       
      bonsoir g un peu le mm probleme pourrais tu m'Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 23:12:14, on 22/03/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16791)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      C:\WINDOWS\system32\slserv.exe
      C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\QuickTime\qttask.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\WINDOWS\ALCWZRD.EXE
      C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\Apps\Powercinema\PCMService.exe
      C:\apps\ABoard\ABoard.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\apps\ABoard\AOSD.exe
      C:\Program Files\Logitech\Video\LogiTray.exe
      C:\WINDOWS\Twain_32\Vista\HotKey.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
      C:\PROGRA~1\Nero\NEROPH~1\data\Xtras\mssysmgr.exe
      C:\Program Files\eMule\emule.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\Program Files\Logitech\Video\FxSvr2.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      c:\program files\avira\antivir personaledition classic\avcenter.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avscan.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
      O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (file missing)
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (file missing)
      O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL (file missing)
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll (file missing)
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll (file missing)
      O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll (file missing)
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll (file missing)
      O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (file missing)
      O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL (file missing)
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
      O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
      O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
      O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
      O4 - HKLM\..\Run: [HotKey] C:\WINDOWS\Twain_32\Vista\HotKey.exe
      O4 - HKLM\..\Run: [] C:\WINDOWS\thunderbird.exe
      O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
      O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
      O4 - HKLM\..\Run: [spywarefighterguard] C:\Program Files\Fighters\spywarefighter\SpywarefighterUser.exe
      O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
      O4 - HKLM\..\Run: [Windows UDP Control Center] fxsteller.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [Nero PhotoShow Media Manager] C:\PROGRA~1\Nero\NEROPH~1\data\Xtras\mssysmgr.exe
      O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
      O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
      O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader5.cab
      O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.kodakgallery.fr/downloads/BUM/BUM_WIN_IE_1/axofupld.cab
      O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - https://safe.tele2.com/inc/accounthelper.cab
      O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.extrafilm.fr/NET/Import/ImageUploader3.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} (IPSUploader4 Control) - http://as.photoprintit.de/ips-opdata/layout/default01/activex/IPSUploader4.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (file missing)
      O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~2\LUCOMS~2.EXE
      O23 - Service: MysqlInventime - Unknown owner - c:\mysql\bin\mysqld-nt.exe
      O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      O23 - Service: PTK License-FIGHTERS-297811811 - Unknown owner - C:\Program Files\Fighters\licenseservice.exe (file missing)
      O23 - Service: PTK Live Update-FIGHTERS-297811811 - Unknown owner - C:\Program Files\Fighters\updateservice.exe (file missing)
      O23 - Service: PTK Scanner-FIGHTERS-297811811 - Unknown owner - C:\Program Files\Fighters\ScannerService.exe (file missing)
      O23 - Service: PTK SharedAccess-FIGHTERS-297811811 - Unknown owner - C:\Program Files\Fighters\configservice.exe (file missing)
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
      O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
      0
  8. crapoulou Messages postés 28002 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   8 046
     
    ANNIE, crée un nouveau message stp !
    Ne dérange pas les autres désinfections.
    Merci.
    0