virus virtumonde aider moi svp Résolu/Fermé

Question

Bonjour, voila je vous présente mon rapport je suis désespéré a cause de ce sataner virtumonde je ne sais pas comment le retirer completement


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:08:52, on 07/06/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\System32undll32.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\Windows\System32undll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\System32undll32.exe
C:\Windows\System32undll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Norton 360\ScanStub.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Windows Sidebar\sidebar.exe
c:\windows\system32undll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\explorer.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: (no name) - {615B099F-E2E4-4928-84BA-CC74DF60A236} - C:\Users\Brian\AppData\Local\Temp\jkkLDWqQ.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O3 - Toolbar: Afficher Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [MSPService] C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BM4b8189fd] Rundll32.exe "C:\Windows\system32\qvmmojbx.dll",s
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\Brian\AppData\Local\Temp\jkkLDWqQ.dll,c
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [48b2ba61] rundll32.exe "C:\Users\Brian\AppData\Local\Temp\iblumydx.dll",b
O4 - HKCU\..\Run: [BM4b8189fd] Rundll32.exe "C:\Users\Brian\AppData\Local\Temp\sqimdnjg.dll",s
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix: 
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ccEvtMgr - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: ccSetMgr - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software GmbH - C:\Windows\System32\TuneUpDefragService.exe

Utilisateur anonyme · Answer

Coche les lignes et fix les

O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\Brian\AppData\Local\Temp\jkkLDWqQ.dll,c
O4 - HKCU\..\Run: [48b2ba61] rundll32.exe "C:\Users\Brian\AppData\Local\Temp\iblumydx.dll",b
O4 - HKCU\..\Run: [BM4b8189fd] Rundll32.exe "C:\Users\Brian\AppData\Local\Temp\sqimdnjg.dll",s
O2 - BHO: (no name) - {615B099F-E2E4-4928-84BA-CC74DF60A236} -C:\Users\Brian\AppData\Local\Temp\jkkLDWqQ.dll

Et de plus les outils de desinfection ne sont pas compatible Vista alors ca va être chaud pour toi

Sinon essaye d' intaller Spybot mais c'est pour Vista 32bits mais essaye
https://www.clubic.com/telecharger-fiche10965-spybot-search-and-destroy.html

moryan · Answer

salut, j'ai eu le meme probleme. J'ai un copain qui m'a conseille Spybot. Je lance la recherche, spybot est detecte, je le supprime et a chaque nouvelle recherche Virtumonde reapparait.

Je n'ai pas tout compris à ce qu'il faut faire, vous pourriez m'aider ?

J'ai utilisé ccleaner et le rapport de la recherche donne ceci : 

ANALYSE COMPLETE - (11.549 secs)
------------------------------------------------------------------------------------------
83,3MB ont été supprimés. (Taille approximative)
------------------------------------------------------------------------------------------

Détails des fichiers à supprimer (Note: AUCUN fichier n'a pour l'instant été supprimé)
------------------------------------------------------------------------------------------
Fichiers Temporaires d'Internet Explorer (fichiers 337) 36,1MB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\arnaud@google[1].txt 131 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\arnaud@live[2].txt 233 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\arnaud@messenger.msn[1].txt 96 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\arnaud@msn[2].txt 231 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\arnaud@rad.msn[2].txt 690 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\arnaud@windowsmarketplace[2].txt 259 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\arnaud@zune[2].txt 231 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\low\arnaud@be.msn[2].txt 327 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\low\arnaud@c.msn[1].txt 67 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\low\arnaud@gw-hades.forumactif[1].txt 273 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\low\arnaud@live[1].txt 99 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\low\arnaud@metriweb[1].txt 97 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\low\arnaud@msnportal.112.2o7[1].txt 124 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\low\arnaud@msn[2].txt 275 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\low\arnaud@rad.msn[2].txt 680 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\low\arnaud@tecil.royaumes[1].txt 363 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\low\arnaud@uni4.ogame[2].txt 234 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\low\arnaud@www.tecil.royaumes[1].txt 272 bytes
C:\Users\Arnaud\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012008061320080614\index.dat 32,00KB
C:\Users\Arnaud\AppData\Local\Microsoft\Windows\History\Low\History.IE5\index.dat 0,17MB
C:\Users\Arnaud\AppData\Local\Microsoft\Windows\History\Low\History.IE5\MSHist012008061320080614\index.dat 32,00KB
Marqué pour l'effacement: C:\Users\Arnaud\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
Marqué pour l'effacement: C:\Users\Arnaud\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat
Marqué pour l'effacement: C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
Marqué pour l'effacement: C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Cookies\Low\index.dat
Marqué pour l'effacement: C:\Users\Arnaud\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini
Marqué pour l'effacement: C:\Users\Arnaud\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
Marqué pour l'effacement: C:\Users\Arnaud\AppData\Local\Microsoft\Windows\History\Low\History.IE5\desktop.ini
Marqué pour l'effacement: C:\Users\Arnaud\AppData\Local\Microsoft\Windows\History\Low\History.IE5\index.dat
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\026.lnk 614 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\9gep8xf_[mininova].lnk 552 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Arnaud.lnk 292 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\asbeth.lnk 537 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Autres.lnk 448 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\C'est_arrivé près de chez vous.lnk 634 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\C'est_arrivé_pres_de_chez_vous.DVDRIP.FR.par_SuBbAsS_tEaM.lnk 823 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\chloebrankaer@hotmail.com.lnk 1,03KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Correction.lnk 554 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Deep Purple - Smoke On The Water.lnk 699 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Don't Go Breaking My Heart.lnk 727 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Dr house saison 1 français french.lnk 603 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Dr.House.1x01.Pilote.DVDRip.Fr.lnk 976 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Dr.House.1x02.Test.de.paternité.DVDRip.Fr.lnk 1,01KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Dr.House.1x03.Cherchez.l'erreur.DVDRip.Fr.lnk 1,01KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Dr.House.1x11.A.bout.de.nerfs.DVDRip.Fr.lnk 1.021 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\DSCN3213.lnk 807 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\edymos.lnk 741 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Hargar.lnk 537 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Images.lnk 351 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\IMG00013.lnk 738 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\IMG00014.lnk 738 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\juin 2008.lnk 692 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\karie19.lnk 757 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\karie3.lnk 724 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\karie4.lnk 752 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\La GF.lnk 617 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\marie_laborne@hotmail.com (2).lnk 1,05KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\marie_laborne@hotmail.com.lnk 1,03KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Mes fichiers reçus.lnk 541 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\MessageB.lnk 410 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\moi.lnk 531 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Musique.lnk 444 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Quentin_Tarantino[1].lnk 829 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Rechercher.lnk 1,24KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Rhéto Trophée.lnk 582 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Rhétos.lnk 448 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Royaumes.net - Enchères.lnk 581 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Sans titre-2.lnk 554 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Setup.lnk 2,28KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Smoke On The Water.lnk 687 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\SMRTNTKY.lnk 279 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Sting.lnk 622 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Sting2.lnk 431 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\TFE.lnk 610 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Téléchargement.lnk 369 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Vidéos.lnk 345 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Windows\Recent\Word.lnk 439 bytes
C:\Users\Arnaud\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db 12,0MB
C:\Users\Arnaud\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db 3,00MB
C:\Users\Arnaud\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db 1,00MB
C:\Users\Arnaud\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db 19,0MB
C:\Users\Arnaud\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db 63,15KB
C:\Users\Arnaud\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db 24 bytes
Poubelle vidée (2 fichiers) 3,14MB
C:\Users\Arnaud\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\desktop.ini 67 bytes
C:\Users\Arnaud\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\FM98MANZ\desktop.ini 67 bytes
C:\Users\Arnaud\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\HNA0Q4W1\desktop.ini 67 bytes
C:\Users\Arnaud\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\OZNO8UOX\desktop.ini 67 bytes
C:\Users\Arnaud\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\PY55W33B\desktop.ini 67 bytes
C:\Users\Arnaud\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\X49G0VLM\desktop.ini 67 bytes
C:\Users\Arnaud\AppData\Local\Temp\History\History.IE5\desktop.ini 145 bytes
C:\Users\Arnaud\AppData\Local\Temp\xxgkdchj.dll 88,00KB
C:\Users\Arnaud\AppData\Local\Temp\~DF6D91.tmp 16,00KB
C:\Windows\system32\wbem\Logs\FrameWork.log 10,13KB
C:\Windows\system32\wbem\Logs\wmiprov.log 16,26KB
C:\Windows\system32\wbem\Logs\FrameWork.lo_ 64,11KB
C:\Windows\system32\wbem\Logs\wmiprov.lo_ 64,03KB
C:\Windows\DirectX.log 0,25MB
C:\Windows\DPINST.LOG 0,24MB
C:\Windows\DtcInstall.log 3,73KB
C:\Windows\KB893803v2.log 742 bytes
C:\Windows\msxml4-KB936181-enu.LOG 0,25MB
C:\Windows\msxml4-KB941833-enu.LOG 0,25MB
C:\Windows\msxmlcab.log 101 bytes
C:\Windows\PFRO.log 0,11MB
C:\Windows\PS.log 181 bytes
C:\Windows\setupact.log 6,57KB
C:\Windows\setuperr.log 0 bytes
C:\Windows\TSSysprep.log 3,46KB
C:\Windows\wmsetup.log 2,66KB
C:\Windows\xpsp1hfm.log 1,37KB
C:\Windows\Debug\mrt.log 18,21KB
C:\Windows\Debug\mrteng.log 4,53KB
C:\Windows\Debug\sam.log 0 bytes
C:\Windows\Debug\sammui.log 266 bytes
C:\Windows\Debug\UserMode\ChkAcc.log 0 bytes
C:\Windows\Debug\UserMode\ChkAcc.bak 0 bytes
C:\Windows\security\logs\scesetup.log 0,60MB
C:\Windows\security\logs\scecomp.old 15,37KB
Cache Internet de Firefox/Mozilla (38 fichiers) 3,60MB
Cookie supprimé: atdmt.com
Cookie supprimé: be.msn.com
Cookie supprimé: c.msn.com
Cookie supprimé: google.com
Cookie supprimé: google.fr
Cookie supprimé: live.com
Cookie supprimé: metriweb.be
Cookie supprimé: mozilla.com
Cookie supprimé: msn.com
Cookie supprimé: msnportal.112.2o7.net
Cookie supprimé: rad.msn.com
Cookie supprimé: royaumes.net
Cookie supprimé: tecil.royaumes.net
Cookie supprimé: toolbar.google.com
Cookie supprimé: youtube.com
Cookie supprimé: uni4.ogame.fr
Cookie supprimé: www.godwarriors.com
Cookie supprimé: www.tecil.royaumes.net
C:\Users\Arnaud\AppData\Roaming\Mozilla\Firefox\Profiles\8z8mbrm8.default\history.dat 797 bytes
C:\Users\Arnaud\AppData\Roaming\Apple Computer\Safari\Cookies\Cookies.plist 53,27KB
C:\Users\Arnaud\AppData\Roaming\Apple Computer\Safari\History.plist 73,02KB
C:\Users\Arnaud\AppData\Roaming\Apple Computer\Safari\Downloads.plist 226 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\(Frensh) A lire avant.LNK 870 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\affiche.LNK 914 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\ALL UPLOADS by TICI333-Pirate Bay-.LNK 1,32KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Anglais.LNK 890 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Correction.LNK 851 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\CounterStrike 1.6 Full. +BOT. LANPatch (Cracked).LNK 1,10KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\CounterStrike1.6WithBot  INFO.LNK 1,33KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Documents.LNK 703 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\download sur www.facsa.ulg.ac.be.url 62 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\index.dat 164 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Intuix key (G).LNK 189 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Jamie_Oliver.LNK 946 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\JUDE LAW (ana).LNK 1,03KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\La GF.LNK 904 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Lady Di (Maïté).LNK 1,01KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\LimeWire PROFESSIONAL EDITION  4.17.1.1 FINAL.LNK 1,05KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Mes fichiers reçus.LNK 862 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Nouveau dossier.LNK 440 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\PowerPoint.LNK 822 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Preventie brandwonden.LNK 1,04KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Quentin_Tarantino.LNK 966 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Quentin_Tarantino[1].LNK 1,04KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Rihanna - Please Don't Stop The Music.LNK 814 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Steven Spielberg (jon).LNK 1,04KB
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Steven_Spielberg.LNK 845 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Sting.LNK 909 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Sting2.LNK 824 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Templates.LNK 698 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\TFE.LNK 897 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\The_beatles.LNK 941 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Travail_G...LNK 1.010 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Téléchargement.LNK 672 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Word (2).LNK 788 bytes
C:\Users\Arnaud\AppData\Roaming\Microsoft\Office\Recent\Word.LNK 788 bytes
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\alerts_1.log 22,49KB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\AutoSpeedSearchHistory_1.log 88,21KB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\AutoSpeed_1.log 0,25MB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\AutoSpeed_2.log 0,23MB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\debug_1.log 95,80KB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\debug_2.log 0,25MB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\NetStatus_1.log 3,09KB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\seltrace_1.log 0,25MB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\seltrace_2.log 0,24MB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\SpeedMan_1.log 0,12MB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\SpeedMan_2.log 0,25MB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\thread_1.log 0,25MB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\thread_2.log 0,11MB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\v3.ads_1.log 85,14KB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\v3.CMsgr_1.log 48,06KB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\v3.emp_1.log 102,34KB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\v3.MD_1.log 2,96KB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\v3.PMsgr_1.log 0,18MB
C:\Users\Arnaud\AppData\Roaming\Azureus\logs\v3.Stream_1.log 58,70KB
C:\Users\Arnaud\AppData\Roaming\Google\Local Search History\google%2Eimages.w 11,15KB
C:\Users\Arnaud\AppData\Roaming\Google\Local Search History\google%2Emaps.w 40 bytes
C:\Users\Arnaud\AppData\Roaming\Google\Local Search History\google%2Esite.w 30 bytes
C:\Users\Arnaud\AppData\Roaming\Google\Local Search History\google%2Eweb.w 1,09KB
C:\Users\Arnaud\AppData\Roaming\Mozilla\Firefox\Profiles\8z8mbrm8.default\GoogleToolbarData\searchhistory.xml 25 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\aka.fotovista.com\pixLogOp_794_fr.sol 106 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\click-fr.com\YmlidWxvdXNzbw%3D%3D.sol 55 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\dailymotion.alice.it\flash\dmplayer\dmplayer-fr.swf\dmplayer.sol 55 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\ds.serving-sys.com\0712_SHAREDOBJECT_COOKIENAME__clubmed_banner.sol 143 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\flash.revver.com\player\1.0\core.swf\revverplayer.sol 86 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\fr.youtube.com\soundData.sol 58 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\fr.youtube.com\videostats.sol 199 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\ifrance.com\cnhzY2htYWx0eg==.sol 51 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\images.soapbox.msn.com\flash\soapbox1_1.swf\CountryCode.sol 58 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\images.soapbox.msn.com\s_br.sol 35 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\images.video.msn.com\flash\soapbox1_1.swf\VideoWindow.sol 51 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\interclick.com\ud.sol 139 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\localhost\Users\Arnaud\AppData\Local\Temp\game.dcr\sewerun.sol 266 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\media.eurolive.com\$wminisz74d.sol 70 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\media.putfile.com\player\flvplayer.swf\agriya_flv.sol 53 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\media1.break.com\breakPlayerUserPreferences.sol 101 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\multimedia.metacafe\MetacafeFlashVideoPlayer.sol 64 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\multimedia.metacafe\PhpAdsCapping.sol 136 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\naiadsystems.com\naiad.sol 72 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\pcdn01.xtube.com\soundData.sol 58 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\pornotube.com\soundData.sol 58 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\r2d2adverising.com\dXNldGVybml0eQ%3D%3D.sol 55 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\s.ytimg.com\soundData.sol 58 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\s.ytimg.com\videostats.sol 199 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\serv116.fr.prizee.com\swf\toutfeutoutflamme.v8.xx.swf\prizee_tftf.sol 53 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\serv116.fr.prizee.com\swf\toutfeutoutflamme.v8.xx.swf\PXMLSocket.sol 50 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\skype.com\#ui\preferences.sol 244 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\stat.radioblogclub.com\radio.blog\skins\default\player.swf\radioblogclub.sol 53 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\stat.radioblogclub.com\RbRestoSave.sol 4,19KB
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\stat.tvblogclub.com\RbRestoSave.sol 120 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\static.scanscout.com\SS_ARE_RPCHistory.sol 48 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\static.scanscout.com\ss_data.sol 134 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\static.youku.com\v\swf\qplayer.swf\youku.sol 85 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\static.youku.com\v1.0.0213\v\swf\qplayer.swf\youku.sol 85 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\thetechnorati.com\rxschmaltz.sol 51 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\video.femmesplus.fr\swf\p.swf\userPrefs.sol 54 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\video.google.com\googleplayer.swf\mediaPlayerUserSettings.sol 94 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\video.google.com\videostats.sol 123 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\video.google.fr\googleplayer.swf\mediaPlayerUserSettings.sol 94 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\wat.tv\images\v2.5\flash\player.swf\watPlayer.sol 84 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\wat.tv\images\v2.5\flash\player.swf\watPlayerOAS.sol 65 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\worldsbiggestchat.com\gfx\Chat\redirect.swf\BeIT_Rocks.sol 76 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.bigpoint.com\bpid\bpid.swf\bpid.sol 68 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.blu-ray.sony-europe.com\shared\mainsite\main.swf\bluray_visits.sol 56 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.dailymotion.com\flash\dmplayer\dmplayer-fr.swf\dmplayer.sol 89 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.deezer.com\player.swf\deezer.sol 46 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.electronicarts.fr\images\flash\110239-moh_autoplay01.swf\moh_airborne_topimage.sol 82 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.ena.lu\mce.swf\TestMovie_Config_Info.sol 341 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.hardeluxe.biz\com.jeroenwijering.players.sol 66 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.kinepolis.com\AdID.sol 34 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.kinepolis.com\session.sol 63 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.mega-jackpot.com\swf\megajackpot.swf\megajackpot.sol 71 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.nokia.fr\resfnc\phonegallery.swf\PhoneGallery.sol 448 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.ogame-winner.com\convrc\ConvertisseurRC.swf\ogamewinner-convertisseur.sol 70 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.paula.be\paula_settings.sol 74 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.prizee.com\coffreSirewyr.sol 60 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.prizee.com\swf\toutfeutoutflamme.v8.xx.swf\prizee_tftf.sol 53 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.prizee.com\swf\toutfeutoutflamme.v8.xx.swf\PXMLSocket.sol 50 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.skype.com\download.sol 46 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.veoh.com\static\flash\players\veohplayer.swf\veohVolume.sol 46 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.warpfire.fr\WarpfireSettings.sol 102 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.wat.tv\images\flash\playerexport_overblog.swf\WATPlayer.sol 49 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.wideo.fr\swf\p.swf\userPrefs.sol 54 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.xatech.com\chat.sol 88 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.youtube.com\soundData.sol 58 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.youtube.com\soundData_level0.loadClip.sol 74 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.youtube.com\timeDisplayConfig.sol 81 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\MFW2TUBF\www.youtube.com\videostats.sol 199 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#aka.fotovista.com\settings.sol 87 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#click-fr.com\settings.sol 82 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#dailymotion.alice.it\settings.sol 90 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ds.serving-sys.com\settings.sol 88 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flash.revver.com\settings.sol 86 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#fr.youtube.com\settings.sol 84 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ifrance.com\settings.sol 81 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#images.soapbox.msn.com\settings.sol 92 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#images.video.msn.com\settings.sol 90 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com\settings.sol 84 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#local\settings.sol 75 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.eurolive.com\settings.sol 88 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.putfile.com\settings.sol 87 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media1.break.com\settings.sol 86 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#multimedia.metacafe\settings.sol 89 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#naiadsystems.com\settings.sol 86 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pcdn01.xtube.com\settings.sol 86 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pornotube.com\settings.sol 83 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#r2d2adverising.com\settings.sol 88 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol 81 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#serv116.fr.prizee.com\settings.sol 91 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#skyblog.video.skyrock.com\settings.sol 95 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#skype.com\settings.sol 79 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#stat.radioblogclub.com\settings.sol 92 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#stat.tvblogclub.com\settings.sol 89 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.scanscout.com\settings.sol 90 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.youku.com\settings.sol 86 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#thetechnorati.com\settings.sol 87 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.femmesplus.fr\settings.sol 89 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.google.com\settings.sol 86 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.google.fr\settings.sol 85 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#wat.tv\settings.sol 76 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#worldsbiggestchat.com\settings.sol 91 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.bigpoint.com\settings.sol 86 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.blu-ray.sony-europe.com\settings.sol 97 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.dailymotion.com\settings.sol 89 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.deezer.com\settings.sol 84 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.electronicarts.fr\settings.sol 91 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ena.lu\settings.sol 80 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.hardeluxe.biz\settings.sol 87 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.kinepolis.com\settings.sol 87 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.mega-jackpot.com\settings.sol 90 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.nokia.fr\settings.sol 82 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ogame-winner.com\settings.sol 90 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.paula.be\settings.sol 82 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.prizee.com\settings.sol 84 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.skype.com\settings.sol 83 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.veoh.com\settings.sol 82 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.warpfire.fr\settings.sol 85 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.wat.tv\settings.sol 80 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.wideo.fr\settings.sol 82 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.xatech.com\settings.sol 84 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com\settings.sol 85 bytes
C:\Users\Arnaud\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol 1,46KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{076517FA-A992-43D0-86AD-EB8E24B3A6FF} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{089D7E53-E00F-4C7A-8216-A6A54C1945CE} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{125E2A17-764A-4BD0-9F76-D29F18900F8A} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{1C7E340D-FC8D-4D07-9DB4-3FAC40DBCCCB} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{28F294E2-9725-4A70-BDC0-F51BF56CEFC9} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{3A7C9E40-E74F-4527-B1B5-A3DF65288B75} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{3F225A25-88B5-4908-A618-27EF277796E1} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{4389537D-FD83-47BE-A726-5844643B6D29} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{4F9C4258-EABC-484C-B2AC-FCA06CC89CB5} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{5921B71D-AE3A-42F8-BE72-3152A0AA1A0E} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{5D425905-0426-4343-8967-F7A256728A06} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{60B57D9A-D371-40DC-B537-8E0C49BC72B8} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{7196D97C-68C5-4134-B128-20CB02F85B4E} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{77713C70-D5F3-458C-8822-E554441791FF} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{784390FE-8470-43C8-9487-71B65B70F73E} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{A3A43469-02E9-42D0-9E60-A769B882BD04} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{A6A88477-98BB-4A73-B9BE-ECF293E18CBF} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{AA062124-77AB-4494-8227-95E88197DBA2} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{C2A37241-1D98-43AB-A85A-A0FD539DBC20} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{C8C3F80F-E9FD-4F5A-B300-D2A7CEC12684} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{CBB0285C-459C-490B-A902-0B2311438F25} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{D18E0CD3-98EA-46DB-9506-1150E868D6CD} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{D7A77C5A-5A02-4ED6-831E-4CA3FCE87816} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{E8005415-D9D5-49F4-BD7C-751A40587300} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{EA0A11A8-C056-4073-821E-FD0C6DD1D845} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{EE9FD8DC-6723-4D4C-810B-E312B377DE89} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{EFD7752F-B5C3-42B3-83BD-F4398FBC67E7} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{F6D40124-F822-46C8-BA1E-DD26D4E9D4D1} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\{FB150D7E-28EB-436C-8835-0C15F667DEE9} 5,38KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{08A7E918-4628-4EEF-9A24-5E97BD5540F7} 6,01KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{131F844A-6826-4403-9A7D-8E17A9016CDD} 5,84KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{137EC5E2-1665-4A0C-B159-EF455588F859} 6,01KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{1E9E2DA4-37ED-47CC-AD45-4396965A72D2} 6,16KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{329B1B63-03F0-4DF4-B5B9-272F26DB62B0} 6,17KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{454A5922-7B6C-4B0D-B815-BC51E602A8BE} 6,01KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{5B0C6C89-945F-4E12-B863-4E81B85C42FC} 5,84KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{6B32988A-3726-4382-8EA3-C166AAF5E656} 6,01KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{747DE4D6-41EE-48D1-852F-7AB1716F66E6} 6,17KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{751442F5-CEAB-40F1-8A2E-E1E638971E46} 6,17KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{857EDE98-C247-4CFF-9BDD-DAF30B4BD876} 6,16KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{920EC2EE-9BF9-4438-A957-9424A1A06531} 6,16KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{A9F0C968-0E44-4981-90D6-B047D3AE3CB6} 6,01KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{BD8F4313-547E-4858-A557-3B3C8A2B3B62} 6,01KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{C14E824E-EED5-43A2-91AF-79F3EC6FB4E9} 6,01KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{C3DA4A17-D79E-45B4-8177-932AF07D880F} 6,01KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{D06A69AD-13AC-4F85-8438-18DD8166B619} 6,01KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{DE0AEE3D-49CA-41E7-803F-2D5FE070F10B} 6,01KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{EBC942BD-FDC1-4CC4-8020-34757A0CEBD0} 6,00KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{F136D1E9-5005-48C2-885C-75CE0BA1DC09} 6,16KB
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{F2167B0D-C24B-4DAF-8A9D-DEA34046325E} 6,16KB

Merci

Virus virtumonde aider moi svp

2 réponses

Discussions similaires