Virus Trojan

Question

Bonjour, moi j'ai un virus Trojan dans mon ordinateur et j'ai beau essayer de le supprimer, il revient toujours, est-ce que quelqu'un pourrait me venir en aide silvouplait?? Le nom du virus est TR/Dld.Agent.cxxo Trojan...

Merci
Karine

moment de grace · Answer

bonjour

• Télécharge Random's System Information Tool (RSIT) de Random/Random. 

http://images.malwareremoval.com/random/RSIT.exe 

• Enregistre le sur ton Bureau. 

• Double clique sur RSIT.exe pour lancer l'outil. 

• Clique sur "Continue" à l'écran Disclaimer. 

• Si l'outil HijackThis n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu s'il te le demande) 

et tu devras accepter la licence. 

• Une fois le scan terminé, deux rapports vont apparaître : poste les dans deux messages séparés stp

Les rapports se trouvent à cet endroit: 
C:\rsit\info.txt 
C:\rsit\log.txt

kare180 · Answer

et voila celui de log:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Karine at 2010-01-27 09:00:06
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 56 GB (73%) free of 76 GB
Total RAM: 503 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:00:49, on 2010-01-27
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\LG Software\IP Operator 2005\IP Operator.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\LG Software\System Control Manager\MGSysCtrl.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\LG Software\System Control Manager\edd.exe
C:\WINDOWS\system32\o2flash.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
C:\Program Files\Gestionnaire Antidote.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\lg_swupdate\Gilautouc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Avira\AntiVir Desktop\update.exe
c:\program files\avira\antivir desktop\avcenter.exe
C:\Program Files\Avira\AntiVir Desktop\avscan.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Karine\Bureau\RSIT.exe
C:\Program Files	rend micro\Karine.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.mirarsearch.com/?useie5=1&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [LG Intelligent Update] "C:\Program Files\lg_swupdate\autoupdate.exe" Gilautouc
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [IPO3] "C:\Program Files\LG Software\IP Operator 2005\IP Operator.exe" -aUtOsTaRtFrOmReG
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [MGSysCtrl] C:\Program Files\LG Software\System Control Manager\MGSysCtrl.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] C:\Program Files\Gestionnaire Antidote.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Evil Driver Daemon (NishService) - Unknown owner - C:\Program Files\LG Software\System Control Manager\edd.exe
O23 - Service: O2Micro Flash Memory (O2Flash) - Unknown owner - C:\WINDOWS\system32\o2flash.exe

moment de grace · Answer

ok


Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent(car il est detecté a tort comme infection) 

&#9654; Télécharge et installe List&Kill'em et enregistre le sur ton bureau 
http://sd-1.archive-host.com/membres/up/829108531491024/List_Killem_Install.exe 

double clique ( clic droit "executer en tant qu'administrateur" pour Vista/7 ) sur le raccourci sur ton bureau pour lancer l'installation 

coche la case "creer une icone sur le bureau" 

une fois terminée , clic sur "terminer" et le programme se lancer seul 

choisis la langue puis choisis l'option 1 = Mode Recherche 

&#9654; laisse travailler l'outil 

à l'apparition de la fenetre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué. 

un rapport du nom de catchme apparait sur ton bureau , ignore-le,ne le poste pas , mais ne le supprime pas pour l instant, le scan n'est pas fini. 

&#9654; Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED" 

tu peux supprimer le rapport catchme.log de ton bureau maintenant.

kare180 · Answer

voila le rapport! 

List'em by g3n-h@ckm@n 1.2.1.1
User : Karine (Administrateurs) 
Update on 23/01/2010 by g3n-h@ckm@n ::::: 13:50 
Start at: 14:03:44 | 2010-01-27
Contact : g3n-h@ckm@n sur CCM

Intel(R) Core(TM)2 CPU         T5200  @ 1.60GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 6.0.2900.2180
Windows Firewall Status : Enabled
AV : AntiVir Desktop 9.0.1.32 [ (!) Disabled | Updated ]

C:\ -> Disque fixe local | 74,52 Go (54,09 Go free) | NTFS
D:\ -> Disque CD-ROM | 4,37 Go (0 Mo free) [STAR_TREK_XI_DOM] | UDF

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running 

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\LG Software\System Control Manager\edd.exe
C:\WINDOWS\system32\o2flash.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\LG Software\IP Operator 2005\IP Operator.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\LG Software\System Control Manager\MGSysCtrl.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
C:\Program Files\Gestionnaire Antidote.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\lg_swupdate\Gilautouc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Karine\Bureau\List_Kill'em\List_Kill'em.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Documents and Settings\Karine\Local Settings\Temp\7B.tmp\pv.exe

======================
Keys "Run" 
======================
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
CTFMON.EXE	REG_SZ         	C:\WINDOWS\system32\ctfmon.exe
Power2GoExpress	REG_SZ         	
msnmsgr	REG_SZ         	"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
AnyDVD	REG_SZ         	C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
Gestionnaire Antidote.exe	REG_SZ         	C:\Program Files\Gestionnaire Antidote.exe
swg	REG_SZ         	"C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
LG Intelligent Update	REG_SZ         	"C:\Program Files\lg_swupdate\autoupdate.exe" Gilautouc 
igfxtray	REG_SZ         	C:\WINDOWS\system32\igfxtray.exe 
igfxhkcmd	REG_SZ         	C:\WINDOWS\system32\hkcmd.exe 
igfxpers	REG_SZ         	C:\WINDOWS\system32\igfxpers.exe 
RTHDCPL	REG_SZ         	RTHDCPL.EXE 
SkyTel	REG_SZ         	SkyTel.EXE 
Alcmtr	REG_SZ         	ALCMTR.EXE 
IPO3	REG_SZ         	"C:\Program Files\LG Software\IP Operator 2005\IP Operator.exe" -aUtOsTaRtFrOmReG 
AGRSMMSG	REG_SZ         	AGRSMMSG.exe 
MGSysCtrl	REG_SZ         	C:\Program Files\LG Software\System Control Manager\MGSysCtrl.exe 
avgnt	REG_SZ         	"C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min 
RemoteControl	REG_SZ         	"C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" 
Adobe Reader Speed Launcher	REG_SZ         	"C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" 
Adobe ARM	REG_SZ         	"C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" 
 
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

=====================
Other Keys
=====================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] 
dontdisplaylastusername	REG_DWORD      	0 (0x0) 
legalnoticecaption	REG_SZ         	 
legalnoticetext	REG_SZ         	 
shutdownwithoutlogon	REG_DWORD      	1 (0x1) 
undockwithoutlogon	REG_DWORD      	1 (0x1) 

===============
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] 
NoDriveTypeAutoRun	REG_DWORD      	145 (0x91) 

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] 
HonorAutoRunSetting	REG_DWORD      	1 (0x1) 

=============== 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLS	REG_SZ         	

===============
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\crypt32chain]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\cryptnet]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\cscdll]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\igfxcui]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\ScCertProp]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\Schedule]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\sclgntfy]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\SensLogn]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify	ermsrv]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\wlballoon]

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
{AEB6717E-7E19-11d0-97EE-00C04FD91972}	REG_SZ         	 

===============
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
%windir%\system32\sessmgr.exe	REG_SZ         	%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
C:\Program Files\Messenger\msmsgs.exe	REG_SZ         	C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger
C:\Program Files\Windows Live\Messenger\wlcsdk.exe	REG_SZ         	C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
C:\Program Files\Windows Live\Messenger\msnmsgr.exe	REG_SZ         	C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe	REG_SZ         	C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
%windir%\system32\sessmgr.exe	REG_SZ         	%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
C:\Program Files\Windows Live\Messenger\wlcsdk.exe	REG_SZ         	C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
C:\Program Files\Windows Live\Messenger\msnmsgr.exe	REG_SZ         	C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe	REG_SZ         	C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare

===============
ActivX controls
===============
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{6414512B-B978-451D-A0D8-FCFDF33E833C}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}

===============
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10072CEC-8CC1-11D1-986E-00A0C955B42F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{283807B5-2C60-11D0-A31D-00AA00B92C03}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{36f8ec70-c29a-11d1-b5c7-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3bf42070-b3b1-11d1-b5c5-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4278c270-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f216970-c90c-11d1-b5c7-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5945c046-1e7d-11d1-bc44-00c04fd912be}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5A8D6EE0-3E18-11D0-821E-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{73FA19D0-2D75-11D2-995D-00C04F98BBC9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{ACC563BC-4266-43f0-B6ED-9D38C4202C7E}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CC2A9BA0-3BDD-11D0-821E-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11cf-96B8-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}

==============
BHO :
======
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

================
Internet Explorer :
================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page	REG_SZ         	http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page	REG_SZ         	https://www.google.ca/?gws_rd=ssl

========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services] 

Ndisuio : 0x3 
SharedAccess : 0x2 
wuauserv : 0x2 

=========
Atapi.sys
=========

%%%% HASHDEEP-1.0
%%%% size,md5,sha256,filename
## Invoked from: C:\Documents and Settings\Karine\Local Settings\Temp\7B.tmp
## C:\> hashdeep C:\WINDOWS\System32\Drivers\atapi.sys
## 
95360,cdfe4411a69c224bd1d11b2da92dac51,0e6b23a80f171550575bebc56f7500cd87a5cf03b2b9fdc49bc3de96282cd69d,C:\WINDOWS\System32\Drivers\atapi.sys

%%%% HASHDEEP-1.0
%%%% size,md5,sha256,filename
## Invoked from: C:\Documents and Settings\Karine\Local Settings\Temp\7B.tmp
## C:\> hashdeep C:\WINDOWS\System32\DllCache\atapi.sys
## 
95360,cdfe4411a69c224bd1d11b2da92dac51,0e6b23a80f171550575bebc56f7500cd87a5cf03b2b9fdc49bc3de96282cd69d,C:\WINDOWS\System32\DllCache\atapi.sys

Sources
======= 
 
C:\WINDOWS\SoftwareDistribution\Download\327771f7f3830b5acec68906a2aac4ab\atapi.sys  
C:\WINDOWS\system32\dllcache\atapi.sys  
C:\WINDOWS\system32\drivers\atapi.sys  
C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\atapi.sys  

Référence :
==========

Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
Vista_SP1_32b  : 2d9c903dc76a66813d350a562de40ed9
Vista_SP2_32b  : 1F05B78AB91C9075565A9D8A4B880BC4
Vista_SP2_64b  : 1898FAE8E07D97F2F6C2D5326C633FAC
Windows 7_32b  : 80C40F7FDFC376E4C5FEEC28B41C119E
Windows 7_64b  : 02062C0B390B7729EDC9E69C680A6F3C
 
=======
Drive :
=======

D‚fragmenteur de disque Windows
Copyright (c) 2001 Microsoft Corp. et Executive Software International Inc.

Rapport d'analyse                 	 
    74,52 Go total,  54,09 Go libre (72%),  5% fragment‚ (fragmentation du fichier 11%)

Il ne vous est pas n‚cessaire de d‚fragmenter ce volume. 	 

¤¤¤¤¤¤¤¤¤¤ Files/folders :

Present !! : C:\Documents and Settings\All Users\Application Data\.zreglib  
Present !! : C:\Program Files\BitLord  
Present !! : C:\WINDOWS\SET25.tmp  
Present !! : C:\WINDOWS\SET3.tmp  
Present !! : C:\WINDOWS\SET4.tmp  
Present !! : C:\WINDOWS\SET8.tmp  
Present !! : C:\WINDOWS\SETF.tmp  
Present !! : C:\WINDOWS\System32\drivers\etc\hosts.msn  
Present !! : C:\Documents and Settings\Karine\LOCAL Settings\Temp\uninstall.exe  
Present !! : C:\Documents and Settings\Karine\LOCAL Settings\Temp\wsinstaller.exe  
Present !! : C:\Documents and Settings\Karine\LOCAL Settings\Temp\WSUninstall.exe  
 
¤¤¤¤¤¤¤¤¤¤ Keys : 

Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe"  
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"  

============

catchme 0.3.1398.3 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-27 14:08:32
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user & kernel MBR OK 

==========
Programs
==========

Ad-remover
Adobe
Alwil Software
antido32.exe
AssistantDeTelechargement.exe
ATnotes
Avira
BitLord
Combinatoire
ComPlus Applications
Config.xml
CosmoSoftware
CyberLink
DescriptionTexteursSTD.xml
DIFX
directx
Documentation
Donnees
Druide
DruideQtCore4_32.dll
DruideQtGui4_32.dll
DruideQtNetwork4_32.dll
Elaborate Bytes
Eudora
Excel
EzManual
Fichiers communs
Filzip
FinePixViewer
GesAnt32.exe
Gestionnaire Antidote.exe
Google
Grammaire
Grimoire.psi
GroupWise
Illustrator
InDesign
InstallShield Installation Information
Intel
InterActual
Internet Explorer
Java
Larousse
Lavasoft
Le Petit Druide.psi
LG Software
lg_swupdate
LibrairiesQt
Lisez-moi Logiciels.pdf
Lisez-moi.html
Lotus Notes
Malwarebytes' Anti-Malware
Messenger
MFC71.dll
Microsoft
microsoft frontpage
Microsoft Office
Microsoft Office Outlook Connector
Microsoft Silverlight
Microsoft SQL Server
Microsoft SQL Server Compact Edition
Microsoft Sync Framework
Microsoft.NET
Movie Maker
Mozilla
Mozilla Firefox
MSBuild
MSECache
MSN
MSN Gaming Zone
MSVCP71.DLL
msvcr71.dll
MSXML 4.0
Nero
NetMeeting
Online Services
OpenOffice
Outlook
Outlook Express
Ouvrages Compl‚mentaires
PIXELA
Posologie.pdf
Power Tab Software
PowerPoint
Questions et r‚ponses.html
QuickTime
Realtek
Reference Assemblies
REGSHAVE
RegZooka
RICHED20.DLL
Services en ligne
Silkroad
SlySoft
StarOffice
Trend Micro
Uninstall Information
vanBasco's Karaoke Player
VideoLAN
Visuel
Windows Live
Windows Live Favorites
Windows Live SkyDrive
Windows Live Toolbar
Windows Media Connect 2
Windows Media Player
Windows NT
WindowsUpdate
WLinstaller.exe
Word
WordPerfect
xerox

============
Drive C:
============

9180d424ed994349406d
AUTOEXEC.BAT
Backups
boot.ini
Bootfont.bin
CloneDVDTemp
CONFIG.SYS
Documents and Settings
DRIVERS
Druide_T‚l‚chargement
IO.SYS
Kill'em
List'em.txt
Menu D‚marrer
MSDOS.SYS
MSOCache
MWASPI
Nicole
NTDETECT.COM
ntldr
pagefile.sys
Program Files
Programmes
RECYCLER
RHDSetup.log
rsit
System Volume Information
WINDOWS
WM800918.bin
 
¤¤¤¤¤¤¤¤¤¤ Cracks | Keygens | Serials 
 
C:\Documents and Settings\Karine\Recent\Serial.lnk 
C:\Program Files\Druide\Antidote\Patch Antidote RX V5.exe 
C:\Program Files\Druide\Antidote.MiseAJour_Temporaire\Patch Antidote RX V5.exe 
C:\Program Files\InterActual\InterActual Player\Patches 
C:\Program Files\InterActual\InterActual Player\Patches\artisan 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010 
C:\Program Files\InterActual\InterActual Player\Patches\artisan	2x 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\closed.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\control.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\default.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\index.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\loading.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x
av.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\play.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x	2.js 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x	imecodes.js 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\vidplay.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\void.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch0.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch1.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch10.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch11.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch12.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch13.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch14.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch15.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch16.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch17.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch18.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch19.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch2.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch20.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch21.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch22.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch23.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch24.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch25.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch26.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch27.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch28.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch29.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch3.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch30.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch31.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch32.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch33.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch34.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch35.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch36.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch37.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch38.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch39.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch4.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch40.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch41.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch42.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch43.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch44.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch45.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch46.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch47.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch48.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch49.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch5.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch50.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch51.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch52.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch53.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch54.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch55.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch56.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch57.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch58.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch59.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch6.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch60.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch61.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch62.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch63.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch64.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch65.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch66.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch67.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch68.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch69.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch7.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch70.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch71.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch72.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch8.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ch9.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\chap.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\control_bk.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ddot1.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ddot10.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ddot11.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ddot12.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ddot2.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ddot3.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ddot4.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ddot5.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ddot6.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ddot7.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ddot8.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ddot9.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\ddown.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dnum1.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dnum2.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dnum3.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dnum4.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot1.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot10.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot10_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot11.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot11_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot12.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot12_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot1_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot2.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot2_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot3.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot3_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot4.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot4_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot5.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot5_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot6.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot6_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot7.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot7_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot8.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot8_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot9.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dot9_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\down.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\down_d.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\down_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\dup.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\full.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\full_d.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\full_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\hide.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\hide_d.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\hide_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\loading.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\loadingg.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\menu.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\menu_d.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\menu_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\mute.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\mute_d.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\mute_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
ext.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
ext_d.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
ext_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um1.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um10.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um10_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um11.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um11_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um12.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um12_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um13.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um13_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um14.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um14_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um15.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um15_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um16.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um16_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um17.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um17_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um18.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um18_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um19.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um19_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um1_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um2.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um2_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um3.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um3_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um4.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um4_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um5.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um5_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um6.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um6_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um7.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um7_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um8.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um8_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um9.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images
um9_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\pause.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\pause_d.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\pause_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\play.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\play_d.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\play_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\prev.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\prev_d.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\prev_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_03.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_05.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_06.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_10.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_11.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_12.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_13.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_18.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_51.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_58.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_59.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_62.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_63.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_66.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_68.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_70.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_72.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_74.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_76.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_78.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_80.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_82.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_84.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_87.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_88.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_89.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_90.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_91.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_92.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_93.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_94.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_95.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_96.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_97.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\Slice_98.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\spacer.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\stop.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\stop_d.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\stop_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\up.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\up_d.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\images\up_o.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\dvdvideo.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\frame 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\index.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\index2.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\popnew.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\popwin.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\premain.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\winesume.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\script 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\sload.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\vari.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\vari2.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\void.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\frame\1f.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\frame\2f.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\script\common.js 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\script\IAlib.js 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\script\static.js 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\script\vari.js 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x\win\script\vid.js 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\default.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\vidplay.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\dvdvideo.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\frame 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\index.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\index2.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\popnew.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\popwin.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\premain.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\winesume.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\script 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\sload.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\vari.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\vari2.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\void.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\frame\1f.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\frame\2f.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\script\common.js 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\script\IAlib.js 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\script\static.js 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\script\vari.js 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000008	2x2\win\script\vid.js 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x2 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\closed.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\control.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\default.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\index.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\loading.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x
av.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\play.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x	2.js 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x	imecodes.js 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\vidplay.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\void.htm 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\win 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch0.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch1.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch10.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch11.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch12.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch13.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch14.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch15.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch16.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch17.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch18.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch19.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch2.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch20.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch21.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch22.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch23.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch24.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch25.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch26.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch27.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch28.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch29.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch3.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch30.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch31.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch32.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch33.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch34.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch35.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch36.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch37.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch38.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch39.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch4.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch40.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch41.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch42.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch43.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch44.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch45.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch46.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch47.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch48.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch49.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch5.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch50.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch51.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch52.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch53.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch54.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch55.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch56.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch57.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch58.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch59.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch6.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch60.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch61.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch62.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch63.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch64.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch65.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch66.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch67.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch68.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch69.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch7.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch70.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch71.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch72.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch8.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ch9.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\chap.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\control_bk.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ddot1.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ddot10.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\10000017000024000010	2x\images\ddot11.gif 
C:\Program Files\InterActual\InterActual Player\Patches\artisan\1000001700

moment de grace · Answer

ok

dans cet ordre (tu peux poster les rapports au fur et à mesure)

1)


&#9654; Relance List&Kill'em avec le raccourci sur ton bureau , 

mais cette fois-ci : 

&#9654; choisis l'option 2 = Mode Suppression 

laisse travailler l'outil. 

en fin de scan un rapport s'ouvre 

&#9654; colle le contenu dans ta reponse

tu peux le désinstaller ensuite

...................

2)

Téléchargez Toolbar-S&D ( Merci à Eric_71, Angel Dark, Sham_Rock et XmichouX ) sur le Bureau 

https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cpVobGk5bHnxrhQ4yaoEUDJvOYNnEGyYjgqHZz5GqZLfutR3fMFPlsC3-CGIilfupPAguYATNyua3csodN_frdMK8sSzUpit10Yac-QJCOkMqJKkbdKcP6ySs8trWPgoNVIq4TGGWCe6o0txXQv-ZueJF9vZzw3RXsGwFYIqN2lvF2LPdQzS8mE1d5kWOVOz6EMzQuE5-lClSJM869uq3oc7-t7yg%3D%3D&attredirects=3 

Lancez l'installation du programme en exécutant le fichier téléchargé.
Double-cliquez maintenant sur le raccourci de Toolbar-S&D.
Sélectionnez la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
Choisir maintenant l'option 2 suppression 
Patientez jusqu'à la fin de la recherche. 
Postez le rapport généré. (C:\TB.txt) 

Tuto: https://sites.google.com/site/toolbarsd/aideenimages 

....................

3)
Téléchargez MalwareByte's Anti-Malware

http://www.malwarebytes.org/mbam/program/mbam-setup.exe
 
. Enregistres le sur le bureau
. Double cliques sur le fichier téléchargé pour lancer le processus d'installation. 
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
. Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte
. Une fois la mise à jour terminé
. Rend-toi dans l'onglet, Recherche
. Sélectionnes Exécuter un examen complet (examen assez long)
. Cliques sur Rechercher
. Le scan démarre. 
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés. 
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, clique sur  Afficher les résultats
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine. . Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse. 
. Rends toi dans l'onglet rapport/log 
. Tu cliques dessus pour l'afficher, une fois affiché
. Tu cliques sur edition en haut du boc notes, et puis sur sélectionner tous 
. Tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
. tu cliques droit dans le cadre de la reponse et coller 


Si tu as besoin d'aide regarde ces tutoriels : 
 Aide: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
 http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam

kare180 · Answer

Kill'em by g3n-h@ckm@n 1.2.1.1 
 
User : Karine (Administrateurs) 
Update on 23/01/2010 by g3n-h@ckm@n ::::: 13:50 
Start at: 14:36:42 | 2010-01-27
Contact : g3n-h@ckm@n sur CCM

Intel(R) Core(TM)2 CPU         T5200  @ 1.60GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 6.0.2900.2180
Windows Firewall Status : Enabled
AV : AntiVir Desktop 9.0.1.32 [ (!) Disabled | Updated ]

C:\ -> Disque fixe local | 74,52 Go (54,09 Go free) | NTFS
D:\ -> Disque CD-ROM | 4,37 Go (0 Mo free) [STAR_TREK_XI_DOM] | UDF
 

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running
 
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\LG Software\System Control Manager\edd.exe
C:\WINDOWS\system32\o2flash.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\LG Software\IP Operator 2005\IP Operator.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\LG Software\System Control Manager\MGSysCtrl.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
C:\Program Files\Gestionnaire Antidote.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\lg_swupdate\Gilautouc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Karine\Bureau\List_Kill'em\List_Kill'em.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Documents and Settings\Karine\Local Settings\Temp\7D.tmp\ERUNT.EXE
C:\Documents and Settings\Karine\Local Settings\Temp\7D.tmp\pv.exe
 
Detections : 
========== 
 

¤¤¤¤¤¤¤¤¤¤ Files/folders : 

Quarantined & Deleted !! : C:\Documents and Settings\All Users\Application Data\.zreglib 
Quarantined & Deleted !! : C:\Program Files\BitLord 
Quarantined & Deleted !! : C:\WINDOWS\SET25.tmp 
Quarantined & Deleted !! : C:\WINDOWS\SET3.tmp 
Quarantined & Deleted !! : C:\WINDOWS\SET4.tmp 
Quarantined & Deleted !! : C:\WINDOWS\SET8.tmp 
Quarantined & Deleted !! : C:\WINDOWS\SETF.tmp 
 
Quarantined & Deleted !! : C:\WINDOWS\System32\drivers\etc\hosts.msn 
Quarantined & Deleted !! : C:\Documents and Settings\Karine\LOCAL Settings\Temp\uninstall.exe 
Quarantined & Deleted !! : C:\Documents and Settings\Karine\LOCAL Settings\Temp\wsinstaller.exe 
Quarantined & Deleted !! : C:\Documents and Settings\Karine\LOCAL Settings\Temp\WSUninstall.exe 
 
==============
host file OK !
==============

========
Registry
========
Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe  
Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe  

============
Disk Cleaned
============
 
================
Prefetch cleaned 
================
 
 
 
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

kare180 · Answer

-----------\  ToolBar S&D 1.2.9   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 CPU         T5200  @ 1.60GHz )
   BIOS : BIOS Version: A1034IL1 V1.20 09/01/06
   USER : Karine ( Administrator )
   BOOT : Normal boot
   Antivirus : AntiVir Desktop 9.0.1.32 (Not Activated)
   C:\ (Local Disk) - NTFS - Total:74 Go (Free:54 Go)
   D:\ (CD or DVD) - UDF - Total:4 Go (Free:0 Go)

   "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
   Option : [2] ( 2010-01-27|14:47 )

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.google.ca/?gws_rd=ssl"
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Start Page"="https://www.msn.com/fr-fr/"
   "Search Bar"="http://www.mirarsearch.com/?useie5=1&q="


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "C:\ToolBar SD\TB_1.txt" - 2010-01-27|14:47 - Option : [2]

   -----------\  Fin du rapport a 14:47:39,75

kare180 · Answer

dernier rapport:

Malwarebytes' Anti-Malware 1.43
Version de la base de données: 3458
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

2010-01-27 15:15:13
mbam-log-2010-01-27 (15-15-13).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 142285
Temps écoulé: 22 minute(s), 24 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

moment de grace · Answer

ok

plusieurs choses

1)

Malwarebytes' Anti-Malware 1.43 
Version de la base de données: 3458 

pas à jour et donc à refaire

lancer MBAM
mettre à jour
examen complet
suppression s'il y a lieu
poster le rapport

..............

2)
Cherches et cliques sur C:\Program Files	rend micro\Karine.exe
Au menu principal, choisir do a scan only, puis cocher la case devant les lignes suivantes à corriger et cliquer en bas sur Fix Checked (s’il manque des lignes…pas grave)


R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.mirarsearch.com/?useie5=1&q=
 O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) 
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE  
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE     
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"     
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"     
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe     
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"     
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')     
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')     
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')     
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')     


...................

3)
Rends toi sur ce site : 

https://www.virustotal.com/gui/ 

Clique sur parcourir et cherche ce fichier : 

C:\Program Files\LG Software\IP Operator 2005\IP Operator.exe
C:\WINDOWS\system32\MGPwrShm.dll     
C:\WINDOWS\system32\MGHwCtrl.dll     
C:\WINDOWS\system32\MGFPMCE.dll     
C:\WINDOWS\system32\MGFPCtrl.dll  
 C:\WINDOWS\lgcenter.ini 



Clique sur Send File. 

Un rapport va s'élaborer ligne à ligne. 

Attends la fin. Il doit comprendre la taille du fichier envoyé. 

Sauvegarde le rapport avec le bloc-note. 

Copie le dans ta réponse.

Si tu ne trouves pas le fichier alors

Affiche tous les fichiers et dossiers : 

Pour cela : 
Clique sur démarrer/panneau de configuration/option des dossiers/affichage 

Cocher afficher les dossiers cachés

Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)" 

Décocher masquer les extensions dont le type est connu 

Puis fais «appliquer» pour valider les changements. 

Et OK

moment de grace · Answer

pour la troisième étape, oui c'est ca à partir du site tu vas chercher les fichiers indiqués et fais un copier coller de chaque résultat

moment de grace · Answer

ok 

ils sont bons

comment va le PC ?

moment de grace · Answer

ok

mets à jour XP et Internet Explorer
http://www.windowsupdate.com/windowsupdate/v6/default.aspx

...................

IMPORTANT

Purger la restauration systeme XP

http://www.bibou0007.com/windows-xp-f101/purger-la-restauration-du-systeme-sous-windows-xp-t151.htm

...............

Télécharge ToolsCleaner2sur ton Bureau. 
https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/

* Double-clique (clic droit "en tant qu'administrateur" pour Vista) sur ToolsCleaner2.exe pour le lancer. 
* Clique sur Recherche et laisse le scan agir. 
* Clique sur Suppression pour finaliser. 
* Tu peux, si tu le souhaites, te servir des Options Facultatives. 
* Clique sur Quitter pour obtenir le rapport. 
* Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). 


Tu peux supprimer ToolCleaner ensuite

moment de grace · Answer

mise à jou IE ...oui car les MAJ de securiité de windows ne se font que par là même si tu ne l'utilises pas comme navigateur

la purge est infectée ...si tu restaure le pc tu réactives ce que nous avons supprimé
la purge permet de remettre à zero

moment de grace · Answer

c'est exactement ca...

moment de grace · Answer

non

si tout est ok pour toi

=> résolu


Bonne continuation et surtout , prudence et bon surf :)

Virus Trojan

15 réponses

Votre réponse

Discussions similaires

Newsletters