[hijackthis] vérification log

Résolu
damoun007 Messages postés 6 Statut Membre -  
Regis59 Messages postés 21143 Date d'inscription   Statut Contributeur sécurité Dernière intervention   -
Bonjour,
c'est la première fois que j'exécute HijackThis et j'aimerais bien avoir votre avis sur mon ''log''. Un grand merci

Logfile of HijackThis v1.99.1
Scan saved at 15:06:25, on 22/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\admServ.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Eset\nod32kui.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Acer\Empowering Technology\admtray.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Syl\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
O4 - HKLM\..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe boot
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXlm Service 1 - Macrovision Corporation -
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Texis Monitor - Expansion Programs International, Inc.

10 réponses

  1. Séb08 Messages postés 18169 Date d'inscription   Statut Contributeur Dernière intervention   1 430
     
    slt,

    Bah ecoute je ne vois rien d'inquiètant dans ton log ...

    Tu as des probs en particuliers ?

    a+
    0
  2. damoun007 Messages postés 6 Statut Membre
     
    he bien en fait, parfois, apres avoir lance windows, je veux ouvrir des applications (genre firefox, messenger, ou meme des fichiers word ou excel) et il ne les lance que quelques minutes plus tard. Bien que je ne les demande pas toutes en meme temps, je n'en demande qu une.

    De plus, dans mon fichier c:\windows\temp se trouvent trois fichiers que je ne sais pas supprimer, à savoir:
    CLML_AGENT_LOG1.txt
    sqlite_YPeltq7z73Rvtth
    Perflib_Perfdata_2f8.dat

    et en allant un peu sur le site, je me suis rendu compte qu il y avait quelques personnes qui avaient aussi ce probleme de suppression et qui pensaient avoir un ver ou autre chose.

    merci
    0
  3. Séb08 Messages postés 18169 Date d'inscription   Statut Contributeur Dernière intervention   1 430
     
    ok télécharge et installe ce log et passes en un coup . :)

    Vérifie que tu es bien en option standard comme indiqué dans la démo.

    * cleanup40 (nettoyeur de cookies+temps+tempos+prefetch+historique+etc..)
    Démo :
    http://pageperso.aol.fr/balltrap34/democleanup.htm
    Téléchargement :
    http://pageperso.aol.fr/Balltrap34/CleanUp40.exe

    ==============================

    - > Pour vérifier, scanne ton PC avec cet antivirus en ligne (sous IE et accepte l’activX) :
    http://www.bitdefender.fr/bd/site/search.php#
    Clique sur « Bitdefender scan on line » suis les instructions.
    Et colle le rapport.

    a+
    0
  4. damoun007 Messages postés 6 Statut Membre
     
    Merci.

    Voici tout d'abord le rapport de ''Clean Up''

    CleanUp! started on 11/24/06 17:56:15.
    ...
    C:\WINDOWS\Prefetch\CLEANUP.EXE-1671E52D.pf - deleted
    C:\WINDOWS\Prefetch\MSNMSGR.EXE-3744B6D8.pf - deleted
    C:\WINDOWS\Prefetch\WUAUCLT.EXE-1360D60A.pf - deleted
    C:\WINDOWS\Prefetch\PYTHON.EXE-22454BA8.pf - deleted
    C:\WINDOWS\Prefetch\ABQ651.EXE-32FB5415.pf - deleted
    C:\WINDOWS\Prefetch\ABQSYSCONF.EXE-09F9139C.pf - deleted
    C:\WINDOWS\Prefetch\Layout.ini - deleted
    C:\WINDOWS\Prefetch\RTKBTMNT.EXE-14BCA353.pf - deleted
    C:\WINDOWS\Prefetch\DEFRAG.EXE-2858C7E2.pf - deleted
    C:\WINDOWS\Prefetch\VERCLSID.EXE-28F52AD2.pf - deleted
    C:\FOUND.000\FILE0000.CHK - deleted
    C:\WINDOWS\WindowsShell.Manifest - deleted
    C:\WINDOWS\system32\ncpa.cpl.manifest - deleted
    C:\WINDOWS\system32\nwc.cpl.manifest - deleted
    C:\WINDOWS\system32\sapi.cpl.manifest - deleted
    C:\WINDOWS\system32\wuaucpl.cpl.manifest - deleted
    C:\WINDOWS\system32\cdplayer.exe.manifest - deleted
    C:\WINDOWS\system32\logonui.exe.manifest - deleted
    C:\WINDOWS\system32\WindowsLogon.manifest - deleted
    C:\WINDOWS\system32\CONFIG.TMP - deleted
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat - deleted
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012006040620060407\index.dat - deleted
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat - deleted
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb - deleted
    C:\WINDOWS\system32\config\systemprofile\SendTo\Dossier compressé.ZFSendToTarget - deleted
    C:\WINDOWS\system32\config\systemprofile\SendTo\Destinataire.MAPIMail - deleted
    C:\WINDOWS\system32\config\systemprofile\SendTo\Bureau (créer un raccourci).DeskLink - deleted
    C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat - deleted
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA currently in use. Will be deleted when Windows is restarted.
    C:\WINDOWS\system32\usmt\migwiz.exe.manifest - deleted
    C:\WINDOWS\system32\CatRoot2\edb.chk - deleted
    C:\WINDOWS\system32\MsDtc\Trace\dtctrace.log.2005-02-14-11-26-01-0828-00 - deleted
    C:\WINDOWS\system32\URTTemp\mscoree.dll.local - deleted
    C:\WINDOWS\repair\system.bak - deleted
    C:\WINDOWS\twain_32\hpqgends.tmp - deleted
    C:\WINDOWS\Resources\Themes\Luna\luna.msstyles - deleted
    C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281.Manifest - deleted
    C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82.Manifest - deleted
    C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13.Manifest - deleted
    C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.0.0_x-ww_fc342b0b.Manifest - deleted
    C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7.Manifest - deleted
    C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95.Manifest - deleted
    C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_fr_457ebf3d.Manifest - deleted
    C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9.Manifest - deleted
    C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7.Manifest - deleted
    C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries.Resources_6595b64144ccf1df_6.0.0.0_fr-FR_9d8c4a39.Manifest - deleted
    C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a.Manifest - deleted
    C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9.Manifest - deleted
    C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a.Manifest - deleted
    C:\WINDOWS\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac\1.0.2600.2180.Policy - deleted
    C:\WINDOWS\WinSxS\Policies\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_x-ww_a0111510\5.1.2600.2000.Policy - deleted
    C:\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_x-ww_362e60dd\5.2.2.3.Policy - deleted
    C:\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_x-ww_c7b7206f\5.2.2.3.Policy - deleted
    C:\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.2180.Policy - deleted
    C:\WINDOWS\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3\7.0.2600.2180.Policy - deleted
    C:\WINDOWS\pchealth\helpctr\Config\Cache\Personal_32_1036.dat.bak - deleted
    C:\WINDOWS\pchealth\helpctr\OfflineCache\index.dat - deleted
    C:\WINDOWS\Installer\MSI6.tmp - deleted
    C:\WINDOWS\Installer\MSI7.tmp - deleted
    C:\WINDOWS\Installer\MSI13C.tmp - deleted
    C:\WINDOWS\Installer\MSI13E.tmp - deleted
    C:\WINDOWS\Installer\MSIDFC.tmp - deleted
    C:\WINDOWS\Installer\MSIDFD.tmp - deleted
    C:\WINDOWS\Installer\MSIE03.tmp - deleted
    C:\WINDOWS\Installer\MSIE04.tmp - deleted
    C:\WINDOWS\Installer\MSID.tmp - deleted
    C:\WINDOWS\Installer\MSIE.tmp - deleted
    C:\WINDOWS\Installer\MSI145.tmp - deleted
    C:\WINDOWS\Installer\MSI147.tmp - deleted
    C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.chk - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\csc.exe.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\jsc.exe.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\vbc.exe.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ilasm.exe.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\caspol.exe.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\regasm.exe.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\cvtres.exe.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ieexec.exe.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\regsvcs.exe.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet.mof.uninstall - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\XPThemes.manifest - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\machine.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\DefaultWsdlHelpGenerator.aspx - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\web_hightrust.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\web_lowtrust.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\web_hightrust.config.default - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\web_lowtrust.config.default - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\web_minimaltrust.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\web_minimaltrust.config.default - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\web_mediumtrust.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\web_mediumtrust.config.default - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\enterprisesec.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CONFIG\security.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\installutil.exe.config - deleted
    C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\regsvcs.exe.rtm.config - deleted
    C:\Documents and Settings\Default User\SendTo\Destinataire.MAPIMail - deleted
    C:\Documents and Settings\Default User\SendTo\Bureau (créer un raccourci).DeskLink - deleted
    C:\Documents and Settings\Default User\SendTo\Dossier compressé.ZFSendToTarget - deleted
    C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb - deleted
    C:\Documents and Settings\Default User\Local Settings\Historique\History.IE5\index.dat - deleted
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\Syl\SdCommon\logs\out34.tmp - deleted
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\Syl\SdCommon\logs\err35.tmp - deleted
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\Syl\SdCommon\logs\out37.tmp - deleted
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\Syl\SdCommon\logs\err38.tmp - deleted
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\Syl\SdCommon\logs\out3D.tmp - deleted
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\Syl\SdCommon\logs\err3E.tmp - deleted
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\Syl\SdCommon\logs\out4B.tmp - deleted
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\Syl\SdCommon\logs\err4C.tmp - deleted
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\Syl\SdCommon\logs\out59.tmp - deleted
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\Syl\SdCommon\logs\err5A.tmp - deleted
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\Syl\SdCommon\logs\out73.tmp - deleted
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\Syl\SdCommon\logs\err74.tmp - deleted
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\Syl\SdCommon\logs\out81.tmp - deleted
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\Syl\SdCommon\logs\err82.tmp - deleted
    C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\NetworkService\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat - deleted
    C:\Documents and Settings\Syl\Local Settings\Temp\~DFE905.tmp currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Local Settings\Temp\~DFEA5C.tmp currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Local Settings\Temp\~DF281B.tmp currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Local Settings\Temp\~DF2838.tmp currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Local Settings\Temp\~DFE905.tmp currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Local Settings\Temp\~DFEA5C.tmp currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Local Settings\Temp\~DF281B.tmp currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Local Settings\Temp\~DF2838.tmp currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Local Settings\Temp\BCG43D.tmp currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Local Settings\Temp\Acr19D4.tmp currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Local Settings\Temp\Acr19D6.tmp currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Local Settings\Historique\History.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Local Settings\Historique\History.IE5\MSHist012006112420061125\index.dat currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\Syl\Application Data\Microsoft\Office\fbc4.tmp - deleted
    C:\Documents and Settings\Syl\Application Data\Microsoft\Office\Fichiers récents\index.dat - deleted
    C:\Documents and Settings\Syl\Application Data\Microsoft\Modèles\~$Normal.dot - deleted
    C:\Documents and Settings\Syl\Application Data\Mozilla\Firefox\Profiles\mzwujhvu.default\bookmarks.bak - deleted
    C:\Documents and Settings\Syl\Application Data\Mozilla\Firefox\Profiles\mzwujhvu.default\bookmarks.html.sbsd.bak - deleted
    C:\Documents and Settings\Syl\UserData\index.dat - deleted
    C:\Documents and Settings\LocalService.AUTORITE NT\Local Settings\Historique\History.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\LocalService.AUTORITE NT\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
    C:\Documents and Settings\LocalService.AUTORITE NT\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
    C:\Program Files\Fichiers communs\GTK\2.0\etc\pango\~pango.modules - deleted
    C:\Program Files\InstallShield Installation Information\{4FAA62F6-AEC7-44FF-93CA-931D3978A215}\setup.skin - deleted
    C:\Program Files\InstallShield Installation Information\{4FAA62F6-AEC7-44FF-93CA-931D3978A215}\setup.boot - deleted
    C:\Program Files\CyberLink\PowerProducer\Producer.exe.manifest - deleted
    C:\Program Files\Sunbelt Software\Personal Firewall 4\Config\kpf.cfg.bak - deleted
    C:\Program Files\Hewlett-Packard\Digital Imaging\Migrate\hpqgends.tmp - deleted
    C:\Program Files\Hewlett-Packard\Digital Imaging\{7C8BB31C-E09E-4c7d-BBF1-45E33B467FE1}\Drivers\Scanner\hpqgends.tmp - deleted
    C:\Program Files\Mozilla Firefox\softokn3.chk - deleted
    C:\Program Files\BoontyGames\Luxor Amun Rising\SHELL_DEFAULT_HTML\~pleasewait.html - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP68\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP68\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP69\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP69\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP70\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP70\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP71\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP71\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP72\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP72\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP73\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP73\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP74\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP74\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP75\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP75\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP76\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP76\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP77\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP77\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP78\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP78\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP79\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP79\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP80\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP80\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP81\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP81\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP82\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP82\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP83\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP83\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP84\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP84\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP85\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP85\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP86\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP86\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP87\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19.bak - deleted
    C:\System Volume Information\_restore{971BA714-3578-4A78-9285-791521829CFA}\RP87\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19.bak - deleted
    C:\FOUND.010\FILE0000.CHK - deleted
    C:\FOUND.010\FILE0001.CHK - deleted
    C:\FOUND.010\FILE0002.CHK - deleted
    C:\FOUND.010\FILE0003.CHK - deleted
    C:\FOUND.010\FILE0004.CHK - deleted
    C:\FOUND.010\FILE0005.CHK - deleted
    C:\FOUND.010\FILE0006.CHK - deleted
    C:\FOUND.010\FILE0007.CHK - deleted
    C:\FOUND.010\FILE0008.CHK - deleted
    C:\FOUND.010\FILE0009.CHK - deleted
    C:\FOUND.010\FILE0010.CHK - deleted
    C:\FOUND.010\FILE0011.CHK - deleted
    C:\FOUND.010\FILE0012.CHK - deleted
    C:\FOUND.010\FILE0013.CHK - deleted
    C:\FOUND.010\FILE0014.CHK - deleted
    C:\FOUND.010\FILE0015.CHK - deleted
    C:\FOUND.010\FILE0016.CHK - deleted
    C:\FOUND.010\FILE0017.CHK - deleted
    C:\FOUND.010\FILE0018.CHK - deleted
    C:\FOUND.010\FILE0019.CHK - deleted
    C:\FOUND.010\FILE0020.CHK - deleted
    C:\FOUND.010\FILE0021.CHK - deleted
    C:\FOUND.010\FILE0022.CHK - deleted
    C:\FOUND.010\FILE0023.CHK - deleted
    C:\FOUND.010\FILE0024.CHK - deleted
    C:\FOUND.010\FILE0025.CHK - deleted
    C:\FOUND.010\FILE0026.CHK - deleted
    C:\FOUND.010\FILE0027.CHK - deleted
    C:\FOUND.010\FILE0028.CHK - deleted
    C:\FOUND.010\FILE0029.CHK - deleted
    C:\FOUND.010\FILE0030.CHK - deleted
    C:\FOUND.010\FILE0031.CHK - deleted
    C:\FOUND.010\FILE0032.CHK - deleted
    C:\FOUND.010\FILE0033.CHK - deleted
    C:\FOUND.010\FILE0034.CHK - deleted
    C:\FOUND.010\FILE0035.CHK - deleted
    C:\FOUND.010\FILE0036.CHK - deleted
    C:\FOUND.010\FILE0037.CHK - deleted
    C:\FOUND.010\FILE0038.CHK - deleted
    C:\FOUND.010\FILE0039.CHK - deleted
    C:\FOUND.010\FILE0040.CHK - deleted
    C:\FOUND.010\FILE0041.CHK - deleted
    C:\FOUND.010\FILE0042.CHK - deleted
    C:\FOUND.010\FILE0043.CHK - deleted
    C:\FOUND.010\FILE0044.CHK - deleted
    C:\FOUND.010\FILE0045.CHK - deleted
    C:\FOUND.010\FILE0046.CHK - deleted
    C:\FOUND.010\FILE0047.CHK - deleted
    C:\FOUND.010\FILE0048.CHK - deleted
    C:\FOUND.010\FILE0049.CHK - deleted
    C:\FOUND.010\FILE0050.CHK - deleted
    C:\FOUND.010\FILE0051.CHK - deleted
    C:\FOUND.010\FILE0052.CHK - deleted
    C:\FOUND.010\FILE0053.CHK - deleted
    C:\FOUND.010\FILE0054.CHK - deleted
    C:\FOUND.010\FILE0055.CHK - deleted
    C:\FOUND.010\FILE0056.CHK - deleted
    C:\FOUND.010\FILE0057.CHK - deleted
    C:\FOUND.010\FILE0058.CHK - deleted
    C:\FOUND.010\FILE0059.CHK - deleted
    C:\FOUND.010\FILE0060.CHK - deleted
    C:\FOUND.010\FILE0061.CHK - deleted
    C:\FOUND.010\FILE0062.CHK - deleted
    C:\FOUND.010\FILE0063.CHK - deleted
    C:\FOUND.010\FILE0064.CHK - deleted
    C:\FOUND.010\FILE0065.CHK - deleted
    C:\FOUND.010\FILE0066.CHK - deleted
    C:\FOUND.010\FILE0067.CHK - deleted
    C:\FOUND.010\FILE0068.CHK - deleted
    C:\FOUND.010\FILE0069.CHK - deleted
    C:\FOUND.010\FILE0070.CHK - deleted
    C:\FOUND.010\FILE0071.CHK - deleted
    C:\FOUND.010\FILE0072.CHK - deleted
    C:\FOUND.010\FILE0073.CHK - deleted
    C:\FOUND.010\FILE0074.CHK - deleted
    C:\FOUND.010\FILE0075.CHK - deleted
    C:\FOUND.010\FILE0076.CHK - deleted
    C:\FOUND.010\FILE0077.CHK - deleted
    C:\FOUND.010\FILE0078.CHK - deleted
    C:\FOUND.010\FILE0079.CHK - deleted
    C:\FOUND.010\FILE0080.CHK - deleted
    C:\FOUND.010\FILE0081.CHK - deleted
    C:\FOUND.010\FILE0082.CHK - deleted
    C:\FOUND.010\FILE0083.CHK - deleted
    C:\FOUND.010\FILE0084.CHK - deleted
    C:\FOUND.010\FILE0085.CHK - deleted
    C:\FOUND.010\FILE0086.CHK - deleted
    C:\FOUND.010\FILE0087.CHK - deleted
    C:\FOUND.010\FILE0088.CHK - deleted
    C:\FOUND.010\FILE0089.CHK - deleted
    C:\FOUND.010\FILE0090.CHK - deleted
    C:\FOUND.010\FILE0091.CHK - deleted
    C:\FOUND.010\FILE0092.CHK - deleted
    C:\FOUND.010\FILE0093.CHK - deleted
    C:\FOUND.010\FILE0094.CHK - deleted
    C:\FOUND.010\FILE0095.CHK - deleted
    C:\FOUND.010\FILE0096.CHK - deleted
    C:\FOUND.010\FILE0097.CHK - deleted
    C:\FOUND.010\FILE0098.CHK - deleted
    C:\FOUND.010\FILE0099.CHK - deleted
    C:\FOUND.011\FILE0000.CHK - deleted
    C:\FOUND.011\FILE0001.CHK - deleted
    C:\FOUND.011\FILE0002.CHK - deleted
    C:\FOUND.011\FILE0003.CHK - deleted
    C:\FOUND.011\FILE0004.CHK - deleted
    C:\FOUND.011\FILE0005.CHK - deleted
    C:\FOUND.011\FILE0006.CHK - deleted
    C:\FOUND.011\FILE0007.CHK - deleted
    C:\FOUND.011\FILE0008.CHK - deleted
    C:\FOUND.011\FILE0009.CHK - deleted
    C:\FOUND.011\FILE0010.CHK - deleted
    C:\FOUND.011\FILE0011.CHK - deleted
    C:\FOUND.011\FILE0012.CHK - deleted
    C:\FOUND.011\FILE0013.CHK - deleted
    C:\FOUND.011\FILE0014.CHK - deleted
    C:\FOUND.011\FILE0015.CHK - deleted
    C:\FOUND.011\FILE0016.CHK - deleted
    C:\FOUND.011\FILE0017.CHK - deleted
    C:\FOUND.011\FILE0018.CHK - deleted
    C:\FOUND.011\FILE0019.CHK - deleted
    C:\FOUND.011\FILE0020.CHK - deleted
    C:\FOUND.011\FILE0021.CHK - deleted
    C:\FOUND.011\FILE0022.CHK - deleted
    C:\FOUND.011\FILE0023.CHK - deleted
    C:\FOUND.011\FILE0024.CHK - deleted
    C:\FOUND.011\FILE0025.CHK - deleted
    C:\FOUND.011\FILE0026.CHK - deleted
    C:\FOUND.011\FILE0027.CHK - deleted
    C:\FOUND.011\FILE0028.CHK - deleted
    C:\FOUND.011\FILE0029.CHK - deleted
    C:\FOUND.011\FILE0030.CHK - deleted
    C:\FOUND.011\FILE0031.CHK - deleted
    C:\FOUND.011\FILE0032.CHK - deleted
    C:\FOUND.011\FILE0033.CHK - deleted
    C:\FOUND.011\FILE0034.CHK - deleted
    C:\FOUND.011\FILE0035.CHK - deleted
    C:\FOUND.011\FILE0036.CHK - deleted
    C:\FOUND.011\FILE0037.CHK - deleted
    C:\FOUND.011\FILE0038.CHK - deleted
    C:\FOUND.011\FILE0039.CHK - deleted
    C:\FOUND.011\FILE0040.CHK - deleted
    C:\FOUND.011\FILE0041.CHK - deleted
    C:\FOUND.011\FILE0042.CHK - deleted
    C:\FOUND.011\FILE0043.CHK - deleted
    C:\FOUND.011\FILE0044.CHK - deleted
    C:\FOUND.011\FILE0045.CHK - deleted
    C:\FOUND.011\FILE0046.CHK - deleted
    C:\FOUND.011\FILE0047.CHK - deleted
    C:\FOUND.011\FILE0048.CHK - deleted
    C:\FOUND.011\FILE0049.CHK - deleted
    C:\MATLAB7\toolbox\simulink\blocks\private\lookuptable.tmp - deleted
    C:\MATLAB7\toolbox\simulink\components\slbook.tmp - deleted
    C:\MATLAB7\toolbox\simulink\simulink\private\sfunwiz_template.c.tmpl - deleted
    C:\MATLAB7\toolbox\simulink\simulink\private\sfunwiz_template_wrapper.c.tmpl - deleted
    C:\MATLAB7\toolbox\stateflow\stateflow\truthtable.tmp - deleted
    D:\Framakey\programs\portablethunderbird\thunderbird\softokn3.chk - deleted
    D:\Framakey\programs\portablefirefox\profile\bookmarks.bak - deleted
    D:\Framakey\programs\portablefirefox\firefox\softokn3.chk - deleted
    D:\polytech\1e candi\~WRL0018.tmp - deleted
    D:\polytech\1e candi\~WRL0113.tmp - deleted
    D:\polytech\1e candi\~WRL0240.tmp - deleted
    D:\polytech\1e candi\~WRL0261.tmp - deleted
    D:\polytech\1e candi\~WRL0445.tmp - deleted
    D:\polytech\1e candi\~WRL0564.tmp - deleted
    D:\polytech\1e candi\~WRL0603.tmp - deleted
    D:\polytech\1e candi\~WRL0613.tmp - deleted
    D:\polytech\1e candi\~WRL0689.tmp - deleted
    D:\polytech\1e candi\~WRL0871.tmp - deleted
    D:\polytech\1e candi\~WRL0948.tmp - deleted
    D:\polytech\1e candi\~WRL0996.tmp - deleted
    D:\polytech\1e candi\~WRL1198.tmp - deleted
    D:\polytech\1e candi\~WRL1222.tmp - deleted
    D:\polytech\1e candi\~WRL1239.tmp - deleted
    D:\polytech\1e candi\~WRL1767.tmp - deleted
    D:\polytech\1e candi\~WRL2123.tmp - deleted
    D:\polytech\1e candi\~WRL2323.tmp - deleted
    D:\polytech\1e candi\~WRL2327.tmp - deleted
    D:\polytech\1e candi\~WRL2482.tmp - deleted
    D:\polytech\1e candi\~WRL2488.tmp - deleted
    D:\polytech\1e candi\~WRL2599.tmp - deleted
    D:\polytech\1e candi\~WRL2657.tmp - deleted
    D:\polytech\1e candi\~WRL2674.tmp - deleted
    D:\polytech\1e candi\~WRL2975.tmp - deleted
    D:\polytech\1e candi\~WRL3197.tmp - deleted
    D:\polytech\1e candi\~WRL3347.tmp - deleted
    D:\polytech\1e candi\~WRL3475.tmp - deleted
    D:\polytech\1e candi\~WRL3784.tmp - deleted
    D:\polytech\1e candi\~WRL3798.tmp - deleted
    D:\polytech\1e candi\neerl\~$ordenschat wierook en tranen.doc - deleted
    D:\polytech\1e candi\neerl\~WRL3064.tmp - deleted
    D:\polytech\1e candi\neerl\~WRL3959.tmp - deleted
    D:\polytech\1e candi\neerl\persdossier\~WRL0001.tmp - deleted
    D:\polytech\1e candi\neerl\persdossier\~WRL0005.tmp - deleted
    D:\polytech\1e candi\neerl\persdossier\~WRL0028.tmp - deleted
    D:\polytech\1e candi\neerl\persdossier\~WRL0043.tmp - deleted
    D:\polytech\1e candi\neerl\persdossier\~WRL0462.tmp - deleted
    D:\polytech\1e candi\neerl\persdossier\~WRL0718.tmp - deleted
    D:\polytech\1e candi\neerl\persdossier\~WRL1047.tmp - deleted
    D:\polytech\1e candi\neerl\persdossier\~WRL2250.tmp - deleted
    D:\polytech\1e candi\neerl\persdossier\~WRL2374.tmp - deleted
    D:\polytech\1e candi\neerl\persdossier\~WRL2978.tmp - deleted
    D:\polytech\1e candi\neerl\persdossier\~WRL3865.tmp - deleted
    D:\polytech\2e candi\designCad\electric+legende.bak - deleted
    D:\polytech\2e candi\designCad\electric.bak - deleted
    D:\polytech\2e candi\designCad\eiffel\eiffel.bak - deleted
    D:\polytech\2e candi\designCad\parthenon\colonne5.5.bak - deleted
    D:\polytech\2e candi\designCad\parthenon\parthenon.bak - deleted
    D:\polytech\2e candi\designCad\parthenon\parthenon07-05.bak - deleted
    D:\polytech\2e candi\designCad\parthenon\parthenon1105.bak - deleted
    D:\polytech\2e candi\designCad\parthenon\parthenon1305+essaicourbes.bak - deleted
    D:\polytech\2e candi\designCad\parthenon\parthenon1305.bak - deleted
    D:\polytech\2e candi\designCad\parthenon\picTour.bak - deleted
    D:\polytech\3e MECA\2e semestre\~$ec_fonctionnelle_manip_B.doc - deleted
    D:\polytech\3e MECA\2e semestre\~WRL2047.tmp - deleted
    D:\polytech\3e MECA\2e semestre\Dynamique et vibrations\labos dyn vib\ANSYSLAB\exemple1_portique\menust.tmp - deleted
    D:\polytech\3e MECA\2e semestre\Dynamique et vibrations\labos dyn vib\ANSYSLAB\ROTOR\menust.tmp - deleted
    D:\steph\SansNom-1.bak - deleted
    D:\steph\bon bio mol mer\SansNom-1.bak - deleted
    Emptied Recycle Bin on drive D:
    'Run MRU' list - removed from the registry.
    Paint Recent File List - removed from the registry.
    Telnet's MRU list - removed from the registry.
    CleanUp! 4.0 recovered 333.7 MB of disk space from 3920 files.
    CleanUp! finished on 11/24/06 17:56:54.

    Pour ce qui est du scan avec Bit Defender, je n ai pas le temps de le faire ce soir.
    Je vous mettrai le log dès que possible demain.
    Merci
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Séb08 Messages postés 18169 Date d'inscription   Statut Contributeur Dernière intervention   1 430
     
    Ok n'attend pas que je me manifeste pour mettre le rapport de Bitdefender...

    Tu as bien redémarrer ton PC après le nettoyage de Cleanup comme indiqué dans la petite fenêtre a la fin du scan ?

    A+
    0
  7. damoun007 Messages postés 6 Statut Membre
     
    normalement oui, pourquoi ??

    je dois dire que ce matin, j ai eu quelques probemes. Alors j ai desinstalle clean up et le truc d'Acer qui gère la batterie parce qu 'il me mettait le message d erreur suivant:

    ePower_DMC.exe - Services de débogage du Common Language Runtime
    L'application a généré une exception non gérée
    ID processus = 0x91c (2332) , ID threat = 0x920 (2336)

    Apres, j ai eu bcp de mal a ce qu il reconnaise mon reseau sans fils...

    A quoi penses-tu ??

    Veux-tu que je refasse un scan avec clean up ?? Dois je faire le bitdefender on line ??

    merci
    ++
    0
  8. damoun007 Messages postés 6 Statut Membre
     
    tout d'abord excusez moi de mettre deux posts de suite mais le cas est grave pour moi.

    J ai relance une analyse avec CleanUp!, et puis j ai directement redémarré l'ordinateur. Et bien maintenant, il ne veut plus du tout lancer windows !!!

    Pour plus d'informations, j ai mis un message sur le forum windows.

    Je voulais qu'il n'y ait plus de probleme, et bien j'en ai de serieux maintenant je pense.

    Merci
    0
  9. SFly Messages postés 3 Date d'inscription   Statut Membre
     
    Bonjour, moi aussi c'est la première fois que j'exécute HijackThis et j'aimerais bien avoir votre avis sur mon ''log''.
    Un grand merci d'avance pour votre réponse.

    Logfile of HijackThis v1.99.1
    Scan saved at 23:58:40, on 11/25/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\WINDOWS\System32\CTsvcCDA.EXE
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\system32\slserv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\wlancfg.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Logitech\iTouch\iTouch.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0M2.EXE
    C:\Program Files\Desktop Messenger\8876480\Program\backWeb-8876480.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    C:\Program Files\BroadJump\Client Foundation\CFD.exe
    C:\Program Files\Club-Internet\Agent Wi-Fi V2.1\McciTrayApp.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
    C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
    C:\Program Files\WinZip\WZQKPICK.EXE
    C:\Program Files\Club-Internet\Lanceur\lanceur.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\WINDOWS\system32\Restore\rstrui.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - Default URLSearchHook is missing
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
    O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: &Netcraft Toolbar - {D554D8FC-B36D-4BB4-93DB-4A3394D505E3} - C:\Program Files\Netcraft Toolbar\nctb.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
    O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    O4 - HKLM\..\Run: [EPSON Stylus Photo RX600] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0M2.EXE /P24 "EPSON Stylus Photo RX600" /O6 "USB001" /M "Stylus Photo RX600"
    O4 - HKLM\..\Run: [LDM] C:\Program Files\Desktop Messenger\8876480\Program\backWeb-8876480.exe
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
    O4 - HKLM\..\Run: [Club-Internet_McciTrayApp] C:\Program Files\Club-Internet\Agent Wi-Fi V2.1\McciTrayApp.exe
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\CLUB-I~1\LECOMP~1\SMARTB~1\MotiveSB.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
    O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
    O8 - Extra context menu item: Download with Star Downloader - C:\Program Files\Star Downloader\sdie.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28177.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28177.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
    O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697519} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_aac.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab28177.cab
    O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spyspotter.com/spyspotter/SpSp29952.41optYplkOmji/SpySpotterCabInstall.cab
    O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: ScriptBlocking Service (SBService) - Unknown owner - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe (file missing)
    O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\WINDOWS\wlancfg.exe
    0
  10. Regis59 Messages postés 21143 Date d'inscription   Statut Contributeur sécurité Dernière intervention   1 349
     
    Salut Sfly,

    Il serait préférable que tu fasses ton message personnel, cela rendra les postes plus compréhensibles et la réponse à ton problème sera plus efficace
    Procèdes comme ceci :
    http://pageperso.aol.fr/balltrap34/demofairesontmessage.htm

    A bientôt

    PS: je vois avg + avast, il ne faut qu un seul antivirus.
    0
    1. SFly Messages postés 3 Date d'inscription   Statut Membre
       
      Merci.
      0
  11. Regis59 Messages postés 21143 Date d'inscription   Statut Contributeur sécurité Dernière intervention   1 349
     
    De rien

    a+
    0