System security 4.52

guillaume1976 -  
Bonjour,

Depuis hier, j'ai un message qui s'affiche en fond d'écran : "Warning ! you're in danger ! your computer is infected with spyware ..." Mon PC me propose ensuite de lancer un logiciel que je n'ai pas installé qui s'appelle System Security 4.52 (Il me demande aussi, bien évidemment, de rentrer mon numéro de carte bancaire pour que je puisse bénéficier de l'antivirus)

J'ai l'impression que ce virus m'empêche de lancer tous mes logiciels (il bloque les fichiers en .exe)

je n'avais plus d'antivirus depuis quelques temps, j'ai donc acheté la mise à jour de NORTON 360 hier mais il refuse de lancer le CD pour l'installation. J'ai donc procédé à l'installation en mode sans échec mais NORTON ne trouve pas le problème après le scan (il trouve des choses mais pas le virus principal)...et je ne peux pas faire de liveupdate.....

J'ai donc fait ce qui a été conseillé à dolphin paradise :

http://www.commentcamarche.net/forum/affich 13192900 probleme avec system security 4 52

J'ai installé findykill et voilà le rapport :

############################## | FindyKill V6.005 |

# User : Guillaume & Emilie (Administrateurs) # NOM-4DA1615194C
# Update on 11/07/09 by Chiquitine29 & C_XX
# Start at: 01:36:18 | 12/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html

# Intel(R) Pentium(R) M processor 1.73GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 2
# Internet Explorer 7.0.5730.11
# Windows Firewall Status : Enabled

# C:\ # Disque fixe local # 32,6 Go (5,45 Go free) [VAIO] # NTFS
# D:\ # Disque fixe local # 34,94 Go (3,35 Go free) [VAIO] # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque CD-ROM
# I:\ # Disque CD-ROM

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\fonts\services.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## | Registre Startup |

HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
HKCU_Main: "Search Page"="https://www.google.com/?gws_rd=ssl"
HKCU_Main: "Start Page"="https://www.google.fr/?gws_rd=ssl"
HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
HKLM_logon: "DefaultUserName"="Guillaume & Emilie"
HKLM_logon: "AltDefaultUserName"="Guillaume & Emilie"
HKLM_logon: "LegalNoticeCaption"=""
HKLM_logon: "LegalNoticeText"=""
HKLM_Run: Hcontrol=C:\WINDOWS\ATK0100\Hcontrol.exe
HKLM_Run: Apoint=C:\Program Files\Apoint\Apoint.exe
HKLM_Run: ATIPTA="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
HKLM_Run: Alcmtr=ALCMTR.EXE
HKLM_Run: AzMixerSel=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
HKLM_Run: Mouse Suite 98 Daemon=ICO.EXE
HKLM_Run: SonyPowerCfg=C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
HKLM_Run: ISBMgr.exe=C:\Program Files\Sony\ISB Utility\ISBMgr.exe
HKLM_Run: PDService.exe=C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe
HKLM_Run: Acrobat Assistant 7.0="C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
HKLM_Run: HP Software Update=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
HKLM_Run: SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
HKLM_Run: VAIO Update 3="C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe" /Stationary
HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
HKLM_Run: iTunesHelper="C:\Program Files\iTunes\iTunesHelper.exe"
HKLM_Run: NSLauncher=C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
HKLM_Run: Adobe Photo Downloader="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
HKLM_Run: BluetoothAuthenticationAgent=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
HKLM_Run: Switcher.exe=C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
HKLM_Run: PWRISOVM.EXE=C:\Program Files\PowerISO\PWRISOVM.EXE
HKLM_Run: sysldtray=C:\windows\ld12.exe
HKLM_Run: 18914064=C:\Documents and Settings\All Users\Application Data\18914064\18914064.exe
HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
HKCU_Run: CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe
HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
HKCU_Run: Yahoo! Pager=C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
HKCU_Run: updateMgr=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
HKCU_Run: DAEMON Tools Lite="C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
HKCU_Run: hsf7husjnfg98gi498aejhiugjkdg4=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\vbqh55.exe
HKCU_Run: Cognac=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\b.exe
HKCU_Run: PowerMgr="C:\WINDOWS\system32\Rundll32.exe" "C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\tmp186.tmp",Init

################## | Fichiers # Dossiers infectieux |

Présent ! C:\WINDOWS\system32\gsf83iujid.dll [f7ac077d4769bd54a9a9769a3bf430b8]

################## | C:\Documents and Settings\Guillaume

Présent ! C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\Desinstall.exe

################## | All Drives ... |

################## | Registre # Clés Run infectieuses |

Présent ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "sysldtray"
Présent ! HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Cognac"
Présent ! HKU\S-1-5-21-194801287-367139244-2394972533-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Cognac"
Présent ! HKLM\software\microsoft\security center "AntiVirusDisableNotify" ( 0x1 )
Présent ! HKLM\software\microsoft\security center "FirewallDisableNotify" ( 0x1 )

################## | Registre # Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{ad7d138f-6ae9-11dd-a667-0002c7dc5170}
Shell\AutoRun\command =I:\setup.exe

################## | Etat / Services / Informations |

# Affichage des fichiers cachés : OK
# Mode sans echec : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 )
# (!) SharedAccess -> Start = 4 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# (!) wscsvc -> Start = 4 ( Good = 2 | Bad = 4 )

################## | Cracks / Keygens / Serials |

################## | ! Fin du rapport # FindyKill V6.005 ! |

Merci d'avance pour votre aide...

Guillaume
Configuration: Windows XP Internet Explorer 7.0

34 réponses

Résumé de la discussion

Le problème décrit est une alerte affichée prétendant qu’un virus et spyware infectent l’ordinateur et menacent la sécurité, dirigeant vers un logiciel System Security 4.52 demandant des informations bancaires. L’utilisateur n’arrive pas à lancer les antivirus; Norton 360 refuse d’installer, le système démarre en mode sans échec pour réaliser un scan, sans déceler le virus principal. Plusieurs conseils recommandent d’éteindre provisoirement l’antivirus puis d’effectuer des scans en ligne via Kaspersky ou Malwarebytes et d’employer SmitfraudFix pour nettoyer les entrées de registre et les exécutables. Le rapport FindyKill signale des processus et des clés Run infectieuses, des fichiers dll et des entrées de démarrage; une étape suivante insiste sur Malwarebytes et l’achèvement du nettoyage par redémarrage.

Bobot (l’IA à votre service)
  1. chimay8 Contributeur sécurité
    le virus est supprimé?

    bah...au vue de ce qu'a dégommé MBAM,je pense qu'une bonne partie de tes infections sont parties

    tu as le cd de windows?
    1
    1. chimay8 Contributeur sécurité
      salut, y a pas que ça!!

      Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d'avoir été infectées sans les ouvrir
      réouvre Findykill,

      choisis cette fois ci l'option 2 (suppression)

      il y aura 1 redémarrage, laisse travailler l'outils jusqu'a l'apparition du message "nettoyage effectué"

      un rapport va s'ouvrir, poste le dans ta prochaine réponse s-t-p

      Note : le rapport FindyKill.txt est sauvegardé à la racine du disque
      Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tape explorer.exe et valides
      0
      1. guillaume1976
        Merci pour votre réponse...

        J'ai lancé findykill et "suppression"

        Etant précisé que pour lancer findykill je dois être en mode sans echec sinon impossible de le lancer

        puis j'ai refait une "recherche" et voilà le rapport :

        ############################## | FindyKill V6.005 |

        # User : Guillaume & Emilie (Administrateurs) # NOM-4DA1615194C
        # Update on 11/07/09 by Chiquitine29 & C_XX
        # Start at: 17:35:28 | 12/07/2009
        # Website : http://pagesperso-orange.fr/NosTools/index.html

        # Intel(R) Pentium(R) M processor 1.73GHz
        # Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 2
        # Internet Explorer 7.0.5730.11
        # Windows Firewall Status : Enabled

        # C:\ # Disque fixe local # 32,6 Go (5,38 Go free) [VAIO] # NTFS
        # D:\ # Disque fixe local # 34,94 Go (3,35 Go free) [VAIO] # NTFS
        # E:\ # Disque CD-ROM
        # F:\ # Disque CD-ROM
        # I:\ # Disque CD-ROM

        ############################## | Processus actifs |

        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\csrss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\wbem\wmiprvse.exe

        ################## | Registre Startup |

        HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
        HKCU_Main: "Search Page"="https://www.google.com/?gws_rd=ssl"
        HKCU_Main: "Start Page"="https://www.google.fr/?gws_rd=ssl"
        HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
        HKLM_logon: "DefaultUserName"="Guillaume & Emilie"
        HKLM_logon: "AltDefaultUserName"="Guillaume & Emilie"
        HKLM_logon: "LegalNoticeCaption"=""
        HKLM_logon: "LegalNoticeText"=""
        HKLM_Run: Hcontrol=C:\WINDOWS\ATK0100\Hcontrol.exe
        HKLM_Run: Apoint=C:\Program Files\Apoint\Apoint.exe
        HKLM_Run: ATIPTA="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
        HKLM_Run: Alcmtr=ALCMTR.EXE
        HKLM_Run: AzMixerSel=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
        HKLM_Run: Mouse Suite 98 Daemon=ICO.EXE
        HKLM_Run: SonyPowerCfg=C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
        HKLM_Run: ISBMgr.exe=C:\Program Files\Sony\ISB Utility\ISBMgr.exe
        HKLM_Run: PDService.exe=C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe
        HKLM_Run: Acrobat Assistant 7.0="C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
        HKLM_Run: HP Software Update=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        HKLM_Run: SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
        HKLM_Run: VAIO Update 3="C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe" /Stationary
        HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
        HKLM_Run: iTunesHelper="C:\Program Files\iTunes\iTunesHelper.exe"
        HKLM_Run: NSLauncher=C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
        HKLM_Run: Adobe Photo Downloader="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
        HKLM_Run: BluetoothAuthenticationAgent=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
        HKLM_Run: Switcher.exe=C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
        HKLM_Run: PWRISOVM.EXE=C:\Program Files\PowerISO\PWRISOVM.EXE
        HKLM_Run: sysldtray=C:\windows\ld12.exe
        HKLM_Run: 18914064=C:\Documents and Settings\All Users\Application Data\18914064\18914064.exe
        HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
        HKCU_Run: CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe
        HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        HKCU_Run: Yahoo! Pager=C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
        HKCU_Run: updateMgr=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
        HKCU_Run: DAEMON Tools Lite="C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
        HKCU_Run: hsf7husjnfg98gi498aejhiugjkdg4=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\vbqh55.exe
        HKCU_Run: Cognac=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\b.exe
        HKCU_Run: PowerMgr="C:\WINDOWS\system32\Rundll32.exe" "C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\tmp186.tmp",Init

        ################## | Fichiers # Dossiers infectieux |

        Présent ! C:\WINDOWS\system32\gsf83iujid.dll [f7ac077d4769bd54a9a9769a3bf430b8]

        ################## | C:\Documents and Settings\Guillaume

        Présent ! C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\Desinstall.exe

        ################## | All Drives ... |

        ################## | Registre # Clés Run infectieuses |

        Présent ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "sysldtray"
        Présent ! HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Cognac"
        Présent ! HKU\S-1-5-21-194801287-367139244-2394972533-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Cognac"
        Présent ! HKLM\software\microsoft\security center "AntiVirusDisableNotify" ( 0x1 )
        Présent ! HKLM\software\microsoft\security center "FirewallDisableNotify" ( 0x1 )

        ################## | Registre # Mountpoints2 |

        HKCU\..\..\Explorer\MountPoints2\{ad7d138f-6ae9-11dd-a667-0002c7dc5170}
        Shell\AutoRun\command =I:\setup.exe

        ################## | Etat / Services / Informations |

        # Affichage des fichiers cachés : OK
        # Mode sans echec : OK
        # Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
        # Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 )
        # (!) SharedAccess -> Start = 4 ( Good = 2 | Bad = 4 )
        # wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
        # (!) wscsvc -> Start = 4 ( Good = 2 | Bad = 4 )

        ################## | Cracks / Keygens / Serials |

        ################## | ! Fin du rapport # FindyKill V6.005 ! |
        0
        1. chimay8 Contributeur sécurité
          bon,

          marche pas

          Télécharge random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau.

          Double-clique sur RSIT.exe afin de lancer RSIT.
          Clique "Continue" à l'écran Disclaimer.

          Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT va le télécharger (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
          Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.
          Poste le contenu de log.txt (<<qui sera affiché)
          ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

          NB : Les rapports sont sauvegardés dans le dossier C:\rsit

          ensuite

          Télécharge SDfix (créé par AndyManchesta) et sauvegarde le sur ton Bureau. Tu peux suivre le tutorial SDFix de Malekal pour t'aider :

          Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec
          Choisis ton compte.

          Déroule la liste des instructions ci-dessous :
          Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
          Appuie sur Y pour commencer le nettoyage.

          Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
          Appuie sur une touche pour redémarrer le PC.
          Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
          Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.

          Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
          Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
          Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !

          Si SDFix ne se lance pas
          Clique sur Démarrer > Exécuter
          Copie/colle ceci :
          %systemroot%\system32\cmd.exe /K %systemdrive%\SDFix\apps\FixPath.exe

          Clique sur Ok.
          Redémarre et essaie de relance SDFix.
          0
          2. guillaume1976
            voila le contenu de log - bloc-notes :

            Logfile of random's system information tool 1.06 (written by random/random)
            Run by Guillaume & Emilie at 2009-07-12 18:08:53
            Microsoft Windows XP Édition familiale Service Pack 2
            System drive C: has 6 GB (16%) free of 33 GB
            Total RAM: 1023 MB (75% free)

            ======Scheduled tasks folder======

            C:\WINDOWS\tasks\AppleSoftwareUpdate.job
            C:\WINDOWS\tasks\HubTask 0 {0E7C166E-2D2F-4269-9034-DE1898BF2B1A} 0~0.job
            C:\WINDOWS\tasks\{5B57CF47-0BFA-43c6-ACF9-3B3653DCADBA}.job
            C:\WINDOWS\tasks\{783AF354-B514-42d6-970E-3E8BF0A5279C}.job

            ======Registry dump======

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}]
            C:\WINDOWS\system32\gsf83iujid.dll - C:\WINDOWS\system32\gsf83iujid.dll [2009-07-11 15000]

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
            {ecdee021-0d17-467f-a1ff-c7a115230949} - free-downloads.net Toolbar - C:\Program Files\free-downloads.net\tbfre0.dll [2009-06-01 2094616]
            {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton 360\Engine\3.0.0.134\coIEPlg.dll [2009-07-12 372592]
            {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-13 259696]

            [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
            "Hcontrol"=C:\WINDOWS\ATK0100\Hcontrol.exe [2004-07-19 61440]
            "Apoint"=C:\Program Files\Apoint\Apoint.exe [2003-11-07 114688]
            "ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-06-28 344064]
            "Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
            "AzMixerSel"=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2005-02-14 53248]
            "Mouse Suite 98 Daemon"=C:\WINDOWS\system32\ICO.EXE [2002-03-14 45056]
            "SonyPowerCfg"=C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2005-05-15 184320]
            "ISBMgr.exe"=C:\Program Files\Sony\ISB Utility\ISBMgr.exe [2004-02-20 32768]
            "PDService.exe"=C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe [2004-07-06 40960]
            "Acrobat Assistant 7.0"=C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [2005-03-03 483328]
            ""= []
            "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
            "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-15 136600]
            "VAIO Update 3"=C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe [2007-01-25 546936]
            "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-02-01 385024]
            "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-02-19 267048]
            "NSLauncher"=C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe [2007-08-02 3096576]
            "Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe [2005-06-23 57344]
            "BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
            "Switcher.exe"=C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe [2006-02-14 176128]
            "PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2008-11-02 167936]
            "sysldtray"=C:\windows\ld12.exe [2009-07-12 17921]
            "18914064"=C:\Documents and Settings\All Users\Application Data\18914064\18914064 [2009-07-12 56]

            [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
            "exec"=C:\WINDOWS\system32\mskcefl.exe [2004-08-05 128000]

            [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
            "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360]
            "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-07-15 68856]
            "Yahoo! Pager"=C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet []
            "updateMgr"=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [2006-03-30 313472]
            "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
            ""=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\vbqh55.exe [2009-07-11 15001]
            "hsf7husjnfg98gi498aejhiugjkdg4"=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\vbqh55.exe [2009-07-11 15001]
            "Cognac"=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\b.exe [2009-07-11 153088]
            "PowerMgr"=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\tmp186.tmp [2009-07-11 24876]

            C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
            Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
            Démarrage rapide du logiciel HP Image Zone.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
            HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
            Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

            C:\Documents and Settings\Guillaume & Emilie\Menu Démarrer\Programmes\Démarrage
            Outil de détection de support PMB.lnk - C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
            C:\WINDOWS\system32\Ati2evxx.dll [2005-06-28 46080]

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt]
            crypts.dll []

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\VESWinlogon]
            C:\WINDOWS\system32\VESWinlogon.dll [2006-09-23 73728]

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
            C:\WINDOWS\system32\WgaLogon.dll [2006-06-19 702768]

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
            WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
            rtasgvfu76ew8ndkfno94 - {D76AB2A1-00F3-42BD-F434-00BBC39C8953} - C:\WINDOWS\system32\gsf83iujid.dll [2009-07-11 15000]

            [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]

            [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

            [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

            [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SymEFA.sys]

            [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
            "dontdisplaylastusername"=0
            "legalnoticecaption"=
            "legalnoticetext"=
            "shutdownwithoutlogon"=1
            "undockwithoutlogon"=1

            [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
            "NoDriveTypeAutoRun"=145
            "NoDrives"=0
            "NoViewOnDrive"=0

            [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
            "HonorAutoRunSetting"=

            [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
            "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
            "C:\Program Files\Yahoo!\Messenger\YPager.exe"="C:\Program Files\Yahoo!\Messenger\YPager.exe:*:Enabled:Yahoo! Messenger"
            "C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server"
            "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
            "C:\Program Files\Sony\VAIO Media 4.0\Vc.exe"="C:\Program Files\Sony\VAIO Media 4.0\Vc.exe:*:Enabled:[VAIO Media] VAIO Media"
            "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
            "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
            "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"

            [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
            "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
            "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

            [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ad7d138f-6ae9-11dd-a667-0002c7dc5170}]
            shell\AutoRun\command - I:\setup.exe

            ======File associations======

            .exe - open - C:\WINDOWS\system32\mshjxw.exe "%1" %*
            .bat - open - C:\WINDOWS\system32\mshjxw.exe "%1" %*
            .bat - edit -
            .com - open - C:\WINDOWS\system32\mshjxw.exe "%1" %*

            ======List of files/folders created in the last 1 months======

            2009-07-12 18:08:54 ----D---- C:\Program Files\trend micro
            2009-07-12 18:08:53 ----D---- C:\rsit
            2009-07-12 17:35:26 ----A---- C:\FindyKill.txt
            2009-07-12 12:17:54 ----HDC---- C:\Documents and Settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}
            2009-07-12 01:34:49 ----D---- C:\FindyKill
            2009-07-12 01:04:56 ----RD---- C:\Program Files\Norton Support
            2009-07-12 00:54:21 ----D---- C:\Program Files\Symantec
            2009-07-12 00:54:21 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
            2009-07-12 00:53:31 ----D---- C:\Program Files\Norton 360
            2009-07-12 00:39:09 ----D---- C:\Documents and Settings\All Users\Application Data\PCSettings
            2009-07-12 00:38:59 ----D---- C:\Documents and Settings\All Users\Application Data\Norton
            2009-07-12 00:37:20 ----D---- C:\Program Files\NortonInstaller
            2009-07-12 00:37:20 ----D---- C:\Documents and Settings\All Users\Application Data\NortonInstaller
            2009-07-12 00:33:04 ----A---- C:\WINDOWS\ntbtlog.txt
            2009-07-11 12:16:08 ----D---- C:\Program Files\sFX
            2009-07-11 12:16:02 ----A---- C:\WINDOWS\system32\tpsaxyd.exe
            2009-07-11 12:15:33 ----A---- C:\WINDOWS\msa.exe
            2009-07-11 12:15:11 ----A---- C:\WINDOWS\system32\msxml71.dll
            2009-07-11 12:14:35 ----D---- C:\Documents and Settings\All Users\Application Data\18914064
            2009-07-11 12:13:47 ----A---- C:\derrk.exe
            2009-07-11 12:13:45 ----A---- C:\WINDOWS\ld12.exe
            2009-07-11 12:13:45 ----A---- C:\glnx.exe
            2009-07-11 12:13:28 ----A---- C:\WINDOWS\system32\gsf83iujid.dll
            2009-06-26 22:11:32 ----D---- C:\Program Files\Fichiers communs\Adobe AIR
            2009-06-26 21:48:18 ----D---- C:\Winamax

            ======List of files/folders modified in the last 1 months======

            2009-07-12 18:08:55 ----D---- C:\WINDOWS\system32
            2009-07-12 18:08:54 ----RD---- C:\Program Files
            2009-07-12 17:53:30 ----D---- C:\WINDOWS\Temp
            2009-07-12 17:51:17 ----A---- C:\WINDOWS\SchedLgU.Txt
            2009-07-12 17:45:28 ----D---- C:\WINDOWS\system32\CatRoot2
            2009-07-12 17:44:33 ----SD---- C:\WINDOWS\Tasks
            2009-07-12 17:15:19 ----D---- C:\WINDOWS
            2009-07-12 06:26:36 ----D---- C:\WINDOWS\system32\config
            2009-07-12 01:04:20 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
            2009-07-12 00:56:53 ----SHD---- C:\System Volume Information
            2009-07-12 00:54:28 ----D---- C:\WINDOWS\system32\drivers
            2009-07-12 00:54:27 ----HD---- C:\WINDOWS\inf
            2009-07-12 00:41:40 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
            2009-07-12 00:40:53 ----D---- C:\Documents and Settings\Guillaume & Emilie\Application Data\Symantec
            2009-07-12 00:39:50 ----SHD---- C:\WINDOWS\Installer
            2009-07-11 12:52:11 ----D---- C:\Documents and Settings\Guillaume & Emilie\Application Data\Azureus
            2009-07-11 12:17:10 ----RSD---- C:\WINDOWS\Fonts
            2009-07-11 12:13:31 ----D---- C:\WINDOWS\Prefetch
            2009-06-27 11:07:32 ----D---- C:\Program Files\PokerStars
            2009-06-26 22:14:31 ----D---- C:\Documents and Settings\Guillaume & Emilie\Application Data\Adobe
            2009-06-26 22:14:31 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
            2009-06-26 22:11:35 ----SHD---- C:\Config.Msi
            2009-06-26 22:11:32 ----D---- C:\Program Files\Fichiers communs
            2009-06-20 00:49:47 ----D---- C:\WINDOWS\system32\wbem
            2009-06-20 00:49:47 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI

            ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

            R2 acehlp09;acehlp09; \??\C:\WINDOWS\system32\drivers\acehlp09.sys []
            R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\WINDOWS\system32\DRIVERS\Apfiltr.sys [2003-09-29 94601]
            R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
            R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2004-08-12 137728]
            R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-05 9600]
            R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
            R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2003-09-26 5786]
            R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2004-12-02 70912]
            R3 SNC;Sony Notebook Control Device; C:\WINDOWS\System32\Drivers\SonyNC.sys [2000-11-09 48896]
            R3 SPI;Sony Programmable I/O Control Device; C:\WINDOWS\system32\DRIVERS\SonyPI.sys [2002-08-20 71961]
            R3 SymIMMP;SymIMMP; C:\WINDOWS\system32\DRIVERS\SymIM.sys [2009-07-12 36400]
            R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
            R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
            R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
            R3 w29n51;Pilote de carte de connexion réseau Intel(R) PRO/Wireless 2200BG pour Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2006-06-29 2206720]
            S1 BHDrvx86;Symantec Heuristics Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\BHDrvx86.sys []
            S1 ccHP;Symantec Hash Provider; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\ccHPx86.sys []
            S1 DMICall;Sony DMI Call service; C:\WINDOWS\system32\DRIVERS\DMICall.sys [2000-12-05 3952]
            S1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []
            S1 IDSxpx86;IDSxpx86; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090206.001\IDSxpx86.sys []
            S1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-27 40320]
            S1 PrivateDisk;PrivateDisk; C:\WINDOWS\System32\Drivers\PrivateDiskM.sys [2004-07-06 45627]
            S1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2008-11-02 56572]
            S1 sFxdrv;sFxdrv; \??\C:\Program Files\sFX\sfX.sYs []
            S1 SRTSPX;Symantec Real Time Storage Protection (PEL); \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SRTSPX.SYS []
            S1 SYMTDI;Symantec Network Dispatch Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SYMTDI.SYS []
            S1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2005-06-21 59648]
            S2 acedrv09;acedrv09; \??\C:\WINDOWS\system32\drivers\acedrv09.sys []
            S2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.5.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2008-08-24 21419]
            S2 BCMNTIO;BCMNTIO; \??\C:\PROGRA~1\CheckIt\DIAGNO~1\BCMNTIO.sys []
            S2 MAPMEM;MAPMEM; \??\C:\PROGRA~1\CheckIt\DIAGNO~1\MAPMEM.sys []
            S2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
            S2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2006-08-02 12544]
            S3 adg2crko;adg2crko; C:\WINDOWS\system32\drivers\adg2crko.sys []
            S3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-05 60800]
            S3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-06-28 1241088]
            S3 BthEnum;Pilote de bloc de demande Bluetooth; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2004-08-03 17024]
            S3 BTHMODEM;Pilote de communications modem Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2004-08-03 38016]
            S3 BthPan;Périphérique Bluetooth (réseau personnel); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2004-08-03 100992]
            S3 BTHPORT;Pilote de port Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272768]
            S3 BTHUSB;Pilote USB radio Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2004-08-03 18944]
            S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
            S3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-04 14080]
            S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-07-06 51120]
            S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-07-06 16496]
            S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-07-06 21744]
            S3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-05-23 1034752]
            S3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2005-05-23 178048]
            S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-06-29 3173888]
            S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
            S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
            S3 NAVENG;NAVENG; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090226.034\NAVENG.SYS []
            S3 NAVEX15;NAVEX15; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090226.034\NAVEX15.SYS []
            S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
            S3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-05 61824]
            S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2007-02-22 137216]
            S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2007-02-22 8320]
            S3 nmwcdcj;Nokia USB Port; C:\WINDOWS\system32\drivers\nmwcdcj.sys [2007-02-22 12288]
            S3 nmwcdcm;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2007-02-22 12288]
            S3 pcmstub;pcmstub; \??\C:\WINDOWS\system32\pcmstub.sys []
            S3 pelmouse;Mouse Suite Driver; C:\WINDOWS\system32\DRIVERS\pelmouse.sys [2002-06-28 17251]
            S3 pelusblf;USB Mouse Low Filter Driver; C:\WINDOWS\system32\DRIVERS\pelusblf.sys [2001-07-24 7520]
            S3 RFCOMM;Périphérique Bluetooth (TDI protocole RFCOMM); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2004-08-03 59648]
            S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
            S3 SONYTVC;Sony MPEG RR-Engine; C:\WINDOWS\system32\DRIVERS\SONYTVC.sys [2005-03-18 237568]
            S3 SRTSP;Symantec Real Time Storage Protection; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SRTSP.SYS []
            S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
            S3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
            S3 SYMFW;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SYMFW.SYS []
            S3 SYMIDS;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SYMIDS.SYS []
            S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\WINDOWS\system32\DRIVERS\SymIM.sys [2009-07-12 36400]
            S3 SYMNDIS;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SYMNDIS.SYS []
            S3 tifmsony;tifmsony; C:\WINDOWS\system32\drivers\tifmsony.sys [2007-02-28 80896]
            S3 toshidpt;TOSHIBA Bluetooth HID port driver; C:\WINDOWS\system32\drivers\Toshidpt.sys [2002-10-16 2851]
            S3 tosporte;Bluetooth Port Driver from Toshiba; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2005-06-20 44288]
            S3 Tosrfbd;Bluetooth RFBUS from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbd.sys [2005-06-17 98944]
            S3 Tosrfbnp;Bluetooth RFBNEP from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2005-05-27 34176]
            S3 Tosrfhid;Bluetooth RFHID from TOSHIBA; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2005-04-22 53248]
            S3 tosrfnds;Bluetooth Personal Area Network from TOSHIBA; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612]
            S3 TosRfSnd;Bluetooth Audio Device (WDM) from TOSHIBA; C:\WINDOWS\system32\drivers\TosRfSnd.sys [2005-04-06 50048]
            S3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\System32\Drivers\tosrfusb.sys [2004-12-21 34816]
            S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
            S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
            S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
            S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
            S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-05-23 716288]
            S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]

            ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

            S2 6to4;6to4; C:\WINDOWS\System32\svchost.exe [2004-08-05 14336]
            S2 AdobeActiveFileMonitor;Adobe Active File Monitor; C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-12 98304]
            S2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-02-18 110592]
            S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-06-28 376832]
            S2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2007-07-24 229376]
            S2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]
            S2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2006-08-02 434176]
            S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-15 152984]
            S2 msncache;msncache; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]
            S2 MSSQL$VAIO_VEDB;MSSQL$VAIO_VEDB; C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe [2002-12-17 7520337]
            S2 N360;Norton 360; C:\Program Files\Norton 360\Engine\3.0.0.134\ccSvcHst.exe [2009-07-12 115560]
            S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe []
            S2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2006-08-02 327680]
            S2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2006-08-02 937984]
            S2 sfx;sfx; C:\WINDOWS\sySTEM32\SvchoSt.ExE [2004-08-05 14336]
            S2 sopidkc;sopidkc Service; C:\WINDOWS\system32\sopidkc.exe [2004-08-05 98816]
            S2 VAIO Event Service;VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [2006-09-23 176128]
            S2 VCI;VAIO Cooporated Initialisation; C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe [2005-01-04 398336]
            S2 VzCdbSvc;VAIO Entertainment Database Service; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [2005-06-15 167936]
            S2 VzFw;VAIO Entertainment File Import Service; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe [2005-06-15 135168]
            S2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]
            S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
            S3 Boonty Games;Boonty Games; C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe [2006-10-21 69120]
            S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
            S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
            S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-27 182768]
            S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
            S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
            S3 Image Converter video recording monitor for VAIO Entertainment;Image Converter video recording monitor for VAIO Entertainment; C:\Program Files\Sony\Image Converter 2\IcVzMon.exe [2005-04-05 32768]
            S3 iPod Service;Service de l'iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-02-19 504104]
            S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe [2006-12-14 45056]
            S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
            S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
            S3 PACSPTISVR;PACSPTISVR; C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe [2006-12-14 57344]
            S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
            S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2007-02-08 212480]
            S3 SonicStage Back-End Service;SonicStage Back-End Service; C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe [2007-02-05 112184]
            S3 SPTISRV;Sony SPTI Service; C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe [2006-12-14 69632]
            S3 SQLAgent$VAIO_VEDB;SQLAgent$VAIO_VEDB; C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE [2002-12-17 311872]
            S3 SSScsiSV;SonicStage SCSI Service; C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe [2007-02-05 75320]
            S3 VAIO Entertainment Aggregation and Control Service;VAIO Entertainment Aggregation and Control Service; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe [2005-06-17 143360]
            S3 VAIO Entertainment Task Scheduler;VAIO Entertainment Task Scheduler; C:\Program Files\Sony\VAIO Entertainment\VzTaskScheduler.exe [2005-06-17 397312]
            S3 VAIO Entertainment TV Device Arbitration Service;VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe [2005-06-15 73728]
            S3 VAIOMediaPlatform-IntegratedServer-AppServer;VAIO Media Integrated Server; C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe [2006-06-12 1957888]
            S3 VAIOMediaPlatform-IntegratedServer-HTTP;VAIO Media Integrated Server (HTTP); C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe [2005-06-07 57344]
            S3 VAIOMediaPlatform-IntegratedServer-UPnP;VAIO Media Integrated Server (UPnP); C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe [2006-05-22 770048]
            S3 VAIOMediaPlatform-Mobile-Gateway;VAIO Media Gateway Server; C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe [2006-05-17 155648]
            S3 Vcsw;VAIO Entertainment UPnP Client Adapter; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [2005-06-15 270336]
            S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
            S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]

            -----------------EOF-----------------

            voila le contenu de info - bloc-notes :

            info.txt logfile of random's system information tool 1.06 2009-07-12 18:09:04

            ======Uninstall list======

            -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
            -->C:\Program Files\InstallShield Installation Information\{36C41D70-56F5-4E2B-81DA-6BEB7502D7A1}\setup.exe -runfromtemp -l0x040c -removeonly
            -->C:\Program Files\InstallShield Installation Information\{3D173DC5-4AE5-4B3F-9819-3977DD11B1D0}\setup.exe -runfromtemp -l0x040c -removeonly
            -->C:\Program Files\InstallShield Installation Information\{B2C4A8C4-AA20-425D-9FEE-C78039238C81}\setup.exe -runfromtemp -l0x040c -removeonly
            -->C:\Program Files\InstallShield Installation Information\{B34B6E67-FCDD-4E03-8742-B5701427FAFB}\setup.exe -runfromtemp -l0x040c -removeonly
            -->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
            -->Dummy
            -->MsiExec.exe /I{5B782FFA-6A95-480D-8E0A-0954A14693D6}
            -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FD836E74-7923-4174-A055-F97CD0F3BB46}\Setup.exe" -l0x40c
            -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
            Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
            Adobe Acrobat 7.0 Elements - Français-->msiexec /I {E5E6E687-1036-0000-0000-000000000002}
            Adobe AIR-->c:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
            Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
            Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
            Adobe Photoshop 7.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll"
            Adobe Photoshop Elements 3.0-->MsiExec.exe /I{851C67EF-068A-4060-9EF5-2E3DDCD68382}
            Adobe Premiere Standard-->RunDll32 "C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll",LaunchSetup "C:\Program Files\InstallShield Installation Information\{7998F67D-655B-42E3-B651-18D96DD17268}\setup.exe"
            Adobe Reader 7.1.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A71000000002}
            Adobe® Photoshop® Album Edition Découverte 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}
            AIDA32 v3.93-->"C:\Program Files\AIDA32 - Personal System Information\unins000.exe"
            Apple Mobile Device Support-->MsiExec.exe /I{44734179-8A79-4DEE-BB08-73037F065543}
            Apple Software Update-->MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
            Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
            ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
            ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
            ATK0100 ACPI UTILITY-->C:\WINDOWS\ATK0100\XPunin.exe
            Azureus Vuze-->C:\Program Files\Azureus\uninstall.exe
            Bonjour-->MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
            Call of Duty(R) 2-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D0A05794-48C2-4424-A15A-9F20FCFDD374} /l2057
            Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch-->C:\Program Files\InstallShield Installation Information\{3BD633E0-4BF8-4499-9149-88F0767D449C}\setup.exe -runfromtemp -l0x0409
            CheckIt Diagnostics-->C:\PROGRA~1\CheckIt\DIAGNO~1\UNWISE.EXE C:\PROGRA~1\CheckIt\DIAGNO~1\INSTALL.LOG
            Citrix Web Client-->C:\WINDOWS\system32\ctxsetup.exe /uninst C:\PROGRA~1\Citrix\icaweb32\uninst.inf
            Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
            Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
            Correctif pour Windows XP (KB914440)-->"C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
            Correctif pour Windows XP (KB935448)-->"C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.exe"
            Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
            Correctif Windows XP - KB307154-->C:\WINDOWS\$NtUninstallKB307154$\spuninst\spuninst.exe
            Correctif Windows XP - KB873333-->C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
            Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
            Correctif Windows XP - KB884018-->C:\WINDOWS\$NtUninstallKB884018$\spuninst\spuninst.exe
            Correctif Windows XP - KB884575-->C:\WINDOWS\$NtUninstallKB884575$\spuninst\spuninst.exe
            Correctif Windows XP - KB885250-->C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
            Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
            Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
            Correctif Windows XP - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
            Correctif Windows XP - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
            Correctif Windows XP - KB887742-->C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe
            Correctif Windows XP - KB888113-->C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
            Correctif Windows XP - KB888239-->C:\WINDOWS\$NtUninstallKB888239$\spuninst\spuninst.exe
            Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
            Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
            Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
            Correctif Windows XP - KB893056-->C:\WINDOWS\$NtUninstallKB893056$\spuninst\spuninst.exe
            Correctif Windows XP - KB893086-->"C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe"
            DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
            DivX-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
            DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
            DVgate Plus-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{685BCC47-B8EC-45EC-BBCE-77DF2451502C}\setup.exe" -l0x40c
            fedkit_screensaver-->C:\WINDOWS\fedkit_screensaver.scr /u
            FindyKill-->C:\FindyKill\Uninstal.exe
            free-downloads.net Toolbar-->C:\PROGRA~1\FREE-D~1.NET\UNWISE.EXE C:\PROGRA~1\FREE-D~1.NET\INSTALL.LOG
            GdiplusUpgrade-->MsiExec.exe /I{5421155F-B033-49DB-9B33-8F80F233D4D5}
            GearDrvs-->MsiExec.exe /I{206FD69B-F9FE-4164-81BD-D52552BC9C23}
            GearDrvs-->MsiExec.exe /I{CB84F0F2-927B-458D-9DC5-87832E3DC653}
            Google Toolbar for Firefox-->MsiExec.exe /X{2CCBABCB-6427-4A55-B091-49864623C43F}
            Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
            Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
            HDAUDIO SoftV92 Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0600\HXFSETUP.EXE -U -ISnyHDAk.inf
            High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
            HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
            Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
            Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
            Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
            HP Driver Diagnostics-->MsiExec.exe /I{16BE87BC-69F5-4D36-8CF0-E1CB3ACD5ED3}
            HP Extended Capabilities 4.7-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
            HP Image Zone 4.7-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
            HP PSC & OfficeJet 4.7-->"C:\Program Files\HP\Digital Imaging\{342C7C88-D335-4bc2-8CF1-281857629CE2}\setup\hpzscr01.exe" -datfile hposcr05.dat
            HP Software Update-->MsiExec.exe /X{15EE79F4-4ED1-4267-9B0F-351009325D7D}
            Image Converter 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{29999594-B540-4C88-A8D3-C99CA43809FC}\setup.exe" /UNINSTALL
            Impossible Team backyard Screen Saver-->C:\WINDOWS\system32\Impossible Team backyard.scr /u
            InterVideo WinDVD for VAIO-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
            InterVideo WinDVDX-->"C:\Program Files\InstallShield Installation Information\{1A91D1FA-B9B3-4556-9878-5C61059A19B2}\setup.exe" REMOVEALL
            iPod for Windows 2005-09-23-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{D4936AAF-FFD0-44A1-A7EA-A2DB41CEB5BC} /l1036
            iTunes-->MsiExec.exe /I{80FD852F-5AAC-4129-B931-06AAFFA43138}
            J2SE Runtime Environment 5.0 Update 10-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
            J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
            J2SE Runtime Environment 5.0 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030}
            J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
            Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
            Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
            Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
            Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
            Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
            Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
            Kit d'installation-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9C650676-CDDB-42C0-8D11-3EEB7F791F99}\setup.exe" -l0x40c -eth
            Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
            Logiciel Intel(R) PROSet/Wireless-->C:\WINDOWS\Installer\iProInst.exe
            mCore-->MsiExec.exe /I{E81667C6-2856-46D6-ABEA-6A2F42166779}
            mDriver-->MsiExec.exe /I{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}
            Memory Stick Formatter-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{27337663-2619-11D4-99DC-0000F49094C7}\Setup.exe" -l0x40c /UNINSTALL
            Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
            Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
            Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
            Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
            Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
            Microsoft .NET Framework 3.0 French Language Pack-->MsiExec.exe /X{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}
            Microsoft .NET Framework 3.0-->C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe
            Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
            Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
            Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
            Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
            Microsoft Office Small Business Edition 2003-->MsiExec.exe /I{91CA040C-6000-11D3-8CFE-0150048383C9}
            Microsoft SQL Server Desktop Engine (VAIO_VEDB)-->MsiExec.exe /X{E09B48B5-E141-427A-AB0C-D3605127224A}
            Microsoft User-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe"
            Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
            Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Lecteur Windows Media (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB883939)-->"C:\WINDOWS\$NtUninstallKB883939$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB893066)-->"C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB896422)-->"C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB896424)-->"C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB911567)-->"C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB912812)-->"C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB912919)-->"C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB913446)-->"C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB916281)-->"C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB917159)-->"C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB917344)-->"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB917422)-->"C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB917953)-->"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB918899)-->"C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB919007)-->"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB920214)-->"C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB921398)-->"C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB921503)-->"C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB921883)-->"C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB922616)-->"C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB922760)-->"C:\WINDOWS\$NtUninstallKB922760$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB923414)-->"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB923694)-->"C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB924191)-->"C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB924496)-->"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB925454)-->"C:\WINDOWS\$NtUninstallKB925454$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB925486)-->"C:\WINDOWS\$NtUninstallKB925486$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB936021)-->"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB938829)-->"C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB941568)-->"C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB941644)-->"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB941693)-->"C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB948881)-->"C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB904942)-->"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB925720)-->"C:\WINDOWS\$NtUninstallKB925720$\spuninst\spuninst.exe"
            0
            1. guillaume1976
              Je ne sais pas si j'ai bien fait mais quand SDfix m'a demandé de redémarrer mon PC j'ai redémmaré en mode sans echec.............

              Sinon, voila le rapport de SDfix :

              [b]SDFix: Version 1.240 [/b]
              Run by Guillaume

              Microsoft Windows XP [version 5.1.2600]
              Running From: C:\SDFix

              [b]Checking Services [/b]:

              Restoring Default Security Values
              Restoring Default Hosts File

              Rebooting

              [b]Checking Files [/b]:

              Trojan Files Found:

              C:\GLNX.EXE - Deleted
              C:\142013~1 - Deleted
              C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\a.exe - Deleted
              C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\b.exe - Deleted
              C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\c.exe - Deleted
              C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\tmp3.tmp - Deleted
              C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\tmp6.tmp - Deleted
              C:\WINDOWS\system32\comsa32.sys - Deleted
              C:\WINDOWS\system32\msxml71.dll - Deleted

              Removing Temp Files

              [b]ADS Check [/b]:

              [b]Final Check [/b]:

              catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
              Rootkit scan 2009-07-12 19:12:01
              Windows 5.1.2600 Service Pack 2 NTFS

              scanning hidden processes ...

              scanning hidden services & system hive ...

              disk error: C:\WINDOWS\system32\config\system, 1381
              scanning hidden registry entries ...

              disk error: C:\WINDOWS\system32\config\software, 1381
              disk error: C:\Documents and Settings\Guillaume & Emilie\ntuser.dat, 1381
              scanning hidden files ...

              disk error: C:\WINDOWS\

              please note that you need administrator rights to perform deep scan

              [b]Remaining Services [/b]:

              Authorized Application Key Export:

              [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
              "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
              "C:\\Program Files\\Yahoo!\\Messenger\\YPager.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YPager.exe:*:Enabled:Yahoo! Messenger"
              "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:Yahoo! FT Server"
              "C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
              "C:\\Program Files\\Sony\\VAIO Media 4.0\\Vc.exe"="C:\\Program Files\\Sony\\VAIO Media 4.0\\Vc.exe:*:Enabled:[VAIO Media] VAIO Media"
              "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
              "C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
              "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"

              [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
              "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
              "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

              [b]Remaining Files [/b]:

              File Backups: - C:\SDFix\backups\backups.zip

              [b]Files with Hidden Attributes [/b]:

              Sun 12 Jul 2009 69,206,016 A.SH. --- "C:\NRTPage.sys"
              Sat 11 Jul 2009 50,688 ..SHR --- "C:\Documents and Settings\Guillaume & Emilie\Guillaume & Emilie.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\Fonts\logcde.dll"
              Thu 5 Aug 2004 34,304 ...H. --- "C:\WINDOWS\Fonts\services.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\Fonts\windef.dll"
              Thu 5 Aug 2004 65,024 A.SH. --- "C:\WINDOWS\system32\asycfilt.dll"
              Fri 25 Aug 2006 617,472 A.SH. --- "C:\WINDOWS\system32\comctl32.dll"
              Thu 5 Aug 2004 1,028,096 A.SH. --- "C:\WINDOWS\system32\mfc42.dll"
              Thu 5 Aug 2004 57,344 A.SH. --- "C:\WINDOWS\system32\mfc42loc.dll"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msceqyw.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mscjkocv.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mscjoyz.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mscoboa.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mscom.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mscpbqxd.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mscslzgd.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msctniv.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mscvvp.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdap.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdarr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msddcf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msddkde.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msden.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdgbgkh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdhwqp.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdiz.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdjzfth.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdkyuxa.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdltzo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdqqo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdrgop.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdsfn.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdthdb.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdtpzb.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdugs.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdvswx.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdxya.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdzk.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdzmlgv.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdzs.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mseebh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msegizqj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msegosyj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msehiulp.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msehknw.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mseibfra.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msejylg.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msemgn.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msenj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msenwmv.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msepom.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mserbr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msesm.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msesuc.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msetmrjw.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msetutm.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msevty.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msevumdu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msezcgr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msezfuu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfaid.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfap.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfcpuo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfgp.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfhxzq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfkfioh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfktaro.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfkw.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfld.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msflef.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msflme.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msflq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfltbzm.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msflv.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfmj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfninh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfpacdp.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msftgc.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfuukxj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfxasm.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfxnwx.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfzu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgawhr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgchxbl.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgdhtz.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msggvu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgjfn.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgjw.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgmllx.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgpa.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgpg.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgpnod.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgrpeke.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgsxjtr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgtl.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgtujyx.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgtun.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgwml.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgxwd.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshfrxxg.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshgoqhy.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshhe.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshhtqy.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshhzr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshih.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshjxw.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshrbbpj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshuy.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshxm.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshxxhg.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshzd.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msibirjj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msidyip.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msikfg.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msikhy.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msilal.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msipcmq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msipthtq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msiuf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msivzxq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msiwf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msizsmqd.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjebdv.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjegf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjfzsoj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjgbw.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjgpua.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjgtop.exe"
              Wed 20 Sep 1995 35,088 A.SH. --- "C:\WINDOWS\system32\msjint32.dll"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjirh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjis.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjknm.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjmnmtz.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjqo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjrtqaa.exe"
              Wed 20 Sep 1995 977,680 A.SH. --- "C:\WINDOWS\system32\msjt3032.dll"
              Wed 20 Sep 1995 23,824 A.SH. --- "C:\WINDOWS\system32\msjter32.dll"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjuwpxh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjvglyo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjvog.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjwct.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjwgavi.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjwjf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjzlqyn.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskbo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskcefl.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskdh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskeqq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msklxt.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskooxez.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskoqm.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskpldam.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskqfhop.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskqzuy.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskrdot.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msktgxql.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskvwu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msletyh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslfeo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslfo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msljaoml.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslovzrg.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslqrggg.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslrlh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslusxkx.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslwq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslxckna.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslxnh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslxz.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslyrn.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmaj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmhyi.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmini.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmjgnnd.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmkqy.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmluoty.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmnbu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmpqg.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmqml.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmrgrsw.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmrsaig.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmuerxw.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmvg.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmyke.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmzkaz.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnave.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnhbkmc.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnjibnt.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnkvop.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnme.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnnu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnoc.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnoktur.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnop.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnrr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnswjds.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnvo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnxim.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnyydow.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnzdfv.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnzrf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msoba.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msocfqjo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msodnq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msofmybl.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msohtduo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msomulq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msopu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msoqr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msott.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msoww.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msoydsa.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspacifa.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspbtc.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspbvd.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspdd.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspecb.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspfvkh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspkxibw.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msplxp.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspneq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msppvij.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspsnu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msptoyc.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msputg.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspvx.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspyfg.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspytmu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspyu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqakfyn.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqbir.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqbt.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqdnbcr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqdo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqezy.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqfy.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqghmz.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqhz.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqkc.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqksmpc.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqmbn.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqmr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqndmyn.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqnqvo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqplgtr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqplvdf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqpycyx.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqrwbz.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqspjum.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqurql.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqvntjy.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msraiebi.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msraiwqd.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrazoft.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrbh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrdr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrehf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msritywo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrixr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrjou.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrjrxn.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrlx.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrqoyaa.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrsnle.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrxp.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrypefj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssaizx.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssavyau.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssbbfv.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssfbzoq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msshjqf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssibau.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssjsp.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssjzpr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msslhwm.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssllbt.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssnfj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssnwqlj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssskvw.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msswop.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstbjan.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstdaqxr.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstee.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstgf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstglyh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstij.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstkds.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstkm.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstlkkbw.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstlred.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstqa.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstqd.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstrpqif.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msttrt.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstxhl.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstzxfcl.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstzyyd.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuakp.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msufafu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuip.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msujk.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msujufjo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msukepbk.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msulbbh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msulxp.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msumk.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msupai.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuqn.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuqtgz.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msusvb.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuthqa.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuuqfyq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuxobzt.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuzu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuzuqye.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvajdau.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvarmf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvcj.exe"
              Thu 5 Aug 2004 413,696 A.SH. --- "C:\WINDOWS\system32\msvcp60.dll"
              Thu 5 Aug 2004 343,040 A.SH. --- "C:\WINDOWS\system32\msvcrt.dll"
              Thu 5 Aug 2004 253,952 A.SH. --- "C:\WINDOWS\system32\msvcrt20.dll"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msveday.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvgd.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvhhpme.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvjfhq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvntyu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvoq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvphak.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvqubo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvsuxo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvtcu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvwuu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswbns.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswjrct.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswjttg.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswmnu.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswmwwf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswnja.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswqaf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswqcae.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswrz.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswtc.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswvrq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswwmn.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswwqurc.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswxk.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswxtef.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswydezt.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswyk.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswywhbm.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswzwgvw.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxavhxz.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxbg.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxbyzwk.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxevhsd.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxjh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxjl.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxjxxui.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxodib.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxov.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxvlez.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxwkfjj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxxcj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxznjgp.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxzo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msybcsb.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msychonq.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyckxh.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyfjjvz.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msygtrmn.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyhesp.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyihp.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyjalj.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msylfofy.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msynxz.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyohi.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msypiv.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msypo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyrasf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msytp.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyub.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyvcht.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyvw.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyyfi.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszat.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszatps.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszedezo.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszfkt.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszjlb.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszjqb.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszkxgee.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszlsd.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszmf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msznepun.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszpebk.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszqfl.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszrgf.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszsko.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszstl.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszzve.exe"
              Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszzyaw.exe"
              Tue 4 Dec 2007 550,912 A.SH. --- "C:\WINDOWS\system32\oleaut32.dll"
              Thu 5 Aug 2004 83,456 A.SH. --- "C:\WINDOWS\system32\olepro32.dll"
              Thu 5 Aug 2004 30,749 A.SH. --- "C:\WINDOWS\system32\vbajet32.dll"
              Sun 25 Apr 1999 368,912 A.SH. --- "C:\WINDOWS\system32\Vbar332.dll"
              Sat 16 Sep 2006 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
              Mon 4 Jun 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv06.tmp"
              Sun 21 Nov 2004 30,720 A..H. --- "C:\Documents and Settings\Guillaume & Emilie\Mes documents\Dossiers Guillaume\Caisse d'Epargne\~WRL3457.tmp"

              [b]Finished![/b]

              Merci
              0
              1. guillaume1976
                Mon problème demeure.........................je ne sais plus quoi faire

                HELP !!!!
                0
                1. chimay8 Contributeur sécurité
                  re,

                  normal que le problème demeure,on n'a pas fini!!

                  Télécharge SmitFraudfix de S!Ri, balltrap34 et moe31
                  http://siri.urz.free.fr/Fix/SmitfraudFix.zip -
                  en cas de problème avec le premier lien,
                  mirroir: http://72.232.135.12/siri/SmitfraudFix.php

                  voila à quoi cela ressemble : http://siri.urz.free.fr/Fix/SmitfraudFix.php
                  une aide en vidéo (merci à balltrap34)
                  http://pagesperso-orange.fr/rginformatique/section%20virus/smitfraudfix.htm

                  Désactive les logiciels de protections(antivirus et antispyware)
                  -- Fais un clic droit puis Extraire tout sur le fichier SmitfraudFix.zip, cela va tout décompresser dans un nouveau dossier SmitFraudfix
                  -- Ouvre le dossier SmitfraudFix double-clique sur SmitfraudFix.cmd (le .cmd peut ne pas être présent)
                  -- Choisis l'option 1 et appuie sur Entrée
                  -- Réponds o (Oui) aux deux questions suivantes si elles sont posées
                  -- Un rapport sera généré; sauvegarde le dans un dossier.
                  -- Copie/colle le contenu du rapport ici
                  0
                  1. guillaume1976
                    Voilà le rapport de SmitfraudFix :
                    SmitFraudFix v2.423

                    Rapport fait à 18:40:32,79, 13/07/2009
                    Executé à partir de
                    C:\Documents and Settings\Guillaume & Emilie\Bureau\Smitfraudfix\SmitfraudFix
                    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                    Le type du système de fichiers est NTFS
                    Fix executé en mode sans echec

                    »»»»»»»»»»»»»»»»»»»»»»»» Process

                    C:\WINDOWS\System32\smss.exe
                    C:\WINDOWS\system32\winlogon.exe
                    C:\WINDOWS\system32\services.exe
                    C:\WINDOWS\system32\lsass.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\WINDOWS\Explorer.EXE
                    C:\PROGRA~1\WINZIP\winzip32.exe
                    C:\WINDOWS\system32\ctfmon.exe
                    C:\WINDOWS\fonts\services.exe
                    C:\Program Files\Internet Explorer\iexplore.exe
                    C:\WINDOWS\system32\cmd.exe

                    »»»»»»»»»»»»»»»»»»»»»»»» hosts

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp

                    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\GUILLA~1\Favoris

                    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
                    "Source"="About:Home"
                    "SubscribedURL"="About:Home"
                    "FriendlyName"="Ma page d'accueil"

                    »»»»»»»»»»»»»»»»»»»»»»»» o4Patch
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    o4Patch
                    Credits: Malware Analysis & Diagnostic
                    Code: S!Ri

                    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    IEDFix
                    Credits: Malware Analysis & Diagnostic
                    Code: S!Ri

                    »»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    Agent.OMZ.Fix
                    Credits: Malware Analysis & Diagnostic
                    Code: S!Ri

                    »»»»»»»»»»»»»»»»»»»»»»»» VACFix
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    VACFix
                    Credits: Malware Analysis & Diagnostic
                    Code: S!Ri

                    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    404Fix
                    Credits: Malware Analysis & Diagnostic
                    Code: S!Ri

                    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    SrchSTS.exe by S!Ri
                    Search SharedTaskScheduler's .dll

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
                    "{D76AB2A1-00F3-42BD-F434-00BBC39C8953}"="rtasgvfu76ew8ndkfno94"

                    [HKEY_CLASSES_ROOT\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
                    @="C:\WINDOWS\system32\gsf83iujid.dll"

                    [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
                    @="C:\WINDOWS\system32\gsf83iujid.dll"

                    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                    "AppInit_DLLs"=""

                    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                    "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

                    »»»»»»»»»»»»»»»»»»»»»»»» RK

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                    "System"=""

                    »»»»»»»»»»»»»»»»»»»»»»»» DNS

                    Description: Realtek RTL8169/8110 Family Gigabit Ethernet NIC - Miniport d'ordonnancement de paquets
                    DNS Server Search Order: 89.2.0.1
                    DNS Server Search Order: 89.2.0.2

                    HKLM\SYSTEM\CCS\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
                    HKLM\SYSTEM\CS1\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
                    HKLM\SYSTEM\CS2\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
                    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
                    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
                    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2

                    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                    »»»»»»»»»»»»»»»»»»»»»»»» Fin
                    0
                    1. chimay8 Contributeur sécurité
                      parfait,

                      Redémarre l'ordinateur en mode sans échec .
                      Comment aller en Mode sans échec
                      1) Redémarre ton ordi
                      2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip"
                      3) Tu verras un écran avec options de démarrage apparaître
                      4) Choisis la première option : Sans Échec, et valide avec "Entrée"
                      5) Choisis ton compte habituel, et non Administrateur (si besoin ... )
                      ( ps : n'oublies pas , en mode sans échec , pas de connexion ! Donc copie ou imprime bien les infos ci-dessous ...)

                      *Double click sur SmitfraudFix.exe

                      * Sélectionnes 2 et presses "Entrée" dans le menu pour supprimer les fichiers responsables de l'infection.

                      * A la question: Voulez-vous nettoyer le registre ? répondre O (oui) et presse Entrée afin de débloquer le fond d'écran et supprimer les clés de registre de l'infection.

                      ( Le correctif déterminera si le fichier wininet.dll est infecté.)

                      * A la question: "Corriger le fichier infecté ?" répondre O (oui) et presser Entrée
                      pour remplacer le fichier corrompu.

                      * Un redémarrage sera peut être nécessaire pour terminer la procédure de nettoyage ( sinon fais le manuellement )

                      Le rapport se trouve à la racine de C\:
                      (dans le fichier "rapport.txt")

                      Poste ce dernier rapport

                      ensuite

                      Télécharge Malwarebytes' Anti-Malware et enregistre le sur ton Bureau.
                      https://www.malwarebytes.com/

                      (NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharges le ici : https://www.malekal.com/tutorial-aboutbuster/ )

                      A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.
                      Double-clique sur l'icône "Download_mbam-setup.exe" sur ton bureau pour démarrer le programme d'installation.

                      Pendant l'installation, suis les indications n'apporte aucune modification aux réglages par défaut et en fin d'installation, vérifie que les options "Update Malwarebytes' Anti-Malware" et "Launch Malwarebytes' Anti-Malware" soit cochées.

                      MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue.
                      La fenêtre principale de MBAM s'affiche :
                      Dans l'onglet analyse, vérifie que "Exécuter un examen complet" est coché et clique sur le bouton Rechercher pour démarrer l'analyse.
                      MBAM analyse ton ordinateur.

                      L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.

                      A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.
                      Si des malwares sont détectés, leur liste s'affiche.
                      ***EN CLIQUANT SUR SUPPRESSION(?)FAIT LE*** , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

                      MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Ferme le Bloc-notes. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)
                      Ferme MBAM en cliquant sur Quitter.

                      Poste le rapport dans ta réponse
                      0
                      1. guillaume1976
                        je ne trouve pas smitfraudfix.exe ............ je n'ai que smitfraudfix.cmd
                        0
                        1. chimay8 Contributeur sécurité
                          non,c'est bon!
                          vas-y
                          ;)
                          0
                          1. guillaume1976
                            Voilà le rapport de smitfraudfix :

                            SmitFraudFix v2.423

                            Rapport fait à 20:14:03,59, 13/07/2009
                            Executé à partir de
                            C:\Documents and Settings\Guillaume & Emilie\Bureau\Smitfraudfix\SmitfraudFix
                            OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                            Le type du système de fichiers est NTFS
                            Fix executé en mode sans echec

                            »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
                            !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                            SrchSTS.exe by S!Ri
                            Search SharedTaskScheduler's .dll

                            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
                            "{D76AB2A1-00F3-42BD-F434-00BBC39C8953}"="rtasgvfu76ew8ndkfno94"

                            [HKEY_CLASSES_ROOT\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
                            @="C:\WINDOWS\system32\gsf83iujid.dll"

                            [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
                            @="C:\WINDOWS\system32\gsf83iujid.dll"

                            »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

                            »»»»»»»»»»»»»»»»»»»»»»»» hosts

                            127.0.0.1 localhost

                            »»»»»»»»»»»»»»»»»»»»»»»» VACFix

                            VACFix
                            Credits: Malware Analysis & Diagnostic
                            Code: S!Ri

                            »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

                            S!Ri's WS2Fix: LSP not Found.

                            »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

                            GenericRenosFix by S!Ri

                            »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

                            »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

                            IEDFix
                            Credits: Malware Analysis & Diagnostic
                            Code: S!Ri

                            »»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix

                            Agent.OMZ.Fix
                            Credits: Malware Analysis & Diagnostic
                            Code: S!Ri

                            »»»»»»»»»»»»»»»»»»»»»»»» 404Fix

                            404Fix
                            Credits: Malware Analysis & Diagnostic
                            Code: S!Ri

                            »»»»»»»»»»»»»»»»»»»»»»»» RK

                            »»»»»»»»»»»»»»»»»»»»»»»» DNS

                            HKLM\SYSTEM\CCS\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
                            HKLM\SYSTEM\CS1\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
                            HKLM\SYSTEM\CS2\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
                            HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
                            HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
                            HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2

                            »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

                            »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
                            !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                            "System"=""

                            »»»»»»»»»»»»»»»»»»»»»»»» RK.2

                            »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

                            »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

                            »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

                            »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

                            Nettoyage terminé.

                            »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
                            !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                            SrchSTS.exe by S!Ri
                            Search SharedTaskScheduler's .dll

                            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
                            "{D76AB2A1-00F3-42BD-F434-00BBC39C8953}"="rtasgvfu76ew8ndkfno94"

                            [HKEY_CLASSES_ROOT\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
                            @="C:\WINDOWS\system32\gsf83iujid.dll"

                            [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
                            @="C:\WINDOWS\system32\gsf83iujid.dll"

                            »»»»»»»»»»»»»»»»»»»»»»»» Fin
                            0
                            1. guillaume1976
                              Je continue avec Malwarebytes....

                              Merci beaucoup pour ta disponibilité....
                              0
                              1. chimay8 Contributeur sécurité
                                Merci beaucoup pour ta disponibilité....

                                de rien!!ça fais plaisir
                                merci à toi!
                                :))
                                0
                                1. guillaume1976
                                  Voilà le rapport de Malwarebytes :

                                  Malwarebytes' Anti-Malware 1.38
                                  Version de la base de données: 2420
                                  Windows 5.1.2600 Service Pack 2

                                  13/07/2009 21:25:13
                                  mbam-log-2009-07-13 (21-25-12).txt

                                  Type de recherche: Examen complet (C:\|D:\|)
                                  Eléments examinés: 191750
                                  Temps écoulé: 38 minute(s), 2 second(s)

                                  Processus mémoire infecté(s): 2
                                  Module(s) mémoire infecté(s): 2
                                  Clé(s) du Registre infectée(s): 29
                                  Valeur(s) du Registre infectée(s): 20
                                  Elément(s) de données du Registre infecté(s): 6
                                  Dossier(s) infecté(s): 1
                                  Fichier(s) infecté(s): 568

                                  Processus mémoire infecté(s):
                                  c:\WINDOWS\ld12.exe (Worm.Koobface) -> Unloaded process successfully.
                                  C:\WINDOWS\Fonts\services.exe (Worm.Archive) -> Unloaded process successfully.

                                  Module(s) mémoire infecté(s):
                                  C:\WINDOWS\system32\gsf83iujid.dll (Trojan.Ertfor) -> Delete on reboot.
                                  C:\WINDOWS\system32\MSWINSCK.OCX (Worm.Nyxem) -> Delete on reboot.

                                  Clé(s) du Registre infectée(s):
                                  HKEY_CLASSES_ROOT\CLSID\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Zlob.H) -> Delete on reboot.
                                  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Ertfor) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Ertfor) -> Delete on reboot.
                                  HKEY_CLASSES_ROOT\Typelib\{40196867-19f8-7157-c097-ecaff653c9ad} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sfx (Trojan.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sfx (Trojan.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sfx (Trojan.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sfxdrv (Rootkit.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sfxdrv (Rootkit.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sfxdrv (Rootkit.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\6to4 (Trojan.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\6to4 (Trojan.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\6to4 (Trojan.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
                                  HKEY_CLASSES_ROOT\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
                                  HKEY_CLASSES_ROOT\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
                                  HKEY_CLASSES_ROOT\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
                                  HKEY_CLASSES_ROOT\CLSID\{248dd896-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
                                  HKEY_CLASSES_ROOT\CLSID\{248dd897-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pcmstub (Rootkit.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\pcmstub (Rootkit.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pcmstub (Rootkit.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sopidkc (Trojan.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sopidkc (Trojan.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sopidkc (Trojan.Agent) -> Quarantined and deleted successfully.
                                  HKEY_CURRENT_USER\SOFTWARE\Cognac (Rogue.Multiple) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009 (Rogue.SystemSecurity) -> Quarantined and deleted successfully.

                                  Valeur(s) du Registre infectée(s):
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Zlob.H) -> Delete on reboot.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\18914064 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysldtray (Worm.Koobface) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\exec (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\hsf7husjnfg98gi498aejhiugjkdg4 (Trojan.Downloader) -> Quarantined and deleted successfully.
                                  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\idstrf (Malware.Trace) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\BuildW (Malware.Trace) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\FirstInstallFlag (Malware.Trace) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\guid (Malware.Trace) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\i (Malware.Trace) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\mms (Malware.Trace) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\mso (Malware.Trace) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\udso (Malware.Trace) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\uid (Malware.Trace) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Ulrn (Malware.Trace) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Update (Malware.Trace) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\UpdateNew (Malware.Trace) -> Quarantined and deleted successfully.
                                  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\run (Trojan.Agent) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\sfx (Rootkit.Agent) -> Quarantined and deleted successfully.
                                  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\powermgr (Trojan.Agent) -> Quarantined and deleted successfully.

                                  Elément(s) de données du Registre infecté(s):
                                  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Run (Spyware.Passwords) -> Data: c:\windows\system32\mseyozhm.exe -> Quarantined and deleted successfully.
                                  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Load (Spyware.Passwords) -> Data: c:\windows\system32\msgajbs.exe -> Quarantined and deleted successfully.
                                  HKEY_CLASSES_ROOT\.bat\(default) (Hijacked.BatFile) -> Bad: (csfile) Good: (batfile) -> Quarantined and deleted successfully.
                                  HKEY_CLASSES_ROOT\.com\(default) (Hijacked.ComFile) -> Bad: (csfile) Good: (comfile) -> Quarantined and deleted successfully.
                                  HKEY_CLASSES_ROOT\.exe\(default) (Hijacked.exeFile) -> Bad: (csfile) Good: (exefile) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

                                  Dossier(s) infecté(s):
                                  C:\Documents and Settings\All Users\Application Data\18914064 (Rogue.Multiple.H) -> Quarantined and deleted successfully.

                                  Fichier(s) infecté(s):
                                  C:\WINDOWS\system32\gsf83iujid.dll (Trojan.Zlob.H) -> Delete on reboot.
                                  c:\documents and settings\all users\application data\18914064\18914064 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
                                  c:\documents and settings\all users\application data\18914064\18914064.exe (Rogue.Multiple.H) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\ld12.exe (Worm.Koobface) -> Quarantined and deleted successfully.
                                  C:\WINDOWS\system32\msocu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\derrk.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                                  c:\documents and settings\localservice\local settings\temporary internet files\Content.IE5\CP2RSTIJ\w[1].bin (Trojan.Agent) -> Quarantined and deleted successfully.
                                  c:\documents and settings\localservice\local settings\temporary internet files\Content.IE5\RJ2FIKC7\w[1].bin (Trojan.Agent) -> Quarantined and deleted successfully.
                                  c:\program files\sFX\SfX.DlL (Trojan.Agent) -> Quarantined and deleted successfully.
                                  c:\program files\sFX\sfX.sYs (Rootkit.Agent) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\msa.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\Fonts\cooecp.tlb (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\Fonts\logcde.dll (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\Fonts\windef.dll (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\Fonts\windef.Log (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\Fonts\winpaged.ocx (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\6to4v32.dll (Trojan.Agent) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mscelern.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msceqyw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mscjkocv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mscjoyz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mscjqk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mscoboa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mscom.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mscpbqxd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mscqa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mscslzgd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mscsms.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msctdcj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msctniv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mscvvp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mscxuq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdap.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdarr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msddcf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msddkde.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msden.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdftp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdgbgkh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdhwqp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdirtg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdiz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdja.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdjzfth.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdkr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdkyuxa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdltzo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdqqo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdrgop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdsfn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdthdb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdtpzb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdugs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdvswx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdxb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdxya.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdyu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdzk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdzmlgv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msdzs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mseaszco.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mseebh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mseezx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msegizqj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msegosyj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msehiulp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msehwuv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mseibfra.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mseie.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msejylg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msekmdao.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msekxgek.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msemgn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msenj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msentd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msenwmv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msepom.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mserbr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mserxso.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msesef.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msesm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msesuc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msetmrjw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msetutm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msevty.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msevumdu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mseyozhm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msezcgr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msezfuu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfabke.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfaid.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfap.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfcpuo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfgp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfhxzq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfkfioh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfkozfm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfktaro.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfkw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfld.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msflef.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msflme.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msflq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfltbzm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msflv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfmj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfninh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfnl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfofg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfogrq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfpacdp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfstyra.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msftd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msftgc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfuukxj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfxasm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfxnwx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msfzu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgajbs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgchxbl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgdhtz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msggvu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msggwsb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msghvwp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgjfn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgjw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgmllx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgmnly.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgmnwg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgoxwwj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgpg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgpnod.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgqqur.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgqr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgrpeke.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgsfpns.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgsxjtr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgtl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgtujyx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgtun.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgvd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgwml.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgxvlwm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgxwd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msgzm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshaxold.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshbot.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshdct.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshfl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshfrxxg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshgoqhy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshhe.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshhtqy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshhxotu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshhzr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshih.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshjxw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshkk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshobbe.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshotuu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshqjm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshrbbpj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshsrw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshuy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshxm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshxxhg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mshzd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msibirjj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msidyip.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msikfg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msikhy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msikn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msilal.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msily.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msipcmq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msipthtq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msiuf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msivzxq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msiwf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msiwjcc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msizsmqd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjcn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjcttuv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjebdv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjegf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjfduh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjfzsoj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjgbw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjgpua.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjgtop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjhu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjhyxp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjirh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjis.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjknm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjmnmtz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjqo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjrkp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjrtqaa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjsuk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjuwpxh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjvglyo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjvog.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjwct.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjwgavi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjwjf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjyurf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msjzlqyn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskagk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskbo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskcefl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskdh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskeqq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskglug.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msklxt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskooxez.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskoqm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskpldam.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskqfhop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskqzuy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskrdot.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskryz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msktgxql.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskvv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskvwu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskxr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mskyk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msletyh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslfeo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslfo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msljaoml.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msljxodr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslkz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslovzrg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslpdd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslqcg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslqrggg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslrlh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msltzqn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslusxkx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslwq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslwtl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslxa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslxckna.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslxnh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslxz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mslyrn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmaj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmfkged.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmhyi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmini.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmjgnnd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmkqy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmluoty.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmnbu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmpqg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmqml.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmrgrsw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmrsaig.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmuerxw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmvg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmyke.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmyrpwl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msmzkaz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnave.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msncache.dll (Backdoor.Bot) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msneq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnhbkmc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnjibnt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnkvop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnme.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnnu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnoc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnoktur.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnousz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnrewl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnrr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnswjds.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnvo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnxim.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnyydow.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnzdfv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msnzrf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msoba.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msobsh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msocfqjo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msodnq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msofmybl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msohtduo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msojvtc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msomulq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msopu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msopyan.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msoqr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msorca.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msott.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msouyull.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msoww.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msoydsa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mspacifa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mspbtc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mspbvd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mspdd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mspecb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mspfvkh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mspkxibw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msplr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msplxp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mspneq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msppvij.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mspsnu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msptoyc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mspty.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msputg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mspyfg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mspytmu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mspyu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqakfyn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqbir.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqbs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqbt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqdgp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqdnbcr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqdo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqezy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqfy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqghmz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqhz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqixz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqjbyi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqjflng.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqkc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqksmpc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqmbn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqmr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqndmyn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqnqvo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqoralv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqplgtr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqplvdf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqpycyx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqrwbz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqspjum.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqsq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqsqxa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msquih.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqurql.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msqvntjy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msraiebi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msraiwqd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrazoft.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrbh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrcel.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrdr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrehf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrgi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrgk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msritywo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrixr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrjou.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrjrxn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrlx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrnut.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msroefmu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrqoyaa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrrnv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrsddgs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrsnle.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrtebd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrustcz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrwv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrxedv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrxp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msrypefj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mssaizx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mssavyau.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mssbbfv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mssdj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mssfbzoq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mssfg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msshj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msshjqf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mssibau.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mssjsp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mssjyl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mssjzpr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msslhwm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mssllbt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mssnfj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mssnwqlj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msspsqwm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mssskvw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msswop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstbjan.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstdaqxr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstee.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msteuq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstfa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstgf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstglyh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstij.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstiwndd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstkds.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstkm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstlkkbw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstlred.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstmasq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstpy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstqa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstqd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstrpqif.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msttrt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstxhl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstzxfcl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mstzyyd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msuakp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msufafu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msugsop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msuhnf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msuip.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msujk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msujufjo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msukepbk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msulbbh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msulxp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msumk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msupai.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msuqn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msuqtgz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msurkw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msurovi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msusewru.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msusvb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msuthqa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msuuqfyq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msuwios.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msuxobzt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msuzu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msuzuqye.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvajdau.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvarmf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvay.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvcj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msveday.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvgd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvhhpme.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvjfhq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvjgg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvntyu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvoq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvor.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvphak.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvqubo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvsuxo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvsvb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvtcu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msvwuu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswbns.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswimsnm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\MSWINSCK.OCX (Worm.Nyxem) -> Delete on reboot.
                                  c:\WINDOWS\system32\mswjrct.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswjttg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswkehhg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswmnu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswmwwf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswnja.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswqaf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswqcae.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswrz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswtc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswvrq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswwmn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswwqurc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswxk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswxn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswxtef.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswydezt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswyk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswywhbm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mswzwgvw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxavhxz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxbg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxbyzwk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxfcxx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxgpe.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxii.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxjh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxjl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxjxxui.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxkb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxkvp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxodib.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxov.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxvlez.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxvq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxwh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxwkfjj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxxcj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxznjgp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msxzo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msybcsb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msycd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msychonq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyckxh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyfjjvz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msygb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msygtrmn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyhesp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyihp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyjalj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msylbzom.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msylfofy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyltapu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msynxz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyoced.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyohi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msypiv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msypo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyqobl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyrasf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msytfe.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msytp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyub.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyunuh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyvcht.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyvit.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyvw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyvykye.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msywupo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msyyfi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszat.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszatps.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszcacg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszedezo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszfkt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszgix.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszjlb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszjqb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszkky.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszkxgee.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszlsd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszmf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\msznepun.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszpebk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszqfl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszrgf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszrlj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszsko.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszstl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszvcec.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszweic.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
                                  c:\WINDOWS\system32\mszxb.
                                  0
                                  1. guillaume1976
                                    J'ai tenté de redémarrer en mode normal

                                    Windows a mis 15 minutes pour s'ouvrir, je n'ai plus de fonds d'écran et je n'ai pas réussi à ouvrir la moinde application...

                                    En revanche, le message "you're in danger..." a disparu et le logiciel system security 4.52 ne s'ouvre plus toutes les 2 minutes....

                                    Voilà les symptomes Docteur.... ;)
                                    0
                                    1. chimay8 Contributeur sécurité
                                      ça!
                                      Fichier(s) infecté(s): 568
                                      j'avais jamais vu...

                                      bon,si il a détruit des fichiers infectés au reboot de la machine,c'est normal que windows est pris du temps pour se lancer!

                                      tu as relancé ton pc pour voir si il prenais toujours autant de temps?
                                      0
                                      1. guillaume1976
                                        oui, il met toujours autant de temps.... le virus est supprimé?
                                        0
                                        1. guillaume1976
                                          pas vraiment... non ;)

                                          pourquoi, il faut réinstaller?
                                          0
                                          • 1
                                          • 2

                                          Discussions similaires

                                          Security boot fail lors du démarrage
                                          Steu

                                          5 réponses
                                          SecurityHealth est a désactiver ou pas au démarrage de W10 Pro 64 ?
                                          Walti55

                                          2 réponses
                                          Comment retirer le SECURE BOOT ?
                                          Elparigo60

                                          10 réponses
                                          Rétrodiffusion "Mail Delivery System"
                                          baissaoui

                                          0 réponse
                                          Security Boot Fail Windows 10 Acer
                                          benjamin5800

                                          22 réponses