Mon Pc est lent , mon Exploreur ferme seul

doucejojo24 -  
Bonjour, j'ai des problèmes avec mon pc il est lent et exploreur ferme tout seul en 3 seconde. Je n'ai plus anti-virus pouvez vous m'aider Merci

11 réponses

Résumé de la discussion

Un PC sous Windows XP avec Firefox 3.6.8 est lent et l'explorateur se ferme en quelques secondes, et l'utilisateur n'a plus d'antivirus, ce qui motive une demande d'assistance. Plusieurs conseils proposent des outils de diagnostic et de nettoyage comme ZHPDiag et des solutions antivirus, afin d'identifier des malwares potentiels et de générer un rapport à transmettre. Des échanges évoquent aussi des symptômes comme des fenêtres d'installation de consoles de récupération et rappellent l'importance de vérifier les rapports (par exemple Avira, Malwarebytes et MBRCheck) et d'éviter les programmes douteux. En cas de nettoyage, le problème peut persister et qu'un rapport MBRCheck peut apparaître sans indiquer d'infection concluante.

Bobot (l’IA à votre service)
  1. Utilisateur anonyme
    Bonsoir

    Pour de plus amples informations, fait ceci stp

    Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman :

    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

    Ou

    https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

    Serveur N°2

    Ou

    http://www.premiumorange.com/zeb-help-process/zhpdiag.html
    en bas de la page ZHP avec un numéro de version.

    Une fois le téléchargement achevé, dé zippe le fichier obtenu et place ZHPDiag.exe sur ton Bureau.

    Double-clique sur l'icône pour lancer le programme. Sous Vista ou Seven clic droit « exécuter en tant que administrateur »

    Clique sur la loupe pour lancer l'analyse.

    Laisse l'outil travailler, il peut être assez long.

    Ferme ZHPDiag en fin d'analyse.

    Pour transmettre le rapport clique sur ce lien :

    http://www.cijoint.fr/index.php
    Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag).

    Sélectionne le fichier ZHPDiag.txt.

    Clique sur "Cliquez ici pour déposer le fichier".

    Un lien de cette forme :

    http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

    est ajouté dans la page.

    Copie ce lien dans ta réponse.

    Merci

    A+
    0
    1. doucejojo24
      Guillaume 5188 le voici
      http://www.cijoint.fr/cjlink.php?file=cj201011/cijmALsSRn.txt
      0
      1. doucejojo24
        http://www.cijoint.fr/cjlink.php?file=cj201011/cijmALsSRn.txt
        0
        1. Utilisateur anonyme
          Re

          Commençons par l'outil le plus costaud.

          Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe
          Ou ici : https://forospyware.com
          >Renomme le pour l'enregistrer sur ton bureau en asdehi (tout simplement pour que l'infection ne le contre pas)
          -> Double clique combofix.exe.(ou clic droit sous vista « exécuter en tant que... » )
          -> Tape sur la touche 1 (Yes) pour démarrer le scan.
          -> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

          NOTE : Le rapport se trouve également ici : C:\Combofix.txt

          Avant d'utiliser ComboFix :

          -> Déconnecte toi d'Internet et referme les fenêtres de tous les programmes en cours.

          -> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

          Une fois fait, sur ton bureau double-clic sur Combofix.exe ; (ou clic droit sous vista « exécuter en tant que... »)

          - Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

          - Installe le console de récupération comme demandé ;utile en cas de plantage

          - Attention Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programme. Risque de figer l'ordinateur

          - En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

          - Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

          -> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

          -> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

          /!\ Ne touche à rien tant que le scan n'est pas terminé. /!\ : risque de figer l'ordinateur (plantage complet)

          ::Si combofix détecte quelque chose et de demande a redémarrer tu acceptes

          @+
          0
          1. doucejojo24
            j'ai une fenêtre qui me dit:

            instalation de console de récupération

            Veuillez accepter en cliquant sur oui/Yes le contrat de license utilisateur final CLUF qui suit...

            Avant ca il y avait une fenêtre qui me disait que je devait douwnloader un programme pour crée la console de récupération et que je devais laisser mon internet actif
            0
          2. Utilisateur anonyme
            et alors?
            Qu'as tu fait?

            @+
            0
          3. doucejojo24
            ComboFix 10-11-19.01 - Jacques Couillard 2010-11-19 19:48:20.1.2 - x86
            Microsoft Windows XP Édition familiale 5.1.2600.3.1252.2.1036.18.511.220 [GMT -5:00]
            Lancé depuis: c:\documents and settings\Jacques Couillard\Mes documents\douloudada.exe
            .

            (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
            .

            c:\documents and settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
            c:\documents and settings\All Users\Application Data\ClickPotatoLiteSA
            c:\documents and settings\All Users\Application Data\ClickPotatoLiteSA\ClickPotatoLiteSA.dat
            c:\documents and settings\All Users\Application Data\ClickPotatoLiteSA\ClickPotatoLiteSA_kyf.dat
            c:\documents and settings\All Users\Application Data\ClickPotatoLiteSA\ClickPotatoLiteSAAbout.mht
            c:\documents and settings\All Users\Application Data\ClickPotatoLiteSA\ClickPotatoLiteSAau.dat
            c:\documents and settings\All Users\Application Data\ClickPotatoLiteSA\ClickPotatoLiteSAEULA.mht
            c:\documents and settings\All Users\Application Data\QueryExplorer
            c:\documents and settings\All Users\Application Data\QueryExplorer\queryexplorer116.exe
            c:\documents and settings\All Users\Application Data\QueryExplorer\queryexplorer119.exe
            c:\documents and settings\All Users\Menu Démarrer\Programmes\ClickPotato
            c:\documents and settings\All Users\Menu Démarrer\Programmes\ClickPotato\About Us.lnk
            c:\documents and settings\All Users\Menu Démarrer\Programmes\ClickPotato\ClickPotato Customer Support.lnk
            c:\documents and settings\All Users\Menu Démarrer\Programmes\ClickPotato\ClickPotato Uninstall Instructions.lnk
            c:\documents and settings\All Users\Menu Démarrer\Programmes\ShopperReports
            c:\documents and settings\All Users\Menu Démarrer\Programmes\ShopperReports\About Us.lnk
            c:\documents and settings\All Users\Menu Démarrer\Programmes\ShopperReports\Customer Support.lnk
            c:\documents and settings\All Users\Menu Démarrer\Programmes\ShopperReports\ShopperReports Uninstall Instructions.lnk
            c:\documents and settings\Jacques Couillard\Application Data\ClickPotatoLite
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3\Firefox\cs\Config.xml
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3\Firefox\cs\db\Aliases.dbs
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3\Firefox\cs\db\Sites.dbs
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3\Firefox\cs\dwld\WhiteList.xip
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3\Firefox\cs\report\aggr_storage.xml
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3\Firefox\cs\report\send_storage.xml
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3\Firefox\cs\res2\WhiteList.dbs
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3\IE\cs\Config.xml
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3\IE\cs\db\Aliases.dbs
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3\IE\cs\db\Sites.dbs
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3\IE\cs\dwld\WhiteList.xip
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3\IE\cs\report\aggr_storage.xml
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3\IE\cs\report\send_storage.xml
            c:\documents and settings\Jacques Couillard\Application Data\ShopperReports3\IE\cs\res1\WhiteList.dbs
            c:\documents and settings\Jacques Couillard\Application Data\ShoppingReport2
            c:\documents and settings\Jacques Couillard\Application Data\ShoppingReport2\cs\Config.xml
            c:\documents and settings\Jacques Couillard\Application Data\ShoppingReport2\cs\db\Aliases.dbs
            c:\documents and settings\Jacques Couillard\Application Data\ShoppingReport2\cs\db\Sites.dbs
            c:\documents and settings\Jacques Couillard\Application Data\ShoppingReport2\cs\dwld\WhiteList.xip
            c:\documents and settings\Jacques Couillard\Application Data\ShoppingReport2\cs\report\aggr_storage.xml
            c:\documents and settings\Jacques Couillard\Application Data\ShoppingReport2\cs\report\send_storage.xml
            c:\documents and settings\Jacques Couillard\Application Data\ShoppingReport2\cs\res1\WhiteList.dbs
            c:\documents and settings\Jacques Couillard\Recent\ANIMATION PAST..txt
            c:\documents and settings\Jacques Couillard\Recent\Thumbs.db
            c:\documents and settings\Jacques Couillard\Recent\Videora iPod touch Converter.url
            c:\documents and settings\LocalService\Application Data\NetMon
            c:\documents and settings\LocalService\Application Data\NetMon\domains.txt
            c:\documents and settings\LocalService\Application Data\NetMon\log.txt
            c:\program files\ClickPotatoLite
            c:\program files\ClickPotatoLite\bin\10.0.529.0\ClickPotatoLiteSA.exe
            c:\program files\ClickPotatoLite\bin\10.0.529.0\ClickPotatoLiteSAAX.dll
            c:\program files\ClickPotatoLite\bin\10.0.529.0\ClickPotatoLiteSABHO.dll
            c:\program files\ClickPotatoLite\bin\10.0.529.0\ClickPotatoLiteSAHook.dll
            c:\program files\ClickPotatoLite\bin\10.0.529.0\ClickPotatoLiteUninstaller.exe
            c:\program files\ClickPotatoLite\bin\10.0.529.0\firefox\extensions\chrome.manifest
            c:\program files\ClickPotatoLite\bin\10.0.529.0\firefox\extensions\install.rdf
            c:\program files\ClickPotatoLite\bin\10.0.529.0\firefox\extensions\plugins\npclntax_ClickPotatoLiteSA.dll
            c:\program files\MicroAntivirus
            c:\program files\Mozilla Firefox\extensions\{27E679CC-6AAB-4B2A-BB87-096FE4178464}
            c:\program files\Mozilla Firefox\extensions\{27E679CC-6AAB-4B2A-BB87-096FE4178464}\chrome.manifest
            c:\program files\Mozilla Firefox\extensions\{27E679CC-6AAB-4B2A-BB87-096FE4178464}\chrome\queryexplorer.jar
            c:\program files\Mozilla Firefox\extensions\{27E679CC-6AAB-4B2A-BB87-096FE4178464}\defaults\preferences\prefs.js
            c:\program files\Mozilla Firefox\extensions\{27E679CC-6AAB-4B2A-BB87-096FE4178464}\install.rdf
            c:\program files\Mozilla Firefox\plugins\npclntax_ClickPotatoLiteSA.dll
            c:\program files\myglobalsearch
            c:\program files\myglobalsearch\bar\History\search
            c:\program files\myglobalsearch\bar\Settings\settings.dat
            c:\program files\myglobalsearch\bar\Settings\settings.dat.bak
            c:\program files\myglobalsearch\bar\Settings\settings.htm
            c:\program files\myglobalsearch\bar\Settings\settings.htm.bak
            c:\program files\QueryExplorer
            c:\program files\QueryExplorer\queryexplorer.dll
            c:\program files\QueryExplorer\queryexplorer.exe
            c:\program files\ShopperReports3
            c:\program files\ShopperReports3\bin\3.0.491.0\BRNStie.dll
            c:\program files\ShopperReports3\bin\3.0.491.0\CmndFF.dll
            c:\program files\ShopperReports3\bin\3.0.491.0\CntntCntr.dll
            c:\program files\ShopperReports3\bin\3.0.491.0\firefox\firefoxtoolbar\extensions\chrome.manifest
            c:\program files\ShopperReports3\bin\3.0.491.0\firefox\firefoxtoolbar\extensions\chrome\firefoxtoolbar.jar
            c:\program files\ShopperReports3\bin\3.0.491.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.dll
            c:\program files\ShopperReports3\bin\3.0.491.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.xpt
            c:\program files\ShopperReports3\bin\3.0.491.0\firefox\firefoxtoolbar\extensions\install.rdf
            c:\program files\ShopperReports3\bin\3.0.491.0\link.ico
            c:\program files\ShopperReports3\bin\3.0.491.0\moZIllaps.dll
            c:\program files\ShopperReports3\bin\3.0.491.0\Pltfrm.dll
            c:\program files\ShopperReports3\bin\3.0.491.0\ShopperReports.dll
            c:\program files\ShopperReports3\bin\3.0.491.0\ShopperReportsUninstaller.exe
            c:\program files\ShoppingReport2
            c:\program files\ShoppingReport2\Bin\2.7.27\ShoppingReport.dll
            c:\program files\ShoppingReport2\Uninst.exe
            c:\program files\webhancer
            c:\program files\webhancer\Programs\license.txt
            c:\program files\webhancer\Programs\readme.txt
            c:\program files\webhancer\Programs\sporder.dll
            c:\program files\webhancer\Programs\webhdll.dll
            c:\program files\webhancer\Programs\whagent.ini
            c:\program files\webhancer\Programs\whinstaller.exe
            c:\temp\1cb
            c:\temp\1cb\syscheck.log
            c:\windows\Downloaded Program Files\f3initialsetup1.0.0.15-3.inf
            c:\windows\jestertb.dll
            c:\windows\pskt.ini
            c:\windows\system32\aknvcrua.ini
            c:\windows\system32\atmtd.dll
            c:\windows\system32\atmtd.dll._
            c:\windows\system32\cggramua.ini
            c:\windows\system32\d2
            c:\windows\system32\dnthssmq.ini
            c:\windows\system32\donuvynu.ini
            c:\windows\system32\dxinxmgs.ini
            c:\windows\system32\EV02
            c:\windows\system32\EV02\EV022328.exe
            c:\windows\system32\ghrwarse.ini
            c:\windows\system32\hmqxvvmr.ini
            c:\windows\system32\iymylpeb.ini
            c:\windows\system32\kbaijcuv.ini
            c:\windows\system32\lewtccbn.ini
            c:\windows\system32\luygvcwk.ini
            c:\windows\system32\mcrh.tmp
            c:\windows\system32\pac.txt
            c:\windows\system32\pedxoqjs.ini
            c:\windows\system32\qhdnfwxf.ini
            c:\windows\system32\rAbHhRqr.ini
            c:\windows\system32\rAbHhRqr.ini2
            c:\windows\system32\Thumbs.db
            c:\windows\system32\UpMedia
            c:\windows\system32\winsrc.dll.tmp
            c:\windows\system32\wmkbqbxc.ini
            c:\windows\system32\wqqplrjk.ini
            c:\windows\system32\xvsejfqh.ini

            .
            ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
            .

            -------\Legacy_CMDSERVICE
            -------\Legacy_NETWORK_MONITOR
            -------\Legacy_QUERYEXPLORER_SERVICE
            -------\Service_cmdService
            -------\Service_Network Monitor
            -------\Service_QueryExplorer Service

            ((((((((((((((((((((((((((((( Fichiers créés du 2010-10-20 au 2010-11-20 ))))))))))))))))))))))))))))))))))))
            .

            2010-11-19 19:15 . 2010-11-19 19:22 -------- d-----w- c:\program files\ZHPDiag
            2010-11-19 18:00 . 2010-11-19 18:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
            2010-11-19 18:00 . 2010-11-19 18:00 -------- d-----w- c:\windows\system32\drivers\NSS
            2010-11-19 18:00 . 2010-11-19 18:00 -------- d-----w- c:\program files\NortonInstaller
            2010-10-24 21:41 . 2010-10-24 21:41 -------- d-----w- C:\ProgramData
            2010-10-24 18:20 . 2010-10-26 00:46 -------- d-----w- c:\documents and settings\Jacques Couillard\Local Settings\Application Data\Autodesk
            2010-10-24 17:50 . 2010-10-24 17:50 304608 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\VSTAHost\Architecture2011\9.0\1036\ResourceCache.dll
            2010-10-24 17:50 . 2010-10-24 17:50 302848 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\VSTAHost\Architecture2011\9.0\1033\ResourceCache.dll
            2010-10-24 17:45 . 2010-10-24 17:45 416 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\MSDN\9.0\1033\ResourceCache.dll
            2010-10-24 17:44 . 2010-10-24 17:44 -------- d-----w- c:\documents and settings\Jacques Couillard\Local Settings\Application Data\Microsoft Help
            2010-10-24 17:43 . 2010-10-24 17:43 -------- d-----w- c:\program files\Microsoft SDKs
            2010-10-24 17:43 . 2010-10-24 17:43 -------- d-----w- c:\program files\Microsoft.NET
            2010-10-24 17:43 . 2010-10-24 17:46 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
            2010-10-24 17:43 . 2010-10-24 17:45 -------- d-----w- c:\program files\Microsoft Visual Studio 9.0
            2010-10-24 17:41 . 2010-10-24 17:41 -------- d-----w- c:\windows\Logs
            2010-10-24 17:40 . 2010-10-26 01:00 -------- d-----w- c:\program files\Fichiers communs\Autodesk Shared
            2010-10-24 17:40 . 2010-10-26 00:46 -------- d-----w- c:\program files\Autodesk
            2010-10-24 17:21 . 2010-10-31 03:18 -------- d-----w- c:\documents and settings\Jacques Couillard\Application Data\Autodesk
            2010-10-24 17:21 . 2010-10-26 00:47 -------- d-----w- c:\documents and settings\All Users\Application Data\Autodesk
            2010-10-24 17:10 . 2010-10-25 22:59 -------- d-----w- C:\Autodesk
            2010-10-24 14:19 . 2010-11-20 01:05 -------- d-----w- c:\program files\Fichiers communs\Akamai

            .
            (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
            .
            2010-09-18 16:23 . 2003-04-24 13:00 974848 ----a-w- c:\windows\system32\mfc42u.dll
            2010-09-18 06:53 . 2003-04-24 13:00 974848 ----a-w- c:\windows\system32\mfc42.dll
            2010-09-18 06:53 . 2003-04-24 13:00 954368 ----a-w- c:\windows\system32\mfc40.dll
            2010-09-18 06:53 . 2003-04-24 13:00 953856 ----a-w- c:\windows\system32\mfc40u.dll
            2010-09-10 05:50 . 2006-06-23 18:28 916480 ----a-w- c:\windows\system32\wininet.dll
            2010-09-10 05:50 . 2003-04-24 13:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
            2010-09-10 05:50 . 2003-04-24 13:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
            2010-09-08 15:17 . 2010-09-08 15:17 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
            2010-09-08 15:17 . 2010-09-08 15:17 69632 ----a-w- c:\windows\system32\QuickTime.qts
            2010-09-01 11:51 . 2003-04-24 13:00 285824 ----a-w- c:\windows\system32\atmfd.dll
            2010-09-01 07:55 . 2003-06-04 18:17 1852928 ----a-w- c:\windows\system32\win32k.sys
            2010-08-27 08:02 . 2003-04-24 13:00 119808 ----a-w- c:\windows\system32\t2embed.dll
            2010-08-27 05:58 . 2003-04-24 13:00 99840 ----a-w- c:\windows\system32\srvsvc.dll
            2010-08-27 01:43 . 2008-05-05 11:25 5632 ----a-w- c:\windows\system32\xpsp4res.dll
            2010-08-26 13:39 . 2003-03-28 17:54 357248 ----a-w- c:\windows\system32\drivers\srv.sys
            2010-08-23 16:12 . 2003-04-24 13:00 617472 ----a-w- c:\windows\system32\comctl32.dll
            .

            ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
            .
            .
            *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
            REGEDIT4

            [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
            "{0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2}"= "c:\program files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL" [2008-09-28 66912]

            [HKEY_CLASSES_ROOT\clsid\{0579b4b6-0293-4d73-b02d-5ebb0ba0f0a2}]

            [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
            "MsnMsgr"="c:\progra~1\WI1F86~1\MESSEN~1\msnmsgr.exe" [2009-07-26 3883856]
            "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-09-08 94208]
            "LDM"="c:\program files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" [2008-02-29 16384]
            "Gestionnaire Antidote.exe"="c:\progra~1\Druide\Antidote\Antidote\Gestionnaire Antidote.exe" [2005-06-22 386752]
            "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-30 68856]
            "Google Update"="c:\documents and settings\Jacques Couillard\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-04-26 133104]
            "TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2010-08-24 247144]
            "WeatherEye"="c:\documents and settings\Jacques Couillard\Local Settings\Application Data\MétéoMédia\MétéoÉclair\WeatherEye.exe" [2009-10-27 718232]

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
            "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-02-25 3022848]
            "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
            "LogitechCommunicationsManager"="c:\program files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2007-10-25 563984]
            "LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2007-10-25 2178832]
            "LVCOMS"="c:\windows\system32\LVComS.exe" [2002-06-10 102400]
            "LogitechGalleryRepair"="c:\program files\Logitech\ImageStudio\ISStart.exe" [2002-12-10 155648]
            "LogitechImageStudioTray"="c:\program files\Logitech\ImageStudio\LogiTray.exe" [2002-12-10 61440]
            "DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2006-06-13 127036]
            "AppleSyncNotifier"="c:\program files\Fichiers communs\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-09-22 47904]
            "HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb09.exe" [2004-02-26 176128]
            "Family Tree Builder Installer"="c:\program files\MyHeritage\Install MyHeritage Family Tree Builder.lnk" [2010-02-23 1042]
            "ReminderApp"="c:\program files\Nova Development\Greeting Card Factory Photo Card Maker 2.0\ReminderApp.exe" [2008-10-07 180224]
            "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2010-06-10 49208]
            "SunJavaUpdateSched"="c:\program files\Fichiers communs\Java\Java Update\jusched.exe" [2010-05-14 248552]
            "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-09-08 421888]
            "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-09-24 421160]
            "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
            "Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]

            [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
            "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

            c:\documents and settings\Jacques Couillard\Menu D'marrer\Programmes\D'marrage\
            Notification de cadeaux MSN.lnk - c:\documents and settings\Jacques Couillard\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe [2010-2-18 135680]
            Outil de d'tection de support Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe [2008-3-15 299008]
            Outil de notification Live Search.lnk - c:\documents and settings\Jacques Couillard\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe [2010-8-2 142336]
            Xacti Screen Capture 1.1.lnk - c:\documents and settings\Jacques Couillard\Application Data\Microsoft\Installer\{37327654-EBF7-410C-9161-C24D68E02753}\_E47B9B72500055712D025F.exe [2009-6-10 128198]

            c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
            HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
            Hyperappel du Petit Larousse 2008.lnk - c:\program files\Larousse\Petit Larousse 2008\bin\Hyperappel.exe [2008-2-15 237568]
            Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2008-2-29 169472]
            Reality Fusion GameCam SE.lnk - c:\program files\Reality Fusion\Reality Fusion GameCam SE\Program\RFTRay.exe [2000-7-10 323584]

            [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
            2008-10-17 00:35 87352 ----a-w- c:\windows\system32\LMIinit.dll

            [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
            "EnableFirewall"= 0 (0x0)

            [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
            "%windir%\\system32\\sessmgr.exe"=
            "c:\\Program Files\\Messenger\\msmsgs.exe"=
            "c:\\Program Files\\Univision Canada Limited\\Remote Module\\Alarm Receiver.exe"=
            "c:\\WINDOWS\\system32\\dpvsetup.exe"=
            "c:\\WINDOWS\\system32\\mshta.exe"=
            "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
            "c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\backWeb-8876480.exe"=
            "c:\\Documents and Settings\\Jacques Couillard\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.dll"=
            "c:\\Documents and Settings\\Jacques Couillard\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.exe"=
            "c:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
            "c:\\Program Files\\iTunes\\iTunesHelper.exe"=
            "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
            "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
            "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
            "c:\\Program Files\\Photo Story 3 for Windows\\PhotoStory3.exe"=
            "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
            "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
            "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
            "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
            "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
            "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
            "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
            "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
            "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
            "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
            "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
            "c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"=
            "c:\\Program Files\\HP\\Digital Imaging\\Smart Web Printing\\SmartWebPrintExe.exe"=
            "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
            "c:\\Program Files\\iTunes\\iTunes.exe"=

            [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
            "1035:TCP"= 1035:TCP:Akamai NetSession Interface
            "5000:UDP"= 5000:UDP:Akamai NetSession Interface

            R0 Achernar;Achernar - SCSI Command Filters;c:\windows\system32\drivers\Achernar.sys [2007-10-30 16855]
            R2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [2003-04-24 14336]
            R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2010-08-24 92008]
            R3 Aldebaran;Aldebaran - SCSI Command Filters;c:\windows\system32\drivers\Aldebaran.sys [2007-10-30 21808]
            R3 SlingAudioBusenum;Sling Audio Bus Enumerator;c:\windows\system32\drivers\SlingAudioBus.sys [2008-07-15 23168]
            S1 MusCVideo32;MusCVideo32;c:\windows\system32\drivers\MusCVideo32.sys [2007-12-02 3768]
            S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-02-09 135664]
            S2 LMIInfo;LogMeIn Kernel Information Provider;\??\c:\program files\LogMeIn\x86\RaInfo.sys --> c:\program files\LogMeIn\x86\RaInfo.sys [?]
            S3 MusCDriverV32;MusCDriverV32;c:\windows\system32\drivers\MusCDriverV32.sys [2007-12-02 515200]
            S3 PID_0890_I;Logitech QuickCam Traveler (Still Camera)(PID_0890_I);c:\windows\system32\drivers\ca500ab.sys [2007-12-09 10632]
            S3 PID_0890_V;Logitech QuickCam Traveler(PID_0890_V);c:\windows\system32\drivers\CA500AV.SYS [2007-12-09 191612]
            S3 Sling_Audio;SlingProjector Audio Device;c:\windows\system32\drivers\SlingAudio.sys [2008-10-01 19072]
            S3 USBW9967;W9967, WDM Video Capture;c:\windows\system32\drivers\2kw9967.sys [2007-11-07 105648]

            [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
            HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
            hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
            getPlusHelper REG_MULTI_SZ getPlusHelper
            Akamai REG_MULTI_SZ Akamai
            .
            Contenu du dossier 'Tâches planifiées'

            2010-10-19 c:\windows\Tasks\AppleSoftwareUpdate.job
            - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-08-13 16:34]

            2010-11-20 c:\windows\Tasks\Google Software Updater.job
            - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-10-30 00:07]

            2010-11-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
            - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-10 02:08]

            2010-11-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
            - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-10 02:08]

            2010-11-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-507921405-630328440-682003330-1004Core.job
            - c:\documents and settings\Jacques Couillard\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-04-26 18:12]

            2010-11-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-507921405-630328440-682003330-1004UA.job
            - c:\documents and settings\Jacques Couillard\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-04-26 18:12]

            2010-11-19 c:\windows\Tasks\Norton Security Scan for Jacques Couillard.job
            - c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-11-19 14:48]

            2010-11-19 c:\windows\Tasks\User_Feed_Synchronization-{451DAB6E-FF9E-44A5-8F8D-3C281AC5E48B}.job
            - c:\windows\system32\msfeedssync.exe [2007-08-13 08:31]
            .
            .
            ------- Examen supplémentaire -------
            .
            uStart Page = hxxp://cyberpresse.ca/
            uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
            uSearchAssistant = hxxp://www.google.com/ie
            uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
            IE: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
            IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
            IE: Visit in &3D using ExitReality - http://3d.exitreality.com/TransmogrifyPage.htm
            FF - ProfilePath - c:\documents and settings\Jacques Couillard\Application Data\Mozilla\Firefox\Profiles\uacafs5t.default\
            FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search?FORM=IEFM1&q=
            FF - prefs.js: browser.search.selectedEngine - Live Search
            FF - prefs.js: browser.startup.homepage - hxxp://www.cyberpresse.ca/
            FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?mkt=fr-FR&FORM=MIZWG0&q=
            FF - component: c:\documents and settings\Jacques Couillard\Application Data\Mozilla\Firefox\Profiles\uacafs5t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
            FF - plugin: c:\documents and settings\Jacques Couillard\Application Data\Mozilla\plugins\npgoogletalk.dll
            FF - plugin: c:\documents and settings\Jacques Couillard\Application Data\Mozilla\plugins\npgtpo3dautoplugin.dll
            FF - plugin: c:\documents and settings\Jacques Couillard\Local Settings\Application Data\Google\Update\1.2.183.39\npGoogleOneClick8.dll
            FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
            FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
            FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
            FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
            FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

            ---- PARAMETRES FIREFOX ----
            FF - user.js: yahoo.homepage.dontask - true
            c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
            c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
            c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
            c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
            c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
            c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
            c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
            c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
            c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
            c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
            c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
            .
            .
            ------- Associations de fichier -------
            .
            .scr=AutoCADScriptFile
            .
            - - - - ORPHELINS SUPPRIMES - - - -

            BHO-{0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)
            BHO-{E4A9A0B0-7A71-4E6B-B1E1-47A8E06B34CD} - c:\windows\system32\mlJYPjgh.dll
            BHO-{EC6DCC5F-0F4F-464C-AF0D-C0C1CFCA6A3E} - c:\windows\system32\rqRhHbAr.dll
            HKCU-Run-Uniblue RegistryBooster 2009 - c:\program files\Uniblue\RegistryBooster\RegistryBooster.exe
            HKCU-Run-Livestation - c:\program files\Livestation\Livestation.exe
            HKLM-Run-zreexhpmshftbwbln - c:\windows\system32\jhsjzmuamrtzs.dll
            HKLM-Run-LogMeIn GUI - c:\program files\LogMeIn\x86\LogMeInSystray.exe
            HKLM-Run-DVDtoiPodConverter_upgrade - c:\program files\E-Zsoft\DVDtoiPodConverter\DVDtoiPodConverter.exe
            HKLM-Run-ClickPotatoLiteSA - c:\program files\ClickPotatoLite\bin\10.0.529.0\ClickPotatoLiteSA.exe
            ShellExecuteHooks-{E4A9A0B0-7A71-4E6B-B1E1-47A8E06B34CD} - c:\windows\system32\mlJYPjgh.dll
            Notify-mlJYPjgh - mlJYPjgh.dll
            AddRemove-QueryExplorer - c:\program files\QueryExplorer\uninstall.exe

            **************************************************************************

            catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
            Rootkit scan 2010-11-19 20:06
            Windows 5.1.2600 Service Pack 3 NTFS

            Recherche de processus cachés ...

            Recherche d'éléments en démarrage automatique cachés ...

            Recherche de fichiers cachés ...

            Scan terminé avec succès
            Fichiers cachés: 0

            **************************************************************************
            .
            --------------------- CLES DE REGISTRE BLOQUEES ---------------------

            [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
            @Denied: (A 2) (Everyone)
            @="FlashBroker"
            "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"

            [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
            "Enabled"=dword:00000001

            [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
            @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"

            [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
            @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

            [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
            @Denied: (A 2) (Everyone)
            @="IFlashBroker4"

            [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
            @="{00020424-0000-0000-C000-000000000046}"

            [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
            @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
            "Version"="1.0"
            .
            --------------------- DLLs chargées dans les processus actifs ---------------------

            - - - - - - - > 'winlogon.exe'(812)
            c:\windows\system32\LMIinit.dll
            c:\windows\system32\LMIRfsClientNP.dll

            - - - - - - - > 'explorer.exe'(9772)
            c:\program files\Fichiers communs\Logishrd\LVMVFM\LVPrcInj.dll
            c:\progra~1\WINDOW~2\wmpband.dll
            c:\windows\system32\msi.dll
            c:\windows\system32\eappprxy.dll
            c:\windows\system32\webcheck.dll
            c:\windows\system32\WPDShServiceObj.dll
            c:\windows\system32\PortableDeviceTypes.dll
            c:\windows\system32\PortableDeviceApi.dll
            c:\windows\system32\LMIRfsClientNP.dll
            .
            ------------------------ Autres processus actifs ------------------------
            .
            c:\program files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
            c:\program files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
            c:\program files\Bonjour\mDNSResponder.exe
            c:\program files\Java\jre6\bin\jqs.exe
            c:\windows\system32\nvsvc32.exe
            c:\program files\Fichiers communs\New Boundary\PrismXL\PRISMXL.SYS
            c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
            c:\windows\system32\wscntfy.exe
            c:\windows\System32\wbem\wmiapsrv.exe
            c:\docume~1\JACQUE~1\LOCALS~1\Temp\bwgo00012fd5.exe
            c:\program files\iPod\bin\iPodService.exe
            c:\program files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
            c:\documents and settings\Jacques Couillard\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
            c:\program files\SANYO\XactiScreenCapture\SetClip.exe
            c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
            c:\program files\HP\Digital Imaging\bin\hpqbam08.exe
            c:\program files\HP\Digital Imaging\bin\hpqgpc01.exe
            c:\program files\Fichiers communs\Java\Java Update\jucheck.exe
            .
            **************************************************************************
            .
            Heure de fin: 2010-11-19 20:14:49 - La machine a redémarré
            ComboFix-quarantined-files.txt 2010-11-20 01:14

            Avant-CF: 84 467 204 096 octets libres
            Après-CF: 92 052 369 408 octets libres

            WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
            [boot loader]
            timeout=2
            default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
            [operating systems]
            c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
            UnsupportedDebug="do not select this" /debug
            multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /fastdetect /NoExecute=OptIn

            - - End Of File - - E07F48231A0404C0DA8DD7083068791E
            0
        3. Utilisateur anonyme
          Re

          Impeccable ;))

          Avançons:

          1)           # Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
          Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

          Télécharge et install UsbFix de El Desaparecido , C_XX & Chimay8
          Ici : http://www.teamxscript.org/usbfixTelechargement.html

          Tutorial de Malekal_Morte si besoin, merci à lui : https://www.malekal.com/usbfix-supprimer-virus-usb/

          Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir

          # Double clic sur le raccourci UsbFix présent sur ton bureau.

          # Choisi Suppression

          # Laisse travailler l outil.

          # Ensuite post le rapport UsbFix.txt qui apparaîtra.

          # Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. (C:\UsbFix.txt)

          (CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

          2)* Télécharge Ad-remover ( de C_XX ) sur ton bureau :

          http://www.teamxscript.org/adremoverTelechargement.html

          ! Déconnecte toi et ferme toutes applications en cours !

          * Double clique ou clic droit (exécuter en tant que admin...sur Vista et Windows7) sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut.

          * Double-clique ou clic droit (exécuter en tant que admin...sur Vista et Windows 7) sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .

          * Au menu principal choisis l'option "Nettoyer"
          et sur [entrée] .

          * Laisse travailler l'outil et ne touche à rien ...

          --> Poste le rapport qui apparaît à la fin , sur le forum ...

          ( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
          ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

          Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
          Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

          Aides en images (Installation) : http://pagesperso-orange.fr/NosTools/ad_remover.html images (Recherche): http://pagesperso-orange.fr/NosTools/tuto_adr_2.html

          3)Télécharge Malwaresbytes anti malware ici
          http://www.malwarebytes.org/mbam.php

          Bouton »Download free version »

          * Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

          (NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/

          * Potasse le tuto pour te familiariser avec le prg :

          https://forum.pcastuces.com/sujet.asp?f=31&s=3

          (cela dis, il est très simple d'utilisation).

          relance Malwaresbytes en suivant scrupuleusement ces consignes :

          ! Déconnecte toi et ferme toutes applications en cours !

          * Lance Malwarebyte's. Sous Vista et Seven (clic droit de la souris « exécuter en tant que administrateur »)

          Fais un examen dit "Complet"

          --> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
          --> à la fin tu cliques sur "Afficher les résultats" " .
          --> Vérifie que tous les objets infectés soient validés, puis clique sur " supprimer la sélection " .

          Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

          Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwaresbytes, le dernier en date)

          Poste moi ces rapports au fur et à mesure;merci.
          @+
          0
          1. doucejojo24
            Je continue la suite demain matin il est 23 chez moi ...@+
            0
          2. Utilisateur anonyme
            Pas de soucis ;et chez moi il est bientôt 5 heures du Mat
            0
          3. doucejojo24
            après avoir fait le nettoyage l'ordi a fermer et le seul rapport que j'ai vue était lui
            MBRCheck, version 1.2.3
            (c) 2010, AD

            Command-line:
            Windows Version: Windows XP Home Edition
            Windows Information: Service Pack 3 (build 2600)
            Logical Drives Mask: 0x0000000d

            Kernel Drivers (total 143):
            0x804D7000 \WINDOWS\system32\ntoskrnl.exe
            0x806FF000 \WINDOWS\system32\hal.dll
            0xF8AB7000 \WINDOWS\system32\KDCOM.DLL
            0xF89C7000 \WINDOWS\system32\BOOTVID.dll
            0xF8567000 ACPI.sys
            0xF8AB9000 \WINDOWS\System32\DRIVERS\WMILIB.SYS
            0xF8556000 pci.sys
            0xF85B7000 isapnp.sys
            0xF85C7000 ohci1394.sys
            0xF85D7000 \WINDOWS\System32\DRIVERS\1394BUS.SYS
            0xF8B7F000 pciide.sys
            0xF8837000 \WINDOWS\System32\DRIVERS\PCIIDEX.SYS
            0xF85E7000 MountMgr.sys
            0xF8537000 ftdisk.sys
            0xF883F000 PartMgr.sys
            0xF8847000 Achernar.sys
            0xF85F7000 VolSnap.sys
            0xF851F000 atapi.sys
            0xF8607000 disk.sys
            0xF8617000 \WINDOWS\System32\DRIVERS\CLASSPNP.SYS
            0xF84FF000 fltmgr.sys
            0xF84ED000 sr.sys
            0xF84D7000 DRVMCDB.SYS
            0xF84C0000 KSecDD.sys
            0xF84AD000 WudfPf.sys
            0xF8420000 Ntfs.sys
            0xF83F3000 NDIS.sys
            0xF83D9000 Mup.sys
            0xF8627000 agp440.sys
            0xF86C7000 \SystemRoot\System32\DRIVERS\intelppm.sys
            0xF77A5000 \SystemRoot\System32\DRIVERS\nv4_mini.sys
            0xF7791000 \SystemRoot\System32\DRIVERS\VIDEOPRT.SYS
            0xF7773000 \SystemRoot\System32\DRIVERS\e1000325.sys
            0xF8987000 \SystemRoot\System32\DRIVERS\usbuhci.sys
            0xF774F000 \SystemRoot\System32\DRIVERS\USBPORT.SYS
            0xF898F000 \SystemRoot\System32\DRIVERS\usbehci.sys
            0xF76F4000 \SystemRoot\system32\drivers\cmaudio.sys
            0xF76D0000 \SystemRoot\system32\drivers\portcls.sys
            0xF86D7000 \SystemRoot\system32\drivers\drmk.sys
            0xF76AD000 \SystemRoot\system32\drivers\ks.sys
            0xF86E7000 \SystemRoot\System32\DRIVERS\nic1394.sys
            0xF86F7000 \SystemRoot\System32\DRIVERS\IntelC53.sys
            0xF75AC000 \SystemRoot\System32\DRIVERS\IntelC51.sys
            0xF753E000 \SystemRoot\System32\DRIVERS\IntelC52.sys
            0xF8997000 \SystemRoot\System32\DRIVERS\mohfilt.sys
            0xF899F000 \SystemRoot\System32\Drivers\Modem.SYS
            0xF8707000 \SystemRoot\System32\DRIVERS\i8042prt.sys
            0xF89A7000 \SystemRoot\System32\DRIVERS\kbdclass.sys
            0xF89AF000 \SystemRoot\System32\DRIVERS\fdc.sys
            0xF752D000 \SystemRoot\System32\DRIVERS\serial.sys
            0xF7938000 \SystemRoot\System32\DRIVERS\serenum.sys
            0xF7519000 \SystemRoot\System32\DRIVERS\parport.sys
            0xF8717000 \SystemRoot\System32\DRIVERS\imapi.sys
            0xF7934000 \SystemRoot\System32\Drivers\Aldebaran.sys
            0xF8AE9000 \SystemRoot\System32\Drivers\DLACDBHM.SYS
            0xF8727000 \SystemRoot\System32\DRIVERS\cdrom.sys
            0xF8737000 \SystemRoot\System32\DRIVERS\redbook.sys
            0xF89B7000 \SystemRoot\System32\Drivers\GEARAspiWDM.sys
            0xF7494000 \SystemRoot\system32\drivers\smwdm.sys
            0xF8AEB000 \SystemRoot\system32\drivers\aeaudio.sys
            0xF8C46000 \SystemRoot\system32\DRIVERS\lmimirr.sys
            0xF8AED000 \SystemRoot\System32\DRIVERS\serscan.sys
            0xF8C48000 \SystemRoot\System32\DRIVERS\audstub.sys
            0xF7482000 \SystemRoot\System32\DRIVERS\bridge.sys
            0xF89BF000 \SystemRoot\System32\DRIVERS\TDI.SYS
            0xF8747000 \SystemRoot\System32\DRIVERS\rasl2tp.sys
            0xF791C000 \SystemRoot\System32\DRIVERS\ndistapi.sys
            0xF746B000 \SystemRoot\System32\DRIVERS\ndiswan.sys
            0xF8757000 \SystemRoot\System32\DRIVERS\raspppoe.sys
            0xF8767000 \SystemRoot\System32\DRIVERS\raspptp.sys
            0xF745A000 \SystemRoot\System32\DRIVERS\psched.sys
            0xF8777000 \SystemRoot\System32\DRIVERS\msgpc.sys
            0xF8857000 \SystemRoot\System32\DRIVERS\ptilink.sys
            0xF8887000 \SystemRoot\System32\DRIVERS\raspti.sys
            0xF8787000 \SystemRoot\System32\DRIVERS\termdd.sys
            0xF888F000 \SystemRoot\System32\DRIVERS\mouclass.sys
            0xF8AEF000 \SystemRoot\System32\DRIVERS\swenum.sys
            0xF73FC000 \SystemRoot\System32\DRIVERS\update.sys
            0xF8A43000 \SystemRoot\System32\DRIVERS\mssmbios.sys
            0xF8897000 \SystemRoot\system32\DRIVERS\SlingAudioBus.sys
            0xF8797000 \SystemRoot\System32\Drivers\NDProxy.SYS
            0xF87A7000 \SystemRoot\System32\DRIVERS\usbhub.sys
            0xF8AF5000 \SystemRoot\System32\DRIVERS\USBD.SYS
            0xF8A67000 \SystemRoot\System32\DRIVERS\gameenum.sys
            0xF889F000 \SystemRoot\System32\DRIVERS\flpydisk.sys
            0xF8AF7000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
            0xF8CAA000 \SystemRoot\System32\Drivers\Null.SYS
            0xF8AF9000 \SystemRoot\System32\Drivers\Beep.SYS
            0xF88AF000 \SystemRoot\System32\Drivers\DLARTL_N.SYS
            0xF88B7000 \SystemRoot\System32\drivers\vga.sys
            0xF8AFB000 \SystemRoot\System32\Drivers\mnmdd.SYS
            0xF8AFD000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
            0xF88BF000 \SystemRoot\System32\Drivers\Msfs.SYS
            0xF88C7000 \SystemRoot\System32\Drivers\Npfs.SYS
            0xF8A93000 \SystemRoot\System32\DRIVERS\rasacd.sys
            0xF60FA000 \SystemRoot\System32\DRIVERS\ipsec.sys
            0xF60A1000 \SystemRoot\System32\DRIVERS\tcpip.sys
            0xF6079000 \SystemRoot\System32\DRIVERS\netbt.sys
            0xF6053000 \SystemRoot\System32\DRIVERS\ipnat.sys
            0xF87D7000 \SystemRoot\System32\DRIVERS\arp1394.sys
            0xF8AA7000 \SystemRoot\System32\drivers\ws2ifsl.sys
            0xF6031000 \SystemRoot\System32\drivers\afd.sys
            0xF87E7000 \SystemRoot\System32\DRIVERS\wanarp.sys
            0xF87F7000 \SystemRoot\System32\DRIVERS\netbios.sys
            0xF5F66000 \SystemRoot\System32\DRIVERS\rdbss.sys
            0xF5EF6000 \SystemRoot\System32\DRIVERS\mrxsmb.sys
            0xF7CC2000 \SystemRoot\System32\Drivers\Fips.SYS
            0xF83AD000 \SystemRoot\System32\DRIVERS\hidusb.sys
            0xF7CB2000 \SystemRoot\System32\DRIVERS\HIDCLASS.SYS
            0xF88CF000 \SystemRoot\System32\DRIVERS\HIDPARSE.SYS
            0xF83A9000 \SystemRoot\System32\DRIVERS\mouhid.sys
            0
        4. Utilisateur anonyme
          Bonjour

          Reprendre la totalité de cette procédure

          Merci.
          @+
          0
          1. doucejojo24
            Je n'ai pas ma clé Usb avec moi , elle est restée à l'école Est-ce que je peux quand même faire cette commande?
            0
        5. Utilisateur anonyme
          Re

          Oui tu peux ,mais il faudra absolument vérifier cette clé avec Usbfix.

          Avance;
          merci.
          0
          1. doucejojo24
            ############################## | UsbFix 7.035 | [Suppression]

            Utilisateur: Jacques Couillard (Administrateur) # JACQUES-002A52C [ ]
            Mis à jour le 11/11/10 par El Desaparecido / C_XX
            Lancé à 09:40:50 | 20/11/2010
            Site Web: http://www.teamxscript.org
            Contact: eldesaparecido@teamxscript.org

            CPU: Intel(R) Pentium(R) 4 CPU 3.00GHz
            CPU 2: Intel(R) Pentium(R) 4 CPU 3.00GHz
            Microsoft Windows XP Édition familiale (5.1.2600 32-Bit) # Service Pack 3
            Internet Explorer 8.0.6001.18702

            Pare-feu Windows: Désactivé /!\
            RAM -> 511 Mo
            C:\ (%systemdrive%) -> Disque fixe # 153 Go (86 Go libre(s) - 56%) [] # NTFS
            D:\ -> CD-ROM

            ################## | Éléments infectieux |

            Supprimé! C:\Recycler\S-1-5-21-507921405-630328440-682003330-1004

            ################## | Registre |

            ################## | Mountpoints2 |

            ################## | Listing |

            [01/06/2009 - 21:59:16 | N | 1024] C:\.rnd
            [28/03/2010 - 06:47:02 | D ] C:\050170e5004095dde40f58e493f3
            [29/10/2007 - 23:26:46 | D ] C:\142ee
            [29/10/2007 - 23:27:58 | D ] C:\1850a90
            [04/03/2008 - 17:57:58 | D ] C:\24f875b87453a909bb1f61296f
            [07/11/2007 - 08:50:59 | D ] C:\2b131ed5930018f065c54e66
            [25/04/2010 - 11:46:27 | D ] C:\38885d18859a973b23
            [29/10/2007 - 23:40:22 | D ] C:\3e50634f7abd08c90ee1dffd6158dc
            [29/10/2007 - 23:36:59 | D ] C:\611036d61ec0e7e7d3ab
            [29/10/2007 - 23:28:09 | D ] C:\71885337763b537
            [29/10/2007 - 23:17:23 | D ] C:\787bd9140cc5b52c69
            [29/10/2007 - 23:25:31 | D ] C:\89eeb9ef69b2b83d0958
            [25/04/2010 - 11:46:26 | D ] C:\8d15696ed6c6bc8d849d9953cf48
            [16/06/2009 - 14:07:49 | D ] C:\8fc166feaf6cae9d2d332368b433a2ef
            [29/09/2008 - 12:37:27 | N | 608] C:\aaw7boot.log
            [19/11/2010 - 22:28:13 | N | 7907] C:\Ad-Report-CLEAN[1].txt
            [20/11/2010 - 07:17:26 | N | 2621] C:\Ad-Report-CLEAN[2].txt
            [20/02/2008 - 14:01:10 | N | 0] C:\AdobeDebug.txt
            [17/01/2009 - 12:17:27 | N | 667] C:\autoAlbum.log
            [25/10/2010 - 17:59:32 | D ] C:\Autodesk
            [29/10/2007 - 23:14:03 | N | 0] C:\AUTOEXEC.BAT
            [19/11/2010 - 21:08:08 | RASHD ] C:\Autorun.inf
            [16/07/2008 - 16:18:43 | D ] C:\avi
            [31/10/2007 - 09:50:20 | D ] C:\b288402460e15f2918c610
            [19/02/2009 - 09:07:45 | D ] C:\b52e15a999aee19be6bb7d0f6086
            [04/03/2008 - 18:04:14 | N | 216] C:\Boot.bak
            [19/11/2010 - 19:41:31 | N | 332] C:\boot.ini
            [24/04/2003 - 08:00:00 | N | 4952] C:\Bootfont.bin
            [29/10/2007 - 23:32:33 | D ] C:\c848eb141e00b35575
            [30/10/2007 - 00:35:35 | D ] C:\CABS
            [19/11/2010 - 19:41:31 | D ] C:\cmdcons
            [03/08/2004 - 23:00:08 | N | 263488] C:\cmldr
            [19/11/2010 - 20:14:50 | N | 32230] C:\ComboFix.txt
            [19/11/2010 - 22:34:35 | D ] C:\Config.Msi
            [29/10/2007 - 23:14:03 | N | 0] C:\CONFIG.SYS
            [25/04/2010 - 11:46:27 | D ] C:\Converted
            [29/10/2007 - 23:42:09 | D ] C:\d589dcb0f9fa099470eacfc27fe4
            [30/10/2007 - 00:01:21 | D ] C:\Documents and Settings
            [15/03/2008 - 15:51:04 | D ] C:\Drivers
            [23/07/2009 - 19:26:51 | D ] C:\Fichiers Movavi
            [29/10/2007 - 23:14:03 | N | 0] C:\IO.SYS
            [28/05/2008 - 11:13:45 | N | 183] C:\LogiSetup.log
            [18/02/2010 - 18:52:17 | D ] C:\LOGITEMP
            [06/10/2010 - 13:54:22 | D ] C:\MovieCloneTemp
            [29/10/2007 - 23:14:03 | N | 0] C:\MSDOS.SYS
            [30/01/2008 - 13:17:50 | RD ] C:\MSOCache
            [09/12/2007 - 19:36:58 | D ] C:\My Music
            [04/10/2010 - 23:01:15 | D ] C:\New DVD
            [30/10/2007 - 08:52:41 | N | 47564] C:\NTDETECT.COM
            [18/08/2008 - 19:08:13 | N | 252240] C:\ntldr
            [21/02/2010 - 09:35:34 | D ] C:\OutputFolder
            [20/11/2010 - 07:20:31 | ASH | 805306368] C:\pagefile.sys
            [19/11/2010 - 22:27:53 | D ] C:\Program Files
            [24/10/2010 - 16:41:37 | D ] C:\ProgramData
            [01/11/2007 - 12:41:50 | D ] C:\QCSDK1
            [19/11/2010 - 20:14:55 | D ] C:\Qoobox
            [20/11/2010 - 09:45:48 | SHD ] C:\RECYCLER
            [19/07/2009 - 15:06:32 | N | 268] C:\sqmdata00.sqm
            [19/07/2009 - 15:25:29 | N | 268] C:\sqmdata01.sqm
            [19/07/2009 - 15:39:29 | N | 268] C:\sqmdata02.sqm
            [19/07/2009 - 15:53:54 | N | 268] C:\sqmdata03.sqm
            [19/07/2009 - 19:14:18 | N | 268] C:\sqmdata04.sqm
            [19/07/2009 - 22:01:47 | N | 268] C:\sqmdata05.sqm
            [19/07/2009 - 22:08:13 | N | 268] C:\sqmdata06.sqm
            [02/09/2009 - 00:05:10 | N | 268] C:\sqmdata07.sqm
            [02/09/2009 - 00:26:12 | N | 268] C:\sqmdata08.sqm
            [03/09/2009 - 06:41:05 | N | 268] C:\sqmdata09.sqm
            [03/09/2009 - 14:42:31 | N | 268] C:\sqmdata10.sqm
            [03/09/2009 - 15:08:51 | N | 268] C:\sqmdata11.sqm
            [03/10/2009 - 00:23:36 | N | 268] C:\sqmdata12.sqm
            [03/10/2009 - 12:14:12 | N | 268] C:\sqmdata13.sqm
            [06/10/2009 - 11:19:57 | N | 268] C:\sqmdata14.sqm
            [14/07/2009 - 23:44:50 | N | 268] C:\sqmdata15.sqm
            [15/07/2009 - 15:42:23 | N | 268] C:\sqmdata16.sqm
            [15/07/2009 - 22:08:31 | N | 172] C:\sqmdata17.sqm
            [17/07/2009 - 14:22:48 | N | 268] C:\sqmdata18.sqm
            [19/07/2009 - 13:57:40 | N | 268] C:\sqmdata19.sqm
            [19/07/2009 - 15:06:32 | N | 244] C:\sqmnoopt00.sqm
            [19/07/2009 - 15:25:28 | N | 244] C:\sqmnoopt01.sqm
            [19/07/2009 - 15:39:29 | N | 244] C:\sqmnoopt02.sqm
            [19/07/2009 - 15:53:54 | N | 244] C:\sqmnoopt03.sqm
            [19/07/2009 - 19:14:18 | N | 244] C:\sqmnoopt04.sqm
            [19/07/2009 - 22:01:47 | N | 244] C:\sqmnoopt05.sqm
            [19/07/2009 - 22:08:13 | N | 244] C:\sqmnoopt06.sqm
            [02/09/2009 - 00:05:10 | N | 244] C:\sqmnoopt07.sqm
            [02/09/2009 - 00:26:12 | N | 244] C:\sqmnoopt08.sqm
            [03/09/2009 - 06:41:05 | N | 244] C:\sqmnoopt09.sqm
            [03/09/2009 - 14:42:31 | N | 244] C:\sqmnoopt10.sqm
            [03/09/2009 - 15:08:51 | N | 244] C:\sqmnoopt11.sqm
            [03/10/2009 - 00:23:35 | N | 244] C:\sqmnoopt12.sqm
            [03/10/2009 - 12:14:12 | N | 244] C:\sqmnoopt13.sqm
            [06/10/2009 - 11:19:57 | N | 244] C:\sqmnoopt14.sqm
            [14/07/2009 - 23:44:50 | N | 244] C:\sqmnoopt15.sqm
            [15/07/2009 - 15:42:22 | N | 244] C:\sqmnoopt16.sqm
            [15/07/2009 - 22:08:31 | N | 172] C:\sqmnoopt17.sqm
            [17/07/2009 - 14:22:47 | N | 244] C:\sqmnoopt18.sqm
            [19/07/2009 - 13:57:40 | N | 244] C:\sqmnoopt19.sqm
            [30/10/2007 - 10:02:46 | SHD ] C:\System Volume Information
            [19/11/2010 - 20:01:30 | D ] C:\Temp
            [13/05/2010 - 19:53:36 | D ] C:\temp_dvd
            [24/02/2009 - 19:22:15 | N | 3661] C:\updatedatfix.log
            [20/11/2010 - 09:45:48 | D ] C:\UsbFix
            [20/11/2010 - 09:45:49 | A | 790] C:\UsbFix.txt
            [19/11/2010 - 21:08:09 | N | 3537] C:\UsbFix_Upload_Me_JACQUES-002A52C.zip
            [18/06/2009 - 06:51:10 | D ] C:\USB_DRV
            [20/11/2010 - 07:20:48 | D ] C:\WINDOWS
            [12/03/2003 - 13:50:11 | N | 84] C:\WRX2546.bin
            [21/10/2010 - 13:53:53 | N | 161] C:\_DICOM.LOG
            [21/10/2010 - 13:53:55 | N | 194] C:\_OVERLAY.LOG
            [16/01/2009 - 09:58:19 | N | 1524] C:\_Sid.txt

            ################## | Vaccin |

            C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

            ################## | Upload |

            Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_JACQUES-002A52C.zip
            http://www.teamxscript.org/Sample/Upload.php
            Merci de votre contribution.

            ################## | E.O.F |

            Je continue
            0
          2. doucejojo24
            ======= RAPPORT D'AD-REMOVER 2.0.0.2,B | UNIQUEMENT XP/VISTA/7 =======

            Mis à jour par TeamXscript le 11/11/10 à 11:40
            Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
            Site web: http://www.teamxscript.org

            C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 22:25:39 le 19/11/2010, Mode normal

            Microsoft Windows XP Édition familiale Service Pack 3 (X86)
            Jacques Couillard@JACQUES-002A52C ( )

            ============== ACTION(S) ==============

            Fichier supprimé: C:\WINDOWS\system32\nrereesvckrwozmu.exe
            Dossier supprimé: C:\Program Files\AskSBar

            (!) -- Fichiers temporaires supprimés.

            Clé supprimée: HKLM\Software\Classes\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}
            Clé supprimée: HKLM\Software\Classes\CLSID\{4533087E-E484-4474-E217-24982E3287D2}
            Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4533087E-E484-4474-E217-24982E3287D2}
            Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4533087E-E484-4474-E217-24982E3287D2}
            Clé supprimée: HKLM\Software\Classes\CLSID\{B15FD82E-85BC-430d-90CB-65DB1B030510}
            Clé supprimée: HKLM\Software\Classes\CLSID\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}
            Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}
            Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}
            Clé supprimée: HKLM\Software\Classes\CLSID\{F0D4B23B-DA4B-4daf-81E4-DFEE4931A4AA}
            Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F0D4B23B-DA4B-4daf-81E4-DFEE4931A4AA}
            Clé supprimée: HKLM\Software\Classes\Interface\{030C9927-10FC-4169-97A2-55BECD5D88D8}
            Clé supprimée: HKLM\Software\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C}
            Clé supprimée: HKLM\Software\Classes\Interface\{17BF1E05-C0E8-413C-BD1F-A481EEA3B8E9}
            Clé supprimée: HKLM\Software\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}
            Clé supprimée: HKLM\Software\Classes\Interface\{30B15818-E110-4527-9C05-46ACE5A3460D}
            Clé supprimée: HKLM\Software\Classes\Interface\{419EDA30-6DFF-432C-B534-E15D899ABEE4}
            Clé supprimée: HKLM\Software\Classes\Interface\{453DB0C5-F41C-4D97-8DD6-CC72ECD5F699}
            Clé supprimée: HKLM\Software\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}
            Clé supprimée: HKLM\Software\Classes\Interface\{618AAD04-921F-44C2-BE38-C0818AF69861}
            Clé supprimée: HKLM\Software\Classes\Interface\{6511CE4C-4722-40D0-AD3D-4AFA2F50978A}
            Clé supprimée: HKLM\Software\Classes\Interface\{83B2FE06-BA20-4F7D-96C6-6FC3A4E877D3}
            Clé supprimée: HKLM\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}
            Clé supprimée: HKLM\Software\Classes\Interface\{9BEC9B38-BF39-4899-806E-A1C5DFEB60A2}
            Clé supprimée: HKLM\Software\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C}
            Clé supprimée: HKLM\Software\Classes\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}
            Clé supprimée: HKLM\Software\Classes\Interface\{B32966A2-F7C2-4362-A6CF-399EC8B44110}
            Clé supprimée: HKLM\Software\Classes\Interface\{B5D2ED96-62F9-4C2C-956D-E425B1F67337}
            Clé supprimée: HKLM\Software\Classes\Interface\{B86D82BF-D39F-439A-A07C-43EDDC6F6EA6}
            Clé supprimée: HKLM\Software\Classes\Interface\{D3A412E8-1E4B-47D2-9B12-F88291F5AFBB}
            Clé supprimée: HKLM\Software\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}
            Clé supprimée: HKLM\Software\Classes\Interface\{DA6305B9-0869-4235-8C1D-533A65E639E5}
            Clé supprimée: HKLM\Software\Classes\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A}
            Clé supprimée: HKLM\Software\Classes\Interface\{E6961C59-CFCE-4CCD-B794-BC78DB98413A}
            Clé supprimée: HKLM\Software\Classes\Interface\{F8B4EC8A-2407-4BE0-AEE2-0F430D65A90D}
            Clé supprimée: HKLM\Software\Classes\TypeLib\{ACC62306-9A63-4864-BD2F-C8825D2D7EA6}
            Clé supprimée: HKLM\Software\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}
            Clé supprimée: HKLM\Software\Classes\TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2}
            Clé supprimée: HKLM\Software\Classes\TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF}
            Clé supprimée: HKLM\Software\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}
            Clé supprimée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\nrereesvckrwozmu
            Clé supprimée: HKCU\Software\Fun Web Products
            Clé supprimée: HKCU\Software\uptowninstaller
            Clé supprimée: HKU\.DEFAULT\Software\MyWebSearch
            Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ClickPotato
            Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ShopperReports
            Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7}
            Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\AskSBar Uninstall
            Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{89F88394-3828-4D03-A0CF-8203604C3DA6}
            Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4233F04-1789-483C-A137-731E8F113DD5}
            Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{54A3F8B7-228E-4ED8-895B-DE832B2C3959}
            Clé supprimée: HKLM\Software\Classes\MIME\Database\Content Type\Application/x-f3embed
            Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWebSearch bar Uninstall

            Valeur supprimée: HKLM\Software\Microsoft\Windows Media\Wmsdk\Sources|F3PopularScreenSavers
            Valeur supprimée: HKLM\Software\Mozilla\Firefox\Extensions|clickpotatolite@clickpotatolite.com
            Valeur supprimée: HKLM\Software\Mozilla\Firefox\Extensions|Shopperreports@shopperreports.com
            Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{0579B4B6-0293-4D73-B02D-5EBB0BA0F0A2}
            Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA}

            ============== SCAN ADDITIONNEL ==============

            ** Mozilla Firefox Version [3.6.12 (fr)] **

            -- C:\Documents and Settings\Jacques Couillard\Application Data\Mozilla\FireFox\Profiles\uacafs5t.default\Prefs.js --
            browser.download.lastDir, C:\\Documents and Settings\\Jacques Couillard\\Mes documents\\Mes images
            browser.search.defaultenginename, Bing
            browser.search.defaulturl, hxxp://www.bing.com/search?FORM=IEFM1&q=
            browser.search.selectedEngine, Live Search
            browser.startup.homepage, hxxp://www.cyberpresse.ca/
            browser.startup.homepage_override.mstone, rv:1.9.2.12
            keyword.URL, hxxp://search.live.com/results.aspx?mkt=fr-FR&FORM=MIZWG0&q=

            ========================================

            ** Internet Explorer Version [8.0.6001.18702] **

            [HKCU\Software\Microsoft\Internet Explorer\Main]
            AutoHide: yes
            Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
            Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
            Do404Search: 0x01000000
            Enable Browser Extensions: yes
            Local Page: C:\WINDOWS\system32\blank.htm
            Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
            Show_ToolBar: yes
            Start Page: hxxp://fr.msn.com/
            Use Search Asst: no

            [HKLM\Software\Microsoft\Internet Explorer\Main]
            Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
            Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
            Delete_Temp_Files_On_Exit: yes
            Local Page: C:\WINDOWS\system32\blank.htm
            Search bar: hxxp://search.msn.com/spbasic.htm
            Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
            Start Page: hxxp://fr.msn.com/

            [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
            Tabs: res://ieframe.dll/tabswelcome.htm
            Blank: res://mshtml.dll/blank.htm

            ========================================

            C:\Program Files\Ad-Remover\Quarantine: 10 Fichier(s)
            C:\Program Files\Ad-Remover\Backup: 14 Fichier(s)

            C:\Ad-Report-CLEAN[1].txt - 19/11/2010 (608 Octet(s))

            Fin à: 22:28:13, 19/11/2010

            ============== E.O.F ==============
            0
          3. doucejojo24
            Malwarebytes' Anti-Malware 1.46
            www.malwarebytes.org

            Version de la base de données: 5157

            Windows 5.1.2600 Service Pack 3
            Internet Explorer 8.0.6001.18702

            2010-11-20 14:07:25
            mbam-log-2010-11-20 (14-07-25).txt

            Type d'examen: Examen complet (C:\|)
            Elément(s) analysé(s): 302563
            Temps écoulé: 1 heure(s), 31 minute(s), 3 seconde(s)

            Processus mémoire infecté(s): 1
            Module(s) mémoire infecté(s): 0
            Clé(s) du Registre infectée(s): 17
            Valeur(s) du Registre infectée(s): 0
            Elément(s) de données du Registre infecté(s): 0
            Dossier(s) infecté(s): 6
            Fichier(s) infecté(s): 327

            Processus mémoire infecté(s):
            C:\Documents and Settings\Jacques Couillard\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe (Malware.Packer.Gen) -> Unloaded process successfully.

            Module(s) mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Clé(s) du Registre infectée(s):
            HKEY_CLASSES_ROOT\Interface\{2763e333-b168-41a0-a112-d35f96f410c0} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
            HKEY_CLASSES_ROOT\Interface\{65a16874-2ed0-460e-a547-5fe2ec3a13a7} (Adware.ShopperReports) -> Quarantined and deleted successfully.
            HKEY_CLASSES_ROOT\Interface\{71e02280-5212-45c3-b174-4d5a35da254f} (Adware.ShopperReports) -> Quarantined and deleted successfully.
            HKEY_CLASSES_ROOT\Interface\{c89435b0-cdfe-11d3-976a-00e02913a9e0} (Adware.WebHancer) -> Quarantined and deleted successfully.
            HKEY_CLASSES_ROOT\AppID\{0d82acd6-a652-4496-a298-2bde705f4227} (Adware.ClickPotato) -> Quarantined and deleted successfully.
            HKEY_CLASSES_ROOT\AppID\{11c27351-716b-4052-9361-e3b0a3f8221c} (Adware.ClickPotato) -> Quarantined and deleted successfully.
            HKEY_CLASSES_ROOT\AppID\{7025e484-d4b0-441a-9f0b-69063bd679ce} (Adware.ClickPotato) -> Quarantined and deleted successfully.
            HKEY_CLASSES_ROOT\AppID\{8258b35c-05b8-4c0e-9525-9bccc70f8f2d} (Adware.ClickPotato) -> Quarantined and deleted successfully.
            HKEY_CLASSES_ROOT\AppID\{a89256ad-ec17-4a83-bef5-4b8bc4f39306} (Adware.ClickPotato) -> Quarantined and deleted successfully.
            HKEY_CLASSES_ROOT\Typelib\{c8cb3870-cdfe-11d3-976a-00e02913a9e0} (Adware.WebHancer) -> Quarantined and deleted successfully.
            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{37b85a21-692b-4205-9cad-2626e4993404} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{37b85a29-692b-4205-9cad-2626e4993404} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{8109fd3d-d891-4f80-8339-50a4913ace6f} (Adware.Zango) -> Quarantined and deleted successfully.
            HKEY_CURRENT_USER\SOFTWARE\MicroAV (Rogue.MicroAntiVirus) -> Quarantined and deleted successfully.
            HKEY_CURRENT_USER\SOFTWARE\RegistrySmart (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
            HKEY_CURRENT_USER\SOFTWARE\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully.
            HKEY_LOCAL_MACHINE\SOFTWARE\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully.

            Valeur(s) du Registre infectée(s):
            (Aucun élément nuisible détecté)

            Elément(s) de données du Registre infecté(s):
            (Aucun élément nuisible détecté)

            Dossier(s) infecté(s):
            C:\Documents and Settings\Jacques Couillard\Application Data\RegistrySmart (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegistrySmart\Log (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\Logs (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530 (Rogue.RegTool) -> Quarantined and deleted successfully.

            Fichier(s) infecté(s):
            C:\Documents and Settings\Jacques Couillard\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\QueryExplorer\queryexplorer116.exe.vir (Adware.QueryExplorer) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\QueryExplorer\queryexplorer119.exe.vir (Adware.QueryExplorer) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ClickPotatoLite\bin\10.0.529.0\ClickPotatoLiteSA.exe.vir (Adware.ClickPotato) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ClickPotatoLite\bin\10.0.529.0\ClickPotatoLiteSAAX.dll.vir (Adware.ClickPotato) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ClickPotatoLite\bin\10.0.529.0\ClickPotatoLiteSABHO.dll.vir (Adware.ClickPotato) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ClickPotatoLite\bin\10.0.529.0\ClickPotatoLiteSAHook.dll.vir (Adware.ClickPotato) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ClickPotatoLite\bin\10.0.529.0\ClickPotatoLiteUninstaller.exe.vir (Adware.ClickPotato) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ClickPotatoLite\bin\10.0.529.0\firefox\extensions\plugins\npclntax_ClickPotatoLiteSA.dll.vir (Adware.ClickPotato) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\Mozilla Firefox\plugins\npclntax_ClickPotatoLiteSA.dll.vir (Adware.ClickPotato) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\QueryExplorer\queryexplorer.dll.vir (Adware.Agent.Gen) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\QueryExplorer\queryexplorer.exe.vir (Adware.QueryExplorer) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ShopperReports3\bin\3.0.491.0\BRNstIE.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ShopperReports3\bin\3.0.491.0\CmndFF.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ShopperReports3\bin\3.0.491.0\CntntCntr.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ShopperReports3\bin\3.0.491.0\mozillaps.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ShopperReports3\bin\3.0.491.0\Pltfrm.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ShopperReports3\bin\3.0.491.0\ShopperReports.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ShopperReports3\bin\3.0.491.0\ShopperReportsUninstaller.exe.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ShopperReports3\bin\3.0.491.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.dll.vir (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\ShoppingReport2\Bin\2.7.27\ShoppingReport.dll.vir (Adware.SmartShopper) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\webHancer\Programs\webhdll.dll.vir (Adware.WebHancer) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\Program Files\webHancer\Programs\whinstaller.exe.vir (Adware.WebHancer) -> Quarantined and deleted successfully.
            C:\Qoobox\Quarantine\C\WINDOWS\system32\EV02\EV022328.exe.vir (Trojan.Downloader) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1406\A0661382.dll (Adware.Agent.Gen) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1406\A0661383.exe (Adware.QueryExplorer) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1447\A0673850.exe (Adware.QueryExplorer) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1447\A0673867.dll (Adware.Agent.Gen) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1447\A0673868.exe (Adware.QueryExplorer) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675328.exe (Adware.ClickPotato) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675346.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675320.exe (Adware.QueryExplorer) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675321.exe (Adware.QueryExplorer) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675329.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675330.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675331.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675332.exe (Adware.ClickPotato) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675334.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675336.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675337.dll (Adware.Agent.Gen) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675338.exe (Adware.QueryExplorer) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675339.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675340.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675341.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675343.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675345.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675347.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675348.exe (Adware.ShopperReports) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675349.dll (Adware.SmartShopper) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675352.dll (Adware.WebHancer) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675354.exe (Adware.WebHancer) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1452\A0675363.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
            C:\WINDOWS\1-fe5e180d56ed9c233080898276c260cc.exe (Adware.SmartShopper) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\oocngc.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\owgotgvu.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\pcgykqwe.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\swqfdoxb.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\etzugs.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\khfEWOHb.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\kjrlpqqw.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\jcjialwu.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\uwhmcuwg.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\wcvpruyw.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\hffxrb.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\lmpjvpco.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\ataqijnl.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\xqbbflfn.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\xxyxYsPi.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\ymybrxpl.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\qeauneeb.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\qtdphc.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\dydysxta.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\ebaamwfw.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\enrtts.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\ohhjjq.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\rmnpfmjt.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\afpirjtv.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\bfyeutwu.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\blljrixj.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\fcccaXRK.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\ssmkog.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\stxbeedk.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\tkdypb.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\trnhga.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\uhcfnikd.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\nlxexfjv.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\lfjmem.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\lfxkre.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\lgustgcf.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\fxwfndhq.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\gerpkeip.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\glrtfrrb.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\obouwnii.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\xiajxrds.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\xjpgel.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\xkangs.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\ic2\TK7622i.exe (Adware.WebHancer) -> Quarantined and deleted successfully.
            C:\WINDOWS\system32\vzb\WFOL778X6.exe (Trojan.BHO) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegistrySmart\Log\2009 Jan 19 - 01_55_41 PM_484.log (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegistrySmart\Log\2009 Jan 19 - 06_46_14 PM_656.log (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegistrySmart\Log\2009 Jan 19 - 11_17_18 PM_109.log (Rogue.RegistrySmart) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\resultsw.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\Logs\2009-01-20 20-56-500.log (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\Logs\2009-01-20 23-22-060.log (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\filelist.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-0.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-1.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-10.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-100.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-101.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-102.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-103.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-104.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-105.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-106.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-107.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-108.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-109.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-11.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-110.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-111.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-112.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-113.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-114.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-115.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-116.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-117.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-118.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-119.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-12.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-120.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-121.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-122.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-123.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-124.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-125.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-126.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-127.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-128.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-129.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-13.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-130.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-131.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-132.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-133.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-134.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-135.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-136.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-137.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-138.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-139.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-14.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-140.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-141.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-142.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-143.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-144.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-145.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-146.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-147.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-148.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-149.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-15.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-150.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-151.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-152.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-153.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-154.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-155.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-156.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-157.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-158.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-159.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-16.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-160.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-161.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-162.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-163.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-164.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-165.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-166.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-167.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-168.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-169.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-17.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-170.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-171.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-172.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-173.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-174.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-175.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-176.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-177.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-178.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-179.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-18.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-180.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-181.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-182.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-183.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-184.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-185.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-186.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-187.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-188.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-189.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-19.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-190.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-191.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-192.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-193.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-194.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-195.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-196.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-197.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-198.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-199.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-2.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-20.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-200.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-201.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-202.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-203.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-204.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-205.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-206.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-207.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-208.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-209.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-21.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-210.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-211.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-212.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-213.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-214.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-215.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-216.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-217.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-218.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-22.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-23.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-24.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-25.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-26.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-27.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-28.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-29.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-3.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-30.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-31.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-32.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-33.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-34.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-35.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-36.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-37.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-38.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-39.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-4.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-40.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-41.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-42.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-43.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-44.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-45.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-46.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-47.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-48.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-49.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-5.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-50.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-51.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-52.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-53.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-54.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-55.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-56.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-57.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-58.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-59.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-6.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-60.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-61.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-62.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-63.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-64.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-65.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-66.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-67.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-68.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-69.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-7.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-70.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-71.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-72.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-73.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-74.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-75.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-76.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-77.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-78.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-79.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-8.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-80.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-81.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-82.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-83.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-84.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-85.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-86.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-87.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-88.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-89.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-9.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-90.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-91.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-92.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-93.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-94.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-95.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-96.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-97.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-98.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\RegTool\QuarantineW\2009-01-20 23-18-530\regb-99.db (Rogue.RegTool) -> Quarantined and deleted successfully.
            C:\Documents and Settings\Jacques Couillard\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus 2009.lnk (Rogue.AntiVirus2008) -> Quarantined and deleted successfully.
            C:\WINDOWS\BM03b2883f.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
            C:\WINDOWS\BM03b2883f.xml (Trojan.Vundo) -> Quarantined and deleted successfully.
            0
        6. Utilisateur anonyme
          Bonsoir

          Vide la quarantaine de Malwaresbytes.
          Ou en sont tes problèmes de lenteur?

          Ce n'est pas fini...
          @+
          0
          1. doucejojo24
            Allô j'ai branché ma clé Usb et refait le Usbfix

            ############################## | UsbFix 7.035 | [Suppression]

            Utilisateur: Jacques Couillard (Administrateur) # JACQUES-002A52C [ ]
            Mis à jour le 22/11/10 par El Desaparecido / C_XX
            Lancé à 19:29:39 | 22/11/2010
            Site Web: http://www.teamxscript.org
            Contact: eldesaparecido@teamxscript.org

            CPU: Intel(R) Pentium(R) 4 CPU 3.00GHz
            CPU 2: Intel(R) Pentium(R) 4 CPU 3.00GHz
            Microsoft Windows XP Édition familiale (5.1.2600 32-Bit) # Service Pack 3
            Internet Explorer 8.0.6001.18702

            Pare-feu Windows: Activé
            RAM -> 511 Mo
            C:\ (%systemdrive%) -> Disque fixe # 153 Go (85 Go libre(s) - 56%) [] # NTFS
            D:\ -> CD-ROM
            E:\ -> Disque amovible # 2 Go (2 Go libre(s) - 99%) [KINGSTON] # FAT

            ################## | Éléments infectieux |

            Supprimé! C:\Recycler\S-1-5-21-507921405-630328440-682003330-1004

            ################## | Registre |

            ################## | Mountpoints2 |

            ################## | Listing |

            [01/06/2009 - 21:59:16 | N | 1024] C:\.rnd
            [28/03/2010 - 06:47:02 | D ] C:\050170e5004095dde40f58e493f3
            [29/10/2007 - 23:26:46 | D ] C:\142ee
            [29/10/2007 - 23:27:58 | D ] C:\1850a90
            [04/03/2008 - 17:57:58 | D ] C:\24f875b87453a909bb1f61296f
            [07/11/2007 - 08:50:59 | D ] C:\2b131ed5930018f065c54e66
            [25/04/2010 - 11:46:27 | D ] C:\38885d18859a973b23
            [29/10/2007 - 23:40:22 | D ] C:\3e50634f7abd08c90ee1dffd6158dc
            [29/10/2007 - 23:36:59 | D ] C:\611036d61ec0e7e7d3ab
            [29/10/2007 - 23:28:09 | D ] C:\71885337763b537
            [29/10/2007 - 23:17:23 | D ] C:\787bd9140cc5b52c69
            [29/10/2007 - 23:25:31 | D ] C:\89eeb9ef69b2b83d0958
            [25/04/2010 - 11:46:26 | D ] C:\8d15696ed6c6bc8d849d9953cf48
            [16/06/2009 - 14:07:49 | D ] C:\8fc166feaf6cae9d2d332368b433a2ef
            [29/09/2008 - 12:37:27 | N | 608] C:\aaw7boot.log
            [19/11/2010 - 22:28:13 | N | 7907] C:\Ad-Report-CLEAN[1].txt
            [20/11/2010 - 07:17:26 | N | 2621] C:\Ad-Report-CLEAN[2].txt
            [20/11/2010 - 10:39:06 | N | 2678] C:\Ad-Report-CLEAN[3].txt
            [20/02/2008 - 14:01:10 | N | 0] C:\AdobeDebug.txt
            [17/01/2009 - 12:17:27 | N | 667] C:\autoAlbum.log
            [25/10/2010 - 17:59:32 | D ] C:\Autodesk
            [29/10/2007 - 23:14:03 | N | 0] C:\AUTOEXEC.BAT
            [20/11/2010 - 09:45:56 | RASHD ] C:\Autorun.inf
            [16/07/2008 - 16:18:43 | D ] C:\avi
            [31/10/2007 - 09:50:20 | D ] C:\b288402460e15f2918c610
            [19/02/2009 - 09:07:45 | D ] C:\b52e15a999aee19be6bb7d0f6086
            [04/03/2008 - 18:04:14 | N | 216] C:\Boot.bak
            [19/11/2010 - 19:41:31 | N | 332] C:\boot.ini
            [24/04/2003 - 08:00:00 | N | 4952] C:\Bootfont.bin
            [29/10/2007 - 23:32:33 | D ] C:\c848eb141e00b35575
            [30/10/2007 - 00:35:35 | D ] C:\CABS
            [19/11/2010 - 19:41:31 | D ] C:\cmdcons
            [03/08/2004 - 23:00:08 | N | 263488] C:\cmldr
            [19/11/2010 - 20:14:50 | N | 32230] C:\ComboFix.txt
            [19/11/2010 - 22:34:35 | D ] C:\Config.Msi
            [29/10/2007 - 23:14:03 | N | 0] C:\CONFIG.SYS
            [25/04/2010 - 11:46:27 | D ] C:\Converted
            [29/10/2007 - 23:42:09 | D ] C:\d589dcb0f9fa099470eacfc27fe4
            [30/10/2007 - 00:01:21 | D ] C:\Documents and Settings
            [15/03/2008 - 15:51:04 | D ] C:\Drivers
            [23/07/2009 - 19:26:51 | D ] C:\Fichiers Movavi
            [29/10/2007 - 23:14:03 | N | 0] C:\IO.SYS
            [28/05/2008 - 11:13:45 | N | 183] C:\LogiSetup.log
            [18/02/2010 - 18:52:17 | D ] C:\LOGITEMP
            [06/10/2010 - 13:54:22 | D ] C:\MovieCloneTemp
            [29/10/2007 - 23:14:03 | N | 0] C:\MSDOS.SYS
            [30/01/2008 - 13:17:50 | RD ] C:\MSOCache
            [09/12/2007 - 19:36:58 | D ] C:\My Music
            [04/10/2010 - 23:01:15 | D ] C:\New DVD
            [30/10/2007 - 08:52:41 | N | 47564] C:\NTDETECT.COM
            [18/08/2008 - 19:08:13 | N | 252240] C:\ntldr
            [21/02/2010 - 09:35:34 | D ] C:\OutputFolder
            [22/11/2010 - 19:20:41 | ASH | 805306368] C:\pagefile.sys
            [20/11/2010 - 11:20:54 | D ] C:\Program Files
            [24/10/2010 - 16:41:37 | D ] C:\ProgramData
            [01/11/2007 - 12:41:50 | D ] C:\QCSDK1
            [19/11/2010 - 20:14:55 | D ] C:\Qoobox
            [22/11/2010 - 19:34:12 | SHD ] C:\RECYCLER
            [19/07/2009 - 15:06:32 | N | 268] C:\sqmdata00.sqm
            [19/07/2009 - 15:25:29 | N | 268] C:\sqmdata01.sqm
            [19/07/2009 - 15:39:29 | N | 268] C:\sqmdata02.sqm
            [19/07/2009 - 15:53:54 | N | 268] C:\sqmdata03.sqm
            [19/07/2009 - 19:14:18 | N | 268] C:\sqmdata04.sqm
            [19/07/2009 - 22:01:47 | N | 268] C:\sqmdata05.sqm
            [19/07/2009 - 22:08:13 | N | 268] C:\sqmdata06.sqm
            [02/09/2009 - 00:05:10 | N | 268] C:\sqmdata07.sqm
            [02/09/2009 - 00:26:12 | N | 268] C:\sqmdata08.sqm
            [03/09/2009 - 06:41:05 | N | 268] C:\sqmdata09.sqm
            [03/09/2009 - 14:42:31 | N | 268] C:\sqmdata10.sqm
            [03/09/2009 - 15:08:51 | N | 268] C:\sqmdata11.sqm
            [03/10/2009 - 00:23:36 | N | 268] C:\sqmdata12.sqm
            [03/10/2009 - 12:14:12 | N | 268] C:\sqmdata13.sqm
            [06/10/2009 - 11:19:57 | N | 268] C:\sqmdata14.sqm
            [14/07/2009 - 23:44:50 | N | 268] C:\sqmdata15.sqm
            [15/07/2009 - 15:42:23 | N | 268] C:\sqmdata16.sqm
            [15/07/2009 - 22:08:31 | N | 172] C:\sqmdata17.sqm
            [17/07/2009 - 14:22:48 | N | 268] C:\sqmdata18.sqm
            [19/07/2009 - 13:57:40 | N | 268] C:\sqmdata19.sqm
            [19/07/2009 - 15:06:32 | N | 244] C:\sqmnoopt00.sqm
            [19/07/2009 - 15:25:28 | N | 244] C:\sqmnoopt01.sqm
            [19/07/2009 - 15:39:29 | N | 244] C:\sqmnoopt02.sqm
            [19/07/2009 - 15:53:54 | N | 244] C:\sqmnoopt03.sqm
            [19/07/2009 - 19:14:18 | N | 244] C:\sqmnoopt04.sqm
            [19/07/2009 - 22:01:47 | N | 244] C:\sqmnoopt05.sqm
            [19/07/2009 - 22:08:13 | N | 244] C:\sqmnoopt06.sqm
            [02/09/2009 - 00:05:10 | N | 244] C:\sqmnoopt07.sqm
            [02/09/2009 - 00:26:12 | N | 244] C:\sqmnoopt08.sqm
            [03/09/2009 - 06:41:05 | N | 244] C:\sqmnoopt09.sqm
            [03/09/2009 - 14:42:31 | N | 244] C:\sqmnoopt10.sqm
            [03/09/2009 - 15:08:51 | N | 244] C:\sqmnoopt11.sqm
            [03/10/2009 - 00:23:35 | N | 244] C:\sqmnoopt12.sqm
            [03/10/2009 - 12:14:12 | N | 244] C:\sqmnoopt13.sqm
            [06/10/2009 - 11:19:57 | N | 244] C:\sqmnoopt14.sqm
            [14/07/2009 - 23:44:50 | N | 244] C:\sqmnoopt15.sqm
            [15/07/2009 - 15:42:22 | N | 244] C:\sqmnoopt16.sqm
            [15/07/2009 - 22:08:31 | N | 172] C:\sqmnoopt17.sqm
            [17/07/2009 - 14:22:47 | N | 244] C:\sqmnoopt18.sqm
            [19/07/2009 - 13:57:40 | N | 244] C:\sqmnoopt19.sqm
            [30/10/2007 - 10:02:46 | SHD ] C:\System Volume Information
            [19/11/2010 - 20:01:30 | D ] C:\Temp
            [13/05/2010 - 19:53:36 | D ] C:\temp_dvd
            [24/02/2009 - 19:22:15 | N | 3661] C:\updatedatfix.log
            [22/11/2010 - 19:34:12 | D ] C:\UsbFix
            [22/11/2010 - 19:34:13 | A | 853] C:\UsbFix.txt
            [20/11/2010 - 09:45:58 | N | 5100] C:\UsbFix_Upload_Me_JACQUES-002A52C.zip
            [18/06/2009 - 06:51:10 | D ] C:\USB_DRV
            [22/11/2010 - 19:21:01 | D ] C:\WINDOWS
            [12/03/2003 - 13:50:11 | N | 84] C:\WRX2546.bin
            [21/10/2010 - 13:53:53 | N | 161] C:\_DICOM.LOG
            [21/10/2010 - 13:53:55 | N | 194] C:\_OVERLAY.LOG
            [16/01/2009 - 09:58:19 | N | 1524] C:\_Sid.txt
            [04/10/2010 - 15:22:50 | D ] E:\EXPLOITATIOND'INFORMATION
            [04/10/2010 - 15:22:44 | D ] E:\compétences 6
            [12/11/2010 - 15:14:12 | N | 352256] E:\Présentation1.ppt
            [17/11/2010 - 15:35:32 | N | 818] E:\plot.log
            [29/01/2010 - 11:10:44 | N | 70336] E:\Échantillons des lignes 23.dwg
            [18/11/2010 - 13:42:26 | N | 399934] E:\librairie 111.bak
            [18/11/2010 - 15:39:56 | N | 495426] E:\librairie 111.dwg

            ################## | Vaccin |

            C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
            E:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

            ################## | Upload |

            Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_JACQUES-002A52C.zip
            http://www.teamxscript.org/Sample/Upload.php
            Merci de votre contribution.

            ################## | E.O.F |
            0
          2. doucejojo24
            Malwarebytes' Anti-Malware 1.46
            www.malwarebytes.org

            Version de la base de données: 5157

            Windows 5.1.2600 Service Pack 3
            Internet Explorer 8.0.6001.18702

            2010-11-22 21:54:10
            mbam-log-2010-11-22 (21-54-10).txt

            Type d'examen: Examen complet (C:\|E:\|)
            Elément(s) analysé(s): 302441
            Temps écoulé: 1 heure(s), 40 minute(s), 26 seconde(s)

            Processus mémoire infecté(s): 0
            Module(s) mémoire infecté(s): 0
            Clé(s) du Registre infectée(s): 0
            Valeur(s) du Registre infectée(s): 0
            Elément(s) de données du Registre infecté(s): 0
            Dossier(s) infecté(s): 0
            Fichier(s) infecté(s): 4

            Processus mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Module(s) mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Clé(s) du Registre infectée(s):
            (Aucun élément nuisible détecté)

            Valeur(s) du Registre infectée(s):
            (Aucun élément nuisible détecté)

            Elément(s) de données du Registre infecté(s):
            (Aucun élément nuisible détecté)

            Dossier(s) infecté(s):
            (Aucun élément nuisible détecté)

            Fichier(s) infecté(s):
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1453\A0675580.exe (Adware.SmartShopper) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1453\A0675600.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1453\A0675613.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{AB256344-1C1E-45A2-AB8C-733B0C782EFE}\RP1453\A0675624.exe (Adware.WebHancer) -> Quarantined and deleted successfully.
            0
          3. doucejojo24
            Mon pc est beaucoup moins lent.

            Je ne sait pas comment enlevé la protection en lecture des fichier usb comme le demande les programme pour scanner ma clé usb.
            Crois-tu qu'elle est sans virus maintenant? J'aimerais savoir s'il y a un bon anti-virus que je pourrais essayer pour le mois et si je l'apprécie je pourrais l'acheter? A L'école les pc son infectés et je ramène le tout chez moi... Merci
            0
        7. Utilisateur anonyme
          Bonsoir

          Désinstalle Norton Security Scan ;si bien sur tu ne paies pas de licence pour ce produit.

          Je te propose d'utiliser Antivir.

          Ensuite lance une analyse complète de ton PC après mise à jour bien sur et poste moi ce rapport;merci.

          @+
          ---------Contributeur Sécurité---------
          On a tous été un jour débutant dans quelque chose.
          Mais le savoir est la récompense de l'assiduité.
          0
          1. doucejojo24
            Avira AntiVir Personal
            Date de création du fichier de rapport : 24 novembre 2010 18:44

            La recherche porte sur 3089492 souches de virus.

            Le programme fonctionne en version intégrale illimitée.
            Les services en ligne sont disponibles.

            Détenteur de la licence : Avira AntiVir Personal - FREE Antivirus
            Numéro de série : 0000149996-ADJIE-0000001
            Plateforme : Windows XP
            Version de Windows : (Service Pack 3) [5.1.2600]
            Mode Boot : Démarré normalement
            Identifiant : Jacques Couillard
            Nom de l'ordinateur : JACQUES-002A52C

            Informations de version :
            BUILD.DAT : 10.0.0.99 31821 Bytes 2010-08-27 08:04:00
            AVSCAN.EXE : 10.0.3.1 434344 Bytes 2010-08-17 18:38:56
            AVSCAN.DLL : 10.0.3.0 56168 Bytes 2010-08-17 18:39:10
            LUKE.DLL : 10.0.2.3 104296 Bytes 2010-08-17 18:39:03
            LUKERES.DLL : 10.0.0.0 13672 Bytes 2010-08-17 18:39:11
            VBASE000.VDF : 7.10.0.0 19875328 Bytes 2009-11-06 15:05:36
            VBASE001.VDF : 7.10.1.0 1372672 Bytes 2009-11-19 01:27:49
            VBASE002.VDF : 7.10.3.1 3143680 Bytes 2010-01-20 23:37:42
            VBASE003.VDF : 7.10.3.75 996864 Bytes 2010-01-26 22:37:42
            VBASE004.VDF : 7.10.4.203 1579008 Bytes 2010-03-05 17:29:03
            VBASE005.VDF : 7.10.6.82 2494464 Bytes 2010-04-15 18:39:06
            VBASE006.VDF : 7.10.7.218 2294784 Bytes 2010-06-02 18:39:07
            VBASE007.VDF : 7.10.9.165 4840960 Bytes 2010-07-23 18:39:09
            VBASE008.VDF : 7.10.11.133 3454464 Bytes 2010-09-13 23:41:54
            VBASE009.VDF : 7.10.13.80 2265600 Bytes 2010-11-02 23:42:03
            VBASE010.VDF : 7.10.13.81 2048 Bytes 2010-11-02 23:42:04
            VBASE011.VDF : 7.10.13.82 2048 Bytes 2010-11-02 23:42:04
            VBASE012.VDF : 7.10.13.83 2048 Bytes 2010-11-02 23:42:04
            VBASE013.VDF : 7.10.13.116 147968 Bytes 2010-11-04 23:42:05
            VBASE014.VDF : 7.10.13.147 146944 Bytes 2010-11-07 23:42:06
            VBASE015.VDF : 7.10.13.180 123904 Bytes 2010-11-09 23:42:06
            VBASE016.VDF : 7.10.13.211 122368 Bytes 2010-11-11 23:42:07
            VBASE017.VDF : 7.10.13.243 147456 Bytes 2010-11-15 23:42:08
            VBASE018.VDF : 7.10.14.15 142848 Bytes 2010-11-17 23:42:09
            VBASE019.VDF : 7.10.14.41 134144 Bytes 2010-11-19 23:42:10
            VBASE020.VDF : 7.10.14.63 128000 Bytes 2010-11-22 23:42:10
            VBASE021.VDF : 7.10.14.87 143872 Bytes 2010-11-24 23:42:11
            VBASE022.VDF : 7.10.14.88 2048 Bytes 2010-11-24 23:42:11
            VBASE023.VDF : 7.10.14.89 2048 Bytes 2010-11-24 23:42:12
            VBASE024.VDF : 7.10.14.90 2048 Bytes 2010-11-24 23:42:12
            VBASE025.VDF : 7.10.14.91 2048 Bytes 2010-11-24 23:42:12
            VBASE026.VDF : 7.10.14.92 2048 Bytes 2010-11-24 23:42:12
            VBASE027.VDF : 7.10.14.93 2048 Bytes 2010-11-24 23:42:12
            VBASE028.VDF : 7.10.14.94 2048 Bytes 2010-11-24 23:42:13
            VBASE029.VDF : 7.10.14.95 2048 Bytes 2010-11-24 23:42:13
            VBASE030.VDF : 7.10.14.96 2048 Bytes 2010-11-24 23:42:13
            VBASE031.VDF : 7.10.14.99 27136 Bytes 2010-11-24 23:42:13
            Version du moteur : 8.2.4.112
            AEVDF.DLL : 8.1.2.1 106868 Bytes 2010-08-17 18:38:53
            AESCRIPT.DLL : 8.1.3.47 1294716 Bytes 2010-11-24 23:42:28
            AESCN.DLL : 8.1.7.2 127349 Bytes 2010-11-24 23:42:27
            AESBX.DLL : 8.1.3.2 254324 Bytes 2010-11-24 23:42:29
            AERDL.DLL : 8.1.9.2 635252 Bytes 2010-11-24 23:42:26
            AEPACK.DLL : 8.2.3.11 471416 Bytes 2010-11-24 23:42:25
            AEOFFICE.DLL : 8.1.1.10 201084 Bytes 2010-11-24 23:42:23
            AEHEUR.DLL : 8.1.2.44 3076471 Bytes 2010-11-24 23:42:23
            AEHELP.DLL : 8.1.14.0 246134 Bytes 2010-11-24 23:42:18
            AEGEN.DLL : 8.1.4.2 401781 Bytes 2010-11-24 23:42:17
            AEEMU.DLL : 8.1.3.0 393589 Bytes 2010-11-24 23:42:16
            AECORE.DLL : 8.1.18.1 196984 Bytes 2010-11-24 23:42:16
            AEBB.DLL : 8.1.1.0 53618 Bytes 2010-08-17 18:38:45
            AVWINLL.DLL : 10.0.0.0 19304 Bytes 2010-08-17 18:38:56
            AVPREF.DLL : 10.0.0.0 44904 Bytes 2010-08-17 18:38:55
            AVREP.DLL : 10.0.0.8 62209 Bytes 2010-06-17 20:27:52
            AVREG.DLL : 10.0.3.2 53096 Bytes 2010-08-17 18:38:56
            AVSCPLR.DLL : 10.0.3.1 83816 Bytes 2010-08-17 18:38:56
            AVARKT.DLL : 10.0.0.14 227176 Bytes 2010-08-17 18:38:54
            AVEVTLOG.DLL : 10.0.0.8 203112 Bytes 2010-08-17 18:38:55
            SQLITE3.DLL : 3.6.19.0 355688 Bytes 2010-06-17 20:28:02
            AVSMTP.DLL : 10.0.0.17 63848 Bytes 2010-08-17 18:38:56
            NETNT.DLL : 10.0.0.0 11624 Bytes 2010-06-17 20:28:01
            RCIMAGE.DLL : 10.0.0.26 2550120 Bytes 2010-02-11 06:23:03
            RCTEXT.DLL : 10.0.58.0 99688 Bytes 2010-08-17 18:39:11

            Configuration pour la recherche actuelle :
            Nom de la tâche...............................: Bref contrôle système après installation
            Fichier de configuration......................: c:\program files\avira\antivir desktop\setupprf.dat
            Documentation.................................: bas
            Action principale.............................: interactif
            Action secondaire.............................: ignorer
            Recherche sur les secteurs d'amorçage maître..: marche
            Recherche sur les secteurs d'amorçage.........: marche
            Recherche dans les programmes actifs..........: marche
            Recherche en cours sur l'enregistrement.......: marche
            Recherche de Rootkits.........................: arrêt
            Contrôle d'intégrité de fichiers système......: arrêt
            Fichier mode de recherche.....................: Sélection de fichiers intelligente
            Recherche sur les archives....................: marche
            Limiter la profondeur de récursivité..........: 20
            Archive Smart Extensions......................: marche
            Heuristique de macrovirus.....................: marche
            Heuristique fichier...........................: moyen

            Début de la recherche : 24 novembre 2010 18:44

            La recherche sur les processus démarrés commence :
            Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'avconfig.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'avconfig.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'rundll32.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'avshadow.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'setup.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'presetup.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'avira_antivir_personal_fr.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'jucheck.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'plugin-container.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'firefox.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'hpqgpc01.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'hpqbam08.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'hpqSTE08.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'wmiapsrv.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'SetClip.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'COCIManager.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'iPodService.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'SPUVolumeWatcher.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'lsnfier.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'RFTRay.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'Hyperappel.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'hpqtra08.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'bwgo000098e4.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'ctfmon.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'WeatherEye.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'GoogleToolbarNotifier.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'Gestionnaire Antidote.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'NMBgMonitor.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'msnmsgr.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'iTunesHelper.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'jusched.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'HPWuSchd2.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'ReminderApp.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'alg.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'DLACTRLW.EXE' - '1' module(s) sont contrôlés
            Processus de recherche 'LogiTray.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'LVComS.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'Quickcam.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'Communications_Helper.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'SeaPort.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'PRISMXL.SYS' - '1' module(s) sont contrôlés
            Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'nvsvc32.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'jqs.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'Explorer.EXE' - '1' module(s) sont contrôlés
            Processus de recherche 'mDNSResponder.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'AppleMobileDeviceService.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'LVPrcSrv.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
            Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés

            La recherche sur les secteurs d'amorçage maître commence :
            Secteur d'amorçage maître HD0
            [INFO] Aucun virus trouvé !

            La recherche sur les secteurs d'amorçage commence :

            La recherche sur les renvois aux fichiers exécutables (registre) commence :
            Le registre a été contrôlé ( '1848' fichiers).

            Fin de la recherche : 24 novembre 2010 18:45
            Temps nécessaire: 01:40 Minute(s)

            La recherche a été effectuée intégralement

            0 Les répertoires ont été contrôlés
            2350 Des fichiers ont été contrôlés
            0 Des virus ou programmes indésirables ont été trouvés
            0 Des fichiers ont été classés comme suspects
            0 Des fichiers ont été supprimés
            0 Des virus ou programmes indésirables ont été réparés
            0 Les fichiers ont été déplacés dans la quarantaine
            0 Les fichiers ont été renommés
            0 Impossible de scanner des fichiers
            2350 Fichiers non infectés
            5 Les archives ont été contrôlées
            0 Avertissements
            0 Consignes
            0
        8. Utilisateur anonyme
          Bonsoir

          Relis bien le tutoriel proposé sur le site de téléchargement ;pour activer la recherche des rootkits.

          1)Vide la quarantaine de Malwaresbytes.

          2) Télécharge DelFix de Xplode

          * Lance le.
          * A l'invite, [Suppression] ()
          * Un rapport va s'ouvrir à la fin, colle le dans la réponse

          Ensuite pour le désinstaller ; tu relances et tu passes à l'option [Désinstallation]
          Il faut supprimer le fichier .exe manuellement.

          3)C - Ccleaner :

          https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/

          .enregistres le sur le bureau
          .double-cliques sur le fichier pour lancer l'installation
          .sur la fenêtre de l'installation langage bien choisir français et OK
          .cliques sur <gras>suivant
          .lis la licence et j'accepte
          .cliques sur suivant
          .la tu ne gardes de coché que mettre un raccourci sur le bureau et puis contrôler automatiquement les mises à jour de Ccleaner
          .cliques sur installer
          .cliques sur fermer
          .double-cliques sur l'icône de Ccleaner pour l'ouvrir
          .une fois ouvert tu cliques sur option et puis avancé
          .tu décoches effacer uniquement les fichiers, du dossier temp de windows plus vieux que 24 heures
          .cliques sur nettoyeur
          .cliques sur windows et dans la colonne avancé
          . coches la première case vieilles données du perfetch ce qui te donnes la case vielles données du perfetch et la case avancé qui c'est coché automatiquement mais que celle-la
          .cliques sur analyse une fois l'analyse terminé
          .cliques sur lancer le nettoyage et sur la demande de confirmation OK il vas falloir que tu le refasses une autre fois une fois fini vérifies en appuyant de nouveau sur analyse pour être sur qu'il n'y est plus rien
          .clique maintenant sur registre et puis sur rechercher les erreurs
          .laisse tout coché et clique sur réparer les erreurs sélectionnées
          .il te demande de sauvegarder OUI
          .tu lui donnes un nom pour pouvoir la retrouver et enregistre
          .clique sur corriger toutes les erreurs sélectionnées et sur la demande de confirmation OK
          .il supprime et fermé tu vérifies en relançant rechercher les erreurs
          .tu retournes dans option et tu recoches la case effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures et sur nettoyeur, windows sous avancé tu décoches la première case vieilles données du perfetch
          .tu peux fermer Ccleaner.

          Tuto : https://jesses.pagesperso-orange.fr/Docs/Logiciels/CCleaner.htm

          4)Purge la restauration comme ceci :
          http://service1.symantec.com/support/inter/tsgeninfointl.Nsf/fr_docid/20020830101856924

          Cela supprime toutes traces des diverses infections ;et permettra une éventuelle restauration sans infections

          @+
          0
          1. doucejojo
            fait après... Il y a la première action que je ne sais pas comment faire rootkit
            0
          2. doucejojo
            ########## DelFix - Nettoyeur d'outils de désinfection ##########
            #
            # DelFix v6.5 - Rapport créé le 27/11/2010 à 21:02
            # Mis à jour le 20/11/10 à 16h30 par Xplode
            # Système d'exploitation : Microsoft Windows XP (32 bits) [version 5.1.2600] Service Pack 3
            # Nom d'utilisateur : Jacques Couillard - JACQUES-002A52C (Administrateur)
            # Exécuté depuis : C:\Documents and Settings\Jacques Couillard\Mes documents\Téléchargements\DelFix(4).exe
            # Option [Suppression]

            ~~~~~~ Dossier(s) ~~~~~~

            ~~~~~~ Fichier(s) ~~~~~~

            ~~~~~~ Registre ~~~~~~

            ~~~~~~ Autre ~~~~~~

            ########## EOF - "C:\DelFixSuppr.txt" - [696 octets] ##########
            0