Problème de pubs sur EI

Résolu

raffiné Messages postés 217 Date d'inscription Statut Membre Dernière intervention -
yoyo - 28 déc. 2007 à 11:44

Bonjour, depuis quelques jours j'ai des gros problèmes avec des pages de pubs intempestives sur IE et apparament je ne suis pas la seule ca rassure j'ai fait un rapport hijackthis mais je dois avouer que je n'y comprend stritement rien l'informatique ce n'est pas trop mon fort
j'espère que qu'elqu'un pourra m'aider merci d'avance

voici le rapport

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:00:16, on 12/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
C:\WINDOWS\system32\oldmmuek.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Fichiers communs\AOL\1190623827\ee\AOLSoftware.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\vsnpstd2.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\AOL 9.0 VR\waol.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\PrintKey 2000 Fr\Printkey 2000 Fr.exe
c:\program files\fichiers communs\aol\1190623827\ee\services\antiSpywareApp\ver2_0_28_1\AOLSP Scheduler.exe
C:\Program Files\AOL 9.0 VR\shellmon.exe
C:\Program Files\Fichiers communs\AOL\Topspeed\3.0\aoltpsd3.exe
c:\program files\fichiers communs\aol\1190623827\ee\aolsoftware.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {11A69AE4-FBED-4832-A2BF-45AF82825583} - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1190623827\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [EPSON Stylus CX3600 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE /P26 "EPSON Stylus CX3600 Series" /O6 "USB001" /M "Stylus CX3600"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SNPSTD2] C:\WINDOWS\vsnpstd2.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Windows Update] C:\WINDOWS\System32\lvdlsa.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [21551a7a] rundll32.exe "C:\WINDOWS\system32\snaegqwb.dll",b
O4 - HKLM\..\RunOnce: [MessengerPlusLiveUninstall] "C:\DOCUME~1\NUNUR\LOCALS~1\Temp\MsgPlusUninstall.exe" /Cleanup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0 VR\AOL.EXE" -b
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: PrintKey 2000 Fr.lnk = C:\Program Files\PrintKey 2000 Fr\Printkey 2000 Fr.exe
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://3dlifeplayer.dl.3dvia.com/player/install/installer.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{0025B105-D86F-4DD3-8514-40AC82D15FEA}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{00842C39-07B5-4B8A-8A97-6553530C20BB}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{08B65D70-FF0B-40CA-9472-7BC71AA49620}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{7F7639E0-8FEA-4B98-B804-24E9687EFFF8}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{7F95AA4E-968E-46C3-BD3C-E4EE273AE51E}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{9E97F286-7974-4E41-9AEA-3649BD95E53F}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{A07392D1-8423-4AFE-ABB8-D8C87C820981}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS1\Services\Tcpip\..\{0025B105-D86F-4DD3-8514-40AC82D15FEA}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\..\{0025B105-D86F-4DD3-8514-40AC82D15FEA}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: DomainService - - C:\WINDOWS\system32\oldmmuek.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

A voir également:

Problème de pubs sur EI
Comment bloquer les pubs sur youtube - Accueil - Streaming
Supprimer les pubs - Guide
Bloqueur de pub m6 - Forum Réseaux sociaux
Comment couper le son des pubs dans les jeux - Forum Xiaomi
Comment desactiver un bloqueur de pub ✓ - Forum Mozilla Firefox

183 réponses

Réponse 1 / 183

raffiné Messages postés 217 Date d'inscription Statut Membre Dernière intervention 1

suite

[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\TMPGEnc DVD Author 3 with DivX® Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Spyware Doctor 5.0.0.186 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Movie Joiner v3.51 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\COMMANDOS III Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Mysteryville Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Lost Season 03 all Episodes Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\PowerISO 3.6 (Final) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Virtual Modem v.1.7.3 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\FireFox 2 - Vista Black Skin Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\eXPert PDF Version 4.2.50 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\DJ Jazzy Jeff - The Return of the Magnificent Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\KRS-OneMarley Marl - Hip Hop Lives (2007) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Salah Edin - Nederlands Grootste Nachtmerrie Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Kempi - Zet Um Op Baby (CD Single) Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\R. Kelly - The R. in RB Collection, Vol. 1 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\V.A. - Coach Carter [O.S.T.] Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Kempi - Mixtape 2 Rap n Borie (2007) Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Joss Stone - Introducing Joss Stone Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Simon Webbe - Grace Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Vaginal Cumshots Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Swedish Maria - Double Penetration Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Cream Pie Hunnies #1 • Jenya Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Nicole Sheridan - Entice Me Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Garotas Da Van #2 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Garotas Da Van #1 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Double Dipper - Dildo In Cunt Dick In Ass Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Belladonna - No Limits Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\elladonna - Chairfuck • New Sensations Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\My First Sex Teacher Collection Mrs Luv Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Vaginal Cumshots Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Nicole Sheridan - Entice Me Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Garotas Da Van #2 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Garotas Da Van #1 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\elladonna - Chairfuck • New Sensations Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\My First Sex Teacher Collection Mrs Luv Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Mediata Survey v2.0.5 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Avast Antivirus Pro ver. 4.7.942 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Nero 7 ultra edition 7.9.6.0 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Pinnacle Studio MediaSuite v10.6 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\DVDFab Platinum 3.1.1.6 Final Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\XP Repair Pro 2007 Build 3.5.4 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\CATIA v5r17 Service Pack 1 FuLL Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Tuning Car Studio Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Absolute MP3 SplitterConverter v2.6.2 Serial Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Pinnacle Studio Premium Pack Volume 1,2 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Jenna Haze - Anabolic Initiations Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Horny Little Schoolgirls Xxx Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Hentai Love Doll 1 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Teen Idol 4 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Monica and 2 boys Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Sylvia Saint with Office Work! Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Nubiles.net_05.07.07.Maya.Set.4.Yellow.Tops.XXX.IMAGESET Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Nubiles.net_05.07.07.Tricia.Set.11.Cowboy.Girl.XXX.IMAGESET Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Nubiles.net_05.08.07.Martine.Set.1.Pink.Tops.XXX.IMAGESET Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Nubiles.net_05.08.07.Missy.Set.1.Bikini.Swimsuit.XXX.IMAGESET Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Jenna Haze - Anabolic Initiations Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Horny Little Schoolgirls Xxx Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Hentai Love Doll 1 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Sylvia Saint with Office Work! Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Nubiles.net_05.07.07.Tricia.Set.11.Cowboy.Girl.XXX.IMAGESET Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Nubiles.net_05.08.07.Martine.Set.1.Pink.Tops.XXX.IMAGESET Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Nubiles.net_05.08.07.Missy.Set.1.Bikini.Swimsuit.XXX.IMAGESET Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Chat Watch 4.49 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Vista Effect For Xp 3d Flip Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Raxco Perfectdisk Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Personal Organizer v4.5 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Camfrog Video Chat v3.92 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Conaito PPT to Flash Converter v1.1.0.0 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Error Killer v2.62 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\NA Undelete v1.0.2 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Atrise Golden Section v2.1.1 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Search Engine Composer v5.4 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Podcast Station v2.1.09 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Registry Repair v2.2 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Photo DVD Creator v5.43 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Post Internet Download Accelerator 5.1.2.1051 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Mobile Phone Unlocking 2007 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Abexo Registry Cleaner v5.0.0.0 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\DVDFab Platinum v3.1.1.6 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\DFX Audio Enhancer v8.349 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Super Typing Wizard v4.0 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Pulp Fiction HDRip Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Tremors HDRip Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Carlito’s Way HDRip Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Independence Day HDTV Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\The Invisible TS Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Breach SCR Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Spiderman 3 TS Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Highwaymen HDRip Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Parkan 2 full iso Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Infernal [PC-DVD] Full Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Battlefield 2142 (Rip) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Zoo Tycoon Complete Collection Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Tomb Raider Anniversary [2007] Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Quake 4 ISO DVD Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Lord Of The Rings Battle For Middle Earth Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Brian Lara International Cricket 2007 PC Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Double Password v1.21 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Registry Mechanic 6.1.00.7500 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Adobe After Effects 6.5 Professional Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\DVDFab Platinum 3.1.1.6 - Final! (Ghosthunter) Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Adobe Dreamweaver CS3 Keygen Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\MySpace FriendBlasterPro v7.1 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Image Line EzGenerator 2.8.0.20 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Dr.Web Anti-virus with AntiSpam 4.33.3.05070 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Slysoft CloneCD v5.3.0.5 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\WebcamMax 3.5.1.0 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Runes of Avalon v1.3 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\The Sims 2 - Night Life Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\The Sims 2 - University Expansion Pack, Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Virtua Tennis Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Secrets of Olympus Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Escape From Paradise Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Snapshot Adventures Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Snapshot Adventures Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Escape From Paradise Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Secrets of Olympus Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Virtua Tennis Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\The Sims 2 - University Expansion Pack, Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Runes of Avalon v1.3 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Sunshine TS Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Delta Farce(2007) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Shrek The Third (2007) TS Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\The Condemned TS. Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Deja Vu (2006) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\VirtualDub 1.7.2.27700 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Droppix Recorder v 2.0.1 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\DVD Cloner 4.01 Build 903 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Wolfram Mathematica 6 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Ultra DVD Creator 1.7.6 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Google SketchUp Pro 6.0.515 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Camfrog Video Chat 3.92 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\VirtualDub 1.7.2.27700 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Vista Codec Package 4.4.3 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Droppix Recorder v 2.0.1 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\DVD Cloner 4.01 Build 903 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Ultra DVD Creator 1.7.6 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Camfrog Video Chat 3.92 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Alcohol 120 1.9.6.4719 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Power AutoPlay Menu Creator Professional 7.7.120507D Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Sexy Cytherea Visit Candy Anal Store Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Nasty and Hot Brunette Cherry in hardcore action Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\My Girlfriend Squirts 4 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Beware Its Real Nasty Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\IncrediMail Xe Premium 5.5.0 Build 2847 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\she knows how to ride a COCK! Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Brunette Having very Deep Anal Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Kristyl Jade Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Dupehunter Professional Corporate Edition 6.0.0.2903 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Crystal Impact Match 1.5c Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Google Maps Images Downloader v2.3 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Teleport Pro ver. 1.46 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Windows XP USB Edition Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\BitDefender Antivirus Plus v10.0 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Milky Beauty Teen Veronica Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\HALO 2 (2007) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Tomb Raider - Anniversary Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Legacy Of Kain Blood Omen Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Tv Tycoon Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Car Wash Tycoon Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Smokin Aces (2007) Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Code Name The Cleaner (2007) Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Code Name The Cleaner (2007) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\The Condor (2007) Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\3000 Miles (2007) Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\The Last Sin Eater (2007) Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Northanger Abbey (2007) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Gridiron Gang (2006) Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Departed (2006) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\The World’s Fastest Indian (2005) Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Catch a Fire (2006) Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\200 Pounds Beauty (2006) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Wicked Little Things (2006) Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\The Marsh (2006) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Running Scared (2006) Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\SlySoft CloneDVD 2.9.0.6 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Biodraw Ultra 10.0 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Melomania V1.6.0.1 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Zd Soft Game Recorder 1.5 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\XXX DVD Rip Anal School 3 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\XXX DVD Rip Fuck Me If You Can Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\XXX DVD Rip Dream Team Girls Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Zoom (DVDRip) Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Protectedsoft Final Burner Pro v1.14.0.103 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\PassMark Performance Test v6.1.1002 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\GigAlarm v1.29 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\WinLicense v1.8.5.5 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\RecentX v1.1.32 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Bangbros - Bangbus Christina Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\BoostXP 2 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\XXX DVD Rip Stripper School Orgy Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Google SketchUp Pro 6 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\WiFi Radar and Hack Tools Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Resource Hacker Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\jv16 PowerTools 2007 1.7.0.377 RC2 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Cheetah CD Burner v4.07 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\DVDFab Platinum v3.1.1.2 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\SpeedUpMyPC v.3.2 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\IMSI TurboCAD Deluxe v14.0 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Word Password Recovery v1.0E Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\WinRar 3.62 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Spyware Doctor 5.0.0.182 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Registry Booster v1.4 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Portable Photoshop CS3 Final Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Proxy Finder 1.95 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Vista Manager 1.1.4 (3264bits) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Network Magic 4.1.7039 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\System Cleaner 5.53 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Vista Manager 1.1.4 (3264bits) Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\System Cleaner 5.53 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\PowerISO v3.7 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\DivX Pro v.6.5.1 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\AutoIt 3.2.41 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\The Shooter [2007] Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\The Chinese Botanist's Daughters (2006) Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Wicked City DVD RIP Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Curse Of The Golden Flower - DvD Rip DivX Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Fatal Contact 2005 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\A.Crime.2006.DVDRip.XviD-BeStDivX Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Fly High (2006) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Craving Big Cocks 14 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Kill Jill Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Horny Holiday Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Norbit (2007) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\McAfee Total Protection 2007 RETAIL ISO Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Resident Evil 4 RIP Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\UEFA Champions League 2006 2007 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\FINAL FANTASY VIII Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Adobe Auto Cracker Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\SoundForge 9.0 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Fruity Loops Studio V.7 XXL edition Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\FlashFXP 3.4.0 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\WinSnap 2.0.7 Multilanguage Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\ConvertX to DVD v2.1.18.242 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Remote Administrator (Radmin) v3.0 FULL Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Registry Booster v1.4 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Avant Browser 11.0 Build 46 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\SpeedCommander 11.60 Build 4900 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\GoldWave 5.19 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\WinTools.net Professional 8.2.1 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\F-Prot Antivirus 6.0.6.1 for Windows Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\MediaMonkey 2.5.5.998 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\FileZilla 2.2.31 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Opera 9.20 Build 8732 Beta for Windows Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Microsoft Identity Integration Server 2003 Enterprise Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Avant Browser 11.0 Build 46 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\SpeedCommander 11.60 Build 4900 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\GoldWave 5.19 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\WinTools.net Professional 8.2.1 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\F-Prot Antivirus 6.0.6.1 for Windows Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\MediaMonkey 2.5.5.998 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\FileZilla 2.2.31 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Microsoft Identity Integration Server 2003 Enterprise Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Visual Basic 6 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Speed Gear v5.0 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\SpeedUpMyPC 3.5.2321.28 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Rapidshare Tools 07 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\WinSpeedUp v2.8 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\I’m A Big Girl Now 7 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Daddy’s Little Princess 2 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Spider-man 3 SFT Loader! Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Car Tycoon Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\FlatOut 2 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Gta San Andreas FULL Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Worms 2007 for mobile Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Dameware NT Utilities v6.2.0.0 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Atomix Virtual DJ Pro v4.1R2 Plugin Skin - Effects Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Winamp Pro v5.35.1305 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Adobe Acrobat Reader® v8 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Undead Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Hard Drive Inspector v1.88.954 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\I Am A Good Daughter - Claudia Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Adobe Flash Professional CS3 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Hot Blonde Strip Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Assparade 9 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\GTA Liberty City Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Girls Gone Wild Best Breasts Ever Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Promises Of The Heart Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Big Toys No Boys 5 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Skin On Skin Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Craving Big Cocks 14 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Cum Fart Cocktails 4 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\VariCAD 2007 v1.08 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Article Submitter v1.6 Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\FirmTools Panorama Composer v3.0.401 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Hannibal Rising (2007)Hannibal Rising (2007) Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Man on Fire (2004) Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Reno 911! Miami Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Crazy Taxi Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Theme Hospital Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Deep Sea Tycoon Divers Paradise Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Land of the dead - Road to Fiddler's Green Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Moto Racer 3 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Hitman Contracts 3 Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Hostel (2005) Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Reno 911! Miami Patch.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Photodex ProShow Producer 3.0.1942 Crack.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Blades of Glory (2007) Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\300 (2007) Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Snow Cake (2006) Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Demons From Her Past (2007) Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Delta Farce (2007) Keygen.zip
[0] Archive type: ZIP
--> Crack.exe
[DETECTION] Is the Trojan horse TR/Agent.cmn.1
[INFO] The file was deleted!
C:\WINDOWS\Fonts\'\Fay Grim (2007) Patch.zip
[0] Archive type: ZIP
--> Crack.exe

Réponse 2 / 183

chrifleur Messages postés 1091 Date d'inscription Statut Contributeur Dernière intervention 18

bonjour
Télécharge VundoFix.exe (par Atribune) sur ton Bureau
http://www.atribune.org/ccount/click.php?id=4
clic double sur VundoFix.exe afin de le lancer
clic sur le bouton Scan for Vundo
Lorsque le scan est complété, clic sur le bouton Remove Vundo
Une invite te demandera si tu veux supprimer les fichiers, clic YES
Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers
Tu verras une invite qui t'annonce que ton PC va redémarrer;
clic OK
Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci haut, à partir de "clic sur le bouton Scan for Vundo".
Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis dans ta prochaine réponse

Réponse 3 / 183

raffiné Messages postés 217 Date d'inscription Statut Membre Dernière intervention 1

tous d'abord merci d'avoir repondu j'ai fait ce que tu m'a dis voila le message que m'affiche vundofix une fois scan for vundo terminer : done searching for files. et en dessous du message c'est écris ok et quand je clic ok ca me mets : done searching for files. No infected files were found je ne sais pas si c'est bien clair j'espère que tu conprendra

Réponse 4 / 183

chrifleur Messages postés 1091 Date d'inscription Statut Contributeur Dernière intervention 18

Télécharge combofix.exe (par sUBs) sur ton Bureau
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Double clique combofix.exe.
Tape sur la touche Y (Yes) pour démarrer le scan.
Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse
NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question

Réponse 5 / 183

raffiné Messages postés 217 Date d'inscription Statut Membre Dernière intervention 1

désolé pour l'attente mais j'ai rencontré quelques difficulté mais j'y suis arrivé voila le rapport :

ComboFix 07-11-08.1 - NUNUR 2007-11-12 17:16:49.1 - [color=red][b]FAT32[/b][/color]x86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.218 [GMT 1:00]
Running from: C:\Documents and Settings\NUNUR\Mes documents\telechargement\ComboFix.exe
* Created a new restore point
.

Incapable d'obtenir les privilèges Système

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Menu Démarrer\Live Safety Center.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Online Security Guide.lnk
C:\Documents and Settings\BRIAN\Local Settings\Application Data\nsrjgz.dat
C:\Documents and Settings\BRIAN\Local Settings\Application Data\nsrjgz.exe
C:\Documents and Settings\BRIAN\Local Settings\Application Data\nsrjgz_nav.dat
C:\Documents and Settings\BRIAN\Local Settings\Application Data\nsrjgz_navps.dat
C:\Documents and Settings\NUNUR\Bureau\Live Safety Center.lnk
C:\Documents and Settings\NUNUR\Bureau\Online Security Guide.lnk
C:\Documents and Settings\NUNUR\Favoris\Online Security Guide.lnk
C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\cvoetnvv.dll
C:\WINDOWS\system32\fubbapuk.dll
C:\WINDOWS\system32\msbfdieq.dll
C:\WINDOWS\system32\noxqnobr.dllbox
C:\WINDOWS\system32\onnmp.bak1
C:\WINDOWS\system32\onnmp.bak2
C:\WINDOWS\system32\onnmp.ini
C:\WINDOWS\system32\onnmp.ini2
C:\WINDOWS\system32\onnmp.tmp
C:\WINDOWS\system32\pac.txt
C:\WINDOWS\system32\pmnno.dll
C:\WINDOWS\system32\twnvgaqa.dll
C:\WINDOWS\system32\wgeqibwv.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_DOMAINSERVICE
-------\DomainService

((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-10-12 to 2007-11-12 ))))))))))))))))))))))))))))))))))))
.

2007-11-12 16:32 145,984 --a------ C:\WINDOWS\system32\noxqnobr.dll
2007-11-12 16:31 145,984 --a------ C:\WINDOWS\system32\oijhvnfs.dll
2007-11-12 16:30 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-11-12 10:28 81,472 --a------ C:\WINDOWS\system32\lhbbtoms.dll
2007-11-12 10:22 89,664 --a------ C:\WINDOWS\system32\snaegqwb.dll
2007-11-12 10:19 71,232 --a------ C:\WINDOWS\system32\pymalokg.exe
2007-11-11 12:15 88,128 --a------ C:\WINDOWS\system32\gfntpoqj.dll
2007-11-11 12:12 79,936 --a------ C:\WINDOWS\system32\fvkivpef.dll
2007-11-11 12:05 71,232 --a------ C:\WINDOWS\system32\dptprtpt.exe
2007-11-11 01:15 71,232 --a------ C:\WINDOWS\system32\oldmmuek.exe
2007-11-10 23:42 <REP> d-------- C:\Documents and Settings\BRIAN\Application Data\vlc
2007-11-10 23:00 81,472 --a------ C:\WINDOWS\system32\bjemuevf.dll
2007-11-10 22:57 71,232 --a------ C:\WINDOWS\system32\jirdvjct.exe
2007-11-10 21:34 81,472 --a------ C:\WINDOWS\system32\uqqjbygj.dll
2007-11-10 21:31 71,232 --a------ C:\WINDOWS\system32\wkxspvvm.exe
2007-11-10 18:40 81,472 --a------ C:\WINDOWS\system32\tyeosvlg.dll
2007-11-10 18:37 71,232 --a------ C:\WINDOWS\system32\fptdnpef.exe
2007-11-10 18:36 <REP> d-------- C:\HHeJay
2007-11-10 18:24 85,056 --a------ C:\WINDOWS\system32\osnbtlrj.dll
2007-11-10 18:24 81,472 --a------ C:\WINDOWS\system32\mfwdgwyv.dll
2007-11-10 18:21 71,232 --a------ C:\WINDOWS\system32\wndgqewe.exe
2007-11-10 15:16 81,472 --a------ C:\WINDOWS\system32\vulxfacj.dll
2007-11-10 15:16 71,232 --a------ C:\WINDOWS\system32\ekvvsswt.exe
2007-11-10 10:02 81,472 --a------ C:\WINDOWS\system32\pjxpigqi.dll
2007-11-10 09:59 85,056 --a------ C:\WINDOWS\system32\dxsgubhb.dll
2007-11-10 09:51 71,232 --a------ C:\WINDOWS\system32\dgglymqb.exe
2007-11-10 09:47 71,232 --a------ C:\WINDOWS\system32\scoyxuks.exe
2007-11-09 20:27 <REP> d-------- C:\Program Files\CCleaner
2007-11-09 16:06 <REP> d-------- C:\Program Files\Trend Micro
2007-11-09 11:30 77,888 --a------ C:\WINDOWS\system32\ryoabuns.dll
2007-11-09 11:24 71,232 --a------ C:\WINDOWS\system32\omtomiey.exe
2007-11-08 22:18 <REP> d-------- C:\Program Files\SymNetDrv
2007-11-08 22:08 <REP> d-------- C:\Program Files\Norton AntiVirus
2007-11-08 22:08 4,608 --a------ C:\WINDOWS\system32\drivers\symlcbrd.sys
2007-11-08 22:07 <REP> d-------- C:\Program Files\Symantec
2007-11-08 22:07 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Symantec
2007-11-08 22:07 124,016 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2007-11-08 22:07 91,904 --a------ C:\WINDOWS\system32\S32EVNT1.DLL
2007-11-08 20:15 <REP> d-------- C:\Program Files\RegCleaner
2007-11-08 18:20 <REP> d-------- C:\Program Files\Alwil Software
2007-11-08 11:26 80,448 --a------ C:\WINDOWS\system32\ompnwjjc.dll
2007-11-08 11:23 71,232 --a------ C:\WINDOWS\system32\xxtpxdlm.exe
2007-11-08 09:37 <REP> d-------- C:\WINDOWS\Sun
2007-11-08 09:24 172 --a------ C:\1444.bat
2007-11-07 15:32 <REP> d-------- C:\WINDOWS\system32\Mz18r
2007-11-07 15:32 <REP> d-------- C:\Documents and Settings\BRIAN\Shared
2007-11-07 11:32 86,080 --a------ C:\WINDOWS\system32\hovmgarh.dll
2007-11-07 11:29 79,936 --a------ C:\WINDOWS\system32\ggulbtvl.dll
2007-11-07 11:23 71,232 --a------ C:\WINDOWS\system32\hwrwgkbl.exe
2007-11-07 11:20 145,984 --a------ C:\WINDOWS\system32\vryqyaua.dll
2007-11-07 10:31 35,328 --a------ C:\WINDOWS\system32\byxvtqr.dll
2007-11-07 09:11 35,328 --a------ C:\WINDOWS\system32\xxyywwv.dll
2007-11-06 12:24 35,328 --a------ C:\WINDOWS\system32\vtusrrq.dll
2007-11-06 11:25 81,472 --a------ C:\WINDOWS\system32\pppqggxy.dll
2007-11-06 10:11 <REP> d-------- C:\Documents and Settings\DYLAN\Application Data\AOL
2007-11-06 10:05 35,328 --a------ C:\WINDOWS\system32\nnnlllk.dll
2007-11-06 08:34 35,328 --a------ C:\WINDOWS\system32\ljjkhed.dll
2007-11-05 12:17 35,328 --a------ C:\WINDOWS\system32\wvutrqn.dll
2007-11-05 12:17 786 --a------ C:\6946.bat
2007-11-05 11:26 83,008 --a------ C:\WINDOWS\system32\ebkarbda.dll
2007-11-05 09:50 <REP> d-------- C:\Documents and Settings\BRIAN\Incomplete
2007-11-05 09:36 <REP> d-------- C:\Documents and Settings\BRIAN\Application Data\LimeWire
2007-11-05 09:32 35,328 --a------ C:\WINDOWS\system32\efcdebx.dll
2007-11-04 23:13 786 --a------ C:\3191.bat
2007-11-04 23:12 35,328 --a------ C:\WINDOWS\system32\pmnmnnl.dll
2007-11-04 23:12 786 --a------ C:\3295.bat
2007-11-04 16:39 147,456 --a------ C:\WINDOWS\system32\vbzip10.dll
2007-11-04 16:34 <REP> d-------- C:\Documents and Settings\All Users\Application Data\TEMP
2007-11-04 01:14 <REP> d-------- C:\Documents and Settings\NUNUR\Application Data\LimeWire
2007-11-02 18:00 <REP> d-------- C:\Program Files\DofusArena2
2007-10-31 18:03 <REP> d-------- C:\Program Files\GrabIt
2007-10-30 12:36 <REP> d-------- C:\Hermes
2007-10-30 12:36 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Samsung
2007-10-30 12:33 137,884 -ra------ C:\WINDOWS\system32\drivers\sscdmdm.sys
2007-10-30 12:33 80,272 -ra------ C:\WINDOWS\system32\drivers\sscdbus.sys
2007-10-30 12:33 11,877 -ra------ C:\WINDOWS\system32\drivers\sscdcmnt.sys
2007-10-30 12:33 11,877 -ra------ C:\WINDOWS\system32\drivers\sscdcm.sys
2007-10-30 12:33 11,188 -ra------ C:\WINDOWS\system32\drivers\sscdwhnt.sys
2007-10-30 12:33 11,188 -ra------ C:\WINDOWS\system32\drivers\sscdwh.sys
2007-10-30 12:33 10,864 -ra------ C:\WINDOWS\system32\drivers\sscdmdfl.sys
2007-10-30 12:31 <REP> d-------- C:\Program Files\Samsung
2007-10-28 00:31 <REP> d-------- C:\Documents and Settings\BRIAN\Application Data\Leadertech
2007-10-27 18:33 <REP> d-------- C:\Program Files\Messenger Plus! Live
2007-10-27 18:28 <REP> d-------- C:\Documents and Settings\NOLAN\Contacts
2007-10-27 18:27 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-10-27 18:26 <REP> d-------- C:\Documents and Settings\NOLAN\WINDOWS
2007-10-27 18:26 <REP> d--h----- C:\Documents and Settings\NOLAN\Voisinage r‚seau
2007-10-27 18:26 <REP> d---s---- C:\Documents and Settings\NOLAN\UserData
2007-10-27 18:26 <REP> d--h----- C:\Documents and Settings\NOLAN\ModŠles
2007-10-27 18:26 <REP> dr------- C:\Documents and Settings\NOLAN\Mes documents
2007-10-27 18:26 <REP> dr------- C:\Documents and Settings\NOLAN\Menu D‚marrer
2007-10-27 18:26 <REP> dr------- C:\Documents and Settings\NOLAN\Favoris
2007-10-27 18:26 <REP> d-------- C:\Documents and Settings\NOLAN\Bureau
2007-10-27 18:26 <REP> d-------- C:\Documents and Settings\NOLAN\Application Data\Roxio
2007-10-27 18:26 <REP> d-------- C:\Documents and Settings\NOLAN\Application Data\CyberLink
2007-10-27 14:57 <REP> d-------- C:\Documents and Settings\NUNUR\Application Data\SlySoft
2007-10-27 13:55 <REP> d-------- C:\Documents and Settings\NUNUR\Application Data\Leadertech
2007-10-22 22:15 <REP> d-------- C:\Documents and Settings\NUNUR\Shared
2007-10-22 22:14 <REP> d-------- C:\Program Files\Java
2007-10-22 22:13 <REP> d-------- C:\Program Files\Fichiers communs\Java

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-10 08:34 --------- d-----w C:\Program Files\Micro Application
2007-10-09 22:14 --------- d-----w C:\Program Files\TryMedia
2007-10-09 22:14 --------- d-----w C:\Program Files\InterVideo
2007-10-09 15:40 --------- d-----w C:\Documents and Settings\BRIAN\Application Data\AOL
2007-10-06 16:49 --------- d-----w C:\Documents and Settings\DYLAN\Application Data\vlc
2007-10-05 22:37 --------- d-----w C:\Program Files\AC3Filter
2007-10-02 17:22 --------- d-----w C:\Documents and Settings\NUNUR\Application Data\InfraRecorder
2007-10-02 13:49 --------- d-----w C:\Program Files\CDex
2007-10-01 11:15 839,688 ----a-w C:\WINDOWS\Fonts\Crack.exe
2007-09-30 12:56 --------- d-----w C:\Program Files\eMule
2007-09-28 09:37 --------- d-----w C:\Documents and Settings\NUNUR\Application Data\MSN6
2007-09-28 09:37 --------- d-----w C:\Documents and Settings\All Users\Application Data\MSN6
2007-09-27 21:28 --------- d-----w C:\Program Files\AviSynth 2.5
2007-09-27 21:26 --------- d-----w C:\Program Files\Ripp-it_AM
2007-09-27 16:40 --------- d-----w C:\Program Files\Simple PDF
2007-09-27 15:54 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-09-26 16:31 --------- d-----w C:\Documents and Settings\DYLAN\Application Data\Ecran de veille
2007-09-26 14:07 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2007-09-25 15:51 --------- d-----w C:\Program Files\Fichiers communs\Scanner
2007-09-25 08:21 --------- d-----w C:\Documents and Settings\NUNUR\Application Data\Ahead
2007-09-24 20:43 --------- d-----w C:\Documents and Settings\NUNUR\Application Data\AdobeUM
2007-09-24 20:38 --------- d-----w C:\Program Files\DVD Shrink
2007-09-24 20:38 --------- d-----w C:\Documents and Settings\All Users\Application Data\DVD Shrink
2007-09-24 17:30 --------- d-----w C:\Program Files\Google
2007-09-24 13:00 --------- d-----w C:\Program Files\Siber Systems
2007-09-24 13:00 --------- d-----w C:\Documents and Settings\All Users\Application Data\RoboForm
2007-09-24 11:59 --------- d-----w C:\Program Files\PrintKey 2000 Fr
2007-09-24 11:47 --------- d-----w C:\Program Files\MSN Messenger
2007-09-24 11:43 --------- d-----w C:\Program Files\Winamp
2007-09-24 11:40 --------- d-----w C:\Documents and Settings\NUNUR\Application Data\vlc
2007-09-24 11:39 --------- d-----w C:\Program Files\VideoLAN
2007-09-24 11:37 --------- d-----w C:\Documents and Settings\NUNUR\Application Data\Smart Panel
2007-09-24 11:31 --------- d-----w C:\Documents and Settings\All Users\Application Data\UDL
2007-09-24 11:30 --------- d-----w C:\Program Files\Smart Panel
2007-09-24 11:28 --------- d-----w C:\Program Files\epson
2007-09-24 10:41 --------- d-----w C:\Program Files\QuickTime
2007-09-24 10:41 --------- d-----w C:\Program Files\Learn2.com
2007-09-24 10:41 --------- d-----w C:\Program Files\AOL Compagnon
2007-09-24 10:41 --------- d-----w C:\Documents and Settings\NUNUR\Application Data\You've Got Pictures Screensaver
2007-09-24 10:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\QuickTime
2007-09-24 10:40 8,552 ----a-w C:\WINDOWS\system32\drivers\asctrm.sys
2007-09-24 10:40 --------- d-----w C:\Program Files\Real
2007-09-24 10:40 --------- d-----w C:\Program Files\Fichiers communs\Real
2007-09-24 10:40 --------- d-----w C:\Program Files\AOL 9.0
2007-09-24 10:16 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-09-24 10:05 --------- d-----w C:\Program Files\Fichiers communs\Nero
2007-09-24 10:03 --------- d-----w C:\Program Files\Fichiers communs\Ahead
2007-09-24 10:03 --------- d-----w C:\Program Files\Ahead
2007-09-24 10:03 --------- d-----w C:\Documents and Settings\All Users\Application Data\Ahead
2007-09-24 09:52 --------- d-----w C:\Documents and Settings\NUNUR\Application Data\AOL
2007-09-24 09:51 --------- d-----w C:\Program Files\Viewpoint
2007-09-24 09:51 --------- d-----w C:\Program Files\Fichiers communs\Nullsoft
2007-09-24 09:51 --------- d-----w C:\Documents and Settings\All Users\Application Data\Viewpoint
2007-09-24 09:50 --------- d-----w C:\Program Files\AOL 9.0 VR
2007-09-24 09:50 --------- d-----w C:\Documents and Settings\All Users\Application Data\AOL
2007-09-24 09:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\AOL Downloads
2007-09-24 09:11 --------- d-----w C:\Documents and Settings\LocalService\Application Data\Symantec
2007-09-24 08:53 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2007-09-24 08:53 --------- d-----w C:\Documents and Settings\NUNUR\Application Data\Symantec
2007-09-24 08:42 --------- d-----w C:\Program Files\Fichiers communs\aolshare
2007-09-24 08:42 --------- d-----w C:\Program Files\AOL 8.0
2007-09-24 08:41 --------- d-----w C:\Program Files\Fichiers communs\AOL
2007-09-24 08:30 81,920 ----a-w C:\WINDOWS\system32\W32N50.dll
2007-09-24 08:30 17,134 ----a-w C:\WINDOWS\system32\PCANDIS5.sys
2007-09-24 08:13 278,528 ----a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe
2007-09-24 08:13 --------- d-----w C:\Program Files\AOLbox
2007-09-21 20:56 24,192 ----a-w C:\Documents and Settings\NUNUR\usbsermptxp.sys
2007-09-21 20:56 22,768 ----a-w C:\WINDOWS\system32\drivers\usbsermpt.sys
2007-09-21 20:56 22,768 ----a-w C:\Documents and Settings\NUNUR\usbsermpt.sys
2007-09-21 20:55 --------- d-----w C:\Documents and Settings\All Users\Application Data\BVRP Software
2007-08-22 12:57 96,768 ------w C:\WINDOWS\system32\dllcache\inseng.dll
2007-08-22 12:57 669,696 ------w C:\WINDOWS\system32\dllcache\wininet.dll
2007-08-22 12:57 620,032 ------w C:\WINDOWS\system32\dllcache\urlmon.dll
2007-08-22 12:57 55,808 ------w C:\WINDOWS\system32\dllcache\extmgr.dll
2007-08-22 12:57 532,480 ------w C:\WINDOWS\system32\dllcache\mstime.dll
2007-08-22 12:57 474,624 ------w C:\WINDOWS\system32\dllcache\shlwapi.dll
2007-08-22 12:57 449,024 ------w C:\WINDOWS\system32\dllcache\mshtmled.dll
2007-08-22 12:57 39,424 ------w C:\WINDOWS\system32\dllcache\pngfilt.dll
2007-08-22 12:57 357,888 ------w C:\WINDOWS\system32\dllcache\dxtmsft.dll
2007-08-22 12:57 3,085,824 ------w C:\WINDOWS\system32\dllcache\mshtml.dll
2007-08-22 12:57 251,904 ------w C:\WINDOWS\system32\dllcache\iepeers.dll
2007-08-22 12:57 205,824 ------w C:\WINDOWS\system32\dllcache\dxtrans.dll
2007-08-22 12:57 16,384 ------w C:\WINDOWS\system32\dllcache\jsproxy.dll
2007-08-22 12:57 152,064 ------w C:\WINDOWS\system32\dllcache\cdfview.dll
2007-08-22 12:57 146,432 ------w C:\WINDOWS\system32\dllcache\msrating.dll
2007-08-22 12:57 1,498,624 ----a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
2007-08-22 12:57 1,056,768 ----a-w C:\WINDOWS\system32\dllcache\danim.dll
2007-08-22 12:57 1,023,488 ------w C:\WINDOWS\system32\dllcache\browseui.dll
2007-08-21 10:19 18,432 ------w C:\WINDOWS\system32\dllcache\iedw.exe
2007-08-21 07:17 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
2007-08-21 07:17 683,520 ------w C:\WINDOWS\system32\dllcache\inetcomm.dll
2007-08-20 10:59 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll
2007-08-20 10:59 6,058,496 ------w C:\WINDOWS\system32\dllcache\ieframe.dll
2007-08-20 10:59 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2007-08-20 10:59 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll
2007-08-20 10:59 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll
2007-08-20 10:59 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll
2007-08-17 11:22 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
2003-10-23 16:52 40,960 ----a-w C:\Program Files\Uninstall_CDS.exe
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{088180AD-70EF-4C1D-AB23-E6EE9ACA18FE}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B209275-6EE0-407C-A9FF-AD7E0EC3AD98}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0C160F34-BF48-4849-94BE-457A136DAD1B}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1C1DD717-53B2-485E-A17B-C9977C205E10}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25791D44-C0D3-4C39-937F-AF713D375660}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{28D460C4-1C74-4D0D-8BB5-875A071CB6F5}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2CEF41EC-BFCF-4BEA-A01A-18DBC973274B}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{348F760A-FCAF-4703-94D8-0F9BBB2C2C98}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3FCCF749-C5A0-4941-81F2-2305C249B898}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{41515D6E-7986-4643-88F6-9C62BF8A2CB3}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{465FADD0-61FC-467A-8D43-ABA86B056D20}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{480BC6CF-1A62-4220-8A7E-DB4C29F8F7FD}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{52945d56-b7f0-47b8-87dd-bf9dad386ad5}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5BD69F69-1E68-45E0-8A15-CC95B4DB8487}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5E27209A-37FF-45C6-9C38-7E88B9114DB6}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6669F3AF-F6B8-4A18-9665-F3B0DF2496FD}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6A850F86-3B8D-4B62-B222-601FB9971D11}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6b6cd879-90ae-4172-be08-bcd015fdea0e}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6BB415C4-DE26-4E1B-A3A2-7D155B24EF2B}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7EAFDC3D-0E24-4ECE-80DB-BB5DBE63CCF9}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{85e25d19-08be-4a5a-afd1-7ab77c86475c}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8780F9AA-1D46-410A-A4D5-436DD9A3958D}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{87A8E2C3-05E9-41F7-802B-2447F1DFECFD}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{87B8166D-5B9E-4AFB-B889-098CE589DBF9}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9177ef4d-addb-4307-8091-5e53fe7b5299}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{95bb197c-3231-44fb-b92a-d774a91e6b42}]
2007-11-12 10:28 81472 --a------ C:\WINDOWS\system32\lhbbtoms.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A5B8E8E7-F0AD-4706-8F32-FA445E14689E}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A63D1678-5752-4707-9373-EED82A2141D9}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A75C902D-25C1-4C6D-A621-8636605EC3BF}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A95B2816-1D7E-4561-A202-68C0DE02353A}]
2007-11-12 16:32 145984 --a------ C:\WINDOWS\system32\noxqnobr.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A995E20D-E25C-4180-BFCB-CD3D79BE3352}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF78DC4D-9983-4DCC-935B-40E45BACD126}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B012230C-373E-410D-947B-9281B8361DE0}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B8C7F479-A434-470D-9DF6-1A2A93E2F63A}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{BFA0FE9F-E173-4E2E-967B-83E8B7A20C3F}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{dc91ffeb-db15-4a9f-b398-fd3332b497f8}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E7E8CB79-BCE4-4EF0-9A05-D1775127D97E}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ECB4E168-7421-4BCE-8475-263DCECA2C6F}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EF08CB24-7B84-4E24-BAE1-2B5FBD12AA1A}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F328F8D8-48AB-414F-ADC5-3582B5C00DC3}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{11A69AE4-FBED-4832-A2BF-45AF82825583}"= C:\WINDOWS\system32\noxqnobr.dll [2007-11-12 16:32 145984]

[HKEY_CLASSES_ROOT\CLSID\{11A69AE4-FBED-4832-A2BF-45AF82825583}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{11A69AE4-FBED-4832-A2BF-45AF82825583}"= C:\WINDOWS\system32\noxqnobr.dll [2007-11-12 16:32 145984]

[HKEY_CLASSES_ROOT\CLSID\{11A69AE4-FBED-4832-A2BF-45AF82825583}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2003-08-15 08:34 C:\WINDOWS\SOUNDMAN.EXE]
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2004-09-29 13:23]
"nwiz"="nwiz.exe" [2004-09-29 13:23 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\System32\NvMcTray.dll" [2004-09-29 13:23]
"HostManager"="C:\Program Files\Fichiers communs\AOL\1190623827\ee\AOLSoftware.exe" [2006-09-26 02:52]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-09-24 11:41]
"EPSON Stylus CX3600 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.exe" [2004-03-04 05:00]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-02-13 20:29]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
"SNPSTD2"="C:\WINDOWS\vsnpstd2.exe" [2004-01-05 18:34]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2007-02-21 16:29]
"Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe" [2007-11-08 22:18]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" []
"21551a7a"="C:\WINDOWS\system32\snaegqwb.dll" [2007-11-12 10:22]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09]
"RoboForm"="C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2007-09-24 14:45]
"MSMSGS"="C:\Program Files\Messenger\MSMSGS.exe" [2004-10-13 18:24]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 12:55]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46]
"AOL Fast Start"="C:\Program Files\AOL 9.0 VR\AOL.exe" [2007-06-21 13:44]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\fccyyxw]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\noxqnobr]
noxqnobr.dll 2007-11-12 16:32 145984 C:\WINDOWS\system32\noxqnobr.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\pmnmnnl]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\vtusrrq]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wvutrqn]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 C:\WINDOWS\system32\pmnno.dll

R0 viamraid;viamraid;C:\WINDOWS\system32\DRIVERS\viamraid.sys
R2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique;"C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe"
R3 snpstd2;USB PC Camera (SN9C103);C:\WINDOWS\system32\DRIVERS\snpstd2.sys
S3 SetupNTGLM7X;SetupNTGLM7X;\??\H:\NTGLM7X.sys
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM);C:\WINDOWS\system32\DRIVERS\sscdbus.sys
S3 sscdmdfl;SAMSUNG CDMA Modem Filter;C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys
S3 sscdmdm;SAMSUNG CDMA Modem Drivers;C:\WINDOWS\system32\DRIVERS\sscdmdm.sys

.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2007-11-09 20:59:48 C:\WINDOWS\Tasks\Norton AntiVirus - Analyser mon ordinateur - NUNUR.job"
- C:\PROGRA~1\NORTON~1\Navw32.exe
.
**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-12 17:50:28
Windows 5.1.2600 Service Pack 2 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-11-12 18:20:43 - machine was rebooted
.
--- E O F ---

Réponse 6 / 183

raffiné Messages postés 217 Date d'inscription Statut Membre Dernière intervention 1

j'ai également un triangle jaune avec un point d'interrogation qui clignote dans ma barre d'outil et 2 logos en forme de bouclier 1 bleu et 1 vert qui s'installe tous seule sur le bureau j'ai beau les enlevé mais il reviennent sans cesse et ça depuis que j'ai attraper un cheval de troie le semaine dernière norton avait réussi a le suprimer avec beaucoup de mal mais depuis je suis embèté sans compter les page de pub sur EI (alerte de sécurité) je pense que ce sont des leures pouvez vous m'aider merci

Réponse 7 / 183

chrifleur Messages postés 1091 Date d'inscription Statut Contributeur Dernière intervention 18

je dois m'absenter ce matin
de retour cet après midi avec la suite, après examen à la loupe de ton rapport
en attendant fais ceci
Télécharge SmitfraudFix de S!Ri, balltrap34 et moe31
http://siri.urz.free.fr/Fix
Installe le à la racine de C\ : double clique sur l'exe pour le décompresser et lancer le fix.
Utilisation ----- option 1 - Recherche :
Double clique sur smitfraudfix.cmd Sélectionne 1 pour créer un rapport des fichiers responsables de l'infection.
Poste le rapport
Attention : process.exe est détecté par certains antivirus comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité

Clique sur ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Clique sur navilog1.zip pour télécharger navilog1
Choisis Enregistrer

et enregistre-le sur ton bureau.

Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le bloc note va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le bloc note.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

Réponse 8 / 183

raffiné

SmitFraudFix v2.252

Rapport fait à 12:52:56,75, 13/11/2007
Executé à partir de C:\Documents and Settings\NUNUR\Mes documents\telechargement\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est FAT32
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Fichiers communs\AOL\1190623827\ee\AOLSoftware.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\vsnpstd2.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
c:\program files\fichiers communs\aol\1190623827\ee\services\antiSpywareApp\ver2_0_28_1\AOLSP Scheduler.exe
C:\Program Files\AOL 9.0 VR\waol.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\PrintKey 2000 Fr\Printkey 2000 Fr.exe
C:\Program Files\AOL 9.0 VR\shellmon.exe
C:\Program Files\Fichiers communs\AOL\Topspeed\3.0\aoltpsd3.exe
c:\program files\fichiers communs\aol\1190623827\ee\aolsoftware.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

»»»»»»»»»»»»»»»»»»»»»»»» C:\

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\NUNUR

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\NUNUR\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\NUNUR\Favoris

»»»»»»»»»»»»»»»»»»»»»»»» Bureau

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

»»»»»»»»»»»»»»»»»»»»»»»» Rustock

»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Miniport de pont MAC - Miniport d'ordonnancement de paquets
DNS Server Search Order: 208.67.220.220
DNS Server Search Order: 208.67.222.222

HKLM\SYSTEM\CCS\Services\Tcpip\..\{0025B105-D86F-4DD3-8514-40AC82D15FEA}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{0025B105-D86F-4DD3-8514-40AC82D15FEA}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{00842C39-07B5-4B8A-8A97-6553530C20BB}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{00842C39-07B5-4B8A-8A97-6553530C20BB}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{08B65D70-FF0B-40CA-9472-7BC71AA49620}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{55977DA2-C8C6-405D-89DE-E41FDE482932}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{7F7639E0-8FEA-4B98-B804-24E9687EFFF8}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{7F7639E0-8FEA-4B98-B804-24E9687EFFF8}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{7F95AA4E-968E-46C3-BD3C-E4EE273AE51E}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{7F95AA4E-968E-46C3-BD3C-E4EE273AE51E}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{9E97F286-7974-4E41-9AEA-3649BD95E53F}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{9E97F286-7974-4E41-9AEA-3649BD95E53F}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{A07392D1-8423-4AFE-ABB8-D8C87C820981}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{A07392D1-8423-4AFE-ABB8-D8C87C820981}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{0025B105-D86F-4DD3-8514-40AC82D15FEA}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{0025B105-D86F-4DD3-8514-40AC82D15FEA}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{00842C39-07B5-4B8A-8A97-6553530C20BB}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{00842C39-07B5-4B8A-8A97-6553530C20BB}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{08B65D70-FF0B-40CA-9472-7BC71AA49620}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{55977DA2-C8C6-405D-89DE-E41FDE482932}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{7F7639E0-8FEA-4B98-B804-24E9687EFFF8}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{7F7639E0-8FEA-4B98-B804-24E9687EFFF8}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{7F95AA4E-968E-46C3-BD3C-E4EE273AE51E}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{7F95AA4E-968E-46C3-BD3C-E4EE273AE51E}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{9E97F286-7974-4E41-9AEA-3649BD95E53F}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{9E97F286-7974-4E41-9AEA-3649BD95E53F}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{A07392D1-8423-4AFE-ABB8-D8C87C820981}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{A07392D1-8423-4AFE-ABB8-D8C87C820981}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{0025B105-D86F-4DD3-8514-40AC82D15FEA}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{0025B105-D86F-4DD3-8514-40AC82D15FEA}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{00842C39-07B5-4B8A-8A97-6553530C20BB}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{00842C39-07B5-4B8A-8A97-6553530C20BB}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{08B65D70-FF0B-40CA-9472-7BC71AA49620}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{55977DA2-C8C6-405D-89DE-E41FDE482932}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{7F7639E0-8FEA-4B98-B804-24E9687EFFF8}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{7F7639E0-8FEA-4B98-B804-24E9687EFFF8}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{7F95AA4E-968E-46C3-BD3C-E4EE273AE51E}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{7F95AA4E-968E-46C3-BD3C-E4EE273AE51E}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{9E97F286-7974-4E41-9AEA-3649BD95E53F}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{9E97F286-7974-4E41-9AEA-3649BD95E53F}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{A07392D1-8423-4AFE-ABB8-D8C87C820981}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{A07392D1-8423-4AFE-ABB8-D8C87C820981}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin

voila le premier rapport

Réponse 9 / 183

raffiné Messages postés 217 Date d'inscription Statut Membre Dernière intervention 1

voila le deuxième rapport

Search Navipromo version 3.3.5 commencé le 13/11/2007 à 14:48:46,71

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Mise à jour le 08.11.2007 à 18h00 par IL-MAFIOSO

Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180

*** Recherche Programmes installés ***

*** Recherche dossiers dans C:\WINDOWS ***

*** Recherche dossiers dans C:\Program Files ***

*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***

*** Recherche dossiers dans C:\Documents and Settings\NUNUR\Application Data ***

*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDÉ~1\PROGRA~1 ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun fichier trouvé dans :

- C:\WINDOWS\system32
- C:\DOCUME~1\NUNUR\LOCALS~1\APPLIC~1

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\WINDOWS\system32 *

* Recherche dans C:\DOCUME~1\NUNUR\LOCALS~1\APPLIC~1 *

*** Recherche fichiers ***

*** Recherche clés spécifiques dans le Registre ***

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:

2)Recherche Heuristique :

3)Recherche Certificats :

Certificat Egroup absent !

*** Analyse terminée le 13/11/2007 à 14:49:14,15 ***

Réponse 10 / 183

raffiné Messages postés 217 Date d'inscription Statut Membre Dernière intervention 1

j'espère avoir fais tous correctement

Réponse 11 / 183

chrifleur Messages postés 1091 Date d'inscription Statut Contributeur Dernière intervention 18

tu es encore bien infecté
supprime smitfraud et navilog
Étape 1:
Télécharge eScan Antivirus Toolkit ici. Sauvegarde-le sur ton Bureau.

http://www.spywareinfo.dk/download/mwav.exe

Avant de lancer le programme, il faut le mettre à jour tel qu'indiqué à l'étape 2.

Étape 2:
Voici comment mettre l'outil à jour :

1.) Double-clique le fichier mwav.exe qui se trouve sur le Bureau ; dézippe les fichiers dans le nouveau dossier suggéré (C:\Kaspersky). Le programme va se lancer, et tu dois le quitter (clique sur "Exit" puis "Exit").

2.) Double-clique sur le Poste de travail, puis double-clique sur le lecteur principal (habituellement C:\), double-clique sur le dossier Kaspersky ; ensuite, double-clique sur le fichier kavupd.exe. Tu verras maintenant une fenêtre DOS apparaître, et la mise à jour se complètera en quelques minutes.

3.) Lorsque la mise à jour sera complétée, tu verras "Press any key to continue" ; tape sur une clé pour continuer. Deux nouveaux répertoires (dossiers) ont été créés lors de la mise à jour (C:\Bases et C:\Downloads).

4.) Sélectionne/copie tous les fichiers présents dans le dossier C:\Downloads, puis colle-les dans le dossier C:\Kaspersky. Accepte à l'invite de remplacer les fichiers existants.

Ne pas lancer le scan tout de suite !

Étape 3:
Redémarre en mode Sans Échec :
1) Redémarre ton ordi
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip"
3) Tu verras un écran avec options de démarrage apparaître
4) Choisi la première option : Sans Échec, et valide avec "Entrée"
5) Choisi ton compte régulier, et non Administrateur

Étape 4:
Du mode Sans Échec, voici comment utiliser le programme :

1.) Pour lancer "eScan Antivirus Toolkit", trouve le fichier mwavscan.com situé dans le dossier C:\Kaspersky

2.) Double-clique sur mwavscan.com ; l'interface d'eScan va apparaître à l'écran.

3.) Il est très important de bien cocher ces boîtes sous Scan Option : Memory, Registry, Startup Folders, System Folders, Services.

4.) Coche la boîte Drive, ce qui donne accès à une nouvelle boîte Drive (bouton rond) juste dessous ; coche ce bouton "Drive" (très important..), et tu verras une nouvelle boîte de navigation apparaître à la droite. Clique sur la petite flèche de cette boîte and choisi la lettre de ton disque dur, habituellement C:\.

5.) Juste au-dessous, assure-toi que Scan All Files est coché, et non Program Files.

6.) Clique sur Scan Clean et laisse le tool vérifier tout le disque dur (ça peut être long..). Lorsque terminé, tu verras Scan Completed. Ne pas quitter tout de suite !

7.) Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" >> "Programmes" >>"Accessoires" >> "Bloc notes"), puis copie/colle tout le contenu de la fenêtre Virus Log Information (la deuxième, au bas) dans le fichier texte, et sauvegarde le. eScan génère également un rapport complet dans le dossier C:\Kaspersky (nommé mwav.log), mais il est trop lourd pour poster sur le forum.

Ferme le programme. Redémarre ton PC en mode Normal. Poste (copie/colle) le rapport que tu as sauvegardé dans ta prochaine réponse.

redémarre normalement
refais Combofix et poste son rapport avec un rapport hijack his

Réponse 12 / 183

raffiné Messages postés 217 Date d'inscription Statut Membre Dernière intervention 1

bonjour en allumant mon ordi ce matin a ma grande surprise tous était rentré dans l'ordre comment je ne sais pas mon bureau est redevenue normal et plus rien ne clignote dans ma barre d'outil quant au pubs intempestives sur EI pour l'instant je n'en ai plus rien et le bloqueur de fenetes intempestives reste en position bloqué comme je l'ai moi mème paramètré je ne sais pas si ca va duré mais pour l'instant ca fonctionne .
un grand grand merci pour avoir pris le temps de te penché sur mon problème c'est trés sympas en cas d'échec pourrai-je te contacté de nouveau ? merci a bientot longue vie au forum !!

Réponse 13 / 183

chrifleur Messages postés 1091 Date d'inscription Statut Contributeur Dernière intervention 18

oui tu peux me contacter à nouveau
as tu passé EScan? ceci expliquerait cela!!!
Fais un scan en ligne avec
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr

NOTE: le scan est à faire avec Internet Explorer
Dans la nouvelle fenêtre qui s'affiche clique sur J'accepte

On va te demander de télécharger des contrôles ActiveX, accepte .
Laisse le faire les mises à jour puis quand il aura fini, clique sur Suivant

Dans le menu Choisissez la cible de l'analyse , sélectionne Poste de travail .
Le scan va commencer.

Reviens avec le rapport de scan obtenu

Réponse 14 / 183

raffiné Messages postés 217 Date d'inscription Statut Membre Dernière intervention 1

je suis entrain de faire l'analyse dés que c'est terminer je te l'envoie

Réponse 15 / 183

raffiné Messages postés 217 Date d'inscription Statut Membre Dernière intervention 1

nombre de virus trouvés 5
nombre d'ojets infectés 31626 pas bon !!

Réponse 16 / 183

raffiné Messages postés 217 Date d'inscription Statut Membre Dernière intervention 1

je n'arrive pas a envoyer le rapport

Réponse 17 / 183

chrifleur Messages postés 1091 Date d'inscription Statut Contributeur Dernière intervention 18

le nom des virus stp

Réponse 18 / 183

raffiné Messages postés 217 Date d'inscription Statut Membre Dernière intervention 1

trojan win 32 .a

Réponse 19 / 183

raffiné Messages postés 217 Date d'inscription Statut Membre Dernière intervention 1

je ne sais pas comment faire pour t'envoyer le contenus de l'analyse

Réponse 20 / 183

raffiné Messages postés 217 Date d'inscription Statut Membre Dernière intervention 1

trojan win 32.agent.cmn j'ai toujours webscanner en route il est terminer mais j'ai le rapport sous les yeux j'attend ton intervention avant d'exécuter quoique ce soit

Discussions similaires

apparation intempestives de pub type site de rencontre et photo dans le même ton

Message "Un bloqueur de publicité empêche la lecture..."

désactiver un bloqueur de publicité pou voir M6

Pubs sites de rencontre intempestives

Bande de pub sur ma TV TCL

Votre réponse

Discussions similaires