Multiples trojan et spywares

Depuis le début des problèmes...

le retour ...

voici le rapport de sdfix


[b]SDFix: Version 1.167 [/b]
Run by Famille on 08/04/2008 at

16:59

Microsoft Windows XP [version

5.1.2600]
Running From:

C:\DOCUME~1\Famille\Bureau\SECOUR~1\

SDFix\SDFix

[b]Checking Services [/b]:


Restoring Windows Registry Values
Restoring Windows Default Hosts File
Restoring Default HomePage Value
Restoring Default Desktop Components

Value

Rebooting


[b]Checking Files [/b]:

Trojan Files Found:

C:\WINDOWS\privacy_danger\index.htm

- Deleted
C:\WINDOWS\privacy_danger\images\cap

t.gif - Deleted
C:\WINDOWS\privacy_danger\images\dan

ger.jpg - Deleted
C:\WINDOWS\privacy_danger\images\dow

n.gif - Deleted
C:\WINDOWS\privacy_danger\images\spa

cer.gif - Deleted
C:\WINDOWS\apoxqwfv.exe - Deleted
C:\WINDOWS\iTunesMusic.exe -

Deleted
C:\WINDOWS\qdnkewfa.dll - Deleted
C:\WINDOWS\rs.txt - Deleted



Folder C:\WINDOWS\privacy_danger -

Removed


Removing Temp Files

[b]ADS Check [/b]:





[b]Final Check [/b]:

catchme 0.3.1351.2 W2K/XP/Vista -

rootkit/stealth malware detector by

Gmer, http://www.gmer.net
Rootkit scan 2008-04-08 17:08:59
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system

hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentCo

ntrolSet\Services\SharedAccess\Epoch

]
"Epoch"=dword:000046a7

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microso

ft\Windows\CurrentVersion\WindowsUpd

ate\Reporting\EventCache\7971f918-a8

47-4430-9279-4a52d1efe18d]
"CurrentCacheFile"="C:\WINDOWS\Softw

areDistribution\EventCache\{E6E1DAC2

-2ED8-4EBC-B2C6-AA401A697ABF}.bin"
[HKEY_CURRENT_USER\Software\Microsof

t\Windows\CurrentVersion\Internet

Settings]
"\xa8ÿÿÿnk

?àã{`;\x8dÈ"=dword:00000001

scanning hidden files ...


scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 4


[b]Remaining Services [/b]:



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentco

ntrolset\services\sharedaccess\param

eters\firewallpolicy\standardprofile

\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%

windir%\\system32\\sessmgr.exe:*:ena

bled:@xpsp2res.dll,-22019"
"%windir%\\Network

Diagnostic\\xpnetdiag.exe"="%windir%

\\Network

Diagnostic\\xpnetdiag.exe:*:Enabled:

@xpsp3res.dll,-20000"
"C:\\Program

Files\\Messenger\\msmsgs.exe"="C:\\P

rogram

Files\\Messenger\\msmsgs.exe:*:Enabl

ed:Windows Messenger"
"C:\\Program Files\\Infinite

Loop\\The

Outforce\\System\\Outforce_w2k.exe"=

"C:\\Program Files\\Infinite

Loop\\The

Outforce\\System\\Outforce_w2k.exe:*

:Enabled:OutforceMFC"
"C:\\Program

Files\\Opera\\Opera.exe"="C:\\Progra

m

Files\\Opera\\Opera.exe:*:Enabled:Op

era Internet Browser"
"D:\\Mes

documents\\Emmanuel\\CS1.6\\hl.exe"=

"D:\\Mes

documents\\Emmanuel\\CS1.6\\hl.exe:*

:Enabled:Half-Life Launcher"
"C:\\Program

Files\\Infogrames\\Grand Prix

4\\GP4.exe"="C:\\Program

Files\\Infogrames\\Grand Prix

4\\GP4.exe:*:Disabled:GP4"
"C:\\Program

Files\\Metin2_France\\metin2.bin"="C

:\\Program

Files\\Metin2_France\\metin2.bin:*:E

nabled:metin2"
"C:\\Program Files\\Frog Creator

V0.4\\Serveur\\Server.exe"="C:\\Prog

ram Files\\Frog Creator

V0.4\\Serveur\\Server.exe:*:Enabled:

Server"
"C:\\Program

Files\\eMule\\emule.exe"="C:\\Progra

m

Files\\eMule\\emule.exe:*:Enabled:eM

ule"
"C:\\Program Files\\Age of Empires

II\\age2_x1\\age2_x1.exe"="C:\\Progr

am Files\\Age of Empires

II\\age2_x1\\age2_x1.exe:*:Enabled:A

ge of Empires II Expansion"
"C:\\WINDOWS\\system32\\dplaysvr.exe

"="C:\\WINDOWS\\system32\\dplaysvr.e

xe:*:Enabled:Microsoft DirectPlay

Helper"
"C:\\Program

Files\\Teamspeak2_RC2\\server_window

s.exe"="C:\\Program

Files\\Teamspeak2_RC2\\server_window

s.exe:*:Enabled:Server"
"C:\\Program

Files\\Real\\RealPlayer\\realplay.ex

e"="C:\\Program

Files\\Real\\RealPlayer\\realplay.ex

e:*:Enabled:RealPlayer"
"C:\\Program Files\\LucasArts\\Star

Wars Jedi Knight Jedi

Academy\\GameData\\jamp.exe"="C:\\Pr

ogram Files\\LucasArts\\Star Wars

Jedi Knight Jedi

Academy\\GameData\\jamp.exe:*:Enable

d:Jedi Academy MultiPlayer"
"C:\\Documents and

Settings\\Emmanuel\\Mes

documents\\FroGCreator2\\Serveur\\Se

rver.exe"="C:\\Documents and

Settings\\Emmanuel\\Mes

documents\\FroGCreator2\\Serveur\\Se

rver.exe:*:Enabled:Server"
"C:\\Program Files\\Eidos

Interactive\\Pyro

Studios\\Praetorians\\Praetorians.ex

e"="C:\\Program Files\\Eidos

Interactive\\Pyro

Studios\\Praetorians\\Praetorians.ex

e:*:Enabled:Praetorians"
"C:\\Program Files\\Lords of

EverQuest\\Lords.ree"="C:\\Program

Files\\Lords of

EverQuest\\Lords.ree:*:Enabled:Lords

of Everquest"
"C:\\Documents and

Settings\\Emmanuel\\Bureau\\utorrent

.exe"="C:\\Documents and

Settings\\Emmanuel\\Bureau\\utorrent

.exe:*:Enabled:æTorrent"
"C:\\Documents and

Settings\\Emmanuel\\Bureau\\Raccourc

is\\utorrent.exe"="C:\\Documents and

Settings\\Emmanuel\\Bureau\\Raccourc

is\\utorrent.exe:*:Enabled:æTorrent"
"C:\\Program Files\\Google\\Google

Talk\\googletalk.exe"="C:\\Program

Files\\Google\\Google

Talk\\googletalk.exe:*:Enabled:Googl

e Talk"
"C:\\Program Files\\Windows

Live\\Messenger\\msnmsgr.exe"="C:\\P

rogram Files\\Windows

Live\\Messenger\\msnmsgr.exe:*:Enabl

ed:Windows Live Messenger"
"C:\\Program Files\\Windows

Live\\Messenger\\livecall.exe"="C:\\

Program Files\\Windows

Live\\Messenger\\livecall.exe:*:Enab

led:Windows Live Messenger (Phone)"
"C:\\Documents and

Settings\\Emmanuel\\Mes

documents\\Emmanuel\\JEUX\\CS1.6\\CS

1.6\\hl.exe"="C:\\Documents and

Settings\\Emmanuel\\Mes

documents\\Emmanuel\\JEUX\\CS1.6\\CS

1.6\\hl.exe:*:Enabled:Half-Life

Launcher"
"C:\\3dsmax6\\3dsmax.exe"="C:\\3dsma

x6\\3dsmax.exe:*:Enabled:3ds max

application"
"C:\\Program Files\\LucasArts\\Star

Wars Battlefront

II\\GameData\\BattlefrontII.exe"="C:

\\Program Files\\LucasArts\\Star

Wars Battlefront

II\\GameData\\BattlefrontII.exe:*:En

abled:BattlefrontII"
"C:\\Program Files\\backburner

2\\server.exe"="C:\\Program

Files\\backburner

2\\server.exe:*:Disabled:backburner

Server Application"
"C:\\Program

Files\\Bonjour\\mDNSResponder.exe"="

C:\\Program

Files\\Bonjour\\mDNSResponder.exe:*:

Enabled:Bonjour"
"C:\\Program

Files\\Azureus\\Azureus.exe"="C:\\Pr

ogram

Files\\Azureus\\Azureus.exe:*:Enable

d:Azureus"
"C:\\WINDOWS\\system32\\dpvsetup.exe

"="C:\\WINDOWS\\system32\\dpvsetup.e

xe:*:Enabled:Microsoft DirectPlay

Voice Test"
"C:\\WINDOWS\\system32\\rundll32.exe

"="C:\\WINDOWS\\system32\\rundll32.e

xe:*:Enabled:Ex‚cuter une DLL en

tant qu'application"
"C:\\Program

Files\\Skype\\Phone\\Skype.exe"="C:\

\Program

Files\\Skype\\Phone\\Skype.exe:*:Ena

bled:Skype. Take a deep breath "

[HKEY_LOCAL_MACHINE\system\currentco

ntrolset\services\sharedaccess\param

eters\firewallpolicy\domainprofile\a

uthorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%

windir%\\system32\\sessmgr.exe:*:ena

bled:@xpsp2res.dll,-22019"
"%windir%\\Network

Diagnostic\\xpnetdiag.exe"="%windir%

\\Network

Diagnostic\\xpnetdiag.exe:*:Enabled:

@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows

Live\\Messenger\\msnmsgr.exe"="C:\\P

rogram Files\\Windows

Live\\Messenger\\msnmsgr.exe:*:Enabl

ed:Windows Live Messenger"
"C:\\Program Files\\Windows

Live\\Messenger\\livecall.exe"="C:\\

Program Files\\Windows

Live\\Messenger\\livecall.exe:*:Enab

led:Windows Live Messenger (Phone)"

[b]Remaining Files [/b]:


File Backups: -

C:\DOCUME~1\Famille\Bureau\SECOUR~1\

SDFix\SDFix\backups\backups.zip

[b]Files with Hidden Attributes

[/b]:

Sat 30 Jun 2007 0 A.SH.

--- "C:\Documents and Settings\All

Users\DRM\Cache\Indiv01.tmp"
Mon 7 Jan 2008 100,352 ...H.

--- "C:\Documents and

Settings\Famille\Mes documents\voeux

2007-2008\~WRL1219.tmp"
Tue 27 Nov 2007 13,413,048 A..H.

--- "C:\Documents and Settings\All

Users\Application Data\Google

Updater\cache\BIT2A58.tmp"
Thu 28 Feb 2008 128,000 ...H.

--- "C:\Documents and

Settings\Famille\Mes

documents\religieux\paroisses\source

\~WRL0002.tmp"
Wed 27 Feb 2008 129,024 ...H.

--- "C:\Documents and

Settings\Famille\Mes

documents\religieux\paroisses\source

\~WRL0004.tmp"
Thu 28 Feb 2008 127,488 ...H.

--- "C:\Documents and

Settings\Famille\Mes

documents\religieux\paroisses\source

\~WRL0005.tmp"
Thu 28 Feb 2008 122,368 ...H.

--- "C:\Documents and

Settings\Famille\Mes

documents\religieux\paroisses\source

\~WRL0554.tmp"
Thu 28 Feb 2008 126,976 ...H.

--- "C:\Documents and

Settings\Famille\Mes

documents\religieux\paroisses\source

\~WRL1671.tmp"
Thu 28 Feb 2008 122,368 ...H.

--- "C:\Documents and

Settings\Famille\Mes

documents\religieux\paroisses\source

\~WRL2624.tmp"
Wed 14 Aug 2002 65,088 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\3COM

3c556 Packet\3C556.COM"
Wed 14 Aug 2002 12,732 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\3COM

3c509 Packet\3C5X9PD.COM"
Wed 14 Aug 2002 26,424 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\3COM

3c59x Packet\3C59XPD.COM"
Wed 14 Aug 2002 28,062 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1207F Packet\EN5251PD.COM"
Wed 14 Aug 2002 10,710 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1207C Packet\PCIPD.COM"
Wed 14 Aug 2002 10,083 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1207D Packet\ACCPKT.COM"
Wed 14 Aug 2002 10,257 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1207TX Packet\PCIPD.COM"
Wed 14 Aug 2002 29,499 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1203 Packet\PCIPD.COM"
Wed 14 Aug 2002 12,660 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1204 Packet\VLNWPD.COM"
Wed 14 Aug 2002 11,031 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1207 Packet\PCIPD.COM"
Wed 14 Aug 2002 17,952 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1200 Packet\EC32PD.COM"
Wed 14 Aug 2002 9,424 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1208 Packet\1208PD.COM"
Wed 14 Aug 2002 7,825 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1650 Packet\NWPD.COM"
Wed 14 Aug 2002 13,673 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1640 Packet\NWPD.COM"
Wed 14 Aug 2002 14,438 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1658 Packet\NWPD.COM"
Wed 14 Aug 2002 7,825 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN166X Packet\NWPD.COM"
Wed 14 Aug 2002 7,825 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1651 Packet\NWPD.COM"
Wed 14 Aug 2002 7,825 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1652 Packet\NWPD.COM"
Wed 14 Aug 2002 7,243 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1653 Packet\NE2PD.COM"
Wed 14 Aug 2002 24,767 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN2216 Packet\PCMPD.COM"
Wed 14 Aug 2002 7,463 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1625 Packet\NEPD.COM"
Wed 14 Aug 2002 7,825 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1656 Packet\NWPD.COM"
Wed 14 Aug 2002 10,286 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN2228 Packet\PCMPD.COM"
Wed 14 Aug 2002 25,460 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN2218 Packet\PCMPD.COM"
Wed 14 Aug 2002 28,866 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN2320 Packet\EN5251PD.COM"
Wed 14 Aug 2002 14,438 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\ACCTON

EN1657 Packet\NWPD.COM"
Wed 14 Aug 2002 8,544 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\CATC

USB Ethernet\Elndis.sys"
Wed 14 Aug 2002 33,149 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\CATC

USB Ethernet\Usbd.sys"
Wed 14 Aug 2002 47,826 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

ASPI1394.SYS"
Wed 14 Aug 2002 35,340 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

ASPI2DOS.SYS"
Wed 14 Aug 2002 14,378 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

ASPI4DOS.SYS"
Wed 14 Aug 2002 37,984 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

ASPI8DOS.SYS"
Wed 14 Aug 2002 44,828 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

ASPI8U2.SYS"
Wed 14 Aug 2002 29,628 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

ASPICD.SYS"
Wed 14 Aug 2002 49,750 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

ASPIEHCI.SYS"
Wed 14 Aug 2002 49,242 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

ASPIOHCI.SYS"
Wed 14 Aug 2002 50,606 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

ASPIUHCI.SYS"
Wed 14 Aug 2002 161,792 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

BOOTSRV.SYS"
Wed 14 Aug 2002 174,080 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

bootsrv16.sys"
Wed 14 Aug 2002 21,971 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

BTCDROM.SYS"
Wed 14 Aug 2002 30,955 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

BTDOSM.SYS"
Wed 14 Aug 2002 202,517 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

CMDS.EXE"
Wed 14 Aug 2002 374,038 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

CMDS16.EXE"
Wed 14 Aug 2002 22,158 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

COUNTRY.SYS"
Wed 14 Aug 2002 1,608 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

DEVICE.COM"
Wed 14 Aug 2002 15,345 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

DISPLAY.SYS"
Wed 14 Aug 2002 7,840 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

DLSHELP.SYS"
Wed 14 Aug 2002 56,821 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

E.EXE"
Wed 14 Aug 2002 64,425 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

FLASHPT.SYS"
Wed 14 Aug 2002 32,396 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

GUEST.EXE"
Wed 14 Aug 2002 14,160 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

HIMEM.SYS"
Wed 14 Aug 2002 10,898 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

KEYB.COM"
Wed 14 Aug 2002 53,556 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

KEYBOARD.SYS"
Wed 14 Aug 2002 15,777 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

MODE.COM"
Wed 14 Aug 2002 37,681 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

MOUSE.COM"
Wed 14 Aug 2002 354,304 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

msbootsrv16.sys"
Wed 14 Aug 2002 21,180 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

MSCDEX.EXE"
Wed 14 Aug 2002 354,263 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

Net.exe"
Wed 14 Aug 2002 8,513 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

NETBIND.COM"
Wed 14 Aug 2002 41,302 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

OAKCDROM.SYS"
Wed 14 Aug 2002 129,240 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

OHCI.EXE"
Wed 14 Aug 2002 28,439 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

Paralink.com"
Wed 14 Aug 2002 13,770 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

PROTMAN.EXE"
Wed 14 Aug 2002 130,980 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

UHCI.EXE"
Wed 14 Aug 2002 11,854 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\DEC

EtherWorks ISA (DE305)

Packet\DE305.COM"
Wed 14 Aug 2002 52,715 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\DEC

EtherWORKS DE450 Packet\DE450.COM"
Wed 14 Aug 2002 62,391 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\DEC

EtherWORKS DE500 Packet\DE500.COM"
Wed 14 Aug 2002 11,491 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\DLink

DMF560-TX Packet\Lmpd.com"
Wed 14 Aug 2002 17,791 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\DLink

DT620 Packet\Dt620pd.com"
Wed 14 Aug 2002 17,043 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\DLink

DE400 Packet\De400pd.com"
Wed 14 Aug 2002 11,786 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\IBM

Crystal LAN Packet\Epktisa.com"
Wed 14 Aug 2002 18,300 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Kingsto

n EtheRx KNE110TX

Packet\Ktc110p.com"
Wed 14 Aug 2002 48,224 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Laneed

LD 10-100AL Packet\L100al.com"
Wed 14 Aug 2002 13,360 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Laneed

LD-CDF Packet\Ldcdt.com"
Wed 14 Aug 2002 9,190 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Laneed

LD-PCI2TL Packet\Ldpcil.com"
Wed 14 Aug 2002 12,567 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Melco

LPC2-T\Lpchkat2.com"
Wed 14 Aug 2002 44,640 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Planex

FW-100TX Fast Ethernet

Packet\FETPKT.COM"
Wed 14 Aug 2002 56,896 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Planex

FW-100TX Fast Ethernet

Packet\Rtspkt.com"
Wed 14 Aug 2002 44,640 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Planex

FNW9x00T - ENW8300T

Packet\fetpkt.com"
Wed 14 Aug 2002 9,692 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\PXE

Packet Driver\Undipd.com"
Wed 14 Aug 2002 9,537 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\SN

2000p Packet\PNPPD.COM"
Wed 14 Aug 2002 32,484 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\WaveLAN

Packet\Wvlan42.com"
Wed 14 Aug 2002 52,225 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Xircom

Ethernet 10-100 + Modem\Cbendis.exe"
Wed 14 Aug 2002 48,491 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Xircom

RE10BT\Ce3ndis.exe"
Wed 14 Aug 2002 50,405 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Xircom

RE10 - RE100 Packet\Ce3pd.com"
Wed 14 Aug 2002 33,860 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Xircom

PE3-10Bx\Pe3ndis.exe"
Wed 14 Aug 2002 50,175 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Xircom

Re-100Btx + Ce3B-100Btx\Ce3ndis.exe"
Wed 14 Aug 2002 50,795 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Xircom

CBE10-100BTX\Cbendis.exe"
Wed 14 Aug 2002 48,223 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Xircom

CBE10-100BTX Packet\Cbepd.com"
Wed 14 Aug 2002 48,641 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Xircom

Ethernet II PS\Xpsndis.exe"
Wed 14 Aug 2002 49,015 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\Xircom

Ethernet II PS Packet\Xpspd.com"
Wed 14 Aug 2002 53,786 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

pcdos\command.com"
Wed 14 Aug 2002 44,240 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

pcdos\IBMBIO.COM"
Wed 14 Aug 2002 42,550 A..H.

--- "C:\Documents and Settings\All

Users\Application

Data\Symantec\Ghost\Template\common\

pcdos\IBMDOS.COM"

[b]Finished![/b]

ps:(la désinféction n'est pas finit)

-> qu'est-ce que çà veut dire ?
il y autre chose à faire ?

Bit defender, c'est aléatoire...

pas de phrase "win32 n'est pas ..."
et où devrait-on la trouver ?