[Virus] Je n'arrive pas à les supprimer
Fermé
LEMARSEILLAIS
Messages postés
176
Statut
Membre
-
Mario1095 -
Mario1095 -
Slt
je sui nouveau
enfaite c pour savoir si vou pouvé maider svp car:
je sui resté plu d1 moi san antivirus, antispam,antispyware ...
lorsque g acheté bitedefenderv.10 en magasin g éliminer des centaine é des centaine de virus je croyai que jen avai plu lorsque g telecharger 'Spyware doctor' pui au debu il ma afiché 2017 fichier infecté jeter conten il avai presque tou effacer pui par la suite au fur é a mesure com il en resté des fichier infecté il se son prpagé pui maintenan en faisan un scan complet il maffiche 150 fichier infecté :les voila:
HotBar
Trojan.Spy.Banker.ABG
Trjan.Mailskinner
Tracking Cookie(s)
Advertising
Known Bad Sites
Trojan.Horst
Backdoor.IRCBot.Fp
pui g telechargé 'Spybot-Search and destroy'
il nen a pa effacer mailgrer quil soi efficace é BitDefender non plu nan a pa effacer
ausecour
help
Que faire???
SVP SVP SVP SVP SVP SVP SVP SVP SVP SVP SVP
(vou mavez deja éder pour desinstaller norton 2005) mmmeeerccccccciiiiiii !!!!!!!!!!!$$$$$$$$
je sui nouveau
enfaite c pour savoir si vou pouvé maider svp car:
je sui resté plu d1 moi san antivirus, antispam,antispyware ...
lorsque g acheté bitedefenderv.10 en magasin g éliminer des centaine é des centaine de virus je croyai que jen avai plu lorsque g telecharger 'Spyware doctor' pui au debu il ma afiché 2017 fichier infecté jeter conten il avai presque tou effacer pui par la suite au fur é a mesure com il en resté des fichier infecté il se son prpagé pui maintenan en faisan un scan complet il maffiche 150 fichier infecté :les voila:
HotBar
Trojan.Spy.Banker.ABG
Trjan.Mailskinner
Tracking Cookie(s)
Advertising
Known Bad Sites
Trojan.Horst
Backdoor.IRCBot.Fp
pui g telechargé 'Spybot-Search and destroy'
il nen a pa effacer mailgrer quil soi efficace é BitDefender non plu nan a pa effacer
ausecour
help
Que faire???
SVP SVP SVP SVP SVP SVP SVP SVP SVP SVP SVP
(vou mavez deja éder pour desinstaller norton 2005) mmmeeerccccccciiiiiii !!!!!!!!!!!$$$$$$$$
80 réponses
- 1
- 2
- 3
- 4
Suivant
-
Slt
Fais ce qui suit
F - Hijackthis - Outil de diagnostic et réparation
lire démo
http://pageperso.aol.fr/balltrap34/Hijenr.gif
http://pageperso.aol.fr/balltrap34/demohijack.htm
Télécharge version française ici
http://telechargement.zebulon.fr/160-patch-francais-pour-hijackthis-1991.html
Copie/colle le rapport
Bon courage
A++
-
Voila
Logfile of HijackThis v1.99.1
Scan saved at 12:33:17, on 10/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\FTRTSVC.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\apps\ABoard\AOSD.exe
D:\Documents and Settings\Spyware Doctor\sdhelp.exe
C:\Program Files\Canon\MultiPASS4\monitr32.exe
C:\Program Files\Canon\MultiPASS4\MPTBox.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\program files\steam\steam.exe
D:\Documents and Settings\Spyware Doctor\swdoctor.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=6&key=SEARCH
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - D:\DOCUME~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - D:\DOCUME~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [monitr32] C:\Program Files\Canon\MultiPASS4\monitr32.exe
O4 - HKLM\..\Run: [MPTBox] C:\Program Files\Canon\MultiPASS4\MPTBox.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [oqfgurv] c:\windows\system32\oqfgurv.exe oqfgurv
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Spyware Doctor] "D:\Documents and Settings\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - D:\DOCUME~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: MpService - Canon Inc - C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - D:\Documents and Settings\Spyware Doctor\sdhelp.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
Quesce qu il fau faire maintenan???
ton fichier que tu mapasser je doi le suprimé??
Merci -
SVP SVP SVP SVP SVP SVP SVP SVP SVP SVP SVP SVP SVP
Aider moi
Je sui tou seul ^^
là grace a ''^^Marie^^'' merci MECI MERCI ^^
g fé un scan avc '' Hijack this version Française''
(larticle au desu)
ke doije faire maintenan??
svp
aider moi
merci "^^Marie^^"
SVP SVP SVP SVP SVP SVP SVP SVP SVP SVP SVP SVP SVP -
-
-
Que doi je faire
SVP
Aider moi
Liser les article en haut é aider moi!!!SVP -
bonjour Télécharge SDFix sur ton bureau
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau.
Redémarre ton ordinateur en mode sans échec (redemarrage + tapotte sans arret sur F8 desque l'ordi s'allume)
Ouvre le dossier SDFix qui vient d'être créé sur le Bureau et double clique sur RunThis.bat pour lancer le script.
Appuie sur Y pour commencer le processus de nettoyage.
Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
Appuie sur une touche pour redémarrer le PC.
Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !
a+++-
-
Voila je lai telecharger dan mon pui qan je le lance pour linstallé sa me marque sa:
The SDFix Folder has been extracted to %systemdrive% - Please run from that location.
(%systemdrive% = drive that contains the Windows directory - typically 'C:\SDFix')
Please open the SDFix folder in Safe Mode then double click the RunThis.bat
file to start the fixtool. If run in Normal Mode, options to download and
run Anti-Virus command line scanners (Sophos & asquared) are displayed.
Quesce que je doi faire
Svp
-
-
Merci salwa5
LeMarseillais, fais ce que te demande salwa5
Merci
A++ -
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
ree :) c'est pas grave laisse tombé sdfix on va les supprimé manuelement
tout d'abord desactive teatimer sinon on poura pas fixer les lignes avec hijack
si tu sais pas comment desactivé teatimer alors regarde la demo
http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm
ouvre hijack coche ces ligne puis clic sur fix checked
O4 - HKLM\..\Run: [oqfgurv] c:\windows\system32\oqfgurv.exe oqfgurv
O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w
1.redemarre en mode sans echec (redemarage + tapotte sans arret sur F8 desque l'ordi s'allume)
cherches et supprime les fichier en gras
c:\windows\system32\oqfgurv.exe
C:\WINDOWS\system\smss.exe nb ne pas comfondre avec C:\WINDOWS\System32\smss.exe qui est un fichier system et legitime
vide la corbeille
redemare en mode normal :
telecharge et execute ces antispywares ( pense a les mettre a jour avant de les lancées)
(1) ad-aware version 1.06
(ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
voir demo
http://pageperso.aol.fr/balltrap34/adwseflash.zip
***
(2) spybot version 1.4
(ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
voir demo d utilisation
http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm
***
ps : un grand merci a balltrap pour les lien :)
(3) AVG anti spyware
https://www.01net.com/telecharger/
Copier/coller le rapport entier sur le forum. (n'oublie pas de le mettre a jour avant de lancer le scan)
NB suis les instruction du tutoriel
http://www.malekal.com/tutorial_AVG_AntiSpyware.html
http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html
supprime les fichiers inutiles (fichiers temporaire , cookies .. ect avec ceci
Ccleaner
https://www.malekal.com/tutoriel-ccleaner/
a+++-
Slt
Voila
Desolé pour le retar
g reussi a lancé SDfix
il maffiche sa:
Stage Two - Normal Mode
Checking For Malware:
--------------------
D:\DOCUME~1\tous\LOCALS~1\Temp\setup_wm.exe
Backing Up and Removing any Files Found...
Final Check:
Services:
---------
[COLOR=RED][B]Rootkit pe386 Present![/COLOR][/B]
[COLOR=RED][B]Rootkit msguard Present![/COLOR][/B]
[COLOR=RED][B]Rootkit lzx32 Present![/COLOR][/B]
Authorized Applications Key Export:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%ProgramFiles%\\AOL 9.0\\aol.exe"="%ProgramFiles%\\AOL 9.0\\aol.exe:*:Enabled:AOL"
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"="%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe:*:Enabled:SPLINTER CELL PANDORA"
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"="%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe:*:Enabled:PANDORA"
"C:\\APPS\\Inventime\\my.exe"="C:\\APPS\\Inventime\\my.exe:*:Enabled:INVENTIME"
"D:\\Documents and Settings\\Cédric\\Local Settings\\Temporary Internet Files\\Content.IE5\\YXRODSB6\\incredimail_install[1].exe"="D:\\Documents and Settings\\Cédric\\Local Settings\\Temporary Internet Files\\Content.IE5\\YXRODSB6\\incredimail_install[1].exe:*:Enabled:IncrediMail Installer"
"D:\\Documents and Settings\\Famille Hebert\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install[1].exe"="D:\\Documents and Settings\\Famille Hebert\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install[1].exe:*:Enabled:IncrediMail Installer"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\WINDOWS\\system32\\svchost.exe"="C:\\WINDOWS\\system32\\svchost.exe:*:Enabled:Microsoft Update"
"C:\\Warcraft III\\Warcraft III.exe"="C:\\Warcraft III\\Warcraft III.exe:*:Disabled:Warcraft III"
"D:\\Documents and Settings\\Elodie.049289420256\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install[1].exe"="D:\\Documents and Settings\\Elodie.049289420256\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install[1].exe:*:Enabled:IncrediMail Installer"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Disabled:MSN Messenger 7.5"
"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"="C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe:*:Disabled:Assistance à distance - Windows Messenger et voix"
"C:\\Program Files\\Steam\\SteamApps\\cedrichbrt\\counter-strike source\\hl2.exe"="C:\\Program Files\\Steam\\SteamApps\\cedrichbrt\\counter-strike source\\hl2.exe:*:Disabled:hl2"
"C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"="C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe:*:Disabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"="C:\\Program Files\\IncrediMail\\bin\\IMApp.exe:*:Enabled:IncrediMail"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\21exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\21exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\77exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\77exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\30exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\30exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\54exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\54exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\36exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\36exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\8exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\8exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\67exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\67exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\68exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\68exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\49exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\49exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\57exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\57exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\81exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\81exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\47exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\47exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\82exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\82exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\84exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\84exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\96exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\96exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\28exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\28exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\55exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\55exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\65exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\65exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\64exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\64exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\66exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\66exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\45exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\45exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\90exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\90exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\58exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\58exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\66exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\66exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\45exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\45exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\51exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\51exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\97exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\97exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\29exinjs.o.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\29exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\64exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\64exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\58exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\58exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\5exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\5exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\78exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\78exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\10exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\10exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\7exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\7exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\87exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\87exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\9exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\9exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\52exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\52exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\95exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\95exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\81exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\81exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\40exinjs.o.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\40exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\74exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\74exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\45exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\45exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\86exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\86exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\80exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\80exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\3exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\3exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\24exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\24exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\77exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\77exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\83exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\83exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\56exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\56exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\96exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\96exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\70exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\70exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\27exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\27exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\69exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\69exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\98exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\98exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\41exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\41exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\72exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\72exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\38exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\38exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\37exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\37exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\93exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\93exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\20exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\20exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\0exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\0exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\55exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\55exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\66exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\66exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\8exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\8exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\61exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\61exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\20exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\20exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\72exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\72exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\Program Files\\AOL 9.0\\waol.exe"="C:\\Program Files\\AOL 9.0\\waol.exe:*:Enabled:AOL 9.0"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\43exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\43exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\65exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\65exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\79exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\79exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\99exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\99exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\79exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\79exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\81exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\81exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\3exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\3exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\12exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\12exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\77exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\77exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\65exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\65exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\40exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\40exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\90exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\90exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\44exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\44exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\7exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\7exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\28exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\28exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\34exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\34exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\10exinjs.p.exe"="D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\10exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\14exinjs.p.exe"="D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\14exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\65exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\65exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\98exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\98exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\51exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\51exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\97exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\97exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\68exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\68exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\5exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\5exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\98exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\98exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\42exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\42exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\74exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\74exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\21exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\21exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\38exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\38exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\87exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\87exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\12exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\12exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\34exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\34exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\25exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\25exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\74exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\74exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\37exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\37exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\58exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\58exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\35exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\35exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\61exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\61exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\25exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\25exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\53exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\53exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\68exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\68exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\56exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\56exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\46exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\46exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\18exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\18exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\81exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\81exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\96exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\96exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\63exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\63exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\52exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\52exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\82exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\82exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\61exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\61exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\15exinjs.q.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\15exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\4exinjs.q.exe"="D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\4exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\17exinjs.q.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\17exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\91exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\91exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\0exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\0exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\26exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\26exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\57exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\57exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\30exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\30exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\32exinjs.q.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\32exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\96exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\96exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\28exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\28exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\99exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\99exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\94exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\94exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\93exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\93exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\14exinjs.q.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\14exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\62exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\62exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\86exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\86exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\65exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\65exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\60exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\60exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\1exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\1exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\20exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\20exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\63exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\63exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\43exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\43exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\55exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\55exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\79exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\79exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\15exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\15exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\5exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\5exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\71exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\71exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\12exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\12exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\53exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\53exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\81exinjs.q.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\81exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\87exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\87exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\76exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\76exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\55exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\55exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\16exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\16exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\45exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\45exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\81exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\81exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\13exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\13exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\6exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\6exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\57exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\57exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\91exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\91exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\9exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\9exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\11exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\11exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\52exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\52exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\14exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\14exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\78exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\78exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\38exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\38exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\97exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\97exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\64exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\64exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\42exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\42exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\37exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\37exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\58exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\58exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\90exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\90exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\48exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\48exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\84exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\84exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\19exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\19exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\31exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\31exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\26exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\26exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\32exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\32exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\20exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\20exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\54exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\54exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\24exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\24exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\59exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\59exinjs.r.exe:*:Enabled:Microsoft Update"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
"C:\\Program Files\\AOL 9.0\\waol.exe"="C:\\Program Files\\AOL 9.0\\waol.exe:*:Enabled:AOL 9.0"
Files:
------
Backups Folder: - D:\Documents and Settings\tous\backups\backups.zip
Checking for files with Hidden Attributes:
C:\Program Files\Fichiers communs\aolshare\shell\fr\shellext.dll
C:\Program Files\AOL 9.0\aolphx.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\AOL 9.0\RBM.exe
C:\WINDOWS\system32\cdplayer.exe.manifest
C:\WINDOWS\system32\logonui.exe.manifest
C:\hiberfil.sys
C:\IO.SYS
C:\MSDOS.SYS
C:\pagefile.sys
FINISHED!
Pui voici le log de Hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 17:28:08, on 10/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\FTRTSVC.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
D:\Documents and Settings\Spyware Doctor\sdhelp.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\Canon\MultiPASS4\monitr32.exe
C:\Program Files\Canon\MultiPASS4\MPTBox.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\program files\steam\steam.exe
D:\Documents and Settings\Spyware Doctor\swdoctor.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=6&key=SEARCH
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - D:\DOCUME~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - D:\DOCUME~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [monitr32] C:\Program Files\Canon\MultiPASS4\monitr32.exe
O4 - HKLM\..\Run: [MPTBox] C:\Program Files\Canon\MultiPASS4\MPTBox.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [oqfgurv] c:\windows\system32\oqfgurv.exe oqfgurv
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Spyware Doctor] "D:\Documents and Settings\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - D:\DOCUME~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: MpService - Canon Inc - C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - D:\Documents and Settings\Spyware Doctor\sdhelp.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
Merci
Voila
Ke doi je faire maintenan
Je vien de faire une analyse avec spyware doctor
il maffiche:
167 infections:
Hotbar
Trojan.Spy.Banker.ABG
Trojan.Mailsskinner
Tracking Cookie(s)
Adversing
Known Bad Sites
Trojan.Horst
Voila
A++++
-
-
Vue la vitesse à laquelle tu réponds et tu postes, je ne suis pas sûre que tu lises correctement la procédure
-
sdfix a detecté une infection rootkit
Services: --------- [COLOR=RED][B]Rootkit pe386 Present![/COLOR][/B] [COLOR=RED][B]Rootkit msguard Present![/COLOR][/B] [COLOR=RED][B]Rootkit lzx32 Present![/COLOR][/B]
Télécharge ce fichier (par ejvindh)
http://www.uploads.ejvindh.net/rustbfix.exe
...et sauvegarde-le sur ton Bureau.
Double clique rustbfix.exe afin de lancer l'outil.
Si une infection Rustock.b est détectée, une invite t'indiquera qu'il est nécessaire de redémarrer l'ordi. Ce redémarrage pourrait être plus long que d'habitude, et il est possible que deux redémarrages soient requis. Tout cela se fera automatiquement.
Suite au(x) redémarrage(s), deux rapports s'ouvriront : (%root%\avenger.txt & %root%\rustbfix\pelog.txt).
Poste (Copie/Colle) le contenu de ces deux rapports, ainsi qu'un nouveau log HijackThis dans ta prochaine réponse.
a+++ -
SltVoila ce que sa me marque:
************************* Rustock.b-fix -- By ejvindh *************************
11/12/2006 17:39:50,84
No Rustock.b-rootkits found
******************************* End of Logfile ********************************
Il na rien detecté
Ke faire??
(om 76 c moi) -
bonsoir refait sdfix pour voir si il trouve tjr le rootkit
a+++-
bonsoir
non il ne trouve tjrs rien
g essayé plusieur foi
(sinon on ma parlé de faire un formatage)??
c une bone idée??
Merci
a+++- slt
sa ne serai pas sa??
LOL
C:\WINDOWS\SYSTEM32\ACCWIZ.EXE
C:\WINDOWS\SYSTEM32\ACTMOVIE.EXE
C:\WINDOWS\SYSTEM32\AHUI.EXE
C:\WINDOWS\SYSTEM32\AKTDVOQQ.EXE
C:\WINDOWS\SYSTEM32\ALG.EXE
C:\WINDOWS\SYSTEM32\APPEND.EXE
C:\WINDOWS\SYSTEM32\ARP.EXE
C:\WINDOWS\SYSTEM32\AT.EXE
C:\WINDOWS\SYSTEM32\ATI2EVXX.EXE
C:\WINDOWS\SYSTEM32\ATI2MDXX.EXE
C:\WINDOWS\SYSTEM32\ATMADM.EXE
C:\WINDOWS\SYSTEM32\ATTRIB.EXE
C:\WINDOWS\SYSTEM32\AUDITUSR.EXE
C:\WINDOWS\SYSTEM32\AUTOCHK.EXE
C:\WINDOWS\SYSTEM32\AUTOCONV.EXE
C:\WINDOWS\SYSTEM32\AUTOFMT.EXE
C:\WINDOWS\SYSTEM32\AUTOLFN.EXE
C:\WINDOWS\SYSTEM32\BLASTCLN.EXE
C:\WINDOWS\SYSTEM32\BOOTOK.EXE
C:\WINDOWS\SYSTEM32\BOOTVRFY.EXE
C:\WINDOWS\SYSTEM32\CACLS.EXE
C:\WINDOWS\SYSTEM32\CALC.EXE
C:\WINDOWS\SYSTEM32\CHARMAP.EXE
C:\WINDOWS\SYSTEM32\CHCFG.EXE
C:\WINDOWS\SYSTEM32\CHKDSK.EXE
C:\WINDOWS\SYSTEM32\CHKNTFS.EXE
C:\WINDOWS\SYSTEM32\CIDAEMON.EXE
C:\WINDOWS\SYSTEM32\CISVC.EXE
C:\WINDOWS\SYSTEM32\CKCNV.EXE
C:\WINDOWS\SYSTEM32\CLEANMGR.EXE
C:\WINDOWS\SYSTEM32\CLICONFG.EXE
C:\WINDOWS\SYSTEM32\CLIPBRD.EXE
C:\WINDOWS\SYSTEM32\CLIPSRV.EXE
C:\WINDOWS\SYSTEM32\CLSPACK.EXE
C:\WINDOWS\SYSTEM32\CMD.EXE
C:\WINDOWS\SYSTEM32\CMDL32.EXE
C:\WINDOWS\SYSTEM32\CMMON32.EXE
C:\WINDOWS\SYSTEM32\CMSTP.EXE
C:\WINDOWS\SYSTEM32\COMP.EXE
C:\WINDOWS\SYSTEM32\COMPACT.EXE
C:\WINDOWS\SYSTEM32\CONIME.EXE
C:\WINDOWS\SYSTEM32\CONTROL.EXE
C:\WINDOWS\SYSTEM32\CONVERT.EXE
C:\WINDOWS\SYSTEM32\CSCRIPT.EXE
C:\WINDOWS\SYSTEM32\CSRSS.EXE
C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\WINDOWS\SYSTEM32\DCOMCNFG.EXE
C:\WINDOWS\SYSTEM32\DDESHARE.EXE
C:\WINDOWS\SYSTEM32\DEBUG.EXE
C:\WINDOWS\SYSTEM32\DEFRAG.EXE
C:\WINDOWS\SYSTEM32\DFRGFAT.EXE
C:\WINDOWS\SYSTEM32\DFRGNTFS.EXE
C:\WINDOWS\SYSTEM32\DIANTZ.EXE
C:\WINDOWS\SYSTEM32\DISKPART.EXE
C:\WINDOWS\SYSTEM32\DISKPERF.EXE
C:\WINDOWS\SYSTEM32\DLLHOST.EXE
C:\WINDOWS\SYSTEM32\DLLHST3G.EXE
C:\WINDOWS\SYSTEM32\DMADMIN.EXE
C:\WINDOWS\SYSTEM32\DMREMOTE.EXE
C:\WINDOWS\SYSTEM32\DOSKEY.EXE
C:\WINDOWS\SYSTEM32\DOSX.EXE
C:\WINDOWS\SYSTEM32\DPLAYSVR.EXE
C:\WINDOWS\SYSTEM32\DPNSVR.EXE
C:\WINDOWS\SYSTEM32\DPVSETUP.EXE
C:\WINDOWS\SYSTEM32\DRWATSON.EXE
C:\WINDOWS\SYSTEM32\DRWTSN32.EXE
C:\WINDOWS\SYSTEM32\DUMPREP.EXE
C:\WINDOWS\SYSTEM32\DVDPLAY.EXE
C:\WINDOWS\SYSTEM32\DVDUPGRD.EXE
C:\WINDOWS\SYSTEM32\DWWIN.EXE
C:\WINDOWS\SYSTEM32\DXDIAG.EXE
C:\WINDOWS\SYSTEM32\EDLIN.EXE
C:\WINDOWS\SYSTEM32\ESENTUTL.EXE
C:\WINDOWS\SYSTEM32\EUDCEDIT.EXE
C:\WINDOWS\SYSTEM32\EVENTVWR.EXE
C:\WINDOWS\SYSTEM32\EXE2BIN.EXE
C:\WINDOWS\SYSTEM32\EXPAND.EXE
C:\WINDOWS\SYSTEM32\EXTRAC32.EXE
C:\WINDOWS\SYSTEM32\FASTOPEN.EXE
C:\WINDOWS\SYSTEM32\FC.EXE
C:\WINDOWS\SYSTEM32\FIND.EXE
C:\WINDOWS\SYSTEM32\FINDSTR.EXE
C:\WINDOWS\SYSTEM32\FINGER.EXE
C:\WINDOWS\SYSTEM32\FIXMAPI.EXE
C:\WINDOWS\SYSTEM32\FLTMC.EXE
C:\WINDOWS\SYSTEM32\FONTVIEW.EXE
C:\WINDOWS\SYSTEM32\FORCEDOS.EXE
C:\WINDOWS\SYSTEM32\FREECELL.EXE
C:\WINDOWS\SYSTEM32\FSQUIRT.EXE
C:\WINDOWS\SYSTEM32\FSUTIL.EXE
C:\WINDOWS\SYSTEM32\FTP.EXE
C:\WINDOWS\SYSTEM32\FTRTSVC.EXE
C:\WINDOWS\SYSTEM32\GDI.EXE
C:\WINDOWS\SYSTEM32\GNASDXPQ.EXE
C:\WINDOWS\SYSTEM32\GRPCONV.EXE
C:\WINDOWS\SYSTEM32\HELP.EXE
C:\WINDOWS\SYSTEM32\HOSTNAME.EXE
C:\WINDOWS\SYSTEM32\IE4UINIT.EXE
C:\WINDOWS\SYSTEM32\IEXPRESS.EXE
C:\WINDOWS\SYSTEM32\IMAPI.EXE
C:\WINDOWS\SYSTEM32\IPCONFIG.EXE
C:\WINDOWS\SYSTEM32\IPSEC6.EXE
C:\WINDOWS\SYSTEM32\IPV6.EXE
C:\WINDOWS\SYSTEM32\IPXROUTE.EXE
C:\WINDOWS\SYSTEM32\JAVA.EXE
C:\WINDOWS\SYSTEM32\JAVAW.EXE
C:\WINDOWS\SYSTEM32\JAVAWS.EXE
C:\WINDOWS\SYSTEM32\JDBGMGR.EXE
C:\WINDOWS\SYSTEM32\JVIEW.EXE
C:\WINDOWS\SYSTEM32\KRNL386.EXE
C:\WINDOWS\SYSTEM32\LABEL.EXE
C:\WINDOWS\SYSTEM32\LIGHTS.EXE
C:\WINDOWS\SYSTEM32\LNKSTUB.EXE
C:\WINDOWS\SYSTEM32\LOCATOR.EXE
C:\WINDOWS\SYSTEM32\LODCTR.EXE
C:\WINDOWS\SYSTEM32\LOGAGENT.EXE
C:\WINDOWS\SYSTEM32\LOGMAN.EXE
C:\WINDOWS\SYSTEM32\LOGOFF.EXE
C:\WINDOWS\SYSTEM32\LOGONUI.EXE
C:\WINDOWS\SYSTEM32\LPQ.EXE
C:\WINDOWS\SYSTEM32\LPR.EXE
C:\WINDOWS\SYSTEM32\LSASS.EXE
C:\WINDOWS\SYSTEM32\MAGNIFY.EXE
C:\WINDOWS\SYSTEM32\MAKECAB.EXE
C:\WINDOWS\SYSTEM32\MEM.EXE
C:\WINDOWS\SYSTEM32\MIGPWD.EXE
C:\WINDOWS\SYSTEM32\MMC.EXE
C:\WINDOWS\SYSTEM32\MNMSRVC.EXE
C:\WINDOWS\SYSTEM32\MOBSYNC.EXE
C:\WINDOWS\SYSTEM32\MOUNTVOL.EXE
C:\WINDOWS\SYSTEM32\MPLAY32.EXE
C:\WINDOWS\SYSTEM32\MPNOTIFY.EXE
C:\WINDOWS\SYSTEM32\MRINFO.EXE
C:\WINDOWS\SYSTEM32\MRT.EXE
C:\WINDOWS\SYSTEM32\MSCDEXNT.EXE
C:\WINDOWS\SYSTEM32\MSDTC.EXE
C:\WINDOWS\SYSTEM32\MSG.EXE
C:\WINDOWS\SYSTEM32\MSHEARTS.EXE
C:\WINDOWS\SYSTEM32\MSHTA.EXE
C:\WINDOWS\SYSTEM32\MSIEXEC.EXE
C:\WINDOWS\SYSTEM32\MSINFHLP.EXE
C:\WINDOWS\SYSTEM32\MSPAINT.EXE
C:\WINDOWS\SYSTEM32\MSSWCHX.EXE
C:\WINDOWS\SYSTEM32\MSTINIT.EXE
C:\WINDOWS\SYSTEM32\MSTSC.EXE
C:\WINDOWS\SYSTEM32\NARRATOR.EXE
C:\WINDOWS\SYSTEM32\NBTSTAT.EXE
C:\WINDOWS\SYSTEM32\NDDEAPIR.EXE
C:\WINDOWS\SYSTEM32\NET.EXE
C:\WINDOWS\SYSTEM32\NET1.EXE
C:\WINDOWS\SYSTEM32\NETDDE.EXE
C:\WINDOWS\SYSTEM32\NETSETUP.EXE
C:\WINDOWS\SYSTEM32\NETSH.EXE
C:\WINDOWS\SYSTEM32\NETSTAT.EXE
C:\WINDOWS\SYSTEM32\NLSFUNC.EXE
C:\WINDOWS\SYSTEM32\NOTEPAD.EXE
C:\WINDOWS\SYSTEM32\NSLOOKUP.EXE
C:\WINDOWS\SYSTEM32\NTKRNLPA.EXE
C:\WINDOWS\SYSTEM32\NTOSKRNL.EXE
C:\WINDOWS\SYSTEM32\NTSD.EXE
C:\WINDOWS\SYSTEM32\NTVDM.EXE
C:\WINDOWS\SYSTEM32\NUDBIO~1.EXE
C:\WINDOWS\SYSTEM32\ODBCAD32.EXE
C:\WINDOWS\SYSTEM32\ODBCCONF.EXE
C:\WINDOWS\SYSTEM32\OSK.EXE
C:\WINDOWS\SYSTEM32\OSUNINST.EXE
C:\WINDOWS\SYSTEM32\PACKAGER.EXE
C:\WINDOWS\SYSTEM32\PATHPING.EXE
C:\WINDOWS\SYSTEM32\PENTNT.EXE
C:\WINDOWS\SYSTEM32\PERFMON.EXE
C:\WINDOWS\SYSTEM32\PING.EXE
C:\WINDOWS\SYSTEM32\PING6.EXE
C:\WINDOWS\SYSTEM32\POWERCFG.EXE
C:\WINDOWS\SYSTEM32\PRINT.EXE
C:\WINDOWS\SYSTEM32\PROGMAN.EXE
C:\WINDOWS\SYSTEM32\PROQUOTA.EXE
C:\WINDOWS\SYSTEM32\PROXYCFG.EXE
C:\WINDOWS\SYSTEM32\QAPPSRV.EXE
C:\WINDOWS\SYSTEM32\QPROCESS.EXE
C:\WINDOWS\SYSTEM32\QWINSTA.EXE
C:\WINDOWS\SYSTEM32\RASAUTOU.EXE
C:\WINDOWS\SYSTEM32\RASDIAL.EXE
C:\WINDOWS\SYSTEM32\RASPHONE.EXE
C:\WINDOWS\SYSTEM32\RCIMLBY.EXE
C:\WINDOWS\SYSTEM32\RCP.EXE
C:\WINDOWS\SYSTEM32\RDPCLIP.EXE
C:\WINDOWS\SYSTEM32\RDSADDIN.EXE
C:\WINDOWS\SYSTEM32\RDSHOST.EXE
C:\WINDOWS\SYSTEM32\RECOVER.EXE
C:\WINDOWS\SYSTEM32\REDIR.EXE
C:\WINDOWS\SYSTEM32\REG.EXE
C:\WINDOWS\SYSTEM32\REGEDT32.EXE
C:\WINDOWS\SYSTEM32\REGINI.EXE
C:\WINDOWS\SYSTEM32\REGSVR32.EXE
C:\WINDOWS\SYSTEM32\REGWIZ.EXE
C:\WINDOWS\SYSTEM32\REPLACE.EXE
C:\WINDOWS\SYSTEM32\RESET.EXE
C:\WINDOWS\SYSTEM32\REXEC.EXE
C:\WINDOWS\SYSTEM32\ROUTE.EXE
C:\WINDOWS\SYSTEM32\ROUTEMON.EXE
C:\WINDOWS\SYSTEM32\RSH.EXE
C:\WINDOWS\SYSTEM32\RSM.EXE
C:\WINDOWS\SYSTEM32\RSMSINK.EXE
C:\WINDOWS\SYSTEM32\RSMUI.EXE
C:\WINDOWS\SYSTEM32\RSVP.EXE
C:\WINDOWS\SYSTEM32\RTCSHARE.EXE
C:\WINDOWS\SYSTEM32\RTLCPL.EXE
C:\WINDOWS\SYSTEM32\RUNAS.EXE
C:\WINDOWS\SYSTEM32\RUNDLL32.EXE
C:\WINDOWS\SYSTEM32\RUNONCE.EXE
C:\WINDOWS\SYSTEM32\RWINSTA.EXE
C:\WINDOWS\SYSTEM32\SAVEDUMP.EXE
C:\WINDOWS\SYSTEM32\SC.EXE
C:\WINDOWS\SYSTEM32\SCARDSVR.EXE
C:\WINDOWS\SYSTEM32\SDBINST.EXE
C:\WINDOWS\SYSTEM32\SERVICES.EXE
C:\WINDOWS\SYSTEM32\SESSMGR.EXE
C:\WINDOWS\SYSTEM32\SETHC.EXE
C:\WINDOWS\SYSTEM32\SETUP.EXE
C:\WINDOWS\SYSTEM32\SETVER.EXE
C:\WINDOWS\SYSTEM32\SFC.EXE
C:\WINDOWS\SYSTEM32\SHADOW.EXE
C:\WINDOWS\SYSTEM32\SHARE.EXE
C:\WINDOWS\SYSTEM32\SHMGRATE.EXE
C:\WINDOWS\SYSTEM32\SHRPUBW.EXE
C:\WINDOWS\SYSTEM32\SHUTDOWN.EXE
C:\WINDOWS\SYSTEM32\SIGVERIF.EXE
C:\WINDOWS\SYSTEM32\SKEYS.EXE
C:\WINDOWS\SYSTEM32\SMBINST.EXE
C:\WINDOWS\SYSTEM32\SMLOGSVC.EXE
C:\WINDOWS\SYSTEM32\SMSS.EXE
C:\WINDOWS\SYSTEM32\SNDREC32.EXE
C:\WINDOWS\SYSTEM32\SNDVOL32.EXE
C:\WINDOWS\SYSTEM32\SOL.EXE
C:\WINDOWS\SYSTEM32\SORT.EXE
C:\WINDOWS\SYSTEM32\SPIDER.EXE
C:\WINDOWS\SYSTEM32\SPNPINST.EXE
C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
C:\WINDOWS\SYSTEM32\SPRESTRT.EXE
C:\WINDOWS\SYSTEM32\SPUPDSVC.EXE
C:\WINDOWS\SYSTEM32\STIMON.EXE
C:\WINDOWS\SYSTEM32\SUBST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SYNCAPP.EXE
C:\WINDOWS\SYSTEM32\SYSEDIT.EXE
C:\WINDOWS\SYSTEM32\SYSKEY.EXE
C:\WINDOWS\SYSTEM32\SYSOCMGR.EXE
C:\WINDOWS\SYSTEM32\SYSTRAY.EXE
C:\WINDOWS\SYSTEM32\TASKMAN.EXE
C:\WINDOWS\SYSTEM32\TASKMGR.EXE
C:\WINDOWS\SYSTEM32\TCMSETUP.EXE
C:\WINDOWS\SYSTEM32\TCPSVCS.EXE
C:\WINDOWS\SYSTEM32\TELNET.EXE
C:\WINDOWS\SYSTEM32\TFTP.EXE
C:\WINDOWS\SYSTEM32\TOURST~1.EXE
C:\WINDOWS\SYSTEM32\TRACERT.EXE
C:\WINDOWS\SYSTEM32\TRACERT6.EXE
C:\WINDOWS\SYSTEM32\TSCON.EXE
C:\WINDOWS\SYSTEM32\TSCUPGRD.EXE
C:\WINDOWS\SYSTEM32\TSDISCON.EXE
C:\WINDOWS\SYSTEM32\TSKILL.EXE
C:\WINDOWS\SYSTEM32\TSSHUTDN.EXE
C:\WINDOWS\SYSTEM32\UNLODCTR.EXE
C:\WINDOWS\SYSTEM32\UPNPCONT.EXE
C:\WINDOWS\SYSTEM32\UPS.EXE
C:\WINDOWS\SYSTEM32\USER.EXE
C:\WINDOWS\SYSTEM32\USERINIT.EXE
C:\WINDOWS\SYSTEM32\USRMLNKA.EXE
C:\WINDOWS\SYSTEM32\USRPRBDA.EXE
C:\WINDOWS\SYSTEM32\USRSHUTA.EXE
C:\WINDOWS\SYSTEM32\UTILMAN.EXE
C:\WINDOWS\SYSTEM32\UWDF.EXE
C:\WINDOWS\SYSTEM32\VERCLSID.EXE
C:\WINDOWS\SYSTEM32\VERIFIER.EXE
C:\WINDOWS\SYSTEM32\VJREG.EXE
C:\WINDOWS\SYSTEM32\VSSADMIN.EXE
C:\WINDOWS\SYSTEM32\VSSVC.EXE
C:\WINDOWS\SYSTEM32\W32TM.EXE
C:\WINDOWS\SYSTEM32\WDFMGR.EXE
C:\WINDOWS\SYSTEM32\WEXTRACT.EXE
C:\WINDOWS\SYSTEM32\WGATRAY.EXE
C:\WINDOWS\SYSTEM32\WIAACMGR.EXE
C:\WINDOWS\SYSTEM32\WINCHAT.EXE
C:\WINDOWS\SYSTEM32\WINHLP32.EXE
C:\WINDOWS\SYSTEM32\WINLOGON.EXE
C:\WINDOWS\SYSTEM32\WINMINE.EXE
C:\WINDOWS\SYSTEM32\WINMSD.EXE
C:\WINDOWS\SYSTEM32\WINSPOOL.EXE
C:\WINDOWS\SYSTEM32\WINVER.EXE
C:\WINDOWS\SYSTEM32\WISPTIS.EXE
C:\WINDOWS\SYSTEM32\WJVIEW.EXE
C:\WINDOWS\SYSTEM32\WOWDEB.EXE
C:\WINDOWS\SYSTEM32\WOWEXEC.EXE
C:\WINDOWS\SYSTEM32\WPABALN.EXE
C:\WINDOWS\SYSTEM32\WPNPINST.EXE
C:\WINDOWS\SYSTEM32\WRITE.EXE
C:\WINDOWS\SYSTEM32\WSCNTFY.EXE
C:\WINDOWS\SYSTEM32\WSCRIPT.EXE
C:\WINDOWS\SYSTEM32\WUAUCLT.EXE
C:\WINDOWS\SYSTEM32\WUAUCLT1.EXE
C:\WINDOWS\SYSTEM32\WUPDMGR.EXE
C:\WINDOWS\SYSTEM32\XCOPY.EXE
a++
-
-
formaté pour si peu :p , on va laissé le formatage comme dernier recour :)
tout d'abord active le firewall de windows et configure le comme ceci
Vas dans le panneau de configuration puis pare-feu.
Vérifie dans l'onglet général que le pare-feu est activé.
Clic sur l'onglet exception en haut puis décoche "partages de fichiers".
desactive teatimer sinon on poura pas fixer les lignes avec hijack
si tu sais pas comment desactivé teatimer alors regarde la demo
http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm
ouvre hijack coche ces ligne puis clic sur fix checked
O4 - HKLM\..\Run: [oqfgurv] c:\windows\system32\oqfgurv.exe oqfgurv
1.redemarre en mode sans echec (redemarage + tapotte sans arret sur F8 desque l'ordi s'allume)
cherches et supprime les fichier en gras
c:\windows\system32\oqfgurv.exe
vide la corbeille
redemare en mode normal :
telecharge et execute ces antispywares ( pense a les mettre a jour avant de les lancées)
(1) ad-aware version 1.06
(ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
voir demo
http://pageperso.aol.fr/balltrap34/adwseflash.zip
***
(2) spybot version 1.4
(ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
voir demo d utilisation
http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm
***
ps : un grand merci a balltrap pour les lien :)
(3) AVG anti spyware
https://www.01net.com/
Copier/coller le rapport entier sur le forum. (n'oublie pas de le mettre a jour avant de lancer le scan)
NB suis les instruction du tutoriel
http://www.malekal.com/tutorial_AVG_AntiSpyware.html
http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html
supprime les fichiers inutiles (fichiers temporaire , cookies .. ect avec ceci
Ccleaner
https://www.malekal.com/tutoriel-ccleaner/
a+++
bon netoyage :) -
bonsoir pour supprimé oqfgurv.exe
il faut allé dans post de travail puis double clic sur lecteur C: ensuite sur windows et enfin sur system 32
al 'interieur de ce dossier (systel 32) tu trouve oqfgurv.exe clic droit dessu / supprimé et vide la corbeille
a++ -
oml76 et sperdu
Veuillez avoir la gentillesse de créer votre propre topik
Merci
http://pageperso.aol.fr/balltrap34/demofairesontmessage.htm-
-
-
Slt
Je pense que tu devrais regarder ici https://www.commentcamarche.net/s/http-www-commentcamarche-net-p-sperdu
A+
-
Salut LEMARSEILLAIS
Heureusement que tous les Marseillais ne te ressemblent pas !
Pourrais-tu faire l'effort d'écrire correctement, et en français SVP ?
Ceux qui te répondent ne sont pas nécessairement de langue française; mais au moins, eux, ils font l'effort de s'exprimer correctement afin que tu les comprennes .
En plus, lis et fais ce qu'on te demande.
Ça devient lourd, à la fin !
OK ?
Al. -
-
-
Bonjour alors pour le fichier essay de le supprime en mode normal si t'arrive pas ou si tu recois un message genre tu peu pas le supprimé car il est utilisé par windows alors dans ce cas la supprime le en mode sans echec
a+++ -
Bonjour Salwa
Merci LEMARSEILLAIS. ;)
Au post # 17 ne manque-t-il pas le rapport " avenger.txt " ?
Suite aux postes # 18 & 19, je ne vois pas le rapport SDFix ???
Pourquoi ?
Merci;
Al. -
bonjour :) pour le post 18 il dit que sdfix n'a pas trouvé le rootkit
et pour avenger.txt c'est vrai qu'il manque le raport mais peu etre qu'il ne s'est pas ouvert au demarrage en fait je ne sais pas ce qui s'est passé vraiment :p
a+++-
Non Salwa
Au # 18 tu demandes : « bonsoir refait sdfix pour voir si il trouve tjr le rootkit »
Moi, ce que je veux voir, c'est ce deuxième rapport SDFix; quoiqu'en dise l'internaute. ( Même si l'internaute dit qu'il n'y a rien )==> ce qui ne veut rien dire.
Merci- slt
voila le rapor SDfix:
The SDFix Folder has been extracted to %systemdrive% - Please run from that location.
(%systemdrive% = drive that contains the Windows directory - typically 'C:\SDFix')
Please open the SDFix folder in Safe Mode then double click the RunThis.bat
file to start the fixtool. If run in Normal Mode, options to download and
run Anti-Virus command line scanners (Sophos & asquared) are displayed.
a++
-
-
Ok afideg il va refaire sdfix et il mettera le raport sur le forum :)
a+++-
-
-
slt
encore moi lol
le rapor hijackthis le voila:
Logfile of HijackThis v1.99.1
Scan saved at 18:21:08, on 13/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\FTRTSVC.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\Canon\MultiPASS4\monitr32.exe
C:\Program Files\Canon\MultiPASS4\MPTBox.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\program files\steam\steam.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=6&key=SEARCH
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O3 - Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [monitr32] C:\Program Files\Canon\MultiPASS4\monitr32.exe
O4 - HKLM\..\Run: [MPTBox] C:\Program Files\Canon\MultiPASS4\MPTBox.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: MpService - Canon Inc - C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
a+++
-
-
bonsoir le raport sdfix n'est pas complet il faut faire exactement comme je t'ai expliqué sur le message numero 5
refait aussi un log hijack pour voir si tout est propore :)
a+++ -
et aussi stp colle le raport avg ici pour voir si il a bien supprimé les spy
pour recuperer le raport :
ouvre avg antispyware / clic sur l'onglet raports ensuite choisi le raport le plus recent / copier tout le contenu de ce raport et colle le resultat ici
a+++++ -
ouvre hijack coche ces ligne puis clic sur fix checked
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
O2 - BHO: (no name) - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O3 - Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
sinon apart ces lignes inutile ton log est propre :)
j'attend les autre raport (avg et sdfix) pour finalisé tout ca
a+++ -
rebonsoir avg sauvegarde tout les raport . pour les recuprer il faut
ouvrir avg antispyware / clicker sur l'onglet raports ensuite choisi le raport le plus recent / copier tout le contenu de ce raport et colle le resultat ici
a+++-
voici le raport qe je vien de faire avc SDfix:
Stage Two - Normal Mode
Checking For Malware:
--------------------
D:\DOCUME~1\tous\LOCALS~1\Temp\setup_wm.exe
Backing Up and Removing any Files Found...
Final Check:
Services:
---------
[COLOR=RED][B]Rootkit pe386 Present![/COLOR][/B]
[COLOR=RED][B]Rootkit msguard Present![/COLOR][/B]
[COLOR=RED][B]Rootkit lzx32 Present![/COLOR][/B]
Authorized Applications Key Export:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%ProgramFiles%\\AOL 9.0\\aol.exe"="%ProgramFiles%\\AOL 9.0\\aol.exe:*:Enabled:AOL"
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"="%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe:*:Enabled:SPLINTER CELL PANDORA"
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"="%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe:*:Enabled:PANDORA"
"C:\\APPS\\Inventime\\my.exe"="C:\\APPS\\Inventime\\my.exe:*:Enabled:INVENTIME"
"D:\\Documents and Settings\\Cédric\\Local Settings\\Temporary Internet Files\\Content.IE5\\YXRODSB6\\incredimail_install[1].exe"="D:\\Documents and Settings\\Cédric\\Local Settings\\Temporary Internet Files\\Content.IE5\\YXRODSB6\\incredimail_install[1].exe:*:Enabled:IncrediMail Installer"
"D:\\Documents and Settings\\Famille Hebert\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install[1].exe"="D:\\Documents and Settings\\Famille Hebert\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install[1].exe:*:Enabled:IncrediMail Installer"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\WINDOWS\\system32\\svchost.exe"="C:\\WINDOWS\\system32\\svchost.exe:*:Enabled:Microsoft Update"
"C:\\Warcraft III\\Warcraft III.exe"="C:\\Warcraft III\\Warcraft III.exe:*:Disabled:Warcraft III"
"D:\\Documents and Settings\\Elodie.049289420256\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install[1].exe"="D:\\Documents and Settings\\Elodie.049289420256\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install[1].exe:*:Enabled:IncrediMail Installer"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Disabled:MSN Messenger 7.5"
"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"="C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe:*:Disabled:Assistance à distance - Windows Messenger et voix"
"C:\\Program Files\\Steam\\SteamApps\\cedrichbrt\\counter-strike source\\hl2.exe"="C:\\Program Files\\Steam\\SteamApps\\cedrichbrt\\counter-strike source\\hl2.exe:*:Disabled:hl2"
"C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"="C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe:*:Disabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"="C:\\Program Files\\IncrediMail\\bin\\IMApp.exe:*:Enabled:IncrediMail"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\21exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\21exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\77exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\77exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\30exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\30exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\54exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\54exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\36exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\36exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\8exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\8exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\67exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\67exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\68exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\68exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\49exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\49exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\57exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\57exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\81exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\81exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\47exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\47exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\82exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\82exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\84exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\84exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\96exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\96exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\28exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\28exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\55exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\55exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\65exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\65exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\64exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\64exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\66exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\66exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\45exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\45exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\90exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\90exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\58exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\58exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\66exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\66exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\45exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\45exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\51exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\51exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\97exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\97exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\29exinjs.o.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\29exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\64exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\64exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\58exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\58exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\5exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\5exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\78exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\78exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\10exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\10exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\7exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\7exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\87exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\87exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\9exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\9exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\52exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\52exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\95exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\95exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\81exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\81exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\40exinjs.o.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\40exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\74exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\74exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\45exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\45exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\86exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\86exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\80exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\80exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\3exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\3exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\24exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\24exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\77exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\77exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\83exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\83exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\56exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\56exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\96exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\96exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\70exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\70exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\27exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\27exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\69exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\69exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\98exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\98exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\41exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\41exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\72exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\72exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\38exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\38exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\37exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\37exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\93exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\93exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\20exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\20exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\0exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\0exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\55exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\55exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\66exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\66exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\8exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\8exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\61exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\61exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\20exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\20exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\72exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\72exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\Program Files\\AOL 9.0\\waol.exe"="C:\\Program Files\\AOL 9.0\\waol.exe:*:Enabled:AOL 9.0"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\43exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\43exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\65exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\65exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\79exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\79exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\99exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\99exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\79exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\79exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\81exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\81exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\3exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\3exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\12exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\12exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\77exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\77exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\65exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\65exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\40exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\40exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\90exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\90exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\44exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\44exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\7exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\7exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\28exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\28exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\34exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\34exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\10exinjs.p.exe"="D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\10exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\14exinjs.p.exe"="D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\14exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\65exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\65exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\98exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\98exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\51exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\51exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\97exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\97exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\68exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\68exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\5exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\5exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\98exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\98exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\42exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\42exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\74exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\74exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\21exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\21exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\38exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\38exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\87exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\87exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\12exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\12exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\34exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\34exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\25exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\25exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\74exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\74exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\37exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\37exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\58exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\58exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\35exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\35exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\61exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\61exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\25exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\25exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\53exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\53exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\68exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\68exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\56exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\56exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\46exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\46exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\18exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\18exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\81exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\81exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\96exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\96exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\63exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\63exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\52exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\52exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\82exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\82exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\61exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\61exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\15exinjs.q.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\15exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\4exinjs.q.exe"="D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\4exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\17exinjs.q.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\17exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\91exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\91exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\0exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\0exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\26exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\26exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\57exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\57exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\30exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\30exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\32exinjs.q.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\32exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\96exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\96exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\28exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\28exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\99exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\99exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\94exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\94exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\93exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\93exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\14exinjs.q.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\14exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\62exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\62exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\86exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\86exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\65exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\65exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\60exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\60exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\1exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\1exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\20exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\20exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\63exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\63exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\43exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\43exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\55exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\55exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\79exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\79exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\15exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\15exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\5exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\5exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\71exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\71exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\12exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\12exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\53exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\53exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\81exinjs.q.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\81exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\87exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\87exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\76exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\76exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\55exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\55exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\16exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\16exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\45exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\45exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\81exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\81exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\13exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\13exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\6exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\6exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\57exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\57exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\91exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\91exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\9exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\9exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\11exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\11exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\52exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\52exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\14exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\14exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\78exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\78exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\38exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\38exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\97exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\97exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\64exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\64exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\42exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\42exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\37exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\37exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\58exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\58exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\90exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\90exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\48exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\48exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\84exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\84exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\19exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\19exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\31exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\31exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\26exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\26exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\32exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\32exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\20exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\20exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\54exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\54exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\24exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\24exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\59exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\59exinjs.r.exe:*:Enabled:Microsoft Update"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
"C:\\Program Files\\AOL 9.0\\waol.exe"="C:\\Program Files\\AOL 9.0\\waol.exe:*:Enabled:AOL 9.0"
Files:
------
Backups Folder: - D:\Documents and Settings\tous\backups\backups.zip
Checking for files with Hidden Attributes:
C:\Program Files\Fichiers communs\aolshare\shell\fr\shellext.dll
C:\Program Files\AOL 9.0\aolphx.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\AOL 9.0\RBM.exe
C:\WINDOWS\system32\cdplayer.exe.manifest
C:\WINDOWS\system32\logonui.exe.manifest
C:\hiberfil.sys
C:\IO.SYS
C:\MSDOS.SYS
C:\pagefile.sys
FINISHED!
Stage Two - Normal Mode
Checking For Malware:
--------------------
Backing Up and Removing any Files Found...
Final Check:
Services:
---------
[COLOR=RED][B]Rootkit pe386 Present![/COLOR][/B]
[COLOR=RED][B]Rootkit msguard Present![/COLOR][/B]
[COLOR=RED][B]Rootkit lzx32 Present![/COLOR][/B]
Authorized Applications Key Export:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%ProgramFiles%\\AOL 9.0\\aol.exe"="%ProgramFiles%\\AOL 9.0\\aol.exe:*:Enabled:AOL"
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"="%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe:*:Enabled:SPLINTER CELL PANDORA"
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"="%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe:*:Enabled:PANDORA"
"C:\\APPS\\Inventime\\my.exe"="C:\\APPS\\Inventime\\my.exe:*:Enabled:INVENTIME"
"D:\\Documents and Settings\\Cédric\\Local Settings\\Temporary Internet Files\\Content.IE5\\YXRODSB6\\incredimail_install[1].exe"="D:\\Documents and Settings\\Cédric\\Local Settings\\Temporary Internet Files\\Content.IE5\\YXRODSB6\\incredimail_install[1].exe:*:Enabled:IncrediMail Installer"
"D:\\Documents and Settings\\Famille Hebert\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install[1].exe"="D:\\Documents and Settings\\Famille Hebert\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install[1].exe:*:Enabled:IncrediMail Installer"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\WINDOWS\\system32\\svchost.exe"="C:\\WINDOWS\\system32\\svchost.exe:*:Enabled:Microsoft Update"
"C:\\Warcraft III\\Warcraft III.exe"="C:\\Warcraft III\\Warcraft III.exe:*:Disabled:Warcraft III"
"D:\\Documents and Settings\\Elodie.049289420256\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install[1].exe"="D:\\Documents and Settings\\Elodie.049289420256\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install[1].exe:*:Enabled:IncrediMail Installer"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Disabled:MSN Messenger 7.5"
"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"="C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe:*:Disabled:Assistance à distance - Windows Messenger et voix"
"C:\\Program Files\\Steam\\SteamApps\\cedrichbrt\\counter-strike source\\hl2.exe"="C:\\Program Files\\Steam\\SteamApps\\cedrichbrt\\counter-strike source\\hl2.exe:*:Disabled:hl2"
"C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"="C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe:*:Disabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"="C:\\Program Files\\IncrediMail\\bin\\IMApp.exe:*:Enabled:IncrediMail"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\21exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\21exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\77exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\77exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\30exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\30exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\54exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\54exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\36exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\36exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\8exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\8exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\67exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\67exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\68exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\68exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\49exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\49exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\57exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\57exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\81exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\81exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\47exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\47exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\82exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\82exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\84exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\84exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\96exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\96exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\28exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\28exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\55exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\55exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\65exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\65exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\64exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\64exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\66exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\66exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\45exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\45exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\90exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\90exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\58exinjs.n.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\58exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\66exinjs.n.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\66exinjs.n.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\45exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\45exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\51exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\51exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\97exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\97exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\29exinjs.o.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\29exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\64exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\64exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\58exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\58exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\5exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\5exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\78exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\78exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\10exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\10exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\7exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\7exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\87exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\87exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\9exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\9exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\52exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\52exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\95exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\95exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\81exinjs.o.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\81exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\40exinjs.o.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\40exinjs.o.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\74exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\74exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\45exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\45exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\86exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\86exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\80exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\80exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\3exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\3exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\24exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\24exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\77exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\77exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\83exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\83exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\56exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\56exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\96exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\96exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\70exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\70exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\27exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\27exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\69exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\69exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\98exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\98exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\41exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\41exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\72exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\72exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\38exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\38exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\37exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\37exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\93exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\93exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\20exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\20exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\0exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\0exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\55exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\55exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\66exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\66exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\8exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\8exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\61exinjs.p.exe"="D:\\DOCUME~1\\CDRIC~1\\LOCALS~1\\Temp\\61exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\20exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\20exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\72exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\72exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\Program Files\\AOL 9.0\\waol.exe"="C:\\Program Files\\AOL 9.0\\waol.exe:*:Enabled:AOL 9.0"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\43exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\43exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\65exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\65exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\79exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\79exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\99exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\99exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\79exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\79exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\81exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\81exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\3exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\3exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\12exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\12exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\77exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\77exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\65exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\65exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\40exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\40exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\90exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\90exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\44exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\44exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\7exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\7exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\28exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\28exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\34exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\34exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\10exinjs.p.exe"="D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\10exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\14exinjs.p.exe"="D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\14exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\65exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\65exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\98exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\98exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\51exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\51exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\97exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\97exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\68exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\68exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\5exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\5exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\98exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\98exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\42exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\42exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\74exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\74exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\21exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\21exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\38exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\38exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\87exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\87exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\12exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\12exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\34exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\34exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\25exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\25exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\74exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\74exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\37exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\37exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\58exinjs.p.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\58exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\35exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\35exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\61exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\61exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\25exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\25exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\53exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\53exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\68exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\68exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\56exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\56exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\46exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\46exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\18exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\18exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\81exinjs.p.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\81exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\96exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\96exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\63exinjs.p.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\63exinjs.p.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\52exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\52exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\82exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\82exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\61exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\61exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\15exinjs.q.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\15exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\4exinjs.q.exe"="D:\\DOCUME~1\\FAMILL~1\\LOCALS~1\\Temp\\4exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\17exinjs.q.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\17exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\91exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\91exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\0exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\0exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\26exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\26exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\57exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\57exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\30exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\30exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\32exinjs.q.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\32exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\96exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\96exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\28exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\28exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\99exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\99exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\94exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\94exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\93exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\93exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\14exinjs.q.exe"="D:\\DOCUME~1\\ELODIE~1.049\\LOCALS~1\\Temp\\14exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\62exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\62exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\86exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\86exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\65exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\65exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\60exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\60exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\1exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\1exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\20exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\20exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\63exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\63exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\43exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\43exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\55exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\55exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\79exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\79exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\15exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\15exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\5exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\5exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\71exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\71exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\12exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\12exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\53exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\53exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\81exinjs.q.exe"="D:\\DOCUME~1\\JULIEN~1.049\\LOCALS~1\\Temp\\81exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\87exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\87exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.q.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.q.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\76exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\76exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\55exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\55exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\40exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\16exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\16exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\45exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\45exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\81exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\81exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\13exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\13exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\6exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\6exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\57exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\57exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\91exinjs.r.exe"="D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\91exinjs.r.exe:*:Enabled:Microsoft Update"
"D:\\DOCUME~1\\tous\\LOCALS~1\\Temp\\9exinjs.r.exe"="D:\\DOCUME~1\\tous\ -
-
Voici le nouveau log de hijack:
Logfile of HijackThis v1.99.1
Scan saved at 19:42:52, on 13/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\FTRTSVC.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\Apps\Powercinema\PCMService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\apps\ABoard\ABoard.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\Canon\MultiPASS4\monitr32.exe
C:\Program Files\Canon\MultiPASS4\MPTBox.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\program files\steam\steam.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\upgrepl.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=6&key=SEARCH
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [monitr32] C:\Program Files\Canon\MultiPASS4\monitr32.exe
O4 - HKLM\..\Run: [MPTBox] C:\Program Files\Canon\MultiPASS4\MPTBox.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: MpService - Canon Inc - C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
a++
-
- 1
- 2
- 3
- 4
Suivant
