virus generic hos process

Question

Bonjour,
 je pense avoir un virus dans mon pc , les connexions sont très ralentin , le son marche une fois sur 2 , j'ai donc fait une analyse ac hijackthis que je vous poste ici.
Merci d'avance.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:06:26, on 08/12/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\ASUS\Ai Booster\OverClk.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DNA\btdna.exe
C:\WINDOWS\wind7upd.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Documents and Settings\stéphane\.COMMgr\complmgr.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Belkin\F5D8053v4\Belkinwcui.exe
C:\Program Files\GigaTribe\gigatribe.exe
C:\Program Files\Xfire\Xfire.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\stéphane\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://gamespace.daemon-tools.cc/fra/home
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=%s
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
R3 - URLSearchHook: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player	bBS_1.dll
R3 - URLSearchHook: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO	bXfir.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO	bXfir.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player	bBS_1.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player	bBS_1.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll (file missing)
O3 - Toolbar: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO	bXfir.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Launch Ai Booster] "C:\Program Files\ASUS\Ai Booster\OverClk.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [I downloaded pirated Software from P2P ] NHL Live 2007
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Microsoft Driver Setup] C:\WINDOWS\wind7upd.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [MailBlocker] C:\DOCUME~1\STPHAN~1\LOCALS~1\Temp\b.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [COM+ Manager] "C:\Documents and Settings\stéphane\.COMMgr\complmgr.exe"
O4 - HKLM\..\Policies\Explorer\Run: [Microsoft Driver Setup] C:\WINDOWS\wind7upd.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: GigaTribe.lnk = C:\Program Files\GigaTribe\gigatribe.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: GigaTribe.lnk = C:\Program Files\GigaTribe\gigatribe.exe (User 'Default user')
O4 - .DEFAULT Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe (User 'Default user')
O4 - Startup: GigaTribe.lnk = C:\Program Files\GigaTribe\gigatribe.exe
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O4 - Global Startup: Pinnacle Streaming Server.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
O4 - Global Startup: Utilitaire sans fil Belkin.lnk = C:\Program Files\Belkin\F5D8053v4\Belkinwcui.exe
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbaresources\en-US\local\search.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0.2.20/cfweb_activex.camfrogweb.com-advanced-2.0.2.20_instmodule.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

jlpjlp · Answer

slt
analyse ceci sur virus total et colle le rapport  https://www.virustotal.com/gui/

C:\WINDOWS\wind7upd.exe


________________________

colle un rapport avec malwarebyte (scan rapide)

keuss58 · Answer

MErci bcp de ton aide , voila le rapport de virus total :
 je mets ds la foulée celui de malware dans une autre réponse :

 Fichier 95BCD453008E21B15A4D0132457AB3007C952F6B.scr reçu le 2009.12.08 07:35:56 (UTC)
Situation actuelle: terminé
Résultat: 1/40 (2.50%)
Formaté Formaté
Impression des résultats Impression des résultats
Antivirus 	Version 	Dernière mise à jour 	Résultat
a-squared 	4.5.0.43 	2009.12.08 	-
AhnLab-V3 	5.0.0.2 	2009.12.08 	-
AntiVir 	7.9.1.102 	2009.12.08 	-
Antiy-AVL 	2.0.3.7 	2009.12.08 	-
Authentium 	5.2.0.5 	2009.12.02 	-
Avast 	4.8.1351.0 	2009.12.08 	-
AVG 	8.5.0.426 	2009.12.08 	-
BitDefender 	7.2 	2009.12.08 	-
CAT-QuickHeal 	10.00 	2009.12.08 	-
ClamAV 	0.94.1 	2009.12.08 	-
Comodo 	3103 	2009.12.01 	-
DrWeb 	5.0.0.12182 	2009.12.08 	-
eSafe 	7.0.17.0 	2009.12.07 	-
eTrust-Vet 	35.1.7164 	2009.12.08 	-
F-Prot 	4.5.1.85 	2009.12.07 	-
F-Secure 	9.0.15370.0 	2009.12.07 	-
Fortinet 	4.0.14.0 	2009.12.08 	-
GData 	19 	2009.12.08 	-
Ikarus 	T3.1.1.74.0 	2009.12.08 	-
Jiangmin 	13.0.900 	2009.12.02 	-
K7AntiVirus 	7.10.913 	2009.12.07 	-
Kaspersky 	7.0.0.125 	2009.12.08 	-
McAfee 	5825 	2009.12.07 	-
McAfee+Artemis 	5825 	2009.12.07 	-
McAfee-GW-Edition 	6.8.5 	2009.12.08 	Heuristic.LooksLike.Win32.Suspicious.H!92
Microsoft 	1.5302 	2009.12.08 	-
NOD32 	4668 	2009.12.07 	-
Norman 	6.03.02 	2009.12.07 	-
nProtect 	2009.1.8.0 	2009.12.08 	-
Panda 	10.0.2.2 	2009.12.08 	-
PCTools 	7.0.3.5 	2009.12.08 	-
Rising 	22.25.01.03 	2009.12.08 	-
Sophos 	4.48.0 	2009.12.08 	-
Sunbelt 	3.2.1858.2 	2009.12.08 	-
Symantec 	1.4.4.12 	2009.12.08 	-
TheHacker 	6.5.0.2.088 	2009.12.07 	-
TrendMicro 	9.100.0.1001 	2009.12.08 	-
VBA32 	3.12.12.0 	2009.12.08 	-
ViRobot 	2009.12.8.2075 	2009.12.08 	-
VirusBuster 	5.0.21.0 	2009.12.07 	-
Information additionnelle
File size: 88576 bytes
MD5   : 9d22d53bbfa0b1ad6a65404c94b34290
SHA1  : aa76deb586789c820937e696d03024e74f212888
SHA256: 467b41f7f86b0119657840c38c0b06e94913006b8cdaecd3bc862baa9f85da34
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x98BC
timedatestamp.....: 0x2A425E19 (Sat Jun 20 00:22:17 1992)
machinetype.......: 0x14C (Intel I386)

( 8 sections )
name viradd virsiz rawdsiz ntrpy md5
CODE 0x1000 0xA434 0xA600 6.40 0d96814e6e1eff758cb024c0fa0deeb9
DATA 0xC000 0x4E0 0x600 3.44 5c0df7f24b15cfedeaa71f67bace0e51
BSS 0xD000 0xDFD 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.idata 0xE000 0x676 0x800 3.93 58493a4f48665057f28bf9c7831b28be
.tls 0xF000 0x8 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.rdata 0x10000 0x18 0x200 0.19 f7ea30029490471e0223dc34ef2f3f62
.reloc 0x11000 0xEC0 0x1000 6.43 ecc20001f590405e82f35692d3a2796f
.rsrc 0x12000 0x8E0C 0x9000 7.68 f1c5e904746f8263916135ad3911de80

( 4 imports )

> advapi32.dll: RegQueryValueExA, RegOpenKeyExA, RegCloseKey
> kernel32.dll: DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, VirtualFree, VirtualAlloc, LocalFree, LocalAlloc, GetVersion, GetCurrentThreadId, WideCharToMultiByte, MultiByteToWideChar, lstrlenA, lstrcpynA, LoadLibraryExA, GetThreadLocale, GetStartupInfoA, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetCommandLineA, FreeLibrary, FindFirstFileA, FindClose, ExitProcess, WriteFile, UnhandledExceptionFilter, RtlUnwind, RaiseException, GetStdHandle, TlsSetValue, TlsGetValue, LocalAlloc, GetModuleHandleA, WriteFile, VirtualQuery, LoadLibraryExA, GetVersionExA, GetThreadLocale, GetStringTypeExA, GetStdHandle, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetDiskFreeSpaceA, GetCPInfo, GetACP, EnumCalendarInfoA
> oleaut32.dll: SysFreeString, SysReAllocStringLen, SysAllocStringLen
> user32.dll: GetKeyboardType, LoadStringA, MessageBoxA, CharNextA, MessageBoxA, LoadStringA, GetSystemMetrics, CharNextA, CharToOemA

( 0 exports )
TrID  : File type identification
Win32 Executable Generic (38.4%)
Win32 Dynamic Link Library (generic) (34.1%)
Win16/32 Executable Delphi generic (9.3%)
Generic Win/DOS Executable (9.0%)
DOS Executable Generic (9.0%)
ssdeep: 1536:1kB6nJ9Z9FGx2lgTqhA34cWNM1f3vU8mVLJxp0PBiCKginAOv:e6nJP9006hW2nyVlxp05iDgu
PEiD  : -
RDS   : NSRL Reference Data Set

keuss58 · Answer

voici le rapport malware : 

Malwarebytes' Anti-Malware 1.41
Version de la base de données: 2812
Windows 5.1.2600 Service Pack 2

08/12/2009 17:48:31
mbam-log-2009-12-08 (17-48-24).txt

Type de recherche: Examen rapide
Eléments examinés: 109543
Temps écoulé: 7 minute(s), 34 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Microsoft Driver Setup (Worm.Palevo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Driver Setup (Worm.Palevo) -> No action taken.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\wind7upd.exe (Worm.Palevo) -> No action taken.

jlpjlp · Answer

vire ce qui a été trouvé par malwarebyte

puis
_____________________

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau. 
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cpVobGk5bHnxrhQ4yaoEUDJvOYNnEGyYjgqHZz5GqZLfutR3fMFPlsC3-CGIilfupPAguYATNyua3csodN_frdMK8sSzUpit10Yac-QJCOkMqJKkbdKcP6ySs8trWPgoNVIq4TGGWCe6o0txXQv-ZueJF9vZzw3RXsGwFYIqN2lvF2LPdQzS8mE1d5kWOVOz6EMzQuE5-lClSJM869uq3oc7-t7yg%3D%3D&attredirects=3 

* Lance l'installation du programme en exécutant le fichier téléchargé. 
* Double-clique maintenant sur le raccourci de Toolbar-S&D. 
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée. 
* Choisis maintenant l'option 2. Patiente jusqu'à la fin de la recherche. 
* Poste le rapport généré. (C:\TB.txt) 

_____________________


mettre a jour internet explorer
pour XP
http://download.microsoft.com/...

______________________



• Télécharge et installe 
http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.exe
https://www.androidworld.fr/

 par Chiquitine29



 (!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir

• Double clic sur le raccourci UsbFix présent sur ton bureau .

• Au menu principal choisis l'option " F " pour français et tape sur [entrée] . 

• Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée] 

• Laisse travailler l'outil.

• Ensuite poste le rapport UsbFix.txt qui apparaitra.

• Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller ) 

• Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
          Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus. 


• Tuto : http://pagesperso-orange.fr/NosTools/usbfix.html

keuss58 · Answer

voici le rapport avec toolbar S&d

 -----------\  ToolBar S&D 1.2.6   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) 4 CPU 3.00GHz )
   BIOS : BIOS Date: 07/06/06 10:09:25 Ver: 08.00.12
   USER : stéphane ( Administrator )
   BOOT : Normal boot
   Antivirus : a-squared Anti-Malware 4 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:149 Go (Free:53 Go)
   D:\ (CD or DVD)
   E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
   F:\ (Local Disk) - NTFS - Total:149 Go (Free:28 Go)
   G:\ (CD or DVD)
   H:\ (USB)
   I:\ (USB)
   J:\ (USB)
   K:\ (USB)

   "C:\ToolBar SD" ( MAJ : 04-12-2008|20:40 )
   Option : [2] ( 08/12/2009|22:41 )

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (st‚phane) - {5B52016C-D097-4aec-BE61-9F129D8FDDBA} => wj
   (st‚phane) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} => xfirexo
   (st‚phane) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
   (st‚phane) - {6614d11d-d21d-b211-ae23-815234e1ebb5} => drweb
   (st‚phane) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} => bs_player


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://gamespace.daemon-tools.cc/fra/home"
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Default_Search_URL"="http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q="
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Start Page"="https://www.msn.com/fr-fr/"


   --------------------\  Recherche d'autres infections

   C:\WINDOWS\Tasks\At1.job
   C:\WINDOWS\Tasks\At2.job
   C:\WINDOWS\Tasks\At3.job

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\STPHAN~1\Bureau\FIlm ‚ otr\XP\CLE ACTIVATION crack windows XP FR pro et familiale.zip
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun.exe
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun.inf
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\DirectX
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup.exe
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun\English
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun\French
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun\Italian
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun\Portuguese
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun\English\autorun.str
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun\English\Logo.bmp
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun\French\Autorun.str
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun\French\Logo.bmp
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun\French\Thumbs.db
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun\Italian\Autorun.str
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun\Italian\Logo.bmp
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun\Portuguese\Autorun.str
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun\Portuguese\Logo.bmp
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\DirectX\BDA.cab
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\DirectX\BDANT.cab
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\DirectX\cfgmgr32.dll
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\DirectX\DirectX.cab
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\DirectX\DSETUP.dll
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\DirectX\dsetup32.dll
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\DirectX\dxnt.cab
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\DirectX\dxsetup.exe
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\DirectX\setupapi.dll
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\data1.hdr
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\data3.cab
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\engine32.cab
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Files
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\setup.exe
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\setup.inx
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Files\CM2007.exe
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Files\xerces-c_2_3_0.dll
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\English
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\French
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\Italian
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\Portuguese
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\English\FrontEndScreens
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\English\Readme.rtf
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\English\FrontEndScreens\Common
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\English\FrontEndScreens\Common\BGS_SplashScreen_000.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\English\FrontEndScreens\Common\BGS_SplashScreen_001.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\English\FrontEndScreens\Common\Models
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\English\FrontEndScreens\Common\Models\Ad_01.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\English\FrontEndScreens\Common\Models\Ad_02.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\French\Readme.rtf
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens\Common
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens\Common\BGS_SplashScreen_000.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens\Common\BGS_SplashScreen_001.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens\Common\Models
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens\Common\Models\Ad_01.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens\Common\Models\Ad_02.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\Italian\FrontEndScreens
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\Italian\FrontEndScreens\Common
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\Italian\FrontEndScreens\Common\BGS_SplashScreen_000.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\Italian\FrontEndScreens\Common\BGS_SplashScreen_001.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\Portuguese\FrontEndScreens
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\Portugueseeadme.rtf
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\Portuguese\FrontEndScreens\Common
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\Portuguese\FrontEndScreens\Common\BGS_SplashScreen_000.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\Portuguese\FrontEndScreens\Common\BGS_SplashScreen_001.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\Portuguese\FrontEndScreens\Common\Models
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\Portuguese\FrontEndScreens\Common\Models\Ad_01.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Language\Portuguese\FrontEndScreens\Common\Models\Ad_02.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun.exe
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun.inf
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\CRACK
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\DirectX
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup.exe
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun\English
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun\French
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun\Italian
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun\Portuguese
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun\English\autorun.str
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun\English\Logo.bmp
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun\French\Autorun.str
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun\French\Logo.bmp
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun\French\Thumbs.db
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun\Italian\Autorun.str
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun\Italian\Logo.bmp
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun\Portuguese\Autorun.str
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun\Portuguese\Logo.bmp
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\CRACK\CM2007.exe
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\DirectX\BDA.cab
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\DirectX\BDANT.cab
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\DirectX\cfgmgr32.dll
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\DirectX\DirectX.cab
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\DirectX\DSETUP.dll
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\DirectX\dsetup32.dll
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\DirectX\dxnt.cab
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\DirectX\dxsetup.exe
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\DirectX\setupapi.dll
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\data1.cab
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\data1.hdr
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\data2.cab
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\data3.cab
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\engine32.cab
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Files
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\GameShadow
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\layout.bin
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\setup.exe
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\setup.ibt
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\setup.ini
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\setup.inx
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Files\CM2007.exe
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Files\dbghelp.dll
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Files\xerces-c_2_3_0.dll
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\GameShadow\Setup.exe
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\English
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\French
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Italian
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Portuguese
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\English\FrontEndScreens
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\English\Readme.rtf
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\English\FrontEndScreens\Common
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\English\FrontEndScreens\Common\BGS_SplashScreen_000.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\English\FrontEndScreens\Common\BGS_SplashScreen_001.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\English\FrontEndScreens\Common\Models
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\English\FrontEndScreens\Common\Models\Ad_01.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\English\FrontEndScreens\Common\Models\Ad_02.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\French\Readme.rtf
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens\Common
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens\Common\BGS_SplashScreen_000.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens\Common\BGS_SplashScreen_001.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens\Common\CM_Logo_001.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens\Common\Models
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens\Common\Models\Ad_01.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\French\FrontEndScreens\Common\Models\Ad_02.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Italian\FrontEndScreens
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Italian\Readme.rtf
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Italian\FrontEndScreens\Common
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Italian\FrontEndScreens\Common\BGS_SplashScreen_000.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Italian\FrontEndScreens\Common\BGS_SplashScreen_001.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Italian\FrontEndScreens\Common\CM_Logo_001.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Italian\FrontEndScreens\Common\Models
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Italian\FrontEndScreens\Common\Models\Ad_01.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Italian\FrontEndScreens\Common\Models\Ad_02.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Portuguese\FrontEndScreens
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Portugueseeadme.rtf
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Portuguese\FrontEndScreens\Common
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Portuguese\FrontEndScreens\Common\BGS_SplashScreen_000.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Portuguese\FrontEndScreens\Common\BGS_SplashScreen_001.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Portuguese\FrontEndScreens\Common\Models
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Portuguese\FrontEndScreens\Common\Models\Ad_01.tga
   C:\DOCUME~1\STPHAN~1\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Language\Portuguese\FrontEndScreens\Common\Models\Ad_02.tga



   1 - "C:\ToolBar SD\TB_1.txt" - 08/12/2009|22:43 - Option : [2]

   -----------\  Fin du rapport a 22:43:39,28

keuss58 · Answer

et voici le rapport usb fix :


############################## | UsbFix V6.059 |

User : stéphane () # ST-B48B1EDFDF1F
Update on 01/12/2009 by Chiquitine29, C_XX & Chimay8
Start at: 22:46:54 | 08/12/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

              Intel(R) Pentium(R) 4 CPU 3.00GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 6.0.2900.2180
Windows Firewall Status : Enabled
AV : Doctor Web Anti-Virus 5.0.1.08171 [ Enabled | Updated ]
AV : avast! antivirus 4.8.1335 [VPS 091208-1] 4.8.1335 [ Enabled | Updated ]
AV : a-squared Anti-Malware 4 [ Enabled | Updated ]

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 149,04 Go (54,07 Go free) # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque CD-ROM # 277,42 Mo (0 Mo free) [CM0304] # CDFS
F:\ -> Disque fixe local # 149,05 Go (28,11 Go free) [stef] # NTFS
G:\ -> Disque CD-ROM
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque amovible
K:\ -> Disque amovible

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe 864
C:\WINDOWS\system32\csrss.exe 928
C:\WINDOWS\system32\winlogon.exe 956
C:\WINDOWS\system32\services.exe 1000
C:\WINDOWS\system32\lsass.exe 1012
C:\WINDOWS\system32\svchost.exe 1184
C:\WINDOWS\system32\svchost.exe 1252
C:\WINDOWS\system32\svchost.exe 1748
C:\WINDOWS\system32\svchost.exe 1816
C:\WINDOWS\system32\svchost.exe 2044
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 288
C:\Program Files\Alwil Software\Avast4\ashServ.exe 360
C:\WINDOWS\system32\spoolsv.exe 1476
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe 1512
C:\WINDOWS\Explorer.EXE 1840
C:\Program Files\Java\jre6\bin\jusched.exe 2000
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 2008
C:\Program Files\ASUS\Ai Booster\OverClk.exe 2020
C:\WINDOWS\RTHDCPL.EXE 2032
C:\WINDOWS\system32\RUNDLL32.EXE 236
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 244
C:\Program Files\iTunes\iTunesHelper.exe 308
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe 424
C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe 500
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe 564
C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe 712
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe 736
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe 780
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 820
C:\Program Files\Messenger\msmsgs.exe 828
C:\Program Files\DNA\btdna.exe 888
C:\Program Files\DAEMON Tools Lite\DTLite.exe 916
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 1016
C:\Program Files\Belkin\F5D8053v4\Belkinwcui.exe 2584
C:\Program Files\GigaTribe\gigatribe.exe 2604
C:\Program Files\Xfire\Xfire.exe 2656
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 3512
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe 3548
C:\Program Files\Java\jre6\bin\jqs.exe 3584
C:\WINDOWS\system32
vsvc32.exe 1824
C:\WINDOWS\system32\svchost.exe 2144
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 2904
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe 2960
C:\Program Files\iPod\bin\iPodService.exe 3196
C:\WINDOWS\system32\wscntfy.exe 3708
C:\WINDOWS\System32\alg.exe 3408
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe 3840
C:\Program Files\a-squared Anti-Malware\a2service.exe 1796
C:\WINDOWS\wind7upd.exe 1380
C:\WINDOWS\System32\svchost.exe 3916
C:\Program Files\Windows Live\Contacts\wlcomm.exe 3472
C:\Program Files\Mozilla Firefox\firefox.exe 4532
C:\WINDOWS\system32\wbem\wmiprvse.exe 6148

################## | Fichiers # Dossiers infectieux |

C:\WINDOWS\logfile32.txt 
C:\WINDOWS\System32\40.scr 
C:\WINDOWS\System32\61.scr 
C:\WINDOWS\System32\65.scr 
C:\DOCUME~1\STPHAN~1\LOCALS~1\Temp\a.dat 
E:\autorun.inf  

################## | Spyware.OnlineGames |

C:\System Volume Information\_restore{4D507F78-2BAD-48A5-B881-1EA625C251E8}\RP588\A0105836.exe  
C:\System Volume Information\_restore{4D507F78-2BAD-48A5-B881-1EA625C251E8}\RP611\A0112117.exe  

################## | Registre # Clés infectieuses |

[HKCU\SOFTWARE\MailBlocker]  
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MailBlocker"  
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run] "Microsoft Driver Setup"  
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] "Microsoft Driver Setup"  
[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableTaskMgr"  
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoFolderOptions" 
[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoFolderOptions"  

################## | Registre # Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{004cd532-90b4-11dd-8544-0015f2eb7e1b}
Shell\AutoRun\command =G:\LaunchU3.exe -a

HKCU\..\..\Explorer\MountPoints2\{004cd533-90b4-11dd-8544-0015f2eb7e1b}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs

HKCU\..\..\Explorer\MountPoints2\{4864b136-156a-11de-8602-0015f2eb7e1b}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs

HKCU\..\..\Explorer\MountPoints2\{87830f80-25f0-11dd-84a4-0060b3501a86}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs

HKCU\..\..\Explorer\MountPoints2\{aa81c8ab-f1c9-11dc-8479-0060b3501a86}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs

################## | Cracks / Keygens / Serials |

"C:\Documents and Settings\st‚phane\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Autorun.exe"  
08/09/2006 18:43 |Size 331776 |Crc32 ee4e895e |Md5 308d324f8ff8746e04c701e640ffa398  
 
"C:\Documents and Settings\st‚phane\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup.exe"  
08/09/2006 18:43 |Size 30720 |Crc32 a032e3a7 |Md5 744afc90279a5a0dc7a85441601be2aa  
 
"C:\Documents and Settings\st‚phane\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\DirectX\dxsetup.exe"  
08/09/2006 18:06 |Size 140288 |Crc32 6c57a08e |Md5 e78f90aaf9277e5392d3a397c1ef8b72  
 
"C:\Documents and Settings\st‚phane\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\setup.exe"  
19/04/2004 04:10 |Size 116688 |Crc32 cb23daee |Md5 dd11e8fed01ac201c24c7df5f786adf5  
 
"C:\Documents and Settings\st‚phane\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\Copie de L'entraineur 2007+ crack\Setup\Files\CM2007.exe"  
28/09/2006 12:30 |Size 10346496 |Crc32 d88860a6 |Md5 e3f72586cc4edf0e80077fb14a0edb22  
 
"C:\Documents and Settings\st‚phane\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Autorun.exe"  
08/09/2006 18:43 |Size 331776 |Crc32 ee4e895e |Md5 308d324f8ff8746e04c701e640ffa398  
 
"C:\Documents and Settings\st‚phane\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup.exe"  
08/09/2006 18:43 |Size 30720 |Crc32 a032e3a7 |Md5 744afc90279a5a0dc7a85441601be2aa  
 
"C:\Documents and Settings\st‚phane\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\CRACK\CM2007.exe"  
13/10/2006 20:11 |Size 16904192 |Crc32 1535ce6d |Md5 d42ce7dae5f9045ffff2e3d14b894150  
 
"C:\Documents and Settings\st‚phane\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\DirectX\dxsetup.exe"  
08/09/2006 18:06 |Size 140288 |Crc32 6c57a08e |Md5 e78f90aaf9277e5392d3a397c1ef8b72  
 
"C:\Documents and Settings\st‚phane\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\setup.exe"  
19/04/2004 04:10 |Size 116688 |Crc32 cb23daee |Md5 dd11e8fed01ac201c24c7df5f786adf5  
 
"C:\Documents and Settings\st‚phane\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\Files\CM2007.exe"  
28/09/2006 12:30 |Size 10346496 |Crc32 d88860a6 |Md5 e3f72586cc4edf0e80077fb14a0edb22  
 
"C:\Documents and Settings\st‚phane\Local Settings\Application Data\Microsoft\Messenger\keuss58@hotmail.fr\Sharing Folders\fabienbonnet63@hotmail.com\L'entraineur 2007+ crack\Setup\GameShadow\Setup.exe"  
21/09/2006 19:22 |Size 12382808 |Crc32 87f61792 |Md5 5db98d575da2334ddfd24eca97f3dc9e  
 
"C:\Documents and Settings\st‚phane\Bureau\FIlm ‚ otr\XP\CLE ACTIVATION crack windows XP FR pro et familiale.zip"
-> Contain : WinXP.Activation.v1.1.French.exe 

"C:\Program Files\serial.zip"
-> Contain : user32.exe      279552    DFLT-X    1%     275422  15-07-2006 02:06:58 7141f9cd 

"C:\Program Files\serial.zip"
-> Contain : shell32.exe     291956    DFLT-X    3%     282646  13-07-2006 20:23:56 10e07533 

"C:\Program Files\serial.zip"
-> Contain : patcher.exe     194133    DFLT-X    3%     188401  16-07-2006 20:16:02 12f547cd 

"C:\Program Files\serial.zip"
-> Contain : dr.exe          280692    DFLT-X    3%     272083  13-07-2006 20:36:02 8f4549a4 


################## | ! Fin du rapport # UsbFix V6.059 ! |

jlpjlp · Answer

vire ces 3 taches plannifiées (AT 1,2,3) en suivant les liens


C:\WINDOWS\Tasks\At1.job
C:\WINDOWS\Tasks\At2.job
C:\WINDOWS\Tasks\At3.job 

_________________

il serait bien de faire le ménage dans tes cracks:!)

_________________

colle un rapport avec usbfix option 2

________________

colle un scan en ligne de chez bitdenfeder ou panda

http://www.bitdefender.com/scan_fr/scan8/ie.html

Virus generic hos process

7 réponses

Votre réponse

Discussions similaires

Newsletters