Analyse de mon rapport par navilog1

bonsoir

navipromo a fonctionné

néanmoins, on va regarder le reste si tu veux bien

Télécharge ZHPDiag ( de Nicolas coolman ).
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

(outil de diagnostic)

Double clique sur le fichier d'installation, puis installe le avec les paramètres par défaut ( N'oublie pas de cocher " Créer une icône sur le bureau " )

Lance ZHPDiag en double cliquant sur l'icône présente sur ton bureau (Clique droit -> Executer en tant qu'admin pour vista )

Clique sur la loupe en haut à gauche, puis laisse l'outil scanner.

Une fois le scan terminé, clique sur l'icône en forme de disquette et enregistre le fichier sur ton bureau.

Rend toi sur Cjoint : http://www.cijoint.fr/

Clique sur "Parcourir " dans la partie " Joindre un fichier[...] "

Sélectionne le rapport ZHPdiag.txt qui se trouve sur ton bureau

Clique ensuite sur "Cliquez ici pour déposer le fichier " et copie/colle le lien dans ton prochain message

si soucis avec ci joint. fr

=> utiliser https://www.cjoint.com/
=> utiliser http://ww38.toofiles.com/fr/oip/documents/txt/av.html

Bonsoir,

Jai suivie les instructions voici le lien :

http://www.cijoint.fr/cjlink.php?file=cj201008/cijgutj6Cd.txt

Merci

ok

rien de grave mais beaucoup de produits de Eorezo installés sur ton, autant d'infections qui t'inondent de publicités

1)

* Télécharge de AD-Remover sur ton Bureau. (Merci à C_XX)
http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

Miroir:

https://www.androidworld.fr/

/!\ Déconnecte-toi d'internet et ferme toutes applications en cours /!\

Désactive provisoirement et seulement le temps de l'utilisation de ADremover, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

- Double-clique sur l'icône Ad-remover située sur ton Bureau.
- Sur la page, clique sur le bouton « NETTOYER »
- Confirme lancement du scan
- Laisse travailler l'outil.
- Poste le rapport qui apparaît à la fin.

(Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt)

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

..................................

2)

Téléchargez MalwareByte's Anti-Malware (que tu pourras garder)

https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

. Enregistres le sur le bureau
. Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
. Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte
. Une fois la mise à jour terminé
. Rend-toi dans l'onglet, Recherche
. Sélectionnes Exécuter un examen complet (examen assez long)
. Cliques sur Rechercher
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, clique sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. Rends toi dans l'onglet rapport/log
. Tu cliques dessus pour l'afficher, une fois affiché
. Tu cliques sur edition en haut du boc notes, et puis sur sélectionner tous
. Tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
. tu cliques droit dans le cadre de la reponse et coller

Si tu as besoin d'aide regarde ces tutoriels :
Aide: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam

Bonjour moment de grace,

Jai téléchargé AD-R et suivie vos indications mais un message d'erreur s'affiche dés le 7% de nettoyage atteints :
Autolt error
Line 9136 (File"C:\Program Files\Ad-Remover\main.exe"):

Error: variable used without being declared

Jai pourtant désactivé mon antivirus (avast; pour 10min)

Que dois-je faire ?

Merci

ok

fais le alors en mode sans echec

https://www.micro-astuce.com/depannage/demarrer-mode-sans-echec.php

Même résultat en mode sans echec ...

ok

on supprimera par nous même

enchaines sur MBAM stp

ok

Voila le rapport d'analyse:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 4461

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

22/08/2010 17:18:37
mbam-log-2010-08-22 (17-18-37).txt

Type d'examen: Examen complet (C:\|)
Elément(s) analysé(s): 192747
Temps écoulé: 1 heure(s), 40 minute(s), 30 seconde(s)

Processus mémoire infecté(s): 3
Module(s) mémoire infecté(s): 3
Clé(s) du Registre infectée(s): 26
Valeur(s) du Registre infectée(s): 5
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 11

Processus mémoire infecté(s):
C:\Program Files\EoRezo\EoEngine.exe (Rogue.Eorezo) -> Unloaded process successfully.
C:\Documents and Settings\Olivier\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Unloaded process successfully.
C:\Program Files\EoRezo\eorezo.exe (Rogue.Eorezo) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
C:\Program Files\EoRezo\EoAdv\EoAdv.dll (Rogue.Eorezo) -> Delete on reboot.
C:\Program Files\EoRezo\EoRezoBHO.dll (Rogue.Eorezo) -> Delete on reboot.
C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (Rogue.Eorezo) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\TypeLib\{18af7201-4f14-4bcf-93fe-45617cf259ff} (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{df76e9b7-35ec-46fc-af56-5b79ded9d64f} (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c10dc1f4-ccdf-4224-a24d-b23afc3573c8} (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{c10dc1f4-ccdf-4224-a24d-b23afc3573c8} (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c10dc1f4-ccdf-4224-a24d-b23afc3573c8} (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c10dc1f4-ccdf-4224-a24d-b23afc3573c8} (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{b6acb3f1-6a83-432c-b854-3e1056f87f4e} (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{819db72d-1c28-4387-9778-e2ff3dc86f74} (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c7b76b90-3455-4ae6-a752-eac4d19689e5} (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{c7b76b90-3455-4ae6-a752-eac4d19689e5} (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c7b76b90-3455-4ae6-a752-eac4d19689e5} (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c7b76b90-3455-4ae6-a752-eac4d19689e5} (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mssarph.mssarpbho (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mssarph.mssarpbho.1 (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{2f77cdb7-d730-4b5c-a64f-1515df0bfb12} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{2f77cdb7-d730-4b5c-a64f-1515df0bfb12} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2f77cdb7-d730-4b5c-a64f-1515df0bfb12} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\kwanzy (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{433AE4C6-62FF-4488-88F4-CB7ABE1E3AED} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\mssarph.DLL (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{76799619-CFF6-44B2-8607-593D9324268F} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\DealAssistant (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\IEBarProperties (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Kwanzy (Adware.Kwanzy) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\eoengine (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\softwarehelper (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\eorezo (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\dealassistant (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sfkg6wipuspdcdud7 (Trojan.Downloader) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Documents and Settings\Olivier\Application Data\DealAssistant (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Kwanzy (Adware.Kwanzy) -> Quarantined and deleted successfully.
C:\Program Files\Kwanzy (Adware.Kwanzy) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\EoRezo\EoEngine.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
C:\Program Files\EoRezo\EoAdv\EoAdv.dll (Rogue.Eorezo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Olivier\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
C:\Program Files\EoRezo\eorezo.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
C:\Program Files\EoRezo\EoRezoBHO.dll (Rogue.Eorezo) -> Delete on reboot.
C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (Rogue.Eorezo) -> Delete on reboot.
C:\Documents and Settings\Olivier\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdate.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
C:\Program Files\Kwanzy\uninstall.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Windows Media Player\access.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\SpiderMessenger\SpiderMessenger.exe (Spyware.AgenceExclusive) -> Quarantined and deleted successfully.
C:\Documents and Settings\Olivier\Application Data\DealAssistant\config.cfg (Trojan.Agent) -> Quarantined and deleted successfully.

redémarre le pc
puis vide la quarantaine de MBAM


DESACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRESENTS !!!!!(car il est detecté a tort comme infection)

Télécharge ici :List_Kill'em et enregistre le sur ton bureau

http://sd-4.archive-host.com/membres/up/829108531491024/Mes_Tools/List_Killem_Install.exe

ou

http://www.archive-host.com

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."

sur le raccourci sur ton bureau pour lancer l'installation

Laisse coché :

Executer List_Kill'em

une fois terminée , clic sur "terminer" et le programme se lancera seul

choisis l'option Search

laisse travailler l'outil

il se peut qu'une boite de dialogue s'ouvre , dans ce cas clique sur "ok" ou "Agree"

à l'apparition de la fenetre blanche , c'est un peu long , c'est normal ,c'est une recherche supplementaire de fichiers cachés , le programme n'est pas bloqué.

Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"

NE LE POSTE PAS SUR LE FORUM

Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

Clique sur Parcourir et cherche le fichier ci-dessus.

Clique sur Ouvrir.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=265368/cijSKAP5fU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.

Fais de même avec more.txt qui se trouve sur ton bureau


CONTRIBUTEUR SECURITE

Désinfection = diagnostic + traitement + finalisation
"Restez" jusqu'au bout...merci

Lien rapport : http://www.cijoint.fr/cjlink.php?file=cj201008/cijLIsUCFT.txt

Lien more.txt : http://www.cijoint.fr/cjlink.php?file=cj201008/cijyU36LHf.txt

ok

1)

Relance List_Kill'em(soit en clic droit pour vista/7),avec le raccourci sur ton bureau.
mais cette fois-ci :

choisis l'option CLEAN
ton PC va redemarrer,

laisse travailler l'outil.

en fin de scan la fenetre se ferme , et tu as un rapport du nom de Kill'em.txt sur ton bureau ,

colle le contenu dans ta reponse

....................

2)

refaire un nouveau rapport ZHPdiag et poster le lien stp

Je n'arrive pas à poster mon message

Le pc n'a pas redemarré mais voici quand meme le rapport kill'em.txt :

¤¤¤¤¤¤¤¤¤¤ Kill'em by g3n-h@ckm@n 2.0.3.2 ¤¤¤¤¤¤¤¤¤¤

User : Olivier (Administrateurs)
Update on 22/08/2010 by g3n-h@ckm@n ::::: 17.50
Start at: 20:07:35 | 22/08/2010

Intel(R) Pentium(R) 4 CPU 3.00GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : avast! Antivirus 5.0.83886674 [ Enabled | Updated ]

C:\ -> Disque fixe local | 149 Go (14,9 Go free) | NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque CD-ROM
F:\ -> Disque amovible
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes ------- Memory(Ko)

C:\WINDOWS\System32\smss.exe ----72 Ko
C:\WINDOWS\system32\csrss.exe ----2664 Ko
C:\WINDOWS\system32\winlogon.exe ----1812 Ko
C:\WINDOWS\system32\services.exe ----1284 Ko
C:\WINDOWS\system32\lsass.exe ----2480 Ko
C:\WINDOWS\system32\Ati2evxx.exe ----248 Ko
C:\WINDOWS\system32\svchost.exe ----1716 Ko
C:\WINDOWS\system32\svchost.exe ----1500 Ko
C:\WINDOWS\System32\svchost.exe ----8456 Ko
C:\WINDOWS\system32\svchost.exe ----1156 Ko
C:\WINDOWS\system32\svchost.exe ----220 Ko
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe ----28504 Ko
C:\WINDOWS\system32\Ati2evxx.exe ----724 Ko
C:\WINDOWS\Explorer.EXE ----13612 Ko
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe ----312 Ko
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe ----1648 Ko
C:\WINDOWS\stsystra.exe ----536 Ko
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe ----104 Ko
C:\Program Files\Lexmark 5200 series\lxbtbmgr.exe ----360 Ko
C:\WINDOWS\PixArt\PAC7302\Monitor.exe ----500 Ko
C:\PROGRA~1\CONTRO~1\bin\optgui.exe ----804 Ko
C:\Program Files\Lexmark 5200 series\lxbtbmon.exe ----788 Ko
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe ----1008 Ko
C:\Program Files\DivX\DivX Update\DivXUpdate.exe ----1112 Ko
C:\WINDOWS\system32\ctfmon.exe ----540 Ko
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe ----3540 Ko
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe ----1272 Ko
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe ----476 Ko
C:\WINDOWS\system32\spoolsv.exe ----1368 Ko
C:\WINDOWS\system32\svchost.exe ----88 Ko
C:\Program Files\Java\jre6\bin\jqs.exe ----1380 Ko
C:\Program Files\Controle Parental\bin\optproxy.exe ----2788 Ko
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe ----1664 Ko
C:\WINDOWS\system32\svchost.exe ----1900 Ko
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe ----800 Ko
C:\WINDOWS\System32\alg.exe ----128 Ko
C:\Program Files\Windows Live\Toolbar\wltuser.exe ----2668 Ko
C:\WINDOWS\system32\cmd.exe ----2936 Ko
C:\WINDOWS\system32\wbem\wmiprvse.exe ----6844 Ko
C:\Program Files\List_Kill'em\ERUNT.EXE ----3796 Ko
C:\Program Files\List_Kill'em\pv.exe ----2792 Ko

¤¤¤¤¤¤¤¤¤¤ Files/folders :

Quarantined & Deleted !! : C:\Program Files\EoRezo
Quarantined & Deleted !! : C:\Program Files\GamesBar
Quarantined & Deleted !! : C:\Program Files\SpiderMessenger
Quarantined & Deleted !! : C:\WINDOWS\SET3.tmp
Quarantined & Deleted !! : C:\WINDOWS\SET4.tmp
Quarantined & Deleted !! : C:\WINDOWS\SET8.tmp

Quarantined & Deleted !! : C:\WINDOWS\System32\drivers\etc\hosts.msn
Quarantined & Deleted !! : C:\WINDOWS\Temp\IEC6.tmp
Quarantined & Deleted !! : C:\WINDOWS\Temp\IEC79.tmp
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\Application Data\.#
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\Local Settings\Temp\VP6.reg
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\DivXSetup.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\First15.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\VP6Install.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is1.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is10.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is11.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is115.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is12.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is13.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is14.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is15.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is16.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is17.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is18.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is19.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is1A.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is1B.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is1C.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is1D.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is1E.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is1F.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is2.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is20.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is21.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is22.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is23.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is24.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is25.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is26.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is27.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is28.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is29.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is2A.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is2B.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is2C.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is2D.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is2E.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is2F.exe

Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is3.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is30.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is31.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is32.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is33.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is34.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is35.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is36.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is37.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is38.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is39.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is3A.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is3B.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is3C.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is3D.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is3E.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is3F.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is4.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is40.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is41.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is42.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is43.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is44.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is45.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is46.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is47.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is48.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is49.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is4A.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is4B.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is4C.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is4D.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is4E.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is4F.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is5.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is50.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is51.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is52.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is53.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is54.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is55.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is56.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is57.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is58.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is59.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is5A.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is5B.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is5C.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is5D.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is5E.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is5F.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is6.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is60.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is61.exe

Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is62.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is63.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is64.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is65.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is66.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is67.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is68.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is69.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is6A.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is6B.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is6C.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is6D.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is6E.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is6F.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is7.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is70.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is71.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is72.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is73.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is74.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is75.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is76.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is77.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is78.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is79.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is7A.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is7B.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is7C.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is8.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_is9.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_isA.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_isB.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_isC.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_isD.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_isE.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_isE7.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_isF.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_isF0.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\_isF1.exe
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\isconfig.dat
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\patchw32.dll
Quarantined & Deleted !! : C:\Documents and Settings\Olivier\LOCAL Settings\Temp\VP6VFW.dll
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc1.url
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc10.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc100.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc101.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc102.php
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc103.jpeg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc104.jpeg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc105.gif
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc106.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc107.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc108.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc109.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc11.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc110.jpeg

Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc112.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc113.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc114.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc115.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc116.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc117.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc118.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc119.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc12.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc120.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc121.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc122.max
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc124.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc125.wps
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc126.txt
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc127.wps
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc128.wps
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc13.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc133.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc134.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc135.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc136.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc137.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc138.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc139.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc14.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc140.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc141.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc142.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc143.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc144.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc145.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc146.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc147.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc148.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc149.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc15.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc150.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc151.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc152.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc153.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc154.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc155.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc156.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc157.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc158.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc159.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc16.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc160.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc161.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc162.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc163
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc164
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc165
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc166
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc167
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc168

Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc169.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc17.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc170.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc171
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc172
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc173
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc174.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc175.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc176.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc177.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc178.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc179.AVI
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc18.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc180.AVI
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc181.AVI
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc182.AVI
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc183.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc184.wps
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc185.exe
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc186.exe
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc187.mp3
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc188.mp3
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc189.mp3
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc19.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc190.mp3
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc191.KAR
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc192.mp3
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc193.mp3
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc194.mp3
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc195.mp3
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc196.mp3
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc197.avi
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc198.mp3
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc199.mp3
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc2.lnk
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc20.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc200.lnk
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc201.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc202.exe
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc203.lnk
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc21.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc22.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc23.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc24.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc25.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc26.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc27.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc28.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc29.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc30.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc31.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc32.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc33.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc34.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc35.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc36.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc37.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc38.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc39.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc40.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc41.url
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc42.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc43.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc44.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc45.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc46.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc47.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc48.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc49.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc5.lnk
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc50.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc51.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc52.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc53.avi
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc54.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc55.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc56.lnk
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc57.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc58.avi
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc59.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc6.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc60.lnk
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc61.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc62.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc63.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc64.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc65.lnk
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc66.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc67.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc68.wps
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc69.rtf
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc7.jpg

Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc70.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc71.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc72.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc73.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc74.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc75.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc76.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc77.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc78.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc79.JPG
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc8.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc80.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc81.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc82.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc83.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc84.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc85.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc86.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc87.odt
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc89.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc9.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc90.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc91.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc92.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc93.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc94.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc95.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc96.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc97.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc98.jpg
Deleted !! : C:\RECYCLER\S-1-5-21-1606980848-1979792683-2147050159-1003\Dc99.jpg

=======
Hosts :
=======

127.0.0.1 localhost

========
Registry
========

Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run : spidermessenger
Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser : {0E5CBF21-D15F-11D0-8301-00AA005B4383}
Deleted : "HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}"
Deleted : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe"
Deleted : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"
Deleted : "HKLM\Software\Trymedia Systems"
Deleted : HKCR\EoRezoBHO.EoBho
Deleted : HKCR\EoRezoBHO.EoBho.1
Deleted : HKCU\Software\Conduit
Deleted : HKCU\SOFTWARE\EoRezo
Deleted : HKLM\SOFTWARE\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
Deleted : HKLM\SOFTWARE\Classes\AppID\EoRezoBHO.dll
Deleted : HKLM\Software\Conduit
Deleted : HKLM\Software\GamesBarSetup
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1

=================
Internet Explorer
=================

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page = https://www.msn.com/fr-fr/?ocid=iehp
Local Page = C:\WINDOWS\system32\blank.htm
Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page = https://www.google.com/?gws_rd=ssl
Local Page = C:\WINDOWS\system32\blank.htm
Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

===============
Security Center
===============

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
FirstRunDisabled = 1 (0x1)
AntiVirusDisableNotify = 0 (0x0)
FirewallDisableNotify = 0 (0x0)
UpdatesDisableNotify = 0 (0x0)
AntiVirusOverride = 1 (0x1)
FirewallOverride = 1 (0x1)

========
Services
========

Ndisuio : Start = 3
EapHost : Start = 2
Ip6Fw : Start = 2
SharedAccess : Start = 2
wuauserv : Start = 2
wscsvc : Start = 2

============
Disk Cleaned
anti-ver blaster : OK
Prefetch cleaned
================

FEATURE_BROWSER_EMULATION | svchost :
====================================

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys prosync1.sys hal.dll iaStor.sys
kernel: MBR read successfully
user & kernel MBR OK

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

lien nouveau rapport ZHPDiag : http://www.cijoint.fr/cjlink.php?file=cj201008/cij8rNKLho.txt