Vrius MSN "cOol-th1ng.info"

Bonjour,

J'ai attrapé un virus sur MSN qui envoi un lien à mes contact lorsque je me déconnecte ou que je suis déconnecté. Le lien est: cOol-th1ng.info
Il est indétectable avec mes anti-virus (avast et norton) et j'ai effacer mes fichiers temporaires.
J'aimerais savoir comment m'en débarrasser.
Merci d'avance!!
Configuration: Windows Vista
Internet Explorer 7.0

6 réponses

  1. Deckard's System Scanner v20071014.68
    Run by robin on 2008-05-08 11:42:15
    Computer is in Normal Mode.
    --------------------------------------------------------------------------------

    -- Last 5 Restore Point(s) --
    10: 2008-05-06 17:33:54 UTC - RP72 - Windows Update
    9: 2008-05-05 17:10:14 UTC - RP71 - Sauvegarde Windows
    8: 2008-05-04 17:00:09 UTC - RP70 - Sauvegarde Windows
    7: 2008-05-03 09:51:04 UTC - RP69 - Installation du package de pilote logiciel : VSO Software
    6: 2008-05-02 16:56:23 UTC - RP68 - Windows Update

    -- First Restore Point --
    1: 2008-04-20 19:50:08 UTC - RP63 - Point de contrôle planifié

    Backed up registry hives.
    Performed disk cleanup.

    -- HijackThis (run as robin.exe) -----------------------------------------------

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:45:46, on 08/05/2008
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16643)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\DellTPad\Apoint.exe
    C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
    C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe
    C:\Windows\WindowsMobile\wmdc.exe
    C:\Program Files\Java\jre1.6.0\bin\jusched.exe
    C:\Windows\System32\rundll32.exe
    C:\Windows\System32\WLTRAY.EXE
    C:\Program Files\Dell\MediaDirect\PCMService.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Orange\Systray\SystrayApp.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
    C:\Program Files\Logitech\QuickCam\Quickcam.exe
    C:\Program Files\Orange\Launcher\Launcher.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\Dell\QuickSet\quickset.exe
    C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Windows\ehome\ehmsas.exe
    c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\DellTPad\ApMsgFwd.exe
    C:\Program Files\DellTPad\HidFind.exe
    C:\Program Files\DellTPad\Apntex.exe
    C:\Program Files\Orange\Deskboard\deskboard.exe
    C:\Program Files\Orange\connectivity\connectivitymanager.exe
    C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
    C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
    C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
    C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
    C:\Windows\ehome\ehshell.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\Orange\browser\browser.exe
    C:\Windows\system32\conime.exe
    C:\Users\robin\Downloads\dss.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\PROGRA~1\TRENDM~1\HIJACK~1\robin.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
    O1 - Hosts: ::1 localhost
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
    O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
    O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "c:\Program Files\Java\jre1.6.0\bin\jusched.exe"
    O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
    O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
    O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
    O4 - Global Startup: BTTray.lnk = ?
    O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - Global Startup: QuickSet.lnk = ?
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
    O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O13 - Gopher Prefix:
    O15 - Trusted Zone: https://www.orange.fr/portail
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
    O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
    O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
    O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
    0
    1. Deckard's System Scanner v20071014.68
      Extra logfile - please post this as an attachment with your post.
      --------------------------------------------------------------------------------

      -- System Information ----------------------------------------------------------

      Microsoft® Windows Vista™ Édition Familiale Premium (build 6000)
      Architecture: X86; Language: French

      CPU 0: Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz
      Percentage of Memory in Use: 58%
      Physical Memory (total/avail): 2045.43 MiB / 851.85 MiB
      Pagefile Memory (total/avail): 4309.15 MiB / 2806.4 MiB
      Virtual Memory (total/avail): 2047.88 MiB / 1917.88 MiB

      C: is Fixed (NTFS) - 136.43 GiB total, 62.56 GiB free.
      D: is Fixed (NTFS) - 10 GiB total, 0.28 GiB free.
      E: is CDROM (Unformatted)

      \\.\PHYSICALDRIVE0 - WDC WD1600BEVS-75RST0 - 149.05 GiB - 4 partitions
      \PARTITION0 - Unknown - 117.63 MiB
      \PARTITION1 - Système de fichiers installable - 10 GiB - D:
      \PARTITION2 (bootable) - Système de fichiers installable - 136.43 GiB - C:
      \PARTITION3 - Étendu avec Inter. 13 étendue - 2.5 GiB

      -- Security Center -------------------------------------------------------------

      AUOptions is scheduled to auto-install.
      Windows Internal Firewall is enabled.

      AV: avast! antivirus 4.8.1169 [VPS 080507-0] v4.8.1169 (ALWIL Software)
      AS: Windows Defender v1.1.1505.0 (Microsoft Corporation)
      AS: avast! antivirus 4.8.1169 [VPS 080507-0] v4.8.1169 (ALWIL Software)

      [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

      [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
      "C:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe"="C:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe:*:enabled:CSS"

      -- Environment Variables -------------------------------------------------------

      ALLUSERSPROFILE=C:\ProgramData
      APPDATA=C:\Users\robin\AppData\Roaming
      CLASSPATH=.;C:\Program Files\Java\jre1.6.0\lib\ext\QTJava.zip
      CommonProgramFiles=C:\Program Files\Common Files
      COMPUTERNAME=PC-DE-ROBIN
      ComSpec=C:\Windows\system32\cmd.exe
      FP_NO_HOST_CHECK=NO
      HOMEDRIVE=C:
      HOMEPATH=\Users\robin
      LOCALAPPDATA=C:\Users\robin\AppData\Local
      LOGONSERVER=\\PC-DE-ROBIN
      NUMBER_OF_PROCESSORS=2
      OS=Windows_NT
      Path=C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared\;C:\Program Files\QuickTime\QTSystem\
      PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
      PROCESSOR_ARCHITECTURE=x86
      PROCESSOR_IDENTIFIER=x86 Family 6 Model 15 Stepping 13, GenuineIntel
      PROCESSOR_LEVEL=6
      PROCESSOR_REVISION=0f0d
      ProgramData=C:\ProgramData
      ProgramFiles=C:\Program Files
      PROMPT=$P$G
      PUBLIC=C:\Users\Public
      QTJAVA=C:\Program Files\Java\jre1.6.0\lib\ext\QTJava.zip
      RoxioCentral=C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\
      SystemDrive=C:
      SystemRoot=C:\Windows
      TEMP=C:\Users\robin\AppData\Local\Temp
      TMP=C:\Users\robin\AppData\Local\Temp
      USERDOMAIN=PC-de-robin
      USERNAME=robin
      USERPROFILE=C:\Users\robin
      windir=C:\Windows

      -- User Profiles ---------------------------------------------------------------

      robin

      -- Add/Remove Programs ---------------------------------------------------------

      Adobe Flash Player ActiveX --> C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
      Adobe Reader 8.1.2 - Français --> MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003}
      Adobe Shockwave Player --> C:\Windows\System32\Macromed\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Macromed\SHOCKW~1\Install.log
      Apple Mobile Device Support --> MsiExec.exe /I{44734179-8A79-4DEE-BB08-73037F065543}
      Apple Software Update --> MsiExec.exe /I{02DFF6B1-1654-411C-8D7B-FD6052EF016F}
      Assistant de connexion Windows Live --> MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
      avast! Antivirus --> C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
      Bonjour --> MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
      Broadcom Management Programs --> MsiExec.exe /I{C99C0593-3B48-41D9-B42F-6E035B320449}
      Browser Address Error Redirector --> MsiExec.exe /I{62230596-37E5-4618-A329-0D21F529A86F}
      Conexant HDA D330 MDC V.92 Modem --> C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2C06&SUBSYS_14F1000F\HXFSETUP.EXE -U -Idel000fz.inf
      Dell Support Center --> MsiExec.exe /X{E3BFEE55-39E2-4BE0-B966-89FE583822C1}
      Dell Touchpad --> C:\Program Files\DellTPad\Uninstap.exe ADDREMOVE
      Dell Wireless WLAN Card --> "C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwlu00.exe" verbose /rootkey="Software\Broadcom\802.11\UninstallInfo" /rootdir="C:\Program Files\Dell\Dell Wireless WLAN Card"
      Digital Line Detect --> C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe -runfromtemp -l0x040c -removeonly
      eMule --> "C:\Program Files\eMule\Uninstall.exe"
      Galerie de photos Windows Live --> MsiExec.exe /X{A70FA218-6598-4AC9-813D-63597C5DD068}
      Gestionnaire pour appareils Windows Mobile --> MsiExec.exe /X{904CCF62-818D-4675-BC76-D37EB399F917}
      Google Desktop --> C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
      Google Earth --> MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72}
      Google Toolbar for Internet Explorer --> MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
      Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
      Guide de l'utilisateur --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CD29180-A95E-11D3-A4EB-00C04F7BDB2C}\setup.exe"
      Guide de mise en route Dell --> MsiExec.exe /I{9954484F-6EE4-4040-94E3-4B380646F867}
      HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
      iTunes --> MsiExec.exe /I{585776BC-4BD6-4BD2-A19A-1D6CB44A403B}
      Java(TM) SE Runtime Environment 6 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000}
      livebox --> C:\Program Files\InstallShield Installation Information\{17342E3B-0818-4A6F-BFF8-99476605ADD6}\Setup.exe -runfromtemp -l0x040c -removeonly
      Logitech Desktop Messenger --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe" -l0x40c UNINSTALL
      Logitech QuickCam --> MsiExec.exe /X{364EC092-93CF-4DDC-9D7A-7278452028E0}
      MediaDirect --> C:\Program Files\InstallShield Installation Information\{9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}\setup.exe -runfromtemp -l0x040c -cluninstall
      Messenger Plus! Live --> "C:\Program Files\Messenger Plus! Live\Uninstall.exe"
      Microsoft SQL Server 2005 Compact Edition [ENU] --> MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
      Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
      Microsoft Works --> MsiExec.exe /I{6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}
      Mise à jour du pilote du Gestionnaire pour appareils Windows Mobile --> MsiExec.exe /X{E7044E25-3038-4A76-9064-344AC038043E}
      MSXML 4.0 SP2 (KB936181) --> MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
      MSXML 4.0 SP2 (KB941833) --> MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
      MVision --> MsiExec.exe /I{35725FBC-A136-4A46-9F29-091759D9BB93}
      Navigateur Orange --> C:\Program Files\Orange\Uninstall\Browser\Shell.exe MainUninstall.shl
      Need for Speed™ ProStreet --> MsiExec.exe /X{2E1A71D5-7897-4F3F-B0E3-B412C86A646D}
      NetWaiting --> C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe -runfromtemp -l0x040c -removeonly
      Norton Security Scan --> MsiExec.exe /I{1A8A214F-6BAC-4E01-A27D-25C19A484908}
      NVIDIA Drivers --> C:\Windows\system32\NVUNINST.EXE UninstallGUI
      Orange - Logiciels Internet --> C:\Program Files\Orange\installation\core\Installgui.exe -u
      Orange Preload --> MsiExec.exe /I{38496EC2-78B7-412A-9398-FC6B7DB8E182}
      Outil de diagnostic de modem --> MsiExec.exe /I{F63A3748-B93D-4360-9AD4-B064481A5C7B}
      OutlookAddinSetup --> MsiExec.exe /I{9BDEF074-020E-458D-ADC5-8FF68E0C9B56}
      Programme de gestion Camera de Logitech® --> "C:\Program Files\Common Files\LogiShrd\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
      QuickSet --> MsiExec.exe /I{7F0C4457-8E64-491B-8D7B-991504365D1E}
      QuickTime --> MsiExec.exe /I{1838C5A2-AB32-4145-85C1-BB9B8DFA24CD}
      Roxio Creator Audio --> MsiExec.exe /I{83FFCFC7-88C6-41c6-8752-958A45325C82}
      Roxio Creator BDAV Plugin --> MsiExec.exe /I{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC}
      Roxio Creator Copy --> MsiExec.exe /I{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}
      Roxio Creator Data --> MsiExec.exe /I{0D397393-9B50-4c52-84D5-77E344289F87}
      Roxio Creator DE --> MsiExec.exe /I{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}
      Roxio Creator Tools --> MsiExec.exe /I{0394CDC8-FABD-4ed8-B104-03393876DFDF}
      Roxio Express Labeler --> MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
      Roxio MyDVD DE --> MsiExec.exe /I{D639085F-4B6E-4105-9F37-A0DBB023E2FB}
      Roxio Update Manager --> MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
      Safari --> MsiExec.exe /I{40589552-3892-409E-B92C-9F5032A4B2F0}
      Security Update for CAPICOM (KB931906) --> MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
      Security Update for CAPICOM (KB931906) --> MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
      SLD Codec Pack --> C:\Program Files\SLD Codec Pack\uninstall.exe
      Sonic Activation Module --> MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}
      VideoLAN VLC media player 0.8.6e --> C:\Program Files\VideoLAN\VLC\uninstall.exe
      WIDCOMM Bluetooth Software 6.0.1.3100 --> MsiExec.exe /X{A13E07E1-A423-44FB-9DEE-B24C75C1BAF2}
      Windows Live installer --> MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
      Windows Live Messenger --> MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
      Windows Live Writer --> MsiExec.exe /X{3DFF4274-EBB0-4356-9692-972965018954}

      -- Application Event Log -------------------------------------------------------

      Event Record #/Type4309 / Success
      Event Submitted/Written: 05/08/2008 10:34:10 AM
      Event ID/Source: 12001 / usnjsvc
      Event Description:
      The Messenger Sharing USN Journal Reader service started successfully.

      Event Record #/Type4304 / Error
      Event Submitted/Written: 05/08/2008 10:27:23 AM
      Event ID/Source: 1000 / Application Error
      Event Description:
      Application défaillante SystrayApp.exe, version 1.0.39.739, horodatage 0x46f94eba, module défaillant SystrayApp.exe, version 1.0.39.739, horodatage 0x46f94eba, code d’exception 0xc0000005, décalage d’erreur 0x00001c1c,
      ID du processus 0xa00, heure de début de l’application 0xSystrayApp.exe0.

      Event Record #/Type4296 / Success
      Event Submitted/Written: 05/08/2008 10:27:08 AM
      Event ID/Source: 5617 / WinMgmt
      Event Description:

      Event Record #/Type4295 / Success
      Event Submitted/Written: 05/08/2008 10:27:07 AM
      Event ID/Source: 5615 / WinMgmt
      Event Description:

      Event Record #/Type4289 / Success
      Event Submitted/Written: 05/08/2008 10:26:25 AM
      Event ID/Source: 902 / Software Licensing Service
      Event Description:
      Le service de gestion des licences du logiciel a démarré.

      -- Security Event Log ----------------------------------------------------------

      No Errors/Warnings found.

      -- System Event Log ------------------------------------------------------------

      Event Record #/Type21722 / Warning
      Event Submitted/Written: 05/08/2008 11:46:02 AM
      Event ID/Source: 3004 / WinDefend
      Event Description:
      L’agent de protection en temps réel %PC-de-robin27 a détecté des modifications. Microsoft vous recommande d’analyser les logiciels responsables de ces modifications, à la recherche de risques potentiels. Vous pouvez vous servir des informations relatives au fonctionnement de ces programmes pour autoriser ou non leur exécution, ou pour les supprimer de l’ordinateur. N’autorisez les modifications que si vous faites confiance au programme ou à l’éditeur de logiciel. %PC-de-robin27 ne peut pas annuler les modifications que vous autorisez.

      Pour plus d’informations, consultez les données suivantes :
      %PC-de-robin275

      ID d’analyse : {631DF4CD-9E33-4A12-988C-46DE86C3965D}

      Utilisateur : PC-de-robin\robin

      Nom : %PC-de-robin271

      ID : %PC-de-robin272

      ID de gravité : %PC-de-robin273

      ID de catégorie : %PC-de-robin274

      Chemin d’accès trouvé : %PC-de-robin276

      Type d’alerte : %PC-de-robin278

      Type de détection : 1.1.1505.02

      Event Record #/Type21721 / Warning
      Event Submitted/Written: 05/08/2008 11:46:02 AM
      Event ID/Source: 3004 / WinDefend
      Event Description:
      L’agent de protection en temps réel %PC-de-robin27 a détecté des modifications. Microsoft vous recommande d’analyser les logiciels responsables de ces modifications, à la recherche de risques potentiels. Vous pouvez vous servir des informations relatives au fonctionnement de ces programmes pour autoriser ou non leur exécution, ou pour les supprimer de l’ordinateur. N’autorisez les modifications que si vous faites confiance au programme ou à l’éditeur de logiciel. %PC-de-robin27 ne peut pas annuler les modifications que vous autorisez.

      Pour plus d’informations, consultez les données suivantes :
      %PC-de-robin275

      ID d’analyse : {2F0D7EB5-DCE4-405F-B85F-1B9B4A50C46A}

      Utilisateur : PC-de-robin\robin

      Nom : %PC-de-robin271

      ID : %PC-de-robin272

      ID de gravité : %PC-de-robin273

      ID de catégorie : %PC-de-robin274

      Chemin d’accès trouvé : %PC-de-robin276

      Type d’alerte : %PC-de-robin278

      Type de détection : 1.1.1505.02

      Event Record #/Type21720 / Warning
      Event Submitted/Written: 05/08/2008 11:46:02 AM
      Event ID/Source: 3004 / WinDefend
      Event Description:
      L’agent de protection en temps réel %PC-de-robin27 a détecté des modifications. Microsoft vous recommande d’analyser les logiciels responsables de ces modifications, à la recherche de risques potentiels. Vous pouvez vous servir des informations relatives au fonctionnement de ces programmes pour autoriser ou non leur exécution, ou pour les supprimer de l’ordinateur. N’autorisez les modifications que si vous faites confiance au programme ou à l’éditeur de logiciel. %PC-de-robin27 ne peut pas annuler les modifications que vous autorisez.

      Pour plus d’informations, consultez les données suivantes :
      %PC-de-robin275

      ID d’analyse : {598C8B6A-D07B-4D99-85CE-2819F7FFF6E6}

      Utilisateur : PC-de-robin\robin

      Nom : %PC-de-robin271

      ID : %PC-de-robin272

      ID de gravité : %PC-de-robin273

      ID de catégorie : %PC-de-robin274

      Chemin d’accès trouvé : %PC-de-robin276

      Type d’alerte : %PC-de-robin278

      Type de détection : 1.1.1505.02

      Event Record #/Type21719 / Warning
      Event Submitted/Written: 05/08/2008 11:46:02 AM
      Event ID/Source: 3004 / WinDefend
      Event Description:
      L’agent de protection en temps réel %PC-de-robin27 a détecté des modifications. Microsoft vous recommande d’analyser les logiciels responsables de ces modifications, à la recherche de risques potentiels. Vous pouvez vous servir des informations relatives au fonctionnement de ces programmes pour autoriser ou non leur exécution, ou pour les supprimer de l’ordinateur. N’autorisez les modifications que si vous faites confiance au programme ou à l’éditeur de logiciel. %PC-de-robin27 ne peut pas annuler les modifications que vous autorisez.

      Pour plus d’informations, consultez les données suivantes :
      %PC-de-robin275

      ID d’analyse : {F60D8D17-4F67-4D6E-8DBC-80C4989B71F4}

      Utilisateur : PC-de-robin\robin

      Nom : %PC-de-robin271

      ID : %PC-de-robin272

      ID de gravité : %PC-de-robin273

      ID de catégorie : %PC-de-robin274

      Chemin d’accès trouvé : %PC-de-robin276

      Type d’alerte : %PC-de-robin278

      Type de détection : 1.1.1505.02

      Event Record #/Type21717 / Warning
      Event Submitted/Written: 05/08/2008 11:44:49 AM
      Event ID/Source: 4 / Client Side Rendering Spooler
      Event Description:
      Le spouleur d’impression n’a pas pu rouvrir une connexion d’imprimante existante car il n’a pas pu lire les informations de configuration dans la clé de Registre S-1-5-18\Printers\Connections. Le spouleur d’impression n’a pas pu ouvrir la clé de Registre. Ceci peut se produire si la clé de Registre est endommagée ou absente, ou si le Registre est momentanément indisponible.

      -- End of Deckard's System Scanner: finished at 2008-05-08 11:47:34 ------------

      Je n'ai eu d'afficher que des fichiers "extra.txt" et "main.txt"! Si ce n'est pas le fichier attendu, indiquez moi comment vous l'envoyer svp.merci
      0
      1. en cherchant dans le dossier MSNFix, j'ai trouvé cela. J'espère que c'est ce que vous vouliez.

        C:\Windows\system32\rhdsa.exe
        C:\Windows\system32\msese.exe
        C:\Windows\system32\mssee.exe
        C:\Windows\system32\wafps.exe
        C:\Windows\system32\wagfxds.exe
        C:\Windows\system32\wclis.exe
        C:\Windows\system32\msnapp.exe
        C:\Windows\system32\msnstartup.exe
        C:\Windows\system32\wssl.exe
        C:\Users\robin\AppData\Roaming\addon.dat
        C:\Windows\Wild_Party_jpg.zip
        C:\Windows\Bifrost\klog.dat
        C:\Windows\Bifrost\serveur.exe
        C:\Program Files\Common Files\delsim\del.exe
        C:\wen6j4d5.exe
        C:\9w3l6u1g1.exe
        C:\v1r6j8q4s5j5.exe
        C:\o5w1b5a9j5p4.exe
        C:\x9e7f6y6j2k7.exe
        C:\a5c3x8p2r8t8.exe
        C:\m9r2h2z5l7v8.exe
        C:\d5t6jb6k8f8.exe
        C:\xx7c7c3n5d8d.exe
        C:\7c3n5d8d.exe
        C:\c3n5d8d.exe
        C:\Users\robin\AppData\Local\Temp\New-Photo-*.zip
        C:\Windows\system32\Microsoft\svchost.exe
        C:\Windows\system32\ddesharer.exe
        C:\Windows\system32\dfrgfat32.exe
        C:\Windows\system32\logonagt.exe
        C:\Windows\system32\mnmsrv.exe
        C:\Windows\system32\msl.exe
        C:\Windows\system32\service.exe
        C:\Windows\system32\winupdates.exe
        C:\Windows\system32\updates.exe
        C:\Windows\system32\wlliveapp.exe
        C:\Windows\system32\wintmp.exe
        C:\Windows\system32\csrhost.exe
        C:\Windows\princ.exe
        C:\Users\robin\AppData\Local\Temp\1.reg
        C:\Windows\system32\system.exe
        C:\Windows\system32\aqwsde.exe
        C:\Windows\system32\msl.exe
        C:\Windows\system32\clipsv.exe
        C:\Windows\system32\system.exe
        C:\Windows\gearsec.exe
        C:\Windows\system32\windowslogonb.exe
        C:\Windows\adminlogg.txt
        C:\Windows\windvrhost.exe
        C:\Windows\system32\keymaker.exe
        C:\Windows\system32\win32dll.exe
        C:\Windows\system32\wbem\winscrvs.exe
        C:\Windows\windvrhost.exe
        C:\Windows\system32\clipsv.exe
        C:\Windows\system32\svcthreading.exe
        C:\Windows\system32\wifiloader.exe
        C:\Windows\system32\windowsboot.exe
        C:\Windows\system32\xwwfrpo.exe
        C:\Windows\system32\iplogsec.exe
        C:\Windows\system32\msnlvclient.exe
        C:\Windows\system32\mstinitial.exe
        C:\Windows\system32\msnconfig.exe
        C:\Windows\system32\xhxugzoyubc.exe
        C:\Windows\system32\winupdates.exe
        C:\Windows\system32\smhost.exe
        C:\Windows\system32\wifiboot.exe
        C:\Windows\system32\livemsngr.exe
        C:\Windows\system32\msupdate.exe
        C:\Windows\system32\cleanmg.exe
        C:\Windows\system32\msnserv.exe
        C:\Windows\system32\msnmgrsv.exe
        C:\Windows\system32\msmsnserver.exe
        C:\Windows\system32\msnsoftware.exe
        C:\Windows\system32\msnupnp.exe
        C:\Windows\system32\msnserv.exe
        C:\Windows\system32\msnservicer.exe
        C:\Windows\system32\msnhosts.exe
        C:\Windows\system32\wifiload.exe
        C:\Windows\system32\win32dll.exe
        C:\Windows\system32\sysmgr.exe
        C:\Windows\system32\msmsgs.exe
        C:\Windows\system32\msnmgr.exe
        C:\Windows\system32\chkdsker.exe
        C:\Windows\system32\winsystem.exe
        C:\Windows\system32\websploit.exe
        C:\Windows\adminlogg.txt
        C:\Windows\windvrhost.exe
        C:\Windows\system32\msnshare.exe
        C:\Windows\system32\texds.exe
        C:\Windows\system32\kernels32.exe
        C:\Windows\system32\msavus.exe
        C:\Windows\system32\dlh9jkd1q8.exe
        C:\Windows\system32\wrsm.exe
        C:\Windows\system32\ulfs.exe
        C:\Windows\system32\chkdsker.exe
        C:\Windows\system32\cliconfig.exe
        C:\Windows\system32\clipsv.exe
        C:\Windows\system32\cscripts.exe
        C:\Windows\system32\ipsec7.exe
        C:\Windows\system32\ipxrouter.exe
        C:\Windows\system32\wllmsngr.exe
        C:\Windows\system32\mqtsvc.exe
        C:\Windows\system32\mstinitial.exe
        C:\Windows\system32\msnpopblck.exe
        C:\Windows\system32\cisvr.exe
        C:\Windows\system32\cleanmg.exe
        C:\Windows\system32\ie4uini.exe
        C:\Windows\system32\iexpresser.exe
        C:\Windows\system32\msnservices.exe
        C:\Windows\system32\bt\Systemx.exe
        C:\Windows\system32\winlogonpc.exe
        C:\Windows\system32\WINWGPX.EXE
        C:\Windows\system32\bootk.exe
        C:\Windows\system32\bootvfy.exe
        C:\Windows\system32\dvdupgd.exe
        C:\Windows\system32\fontviewer.exe
        C:\Windows\system32\msavus.exe
        C:\Windows\system32\wrsm.exe
        C:\Windows\system32\bootst.exe
        C:\Windows\windvrhost.exe
        C:\Windows\winloadmgr.exe
        C:\Windows\mstinitial.exe
        C:\Windows\msnpopupblck.exe
        C:\Windows\system32\bootk.exe
        C:\Windows\system32\bootvfy.exe
        C:\Windows\system32\dvdupgd.exe
        C:\Windows\system32\fontviewer.exe
        C:\Windows\system32\funnymovies.txt
        C:\Users\robin\AppData\Local\Temp\load3.exe
        C:\Users\robin\AppData\Local\Temp\win32.exe
        C:\Windows\system32\wind32.exe
        C:\Windows\system32\dllgh8jkd1q8.exe
        C:\Windows\system32\cbevtsvc.exe
        C:\Program Files\InetGet2\YazzleBundle-1560.exe
        C:\Program Files\Common Files\Yazzle1560OinAdmin.exe
        C:\Users\robin\AppData\Local\Temp\mshtml3.exe
        C:\Users\robin\AppData\Local\Temp\mshtml2.exe
        C:\Windows\system32\dllgh8jkd1q8.exe
        C:\Windows\system32\wind32.exe
        C:\Windows\system32\drmupgd.exe
        C:\Windows\system32\mspainter.exe
        C:\Users\robin\AppData\Roaming\WinTouch\wintouch.cfg
        C:\Users\robin\AppData\Roaming\WinTouch\WTUninstaller.exe
        C:\Program Files\CPV\CPV8.dll
        C:\Program Files\Fichiers communs\Yazzle1560OinUninstaller.exe
        C:\Program Files\JavaCore\JavaCore.exe
        C:\Program Files\JavaCore\UnInstall.exe
        C:\Program Files\nvcoi\mst.stt
        C:\Program Files\outerinfo\FF\chrome.manifest
        C:\Program Files\outerinfo\FF\components\FF.dll
        C:\Program Files\outerinfo\FF\components\OuterinfoAds.xpt
        C:\Program Files\outerinfo\FF\install.rdf
        C:\Program Files\outerinfo\Terms.rtf
        C:\Windows\b153.exe
        C:\Windows\b156.exe
        C:\Windows\Downloaded Program Files\setup.inf
        C:\Windows\system32\ayv.dll
        C:\Windows\system32\mcrh.tmp
        C:\Windows\system32\TCMlnnpo.ini
        C:\Windows\system32\TCMlnnpo.ini2
        C:\Users\robin\AppData\Roaming\SpeedRunner\config.cfg
        C:\Users\robin\AppData\Roaming\SpeedRunner\SRUninstall.exe
        C:\Program Files\InetGet2\SRInstaller.exe
        C:\Program Files\Twain\Twain.exe
        C:\Users\robin\AppData\Local\Temp\bestwiner.stt
        C:\Program Files\Twain\Twain.exe
        C:\Users\robin\AppData\Local\Temp\365.dat
        C:\Users\robin\AppData\Roaming\Microsoft\Windows\qganni.exe
        C:\Windows\system32\msnbootcfg.exe
        C:\Windows\system32\msnstartup.exe
        C:\Windows\system\smvss.exe
        C:\Windows\system32\msnmanegers.exe
        C:\delextra.exe
        C:\Windows\system32\csrcs.exe
        C:\Windows\system32\msnmanegers.exe
        C:\Windows\system32\msnbootcfg.exe
        C:\Windows\system32\msnstartup.exe
        C:\7c7c3n5d8d.exe
        C:\Windows\system32\msrmsvc.exe
        C:\Windows\system32\wllivemsgr.exe
        C:\Windows\system32\livemsngr.exe
        C:\Windows\system32\aromis.exe
        C:\Windows\system32\aromis.config
        C:\Windows\system32\bootst.exe
        C:\Windows\system32\spool1*.exe
        C:\Windows\system32\spool2*.exe
        C:\Windows\system32\spool3*.exe
        C:\Windows\system32\spool4*.exe
        C:\Windows\system32\spool5*.exe
        C:\Windows\system32\spool6*.exe
        C:\Windows\system32\spool7*.exe
        C:\Windows\system32\spool8*.exe
        C:\Windows\system32\spool9*.exe
        C:\Windows\system32\csf.exe
        C:\Windows\system32\msnmgrsv.exe
        C:\Windows\system32\livemsngr.exe
        C:\Windows\system32\msrmsvc.exe
        C:\Windows\system32\msnlvclient.exe
        C:\Windows\system32\wllivemsgr.exe
        C:\Windows\freshphotos.zip
        C:\Windows\wspl.exe
        C:\Users\robin\AppData\Local\Temp\service.exe
        C:\Users\robin\AppData\Local\Temp\msnmsgs.exe
        C:\Setup32.exe
        C:\w7c7c3n5d8d.exe
        C:\Windows\system32\servl.dll
        C:\Windows\system32\servl2.dll
        C:\Windows\system32\msnsoftware.exe
        C:\Windows\system32\teim.exe
        C:\Windows\system32\cdmsn.exe
        C:\Windows\system32\livemsngr.exe
        C:\Windows\system32\msupnp.exe
        C:\Users\robin\AppData\Local\Temp\misfotos_*.zip
        C:\Windows\system32\wifisetup.exe
        C:\Windows\system32\msnusr.exe
        C:\Windows\system32\msnupdsv.exe
        C:\Windows\system32\prov.exe
        C:\Windows\system32\ysmngr.exe
        C:\Windows\system32\wnd32.exe
        C:\Windows\system32\psknowoxbli.exe
        C:\Windows\system32\msnlvclient.exe
        C:\Windows\system32\msnupnp.exe
        C:\Windows\system32\svho.exe
        C:\RECYCLER\svchost.exe
        C:\Windows\system32\libmsns.dll
        C:\Windows\system32\msninet.exe
        C:\Windows\system32\mswnm.exe
        C:\Windows\system32\wcds.exe
        C:\Windows\Msshield.exe
        C:\Windows\smss.exe
        C:\Conf\msm.scr
        C:\Windows\system32\resmsvc.exe
        C:\Windows\system32\msnbooster.exe
        C:\Windows\system32\microsoft.exe
        C:\Windows\system32\msnusr.exe
        C:\Windows\system32\msnsoftware.exe
        C:\Windows\system32\msnupnp.exe
        C:\Windows\system32\scvhost.exe
        C:\Windows\system32\sychost.exe
        C:\Windows\system32\winhosts.exe
        C:\Windows\system32\msnloader.exe
        C:\Windows\system32\msnbootcfg.exe
        C:\Windows\system32\servcr.exe
        C:\Windows\system32\sysmgr.exe
        C:\Windows\system32\dpcsvc.exe
        C:\Windows\system32\nspsvc.exe
        C:\Windows\Fonts\RAYMAN.EXE
        C:\jbig2dec.exe
        C:\Users\robin\AppData\Roaming\Microsoft\Windows\vvpmyvaw.exe
        C:\Users\robin\AppData\Roaming\WinTouch\wintouch.cfg
        C:\Users\robin\AppData\Roaming\WinTouch\WinTouch.exe
        C:\Users\robin\AppData\Roaming\WinTouch\WTUninstaller.exe
        C:\Program Files\nvcoi\mst.stt
        C:\Program Files\nvcoi\nvcoi.exe
        C:\Program Files\Temporary\InsiDERInst.exe
        C:\Windows\system32\sychost.exe
        C:\Program Files\Temporary\InstCPV.exe
        C:\Program Files\CPV\CPV7.dll
        C:\Windows\system32\doguwwe.exe
        C:\Windows\system32\iaxcfg32.dll
        C:\Windows\system32\msnbootcfg.exe
        C:\Windows\system32\msnsoftware.exe
        C:\Program Files\My_Love.exe
        C:\Windows\system32\msmpserv.exe
        C:\Windows\system32\msnmgrsv.exe
        C:\Windows\system32\msnserv.exe
        C:\Windows\system32\msnuserv.exe
        C:\Windows\system32\winboot.exe
        C:\Users\robin\AppData\Local\Temp\myPic*.zip
        C:\Users\robin\AppData\Local\Temp\Picture_*.zip
        C:\Windows\system32\winsplr.exe
        C:\Windows\system32\sysmgr.exe
        C:\Windows\system32\servcr.exe
        C:\Windows\system32\msnserv.exe
        C:\Windows\system32\msnbootcfg.exe
        C:\Windows\system32\msmpserv.exe
        C:\Windows\system32\servicez.exe
        C:\Windows\system32\winsplr.exe
        C:\Windows\system32\msnuserv.exe
        C:\Windows\system32\winhosts.exe
        C:\Windows\wscmgr.exe
        C:\Windows\system32\zotjoup.exe
        C:\Windows\system32\yznygrb.exe
        C:\Windows\system32\windrivers.exe
        C:\Windows\system32\webcp.exe
        C:\Windows\system32\wdlrss.exe
        C:\Windows\system32\uzysfrl.exe
        C:\Windows\system32\upcvk.exe
        C:\Windows\system32\svcdllhost.exe
        C:\Windows\system32\svcbrunner.exe
        C:\Windows\system32\sbvdflyuh.exe
        C:\Windows\system32\qvsblzlxrqpy.exe
        C:\Windows\system32\qp.exe
        C:\Windows\system32\poolsc.exe
        C:\Windows\system32\inetsrv.exe
        C:\Windows\system32\ihpbdt.exe
        C:\Windows\system32\doco.exe
        C:\Windows\system32\dbvccjgbcpkb.exe
        C:\Windows\system32\d.exe
        C:\Windows\system\smss.exe
        C:\Windows\live.messenger.com
        C:\Windows\help\msn.exe
        C:\Windows\system32\msnstartup.exe
        C:\Windows\system32\msnserver.exe
        C:\Windows\system32\windowsboot.exe
        C:\Windows\system32\windowsconf.exe
        C:\Windows\system32\windriver.exe
        C:\Windows\system32\windowsconf.exe
        C:\Windows\system32\ServiceLayer.exe
        C:\Windows\system32\msnloader.exe
        C:\Windows\system32\windowsboot.exe
        C:\Windows\system32\msnhost.exe
        C:\Users\robin\AppData\Local\Temp\1.html
        C:\Windows\winsyn32.dll
        C:\Windows\system32\msmsgs.exe
        C:\Windows\system32\svcjogger.exe
        C:\Windows\system32\svcjog.exe
        C:\Windows\system32\\wnd32.exe
        C:\Windows\system32\sysmgr.exe"
        C:\Users\robin\lsass.exe
        C:\Windows\winini.exe
        C:\Windows\system32\svccert.exe
        C:\Windows\system32\msthosts.exe
        C:\Windows\system32\expent.exe
        C:\Windows\system32\wifibooter.exe
        C:\Windows\system32\windowsupdate.exe
        C:\Windows\system32\svcthreads.exe
        C:\Windows\system32\mstasker.exe
        C:\Windows\system32\svctowers.exe
        C:\Windows\system32\exploresys.exe
        C:\Windows\system32\dllcache\qxchost.exe
        C:\Windows\system32\mstasks.exe
        C:\Windows\system32\soundvol32.exe
        C:\Windows\system32\rundll64.exe
        C:\Windows\system32\soundvol64.exe
        C:\Windows\system32\rundll1128.exe
        C:\Windows\system32\soundvol128.exe
        C:\Windows\system32\scheduler.exe
        C:\Windows\system32\wmserver.exe
        C:\Windows\system32\wmserv.exe
        C:\Windows\admintxt.txt
        C:\Windows\live.messenger.com
        C:\Windows\system32\rtsbsvc.exe
        C:\Windows\system-dll.exe
        C:\Windows\Fonts\svchost.exe
        C:\Windows\system32\svcjog.exe
        C:\Windows\system32\spool87.exe
        C:\Windows\system32\winsystem.exe
        C:\Windows\system32\winsysmgr.exe
        C:\sys????.exe
        C:\Windows\system32\msssrv.exe
        C:\Windows\system32\winconf.exe
        C:\Windows\system32\winsysmgr.exe
        C:\Windows\system32\bootconf.exe
        C:\Windows\system32\msnconfigs.exe
        C:\Windows\system32\winconfig.exe
        C:\Windows\system32\windrivers.exe
        C:\Windows\system32\bootconfig.exe
        C:\Windows\system32\usndebug.exe
        C:\Windows\system32\windfrag.exe
        C:\Windows\system32\windefrag.exe
        C:\Windows\system32\winbooter.exe
        C:\Windows\system32\windrive.exe
        C:\Windows\system32\winserv.exe
        C:\Windows\system32\winsvr.exe
        C:\Windows\system32\svcguides.exe
        C:\Windows\system32\winbooter.exe
        C:\Windows\system32\wificon.exe
        C:\Windows\system32\wifisetup.exe
        C:\Windows\system32\wifiloader.exe
        C:\Windows\system32\wifiboot.exe
        C:\Windows\system32\wificonnect.exe
        C:\Windows\system32\wificonfigs.exe
        C:\Windows\system32\wifidebug.exe
        C:\Windows\system32\wifiload.exe
        C:\Windows\system32\wifibooter.exe
        C:\Windows\system32\wificonfig.exe
        C:\s2l4k9s2e1e3.exe
        C:\v1i1e8e6e8w5.exe
        C:\d5t6j8b6k8f8.exe
        C:\Windows\WNDXP.exe
        C:\Windows\system32\inserv.exe
        C:\Windows\system32\winboot.exe
        C:\Windows\msn.com
        C:\Windows\system32\winbooter.exe
        C:\Windows\system32\wificon.exe
        C:\Windows\system32\wifisetup.exe
        C:\Windows\system32\wifiloader.exe
        C:\Windows\system32\wifiboot.exe
        C:\Windows\system32\wificonnect.exe
        C:\Windows\system32\wificonfigs.exe
        C:\Windows\system32\wifidebug.exe
        C:\Windows\system32\wifiload.exe
        C:\Windows\system32\wifibooter.exe
        C:\Windows\system32\wificonfig.exe
        C:\Windows\system32\pmsvcr.exe
        C:\Windows\lala.txt
        C:\Windows\system32\winhosts.exe
        C:\Windows\system32\servicez.exe
        C:\Windows\system32\svsmanager.exe
        C:\Windows\system32\cmnvc.exe
        C:\Windows\system32\winhosts.exe
        C:\Windows\system32\winhost.exe
        C:\Windows\system32\resmsvc.exe
        C:\Windows\system32\svccert.exe
        C:\Windows\system32\svcjogg.exe
        C:\Windows\system32\svcjoger.exe
        C:\Windows\system32\svctowing.exe
        C:\Windows\system32\svmanager.exe
        C:\Windows\Win24DLL.exe
        C:\Windows\system32\microsoft.exe
        C:\Windows\system32\imglog.exe
        C:\Windows\system32\bsyys.scr
        C:\Program Files\msn_livers.exe
        C:\Windows\system32\orkutkut.exe
        C:\Windows\system32\Explorer.exe
        C:\Windows\system32\windr128.exe
        C:\Windows\system32\servcr.exe
        C:\Windows\system32\dpcsvc.exe
        C:\Windows\system32\msssrv.exe
        C:\Windows\system32\mssvc.exe
        C:\Windows\system32\kxgelc.exe
        C:\Windows\windosremote.exe
        C:\Windows\GbpServer32.exe
        C:\Windows\sistemas.exe
        C:\Windows\WinUpdatedata.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\maindwxp.exe
        C:\Windows\system32\maindwxp.exe
        C:\Windows\system32\vbsxkh.exe
        C:\Windows\system32\msthost.exe
        C:\Windows\system32\msthosts.exe
        C:\Windows\system32\wbcsvc.exe
        C:\Users\robin\AppData\Local\Temp\MyPhoto*.zip
        C:\Windows\system32\msnmgnr.exe
        C:\Windows\system32\fsiocu.exe
        C:\Windows\system32\agtsvc.exe
        C:\Windows\system32\ngpsvc.exe
        C:\Windows\system32\wmscheduler.exe
        C:\Windows\system32\scheduler.exe
        C:\Windows\system32\svcguide.exe
        C:\Windows\system32\exploresys.exe
        C:\Windows\system32\svcthreads.exe
        C:\Windows\system32\svctowers.exe
        C:\Windows\system32\mstasks.exe
        C:\Windows\system32\mstasker.exe
        C:\Windows\system32\wmserv.exe
        C:\Windows\system32\bios.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\msdoc.exe
        C:\Windows\system32\msdoc.exe
        C:\Windows\images.zip
        C:\Windows\netstats.exe
        C:\Windows\system32\keymaker.exe
        C:\Windows\system32\netstats.exe
        C:\fumkmdgq.exe
        C:\wcbcapm.exe
        C:\ypvrinp.exe
        C:\fumkmdgq.exe
        C:\xkufbjjc.exe
        C:\ypvrinp.exe
        C:\Windows\system32\omnlroth.exe
        C:\Users\robin\AppData\Local\Temp\svcghost.exe
        C:\Windows\system32\wmscheduler.exe
        C:\Windows\system32\wmserver.exe
        C:\Windows\system32\cdrss.exe
        C:\Users\robin\AppData\Local\Temp\NewPhoto*.zip
        C:\Windows\Fonts\Setup.exe
        C:\??????.exe
        C:\Windows\system32\msdts.exe
        C:\Windows\system32\msstc.exe
        C:\Windows\system32\nspsvc.exe
        C:\Windows\system32\smhost.exe
        C:\Windows\system32\winstruct32.exe
        C:\Windows\system32\winstruct64.exe
        C:\Windows\system32\winstruct128.exe
        C:\Windows\system32\winstruct.exe
        C:\Windows\system32\winkeyboard.exe
        C:\Windows\system32\wmserver.exe
        C:\Windows\system32\winmouse.exe
        C:\Windows\system32\winmouse64.exe
        C:\Windows\system32\winmouse32.exe
        C:\Windows\system32\winmouse128.exe
        C:\Windows\system32\nspsvc.exe
        C:\Windows\system32\npssvc.exe
        C:\Windows\ipcbind.exe
        C:\Windows\irfnga.exe
        C:\Windows\system32\winvsvc.exe
        C:\Windows\images.zip
        C:\Users\robin\AppData\Local\Temp\NewPicture*.zip
        C:\Windows\scvhost.exe
        C:\Windows\system32\microsoft.exe
        C:\Windows\scvhost.exe
        C:\Windows\system32\npcsvc.exe
        C:\Windows\system32\npssvc.exe
        C:\Windows\system32\nspsvc.exe
        C:\Users\robin\AppData\Local\Temp\services.msnfix
        C:\Users\robin\AppData\Local\Temp\winlogon.msnfix
        C:\Users\robin\AppData\Roaming\addon.dat
        C:\Users\robin\AppData\Roaming\inside.exe
        C:\Users\robin\AppData\Roaming\Microsoft\Windows\fkoym.exe
        C:\Users\robin\AppData\Roaming\WinTouch\wintouch.cfg
        C:\Users\robin\AppData\Roaming\WinTouch\WinTouch.exe
        C:\Users\robin\AppData\Roaming\WinTouch\WTUninstaller.exe
        C:\Users\Public\DOCUME~1\Settings\config.ini
        C:\Users\Public\DOCUME~1\Settings\partnership.dll
        C:\Users\Public\DOCUME~1\Settings\partnership.dll.msnfix
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Carlson\carlton
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Delsim\del.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Microsoft Office.lnk
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Yazzle1560OinAdmin.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Yazzle1560OinUninstaller.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\carlton
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Antivirus32.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\ashDisp.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\ashServ.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\atimvex.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\atrvmmx.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\bios.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\biosvaisefude.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\BRISA.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\bsyys.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\bsyys.scr
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\carlton
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\ccssrss.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\cmd.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Computador.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Diup.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\dll.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\dllvirtual.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\eixdrv.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\ExAlien.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\fbguad.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\firefoxx.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Flash.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\GbpSvc.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\gtaltg.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\HelpDesk.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Hide32.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\hork.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\icpldrvx.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\imglog.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\InstallHelp.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\javaupd.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\javsu.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\juchek.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\jvasu.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\JVM0.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\jvms.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\klpp.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\logon.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\lsssas.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\mdll.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\messengerr.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\messenup.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\messgrr.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\mhtsvho.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\mjavas.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\msdoc.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\msdoss.com
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\msm.cmd
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\msmsgxs.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\MSN_MSS.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\msnconf.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\MSNENVIA.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\msnfile.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\msng.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\msnmsg.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\msnmsgr.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\msnsgs.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\mxjxde.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\My_Love.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Ndtstat.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\norton32.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\ntvvm.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\pdvsym.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\qtapp.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Quicktime Music.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\regfixxsx.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\registtry.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\remote.cmd
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\repara_ae.bat
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Rg2catbd.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\rundl32.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\rxnetq.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\smss.scr
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\svchost.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\svchostss.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\svhossst.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\svhost.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\svmrhos.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\sxrork.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\sxrsym.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\syst.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\system32.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\systemdll.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\task.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\taskmgrrr.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Tasks.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\udll.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\verifysystemtitle.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\voieup.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\voiork.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\wbnnt.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\wcktts.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\wepaint.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Win XP.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\win.scr
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Windows Update.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\windows32.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Windows32.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\WindowsUpdate.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\windowsupdate.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\WindowsUpdate.scr
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\Winhost.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\winupdbc.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\WMedPlayer.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\wrdmgr.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\wrloginpro.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\wsnctfy.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\wuaucltt.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\ying.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\yong.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\ZaZ.exe
        C:\Users\robin\Desktop\aindateamo.exe
        C:\Users\robin\Desktop\cartao.exe
        C:\Users\robin\Desktop\cartaozinho.exe
        C:\Users\robin\Desktop\mensagem__amor.exe
        C:\Users\robin\Desktop\photo.exe
        C:\Users\robin\Desktop\portal.exe
        C:\Users\robin\Desktop\software\aindateamo.udd
        C:\Windows\Fonts\svchost.exe
        C:\i.mages.zip
        C:\Program Files\Driver32x\bradesco.exe
        C:\Program Files\Driver32x\caixa.exe
        C:\Program Files\7za.exe
        C:\Program Files\a.txt
        C:\Program Files\Adobe\AdobeLanc.exe
        C:\Program Files\Ajuda.exe
        C:\Program Files\Amor.exe
        C:\Program Files\Bifrost\klog.dat
        C:\Program Files\Bifrost\server.exe
        C:\Program Files\Bifrost\sys32.exe
        C:\Program Files\Cica.exe
        C:\Program Files\Common Files\System\SystemUpgrade.exe
        C:\Program Files\Common Files\Yazzle1560OinAdmin.exe
        C:\Program Files\Config\Config.exe
        C:\Program Files\dll.exe
        C:\Program Files\dllvirtual.exe
        C:\Program Files\dllwin.exe
        C:\Program Files\Dot1XCfg\Dot1XCfg.exe
        C:\Program Files\Driver32x\bb.exe
        C:\Program Files\Driver32x\iek.exe
        C:\Program Files\Driver32x\install\wweb.exe
        C:\Program Files\Driver32x\itau.exe
        C:\Program Files\Driver32x\live.exe
        C:\Program Files\Driver32x\msgex.exe
        C:\Program Files\Driver32x\net.exe
        C:\Program Files\Driver32x\nsvcrmx.exe
        C:\Program Files\Driver32x\nsvcrmx.exe
        C:\Program Files\Driver32x\rds.exe
        C:\Program Files\Driver32x\Readme.exe
        C:\Program Files\Driver32x\real.exe
        C:\Program Files\Driver32x\santanderbanespa.exe
        C:\Program Files\Driver32x\sendchat.exe
        C:\Program Files\Driver32x\varios.exe
        C:\Program Files\Driver32x\vcdg.bat
        C:\Program Files\ExAlien.exe
        C:\Program Files\Favoritos.exe
        C:\Program Files\fer.exe
        C:\Program Files\Fichiers communs\Carlson\carlton
        C:\Program Files\Fichiers communs\Yazzle1560OinUninstaller.exe
        C:\Program Files\Firewall.exe
        C:\Program Files\Flash.exe
        C:\Program Files\GbPlugin\GbpSvc.exe
        C:\Program Files\GbPlugin\mdll.exe
        C:\Program Files\GbPlugin\msng.exe
        C:\Program Files\GbPlugin\Ndtstat.exe
        C:\Program Files\GbPlugin\Rg2catbd.exe
        C:\Program Files\GbPlugin\udll.exe
        C:\Program Files\GbPlugin\yong.exe
        C:\Program Files\GbpSvc.exe
        C:\Program Files\help.exe
        C:\Program Files\HelpDesk.exe
        C:\Program Files\icpldrvx.exe
        C:\Program Files\iexplorer.exe
        C:\Program Files\iixplorer1.exe
        C:\Program Files\iixplorer2.exe
        C:\Program Files\ildredr.exe
        C:\Program Files\InetGet2\emg.exe
        C:\Program Files\InetGet2\emg.exe
        C:\Program Files\InetGet2\emg.exe.lzma
        C:\Program Files\InetGet2\FINAL -- Fort 5.6_MST-ONLY.exe
        C:\Program Files\InetGet2\FINAL -- Fort 5.6_MST-ONLY.exe
        C:\Program Files\InetGet2\Installeur.exe
        C:\Program Files\inetget2\installeur.exe
        C:\Program Files\InetGet2\Installeur.exe
        C:\Program Files\InetGet2\Installeur.exe.lzma
        C:\Program Files\InetGet2\WinTouchInstaller_channel1.exe
        C:\Program Files\Insider\Insider.exe
        C:\Program Files\Insider\Insider.exe.lzma
        C:\Program Files\Insider\UnInstall.exe
        C:\Program Files\Insider\UnInstall.exe.lzma
        C:\Program Files\installer.js
        C:\Program Files\Instant Driver\install\wweb.exe
        C:\Program Files\Instant Driver\trmninwn.exe
        C:\Program Files\Instant Driver\vcdg.bat
        C:\Program Files\Internet Explorer\bb.exe
        C:\Program Files\Internet Explorer\desc.exe
        C:\Program Files\Internet Explorer\loadie.exe
        C:\Program Files\Internet Explorer\mezenoca77798.exe
        C:\Program Files\Internet Explorer\realplayerp.exe
        C:\Program Files\ISM2\ISMPack7.exe
        C:\Program Files\JavaCore\JavaCore.exe
        C:\Program Files\JavaCore\UnInstall.exe
        C:\Program Files\jsload32\mwnming.exe
        C:\Program Files\jsload32\nsvcrmx.exe
        C:\Program Files\klog.dat
        C:\Program Files\login.scr
        C:\Program Files\Logun.exe
        C:\Program Files\MapEDC\IDE.stt
        C:\Program Files\MapEDC\MapEDC.exe
        C:\Program Files\mdll.exe
        C:\Program Files\messenger.exe
        C:\Program Files\Messenger\msmsg.exe
        C:\Program Files\Messenger\Msnmsgr.exe
        C:\Program Files\mexe*.exe
        C:\Program Files\Microsoft Office Update\file.exe
        C:\Program Files\microsoft studio files\asw34.bat
        C:\Program Files\microsoft studio files\bradesco.bxz
        C:\Program Files\microsoft studio files\bradesco.exe
        C:\Program Files\microsoft studio files\caixa.bxz
        C:\Program Files\microsoft studio files\caixa.exe
        C:\Program Files\Microsoft Studio Files\file.exe
        C:\Program Files\Microsoft Studio Files\fttlo33.ko
        C:\Program Files\microsoft studio files\iek.exe
        C:\Program Files\microsoft studio files\itau.bxz
        C:\Program Files\microsoft studio files\itau.exe
        C:\Program Files\microsoft studio files\locaweb.bxz
        C:\Program Files\Microsoft Studio Files\lsass.exe
        C:\Program Files\microsoft studio files\msgex.exe
        C:\Program Files\microsoft studio files\net.bxz
        C:\Program Files\microsoft studio files\net.exe
        C:\Program Files\microsoft studio files\nossacaixa.bxz
        C:\Program Files\microsoft studio files\nossacaixa.exe
        C:\Program Files\microsoft studio files\notfir0006dfjf541.dll
        C:\Program Files\microsoft studio files\pcname.drv
        C:\Program Files\microsoft studio files\pv.exe
        C:\Program Files\microsoft studio files\readme.exe
        C:\Program Files\microsoft studio files\real.bxz
        C:\Program Files\microsoft studio files\real.exe
        C:\Program Files\microsoft studio files\registro.bxz
        C:\Program Files\microsoft studio files\santanderbanespa.bxz
        C:\Program Files\microsoft studio files\santanderbanespa.exe
        C:\Program Files\microsoft studio files\sdrivw.exe
        C:\Program Files\microsoft studio files\sec\fx.reg
        C:\Program Files\microsoft studio files\sec\ref-allu
        C:\Program Files\microsoft studio files\sec\ref-commonfiles
        C:\Program Files\microsoft studio files\sec\ref-profile
        C:\Program Files\microsoft studio files\sec\ref-programfiles
        C:\Program Files\microsoft studio files\sec\ref-startup
        C:\Program Files\microsoft studio files\sec\ref-sysdrive
        C:\Program Files\microsoft studio files\sec\ref-system
        C:\Program Files\microsoft studio files\sec\ref-system32
        C:\Program Files\microsoft studio files\sec\ref-temp
        C:\Program Files\microsoft studio files\sec\ref-wincommon
        C:\Program Files\microsoft studio files\sec\ref-windows
        C:\Program Files\microsoft studio files\sendchat.exe
        C:\Program Files\microsoft studio files\tmp84667.txt
        C:\Program Files\microsoft studio files\varios.exe
        C:\Program Files\Microsoft Studio Files\vcdg.bat
        C:\Program Files\microsoft studio files\vcdg.bat
        C:\Program Files\microsoft studio files\wininfo1.vxd
        C:\Program Files\Microsoft Studio Files\Winlsass32.exe
        C:\Program Files\microsoft studio files\winvxhfythg34a.rd
        C:\Program Files\Microsoft Update\bradesco.exe
        C:\Program Files\Microsoft Update\caixa.exe
        C:\Program Files\Microsoft Update\iek.exe
        C:\Program Files\Microsoft Update\itau.exe
        C:\Program Files\Microsoft Update\live.exe
        C:\Program Files\Microsoft Update\live.txt
        C:\Program Files\Microsoft Update\mnwinvx.exe
        C:\Program Files\Microsoft Update\msgex.exe
        C:\Program Files\Microsoft Update\net.exe
        C:\Program Files\Microsoft Update\nossacaixa.exe
        C:\Program Files\Microsoft Update\Readme.exe
        C:\Program Files\Microsoft Update\real.exe
        C:\Program Files\Microsoft Update\santanderbanespa.exe.exe
        C:\Program Files\Microsoft Update\sec\fx.reg
        C:\Program Files\Microsoft Update\sendchat.exe
        C:\Program Files\Microsoft Update\varios.exe
        C:\Program Files\Microsoft Update\wininfo1.vxd
        C:\Program Files\Microsoft\svhost32.exe
        C:\Program Files\Movie Maker\ja_era_hehe.exe
        C:\Program Files\MSN Gaming Zone\mero455101.dll
        C:\Program Files\MSN Gaming Zone\mero455101.dll
        C:\Program Files\MSN Gaming Zone\meze*.exe
        C:\Program Files\MSN Messenger Guiños\instalar guiños.exe
        C:\Program Files\MSN Messenger\instalar guiños.exe
        C:\Program Files\MSN Messenger\msn.com
        C:\Program Files\msn_livers.exe
        C:\Program Files\msng.exe
        C:\Program Files\msnmsg.exe
        C:\Program Files\My_Love.exe
        C:\Program Files\Ndtstat.exe
        C:\Program Files\NetMeeting\klog.dat
        C:\Program Files\NetMeeting\maisumviado.exe
        C:\Program Files\NoDNS\NoDNS.exe
        C:\Program Files\NoDNS\UnInstall.exe
        C:\Program Files\nsnimage\nsvcrmx.exe
        C:\Program Files\orkut.scr
        C:\Program Files\outloo~1\express.exe
        C:\Program Files\outloo~1\update.exe
        C:\Program Files\outlook express\express.exe
        C:\Program Files\Outlook Express\inyourface.exe
        C:\Program Files\Outlook Express\OutlookEx.exe
        C:\Program Files\Outlook Express\setup40.exe
        C:\Program Files\Perfect.exe
        C:\Program Files\photopaint.exe
        C:\Program Files\QdrModule\QdrModule9.exe
        C:\Program Files\Real.dll
        C:\Program Files\regedti.exe
        C:\Program Files\rem.exe
        C:\Program Files\Remove.exe
        C:\Program Files\Rg2catbd.exe
        C:\Program Files\rm.exe
        C:\Program Files\Router\Router.exe
        C:\Program Files\router\router.exe
        C:\Program Files\Router\UnInstall.exe
        C:\Program Files\schoty.cmd
        C:\Program Files\service.bat
        C:\Program Files\smss.exe
        C:\Program Files\SOUND.exe
        C:\Program Files\spiider.exe
        C:\Program Files\svchost.exe
        C:\Program Files\svchost.lnk
        C:\Program Files\System\CDRom.exe
        C:\Program Files\System\Flash.exe
        C:\Program Files\System\Windows32.exe
        C:\Program Files\Tasks.exe
        C:\Program Files\Temporary\InsiDERIns.exe
        C:\Program Files\Temporary\InsiDERInst.exe
        C:\Program Files\Temporary\kernInst.exe
        C:\Program Files\Temporary\wininstall.exe
        C:\Program Files\TTX.exe
        C:\Program Files\udll.exe
        C:\Program Files\update.exe
        C:\Program Files\usnsvcu.exe
        C:\Program Files\VTTimers.exe
        C:\Program Files\Wapp.exe
        C:\Program Files\Widows.exe
        C:\Program Files\WinAble\winable.exe
        C:\Program Files\Windows32.exe
        C:\Program Files\windows32.exe
        C:\Program Files\WindowsUpdate.exe
        C:\Program Files\WindowsUpdate.scr
        C:\Program Files\winINI.exe
        C:\Program Files\winpop\uninstall.exe
        C:\Program Files\WinPop\UnInstall.exe.lzma
        C:\Program Files\winpop\winpop.exe
        C:\Program Files\WinPop\winpop.exe.lzma
        C:\Program Files\Wm2emt.exe
        C:\Program Files\wmplay.exe
        C:\Program Files\Words\UnInstall.exe
        C:\Program Files\Words\Words.exe
        C:\Program Files\xinside\xinside.exe
        C:\Program Files\xInsIDE\xInsIDE.exe
        C:\Program Files\yong.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ashDisp.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ashServ.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\avgccc.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\bios.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\bsyys.scr
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ccssrss.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\cmd.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Computador.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\dll.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\eixdrv.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ExAlien.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\fbguad.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\firefoxx.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Flash.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\InstallHelp.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\javsu.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\juchek.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\klpp.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\logon.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\lsssas.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\messengerr.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\messgrr.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\msm.cmd
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\msnmsgr.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\My_Love.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\norton32.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ntvvm.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\pdvsym.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\qtapp.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\qupdate.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\regfixxsx.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\registtry.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\remote.cmd
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\repara_ae.bat
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\rundl32.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\rxnetq.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\smss.scr
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\svchost.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\svchostss.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\svhost.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\sxrork.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\sxrsym.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\system32.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\task.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\taskmgrrr.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Tasks.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\voieup.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\voiork.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\wepaint.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Win XP.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Windows Update.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Windows32.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\windowsupdate.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Winhost.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\winupdbc.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\WMedPlayer.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\wrloginpro.exe
        C:\Users\robin\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\wuaucltt.exe
        C:\*-1-1148.exe
        C:\*.JPG-msnimages.exe
        C:\?.bat
        C:\?.dat
        C:\?.exe
        C:\?.rar
        C:\????packed_Pushbot.exe
        C:\\bot.exe
        C:\111z.exe
        C:\1z48.exe
        C:\2.exe
        C:\3d3t4t8n7l.exe
        C:\3xXx3.exe
        C:\521785.txt
        C:\5FB9C0*.EXE
        C:\5t6j8b6k8f8.exe
        C:\6i2n4r9g1l2.exe
        C:\839D4E*.BIN
        C:\8e3y4u4a9t9.exe
        C:\8e9w3l6u1g1.exe
        C:\9r2h2z5l7v8.exe
        C:\a.bat
        C:\acsdf.exe
        C:\adas.exe
        C:\ads1237.exe
        C:\adsok.exe
        C:\adv.exe
        C:\aklr.exe
        C:\alfxfa.exe
        C:\Amigos.exe
        C:\amor.exe
        C:\animacao.scr
        C:\Annoying crazy frog getting killed.pif
        C:\apuguycg.exe
        C:\asdf.exe
        C:\asdfja.exe
        C:\asds.exe
        C:\audise.exe
        C:\auto1.exe
        C:\auto2.exe
        C:\auto3.exe
        C:\autorun.inf
        C:\Autorun.inf
        C:\AVG\Tools\csrss.scr
        C:\AVG\Tools\svchost.exe
        C:\AVG\Tools\taskmgr.exe
        C:\AVG_BETA\DB\arquivo.txt
        C:\AVG_BETA\Tools\csrss.scr
        C:\AVG_BETA\Tools\msnmsgr.exe
        C:\bedroom-thongs.pif
        C:\bhij.exe
        C:\blhhjtpx.exe
        C:\bnjbvid.exe
        C:\British National Party.jpg
        C:\bs.exe
        C:\btpaxole.dll
        C:\calfxfa.exe
        C:\Call.exe
        C:\cartao.scr
        C:\cebWXP.exe
        C:\certmsje.dll
        C:\cjlxhy.exe
        C:\claro.exe
        C:\cmd.exe
        C:\Conf\13.bmp
        C:\Conf\15.bmp
        C:\Conf\3.jpg
        C:\Conf\cax2.jpg
        C:\Conf\info.gif
        C:\Conf\logo.jpg
        C:\Conf\ms.exe
        C:\Conf\msm.cmd
        C:\Conf\msm.exe
        C:\Conf\msmFF.cmd
        C:\Conf\msmho.cmd
        C:\Conf\nc.gif
        C:\Conf\nd.gif
        C:\Conf\nn.gif
        C:\Conf\NOVOBB.gif
        C:\Conf\novobb.jpg
        C:\Conf\novobb2.jpg
        C:\Conf\novoSB.gif
        C:\Conf\ork.cmd
        C:\Conf\tec.jpg
        C:\Conf\win.scr
        C:\contato.exe
        C:\Crazy-Frog.Html
        C:\Crazy frog gets killed by train!.pif
        C:\Crazy frog gets killed by train!.pif Fat Elvis! lol.pif
        C:\crolyewo.exe
        C:\csrs.txt
        C:\csrss.exe
        C:\ctl3diac.exe
        C:\cuoqdkfk.exe
        C:\cvbkwtb.exe
        C:\d5t6j8b6k8f8.exe
        C:\d8e9w3l6u1g1.exe
        C:\DB\arquivo.txt
        C:\dbeog.exe
        C:\de6438.exe
        C:\de64381.exe
        C:\devic.pif
        C:\device.exe
        C:\devidc.pif
        C:\diy.EXE
        C:\dkotyrxbb.exe
        C:\dll.exe
        C:\dllwin.exe
        C:\dnsajobe.dat
        C:\dnsajobe.dll
        C:\dnsajobe.exe
        C:\download1591.exe
        C:\dpl1npwm.dat
        C:\dpl1npwm.dll
        C:\dpl1npwm.exe
        C:\dpv1bidi.dll
        C:\Drunk_lol.pif
        C:\ducvb.exe
        C:\dydhcp.exe
        C:\dyqhom.exe
        C:\emai.exe
        C:\email.inf
        C:\Enviado.123
        C:\er-1-1148.exe
        C:\f6i2n4r9g1l2.exe
        C:\famwssg.exe
        C:\Fat Elvis! lol.pif
        C:\fFa4vV0rR170S5S2.exe
        C:\File.exe
        C:\FLIPART.EXE
        C:\flw334.dll
        C:\fnjb.exe
        C:\Foto.exe
        C:\Foto_celular.scr
        C:\Foto_celular.scr
        C:\Foto_Celular.zip
        C:\fotomensagem.exe
        C:\fotos_posse.zip
        C:\funny_pic.scr
        C:\fypif.exe
        C:\g4m9e5l1l5x5.exe
        C:\g5c5i4x6e4h2.exe
        C:\g7n4l2o4i4.exe
        C:\g7n4l2o4i4v4.exe
        C:\genbhnhl.exe
        C:\GETDRIVE.EXE
        C:\gfxpak.exe
        C:\ggvqo.exe
        C:\glcky.exe
        C:\gnqb.exe
        C:\grax.exe
        C:\grmlvlvb.exe
        C:\h1b9i6h4u6j1.exe
        C:\hbsqu.exe
        C:\hellmsn.exe
        C:\hkdjqaxv.exe
        C:\Hot.pif
        C:\How a Blonde Eats a Banana...pif
        C:\hptzb02.exe
        C:\hxjr.exe
        C:\hy.exe
        C:\i-1-1148.exe
        C:\i.exe
        C:\i1-1148.exe
        C:\i2n4r9g1.exe
        C:\i2n4r9g1l.exe
        C:\i2n4r9g1l2.exe
        C:\icone.exe
        C:\IE.exe
        C:\ierro.exe
        C:\iexplorer.exe
        C:\IF.EXE
        C:\image.jpg
        C:\image001.exe
        C:\img0012-www.photostorage.com
        C:\ImpBIG.exe
        C:\instalador de guiños y emoticonos.exe
        C:\Install\Ghost.exe
        C:\Install\install.exe
        C:\Install_Messenger.exe
        C:\inupdbc.exe
        C:\ir-1-1148.exe
        C:\IS.EXE
        C:\is1511881.exe
        C:\is151196.exe
        C:\is151296.exe
        C:\is77.exe
        C:\Isass.scr
        C:\it.exe
        C:\it1.exe
        C:\ixbxput.exe
        C:\j7q1c4v1i6s4.exe
        C:\Jennifer Lopez.scr
        C:\jkrguy.exe
        C:\jpb.exe
        C:\jshxw.exe
        C:\k3d3t4t8n7l.exe
        C:\k3d3t4t8n7l8.exe
        C:\kao.reg
        C:\kbdnmfc4.dll
        C:\KimMakihel.exe
        C:\kkynn.exe
        C:\kl.exe
        C:\ksmmtq.exe
        C:\kxhacvkl.exe
        C:\lauro.exe
        C:\LfjJGb.exe
        C:\Lista.txt
        C:\Lixo
        C:\llka.exe
        C:\LMAO.pif
        C:\log.txt
        C:\LOL that ur pic!.pif
        C:\LOL.scr
        C:\love_me.pif
        C:\lsass.exe
        C:\lspt.exe
        C:\lsyvg.exe
        C:\m1t4z1h1l7q5.exe
        C:\m9w3l6u1g.exe
        C:\m9w3l6u1g1.exe
        C:\mcombo.exe
        C:\Me on holiday!.pif
        C:\megakl.exe
        C:\melt.bat
        C:\Mensagem.exe
        C:\Message to n00b LARISSA.txt
        C:\MESSAGE_TO_BROPIA.txt
        C:\messenger.exe
        C:\Messenger.exe
        C:\Messenger2.exe
        C:\Microsoft.exe
        C:\mis contactos.txt
        C:\Mis imágenes\yo_posse_007.jpg.exe
        C:\mitm.exe
        C:\Mona Lisa Wants Her Smile Back.pif
        C:\mscdn.exe
        C:\msfk.exe
        C:\msi31.exe
        C:\msm.cmd
        C:\msm.exe
        C:\msm.exe
        C:\msn.exe
        C:\MSN_Update1
        C:\msn5v.exe
        C:\msnmsg.exe
        C:\msnmsgr.exe
        C:\msnmsnr.scr
        C:\msnsetup.exe
        C:\msnsgrsv.exe
        C:\msnsgrsv0201.exe
        C:\msnsgrszs.exe
        C:\MSNWA.exe
        C:\mstest.exe
        C:\mstray.exe
        C:\My new photo!.pif
        C:\my_photo2005.scr
        C:\na.exe
        C:\naked_drunk.pif
        C:\naked_party.pif
        C:\nefmufin.exe
        C:\new_webcam.pif
        C:\nmevscrr.exe
        C:\nnpnvxjy.exe
        C:\nod32.txt
        C:\nwnmff_e*.exe
        C:\nzl.exe
        C:\o6l4u8f7p2g4.exe
        C:\officexp.exe
        C:\or-1-1148.exe
        C:\orkut.exe
        C:\orkut.scr
        C:\osm.exe
        C:\p3h2b3t3q1s9.exe
        C:\p6g7j3w2g3f5.exe
        C:\PastaImagens.exe
        C:\phqhuo.exe
        C:\pif.exe
        C:\pr-1-1148.exe
        C:\prkc.exe
        C:\psapuman.exe
        C:\psnppack.dll
        C:\pushbot.bat
        C:\qklxwxtc.exe
        C:\qwere.exe
        C:\raizw.exe
        C:\rar.exe
        C:\rar1.exe
        C:\rar2.exe
        C:\RECYCLER\msnservice.exe
        C:\RECYCLER\nvscvse.exe
        C:\RECYCLER\te32.exe
        C:\RemotoMSN.txt
        C:\review.txt
        C:\ROFL.pif
        C:\s10w.exe
        C:\sad13l.exe
        C:\sadan.avi.exe
        C:\sadov.exe
        C:\sample.exe
        C:\sas2s.exe
        C:\sdjfha.exe
        C:\See my lesbian friends.pif
        C:\see_this!!.scr
        C:\sendwmdm.exe
        C:\server.exe
        C:\servico.exe
        C:\sexy.exe
        C:\sexy_bedroom.pif
        C:\show.exe
        C:\skew.exe
        C:\Small.exe
        C:\snsstect.exe
        C:\so.exe
        C:\SOUND32.exe
        C:\start.bat
        C:\stock.exe
        C:\stock.htm
        C:\stock2.exe
        C:\Surat_Buat_Presiden.exe
        C:\svbhost.exe
        C:\SVCH0STll.exe
        C:\svchost.exe
        C:\svchost.scr
        C:\svchost32.exe
        C:\Svchosts.exe
        C:\svcipa.exe
        C:\svghost.exe
        C:\svshost.exe
        C:\sys.txt
        C:\sysdzvz.exe
        C:\syshwbx.exe
        C:\syskmzx.exe
        C:\sysneud.exe
        C:\syssryh.exe
        C:\system.exe
        C:\System\iexplore.exe
        C:\System\plugin.exe
        C:\system1591.exe
        C:\system1691.exe
        C:\system1791.exe
        C:\system2.exe
        C:\system2525.exe
        C:\system3.exe
        C:\system32.exe
        C:\system4.exe
        C:\system5.exe
        C:\sysvsln.exe
        C:\sysyedg.exe
        C:\szsvc.exe
        C:\t4t8n7l.exe
        C:\t7b8i6h6t6j13.exe
        C:\text.reg
        C:\The Cat And The Fan piccy.pif
        C:\tim.exe
        C:\tlrdhsgo.exe
        C:\tmp.txt
        C:\Tools\csrss.scr
        C:\Topless in Mini Skirt! lol.pif
        C:\ttgkdaab.exe
        C:\tuwwp.exe
        C:\u5g9p7x1h4a3.exe
        C:\u8f7p2g4.exe
        C:\ukbdtg.exe
        C:\underware.pif
        C:\up.exe
        C:\upaq.exe
        C:\update.exe
        C:\updt.exe
        C:\urdeuvmj.exe
        C:\v6j4q5t1y4d3.exe
        C:\vbhbnr.exe
        C:\vgwiouqq.exe
        C:\vhtml.exe
        C:\video.exe
        C:\vonner.exe
        C:\vont.exe
        C:\vr-1-1148.exe
        C:\w3v6r2r2h3z5.exe
        C:\Webcam.pif
        C:\winbash.exe
        C:\winbbs.exe
        C:\windebug.log
        C:\Windows Messeger.exe
        C:\Windows Messenger.exe
        C:\windows.cmd
        C:\winfgt.exe
        C:\winHelp.exe
        C:\winhelp2.exe
        C:\winhpi.exe
        C:\winhsd.exe
        C:\winimage.exe
        C:\winlogin.exe
        C:\winlogon.exe
        C:\winlongonf.exe
        C:\WINNT\ScktSrvr.exe
        C:\WINNT\system\kl.dll
        C:\WINNT\system\msmsgs.exe
        C:\WINNT\system\msn.dat
        C:\WINNT\system\msn.dll
        C:\WINNT\system\smsc.exe
        C:\WINNT\system\svchost.dat
        C:\WINNT\system\xsmith.scr
        C:\winpga.exe
        C:\WinPH.exe
        C:\winptz.exe
        C:\winsfr.exe
        C:\winspur.exe
        C:\winsrt.exe
        C:\wintqvw.exe
        C:\wintskv.exe
        C:\winupdaet.exe
        C:\winupdate128.exe
        C:\winupdate32.exe
        C:\Winupdbc.exe
        C:\winuping.exe
        C:\winvrc.exe
        C:\winxdzu.exe
        C:\winXP.exe
        C:\wkssmsjt.dll
        C:\wldadisp.dat
        C:\wldadisp.dll
        C:\wldadisp.exe
        C:\wndgffd.exe
        C:\wnlsos.exe
        C:\wpabaln.exe
        C:\wr-1-1148.exe
        C:\x.exe
        C:\x7g3a8d6u.exe
        C:\x7g3a8d6u4c1.exe
        C:\x7g3a8d6uc1.exe
        C:\Xerr0.exe
        C:\xfafasfgx.exe
        C:\xr-1-1148.exe
        C:\xso.exe
        C:\xvhgbnnt.exe
        C:\y8o7w8b4f1q5.exe
        C:\ykamvp.exe
        C:\ylru.exe
        C:\yz02.exe
        C:\zordz.exe
        C:\zr-1-1148.exe
        C:\Users\robin\AppData\Local\Temp\*picture.zip
        C:\Users\robin\AppData\Local\Temp\??.exe
        C:\Users\robin\AppData\Local\Temp\_unins.bat
        C:\Users\robin\AppData\Local\Temp\~ip.tmp
        C:\Users\robin\AppData\Local\Temp\01-myspace.zip
        C:\Users\robin\AppData\Local\Temp\1.html
        C:\Users\robin\AppData\Local\Temp\1.html.$$$
        C:\Users\robin\AppData\Local\Temp\1.stat
        C:\Users\robin\AppData\Local\Temp\2238.EXE
        C:\Users\robin\AppData\Local\Temp\800_zip_dump.scr
        C:\Users\robin\AppData\Local\Temp\8165F.dmp
        C:\Users\robin\AppData\Local\Temp\activ.exe
        C:\Users\robin\AppData\Local\Temp\ADF.exe
        C:\Users\robin\AppData\Local\Temp\allgg.exe
        C:\Users\robin\AppData\Local\Temp\anjinhos.exe
        C:\Users\robin\AppData\Local\Temp\bifrost.exe
        C:\Users\robin\AppData\Local\Temp\camg-*.exe
        C:\Users\robin\AppData\Local\Temp\camg-77798.exe
        C:\Users\robin\AppData\Local\Temp\camg-77798.exe
        C:\Users\robin\AppData\Local\Temp\carinhos.exe
        C:\Users\robin\AppData\Local\Temp\ccAApp.exe
        C:\Users\robin\AppData\Local\Temp\csr*.tmp
        C:\Users\robin\AppData\Local\Temp\csrss.exe
        C:\Users\robin\AppData\Local\Temp\debug.exe
        C:\Users\robin\AppData\Local\Temp\DfSLdES
        C:\Users\robin\AppData\Local\Temp\direct3d.exe
        C:\Users\robin\AppData\Local\Temp\dllhost.exe
        C:\Users\robin\AppData\Local\Temp\dm_0105.exe
        C:\Users\robin\AppData\Local\Temp\drev.exe
        C:\Users\robin\AppData\Local\Temp\DSC0045.zip
        C:\Users\robin\AppData\Local\Temp\facebk*.zip
        C:\Users\robin\AppData\Local\Temp\facebook*.zip
        C:\Users\robin\AppData\Local\Temp\facebook.com*.zip
        C:\Users\robin\AppData\Local\Temp\facebookpic*.zip
        C:\Users\robin\AppData\Local\Temp\firefoxx.exe
        C:\Users\robin\AppData\Local\Temp\foto-*.zip
        C:\Users\robin\AppData\Local\Temp\foto*.zip
        C:\Users\robin\AppData\Local\Temp\foto.zip
        C:\Users\robin\AppData\Local\Temp\fotos.exe
        C:\Users\robin\AppData\Local\Temp\fotosdigital.zip
        C:\Users\robin\AppData\Local\Temp\g0ld.com
        C:\Users\robin\AppData\Local\Temp\hkxqwfui.exe
        C:\Users\robin\AppData\Local\Temp\hostwin.exe
        C:\Users\robin\AppData\Local\Temp\ibguardr.exe
        C:\Users\robin\AppData\Local\Temp\Image-005.JPEG.zip
        C:\Users\robin\AppData\Local\Temp\image??.zip
        C:\Users\robin\AppData\Local\Temp\image???.zip
        C:\Users\robin\AppData\Local\Temp\img*.zip
        C:\Users\robin\AppData\Local\Temp\IMG???.JPG.zip
        C:\Users\robin\AppData\Local\Temp\imgfacebook*.zip
        C:\Users\robin\AppData\Local\Temp\ipconfig.exe
        C:\Users\robin\AppData\Local\Temp\iprint.exe
        C:\Users\robin\AppData\Local\Temp\iPrint.exe
        C:\Users\robin\AppData\Local\Temp\is581.exe
        C:\Users\robin\AppData\Local\Temp\iservice.exe
        C:\Users\robin\AppData\Local\Temp\isinst.exe
        C:\Users\robin\AppData\Local\Temp\jjusched.exe
        C:\Users\robin\AppData\Local\Temp\koko.cmd
        C:\Users\robin\AppData\Local\Temp\kookie.exe
        C:\Users\robin\AppData\Local\Temp\llsaass.exe
        C:\Users\robin\AppData\Local\Temp\load.exe
        C:\Users\robin\AppData\Local\Temp\logs.exe
        C:\Users\robin\AppData\Local\Temp\lsasss.exe
        C:\Users\robin\AppData\Local\Temp\m1.txt.$$$
        C:\Users\robin\AppData\Local\Temp\m2323M.exe
        C:\Users\robin\AppData\Local\Temp\MBDownloader_*.exe
        C:\Users\robin\AppData\Local\Temp\MBDownloader_876923.exe
        C:\Users\robin\AppData\Local\Temp\MBDownloader_876923.exe
        C:\Users\robin\AppData\Local\Temp\mensagem.exe
        C:\Users\robin\AppData\Local\Temp\MG.exe
        C:\Users\robin\AppData\Local\Temp\mispicturas.zip
        C:\Users\robin\AppData\Local\Temp\mit5.tmp
        C:\Users\robin\AppData\Local\Temp\mit5.tmp.cab
        C:\Users\robin\AppData\Local\Temp\mshtml2.exe
        C:\Users\robin\AppData\Local\Temp\mshtml2.exe
        C:\Users\robin\AppData\Local\Temp\mshtml3.exe
        C:\Users\robin\AppData\Local\Temp\mshtml3.exe
        C:\Users\robin\AppData\Local\Temp\msmsgs.exe
        C:\Users\robin\AppData\Local\Temp\msmsgs.exe
        C:\Users\robin\AppData\Local\Temp\msnclient.exe
        C:\Users\robin\AppData\Local\Temp\msnmsg.exe
        C:\Users\robin\AppData\Local\Temp\msnmsg.exe
        C:\Users\robin\AppData\Local\Temp\msnmsgr.exe
        C:\Users\robin\AppData\Local\Temp\msnmsgs.exe
        C:\Users\robin\AppData\Local\Temp\msnmsgs.exe
        C:\Users\robin\AppData\Local\Temp\msnmsgs.exe
        C:\Users\robin\AppData\Local\Temp\msnplus.exe
        C:\Users\robin\AppData\Local\Temp\msnplus.exe
        C:\Users\robin\AppData\Local\Temp\mst*.exe
        C:\Users\robin\AppData\Local\Temp\mst455101.exe
        C:\Users\robin\AppData\Local\Temp\myimage.zip
        C:\Users\robin\AppData\Local\Temp\MyNewPics.zip
        C:\Users\robin\AppData\Local\Temp\myPicture*.zip
        C:\Users\robin\AppData\Local\Temp\myspace-pics.zip
        C:\Users\robin\AppData\Local\Temp\Myspace*.zip
        C:\Users\robin\AppData\Local\Temp\new-photos.zip
        C:\Users\robin\AppData\Local\Temp\Newfacebook*.zip
        C:\Users\robin\AppData\Local\Temp\NewYearsParty.zip
        C:\Users\robin\AppData\Local\Temp\NNBar_VCSetup_*_LOG_IES_NoDMY_AFF.exe
        C:\Users\robin\AppData\Local\Temp\NNBar_VCSetup_876923_LOG_IES_NoDMY_AFF.exe
        C:\Users\robin\AppData\Local\Temp\nsa2.tmp
        C:\Users\robin\AppData\Local\Temp\nsa2.tmp\System.dll
        C:\Users\robin\AppData\Local\Temp\nsj1.tmp
        C:\Users\robin\AppData\Local\Temp\nsj2.tmp
        C:\Users\robin\AppData\Local\Temp\nsj2.tmp\System.dll
        C:\Users\robin\AppData\Local\Temp\nts_000.tmp
        C:\Users\robin\AppData\Local\Temp\nts3.tmp
        C:\Users\robin\AppData\Local\Temp\nts4.tmp
        C:\Users\robin\AppData\Local\Temp\nts5.tmp
        C:\Users\robin\AppData\Local\Temp\nts6.tmp
        C:\Users\robin\AppData\Local\Temp\ocx.out
        C:\Users\robin\AppData\Local\Temp\pa_0105.exe
        C:\Users\robin\AppData\Local\Temp\paulina_muere.exe
        C:\Users\robin\AppData\Local\Temp\photo*.zip
        C:\Users\robin\AppData\Local\Temp\Photo.exe
        C:\Users\robin\AppData\Local\Temp\picturas.zip
        C:\Users\robin\AppData\Local\Temp\pork.exe
        C:\Users\robin\AppData\Local\Temp\pqokfkgksd.cmd
        C:\Users\robin\AppData\Local\Temp\realsched.exe
        C:\Users\robin\AppData\Local\Temp\removalfile.bat
        C:\Users\robin\AppData\Local\Temp\RTHDCPL.exe
        C:\Users\robin\AppData\Local\Temp\Saturdaynight.zip
        C:\Users\robin\AppData\Local\Temp\scs14.tmp
        C:\Users\robin\AppData\Local\Temp\scs15.tmp
        C:\Users\robin\AppData\Local\Temp\second.exe
        C:\Users\robin\AppData\Local\Temp\server.exe
        C:\Users\robin\AppData\Local\Temp\serverivy.exe
        C:\Users\robin\AppData\Local\Temp\service.exe
        C:\Users\robin\AppData\Local\Temp\services.exe
        C:\Users\robin\AppData\Local\Temp\Setup.exe
        C:\Users\robin\AppData\Local\Temp\sistema32.com
        C:\Users\robin\AppData\Local\Temp\spoolsv.exe
        C:\Users\robin\AppData\Local\Temp\sscrx.scr
        C:\Users\robin\AppData\Local\Temp\svcchhost.exe
        C:\Users\robin\AppData\Local\Temp\svcghost.exe
        C:\Users\robin\AppData\Local\Temp\svchost.dll
        C:\Users\robin\AppData\Local\Temp\svchost.exe
        C:\Users\robin\AppData\Local\Temp\svchost.exe
        C:\Users\robin\AppData\Local\Temp\svhossst.exe
        C:\Users\robin\AppData\Local\Temp\tosvid45.vxd
        C:\Users\robin\AppData\Local\Temp\tug.php
        C:\Users\robin\AppData\Local\Temp\un.bat
        C:\Users\robin\AppData\Local\Temp\Update.exe
        C:\Users\robin\AppData\Local\Temp\w1.txt.$$$
        C:\Users\robin\AppData\Local\Temp\win.exe
        C:\Users\robin\AppData\Local\Temp\winamp.exe
        C:\Users\robin\AppData\Local\Temp\winlogon.exe
        C:\Users\robin\AppData\Local\Temp\winnttemp100mr\wmplayers.exe
        C:\Users\robin\AppData\Local\Temp\wintouch.cfg
        C:\Users\robin\AppData\Local\Temp\wnupd.exe
        C:\Users\robin\AppData\Local\Temp\wuaucltt.exe
        C:\Users\robin\AppData\Local\Temp\z1.txt
        C:\Users\robin\AppData\Local\TempARC64\video celular pscina hoje.scr
        C:\Users\robin\??????.exe
        C:\Users\robin\????????.exe
        C:\Users\robin\\1-1148.exe
        C:\Users\robin\061236.exe
        C:\Users\robin\072765.exe
        C:\Users\robin\1.exe
        C:\Users\robin\1148.exe
        C:\Users\robin\175023.exe
        C:\Users\robin\1xslhkdid.exe
        C:\Users\robin\2.exe
        C:\Users\robin\310382.exe
        C:\Users\robin\318876.exe
        C:\Users\robin\420836.exe
        C:\Users\robin\46732.exe
        C:\Users\robin\503821.exe
        C:\Users\robin\568625.exe
        C:\Users\robin\826024.exe
        C:\Users\robin\858112.exe
        C:\Users\robin\amhzdc.exe
        C:\Users\robin\ariant.txt
        C:\Users\robin\athpvzrj.exe
        C:\Users\robin\auto.txt
        C:\Users\robin\dload.exe
        C:\Users\robin\eg.exe
        C:\Users\robin\egos.txt
        C:\Users\robin\fumokabm.exe
        C:\Users\robin\gvfcrsuf.exe
        C:\Users\robin\iiguuolv.exe
        C:\Users\robin\image.exe
        C:\Users\robin\jdwaxmil.exe
        C:\Users\robin\jkuqnqpo.exe
        C:\Users\robin\kbavskvo.exe
        C:\Users\robin\lhaj.txt
        C:\Users\robin\lmwpfl.exe
        C:\Users\robin\Local Settings\Application Data\addon.dat
        C:\Users\robin\lvuegs.exe
        C:\Users\robin\Modegreat.exe
        C:\Use
        0
        1. Contributeur sécurité
          Bonjour,

          1) Télécharge MSNFix.zip (de !aur3n7) sur ton bureau:
          http://sosvirus.changelog.fr/MSNFix.zip

          Décompresse-le (clic droit >> Extraire ici) et place les fichiers dans C:\MSNFix (très important).

          Double cliquer sur le fichier MSNFix.bat.
          - Exécutez l'option R.
          -- Si l'infection est détectée, un message l'indiquera et il suffira de presser une touche pour lancer le nettoyage

          Note :
          Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations. Dans ce cas il suffit de redémarrer l'ordinateur en mode normal

          - Le rapport sera enregistré dans le même dossier que MSNFix sous forme date_heure.txt

          2) Clique sur ce lien
          http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe
          pour télécharger le fichier d'installation d'HijackThis.

          Enregistre HJTInstall.exe sur ton bureau.

          Double-clique sur HJTInstall.exe pour lancer le programme

          Par défaut, il s'installera là :
          C:\Program Files\Trend Micro\HijackThis

          Accepte la license en cliquant sur le bouton "I Accept"

          Ferme Hijackthis en cliquant sur la croix-rouge.

          Télécharge DSS (Deckard's System Scanner de Deckard) sur ton Bureau à partir de ce lien :

          http://www.techsupportforum.com/sectools/Deckard/dss.exe

          Choisis "Enregistrer" et "Bureau" comme emplacement.

          Ferme toutes les applications en cours (très important, sinon l'ordi peut planter).

          Double-clique sur DSS.exe pour lancer l'outil.

          S'il ne trouve pas HijackThis, clique sur Oui.

          Clique sur OK à chaque fois que cela sera demandé.

          L'analyse finie, un fichier texte s'affichera. Poste son contenu dans ta réponse.

          Le rapport se trouve ici : C:\Deckard\System Scanner\main.txt.
          -1
          1. Contributeur sécurité
            Re,

            le rapport de MSNFix stp.
            -1
            1. Contributeur sécurité
              Re,

              non, désolé ce n'est pas ça.

              C'est quelque chose de la forme date_heure.txt

              Sinon, refais tourner MSNFix.
              -1