Virus CID

Question

Bonjour,
j'ai un virus CID, quelqu'un peut m'aidé svp ?

Merci

romlemagicus · Answer

deja ce n'ai pas 1 virus t'inqiete c pas si grave allor va dans panno de convig ->installer ou modifier un prog->et la tu supppr msn + mais tu suppr que le sponsor(ps c bien des pub que t'as????)

a+

Woké · Answer

Je l'ai déja fais mais ca continu toujours...

jlpjlp · Answer

slt

Télécharge ceci: (by Moe) : 

http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe 

Double clic sur Lopxpsetup.exe pour lancer l'installation 
Au menu, choisir l'option 1 
Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer ! 
Une rapport sera alors crée, à copie/colle en entier sur le forum.

Woké · Answer

# Rapport Lopxp fait le 07/07/2008 à 20:45:01
# Exécuté dans : C:\Program Files\Lopxp
# Version 3.10 - Maj du 11/04/2008

  Killing 'iexplore.exe'
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" (3760)
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" (2476)
"C:\Program Files\Internet Explorer\iexplore.exe"  (1484)

========== Listing des dossiers Application Data

+- C:\Documents and Settings\Administrateur\Application Data

 2006-09-25 à 12:48:26 - Ahead 
 2006-09-25 à 13:28:16 - AOL 
 2006-09-25 à 09:46:56 - Identities 
 2006-09-25 à 12:11:40 - Macromedia 
 2006-09-25 à 15:17:07 - Microsoft 
 2006-09-25 à 13:28:03 - You've Got Pictures Screensaver

+- C:\Documents and Settings\Administrateur\Local Settings\Application Data

 2006-09-25 à 12:49:36 - Ahead 
 2006-09-25 à 14:37:05 - ApplicationHistory 
 2006-09-25 à 09:49:30 - Microsoft 
 2006-09-25 à 12:36:19 - PowerCinema 

+- C:\Documents and Settings\Adrien\Application Data

 2008-02-08 à 17:54:03 - Adobe 
 2007-04-13 à 10:43:25 - AdobeUM 
 2008-01-03 à 13:03:39 - Ahead 
 2006-09-25 à 13:28:16 - AOL 
 2008-03-21 à 19:31:25 - Apple Computer
 2006-12-20 à 21:59:48 - CyberLink 
 2006-11-23 à 20:29:10 - DivX 
 2007-04-29 à 11:22:37 - Google 
 2006-11-08 à 13:36:02 - HP 
 2006-09-25 à 09:46:56 - Identities 
 2008-03-07 à 21:13:56 - InstallShield 
 2007-03-31 à 18:24:57 - La Bataille pour la Terre du Milieu ™ II
 2008-06-24 à 14:56:58 - LimeWire 
 2006-09-25 à 12:11:40 - Macromedia 
 2008-01-03 à 15:15:48 - Microsoft 
 2008-06-27 à 20:08:52 - mIRC 
 2006-11-23 à 19:35:01 - Mozilla 
 2007-04-29 à 20:08:24 - Screenshot Sender
 2008-03-07 à 21:27:06 - Sony 
 2008-06-20 à 23:43:05 - StupidHold 
 2008-02-10 à 10:38:44 - Sun 
 2006-11-23 à 19:35:22 - Talkback 
 2008-06-26 à 21:59:08 - teamspeak2 
 2007-08-07 à 21:16:25 - uqm 
 2008-01-27 à 13:46:08 - vlc 
 2008-07-07 à 17:17:00 - Xfire 
 2006-09-25 à 13:28:03 - You've Got Pictures Screensaver

+- C:\Documents and Settings\Adrien\Local Settings\Application Data

 2008-02-08 à 17:54:28 - Adobe 
 2006-10-26 à 13:43:20 - Ahead 
 2007-05-01 à 16:59:17 - AOL 
 2008-03-07 à 21:21:47 - Apple 
 2008-03-07 à 21:21:31 - Apple Computer
 2008-07-07 à 17:16:00 - ApplicationHistory 
 2008-06-18 à 10:47:12 - Downloaded Installations
 2006-12-24 à 16:01:39 - GameSpy 
 2007-04-24 à 17:34:21 - Google 
 2006-10-14 à 10:38:12 - HP 
 2006-10-22 à 19:45:05 - Identities 
 2006-10-14 à 10:38:17 - IsolatedStorage 
 2008-03-28 à 21:06:26 - Microsoft 
 2006-11-23 à 19:35:01 - Mozilla 
 2007-06-18 à 15:54:39 - PowerCinema 
 2008-03-07 à 21:25:54 - Sony 
 2008-03-07 à 21:16:27 - Sony Ericsson
 2007-09-14 à 17:54:43 - Steam 
 2008-03-28 à 21:11:34 - WMTools Downloaded Files

+- C:\Documents and Settings\All Users\Application Data

 2008-02-08 à 18:07:36 - Adobe 
 2007-05-01 à 16:58:15 - AOL 
 2008-03-07 à 21:21:45 - Apple 
 2008-03-07 à 21:22:01 - Apple Computer
 2008-07-02 à 10:08:32 - Book Slow Axis Web
 2008-03-07 à 21:14:59 - BVRP Software
 2006-10-21 à 21:08:02 - CyberLink 
 2007-04-24 à 17:32:53 - Google 
 2006-10-14 à 10:29:48 - HP 
 2007-04-29 à 20:14:09 - Messenger Plus!
 2008-07-05 à 23:06:27 - Microsoft 
 2006-09-25 à 15:34:02 - nView_Profiles 
 2006-12-10 à 17:05:35 - QuickTime 
 2008-07-03 à 11:30:23 - Razer 
 2006-09-25 à 09:52:43 - SBSI 
 2008-07-02 à 10:08:32 - settings surf hold scr
 2006-10-14 à 10:28:01 - Sonic 
 2008-03-07 à 21:27:06 - Sony 
 2008-03-07 à 21:14:41 - Sony Ericsson
 2007-06-07 à 17:59:54 - Spybot - Search & Destroy
 2007-06-26 à 19:14:21 - SystemDoctor Free
 2006-09-25 à 13:28:01 - Viewpoint 
 2006-09-25 à 13:56:51 - Windows Genuine Advantage
 2008-03-29 à 19:28:42 - WLInstaller 
 2006-10-14 à 10:34:42 - Yahoo! Companion

+- C:\Documents and Settings\Martine\Application Data

 2008-02-05 à 09:03:17 - Adobe 
 2007-06-20 à 11:53:48 - AdobeUM 
 2006-09-25 à 12:48:26 - Ahead 
 2006-09-25 à 13:28:16 - AOL 
 2006-10-23 à 15:57:15 - CyberLink 
 2008-03-01 à 15:41:10 - DivX 
 2007-05-01 à 08:24:18 - Google 
 2007-01-08 à 17:28:55 - HP 
 2006-09-25 à 09:46:56 - Identities 
 2006-09-25 à 12:11:40 - Macromedia 
 2008-01-02 à 18:23:31 - Microsoft 
 2008-03-06 à 11:17:46 - Mozilla 
 2008-06-25 à 20:42:39 - StupidHold 
 2008-03-06 à 11:17:58 - Talkback 
 2008-01-30 à 09:14:30 - vlc 
 2006-09-25 à 13:28:03 - You've Got Pictures Screensaver

+- C:\Documents and Settings\Martine\Local Settings\Application Data

 2008-02-05 à 09:03:23 - Adobe 
 2006-09-25 à 12:49:36 - Ahead 
 2007-05-02 à 19:42:25 - AOL 
 2008-07-06 à 16:08:06 - ApplicationHistory 
 2007-05-01 à 08:24:18 - Google 
 2006-10-17 à 08:56:33 - HP 
 2007-06-27 à 08:48:41 - Identities 
 2007-10-18 à 18:01:25 - IM 
 2006-10-17 à 08:56:43 - IsolatedStorage 
 2008-05-25 à 14:56:22 - Microsoft 
 2008-03-06 à 11:17:46 - Mozilla 
 2006-10-23 à 15:57:47 - PowerCinema 

+- C:\Documents and Settings\Propri‚taire\Application Data

 2006-10-23 à 15:56:40 - You've Got Pictures Screensaver

+- C:\Documents and Settings\Roger Pr‚vosto\Application Data

 2008-01-30 à 18:23:47 - Adobe 
 2007-12-10 à 11:54:43 - AdobeUM 
 2006-09-25 à 12:48:26 - Ahead 
 2006-09-25 à 13:28:16 - AOL 
 2008-04-18 à 15:03:22 - Apple Computer
 2008-03-10 à 18:31:04 - CyberLink 
 2007-11-22 à 15:14:13 - DivX 
 2007-06-29 à 17:01:46 - Google 
 2007-09-02 à 16:30:33 - HP 
 2006-09-25 à 09:46:56 - Identities 
 2006-09-25 à 12:11:40 - Macromedia 
 2008-01-28 à 20:49:29 - Microsoft 
 2007-10-10 à 12:48:24 - Microsoft Web Folders
 2008-07-02 à 10:09:17 - StupidHold 
 2008-01-30 à 00:43:17 - Sun 
 2007-11-25 à 23:25:47 - Viewpoint 
 2008-01-27 à 21:47:45 - vlc 
 2008-03-23 à 18:20:25 - Xfire 
 2006-09-25 à 13:28:03 - You've Got Pictures Screensaver

+- C:\Documents and Settings\Roger Pr‚vosto\Local Settings\Application Data

 2008-01-28 à 20:33:52 - Adobe 
 2007-11-20 à 11:41:45 - Ahead 
 2007-05-04 à 13:56:05 - AOL 
 2008-03-10 à 18:51:53 - Apple Computer
 2008-07-06 à 15:34:11 - ApplicationHistory 
 2007-05-04 à 13:57:39 - Google 
 2006-10-16 à 12:37:53 - HP 
 2007-09-26 à 10:42:24 - Identities 
 2007-10-19 à 08:23:06 - IM 
 2006-10-16 à 12:37:58 - IsolatedStorage 
 2008-03-29 à 19:30:41 - Microsoft 
 2008-03-10 à 19:05:10 - PowerCinema 

========== Listing du dossier Program Files

+- C:\Program Files

 2008-01-18 à 02:03:11 - 3DBELOTE 
 2008-07-05 à 09:18:46 - Adobe 
 2006-09-25 à 11:13:23 - AMD 
 2006-09-25 à 11:18:32 - Analog Devices
 2007-05-01 à 16:59:04 - AOL 
 2007-06-24 à 16:24:00 - AOL 9.0
 2006-09-25 à 13:28:04 - AOL Compagnon
 2006-11-22 à 20:14:05 - AOL Toolbar
 2008-03-07 à 21:21:46 - Apple Software Update
 2008-03-28 à 20:04:14 - Avanquest update
 2008-06-01 à 12:13:36 - Beston 
 2007-01-09 à 17:44:29 - CA 
 2007-12-19 à 21:37:54 - Circle Developement
 2006-11-24 à 21:40:44 - Common Files
 2006-09-25 à 09:45:21 - ComPlus Applications
 2007-02-10 à 13:09:35 - Custom-Strike 
 2006-09-25 à 15:56:08 - Cyberlink 
 2006-09-25 à 11:22:07 - DIFX 
 2007-09-03 à 13:20:20 - DivX 
 2006-10-14 à 17:31:08 - EA GAMES
 2007-10-29 à 12:14:51 - Electronic Arts
 2008-04-22 à 11:27:38 - eMule 
 2006-09-25 à 12:11:03 - Encarta 
 2008-03-29 à 19:29:04 - Fichiers communs
 2006-11-24 à 21:37:48 - GameSpy 
 2007-04-24 à 17:32:52 - Google 
 2006-10-14 à 10:25:33 - Hewlett-Packard 
 2006-10-14 à 10:29:49 - HP 
 2008-06-20 à 18:00:19 - HyCam2 
 2007-11-21 à 11:25:25 - IncrediMail 
 2008-07-03 à 11:29:52 - InstallShield Installation Information
 2008-06-11 à 21:03:10 - Internet Explorer
 2008-03-14 à 18:22:04 - Java 
 2006-09-25 à 13:28:03 - Learn2.com 
 2008-04-22 à 11:28:04 - LimeWire 
 2006-11-05 à 15:52:44 - Logitech 
 2008-07-07 à 18:45:17 - Lopxp 
 2007-05-20 à 19:56:53 - Messenger 
 2008-03-28 à 23:40:40 - Messenger Plus! Live
 2007-09-24 à 09:13:32 - Micro Application
 2006-09-25 à 12:14:22 - Microsoft AutoRoute
 2007-05-20 à 19:56:54 - Microsoft Digital Image 2006
 2007-10-10 à 12:48:12 - microsoft frontpage
 2006-09-25 à 12:51:51 - Microsoft Games
 2006-09-25 à 12:07:15 - Microsoft Money 2005
 2007-10-10 à 12:48:24 - Microsoft Office
 2007-05-20 à 19:56:53 - Microsoft Works
 2006-09-25 à 11:58:41 - Microsoft Works Suite 2006
 2008-06-27 à 20:08:00 - mIRC 
 2006-09-25 à 09:45:36 - Movie Maker
 2008-07-06 à 16:39:55 - Mozilla Firefox
 2006-09-25 à 09:44:42 - MSN 
 2006-10-13 à 19:30:01 - MSN Apps
 2006-09-25 à 09:44:48 - MSN Gaming Zone
 2008-03-29 à 19:29:54 - MSN Messenger
 2006-11-16 à 21:49:56 - MSXML 4.0
 2006-09-25 à 11:34:03 - Multimedia keyboard utility
 2006-09-25 à 12:47:06 - Nero 
 2006-09-25 à 09:45:38 - NetMeeting 
 2006-09-25 à 09:44:53 - Online Services
 2007-06-13 à 06:50:46 - Outlook Express
 2006-11-03 à 11:29:11 - Portrait Displays
 2008-03-07 à 21:22:28 - QuickTime 
 2008-07-03 à 11:29:53 - Razer 
 2006-09-25 à 13:27:21 - Real 
 2006-12-15 à 19:37:59 - Rockstar Games
 2006-09-25 à 09:45:50 - Services en ligne
 2008-03-07 à 21:23:15 - Sony Ericsson
 2007-06-07 à 17:49:09 - Spybot - Search & Destroy
 2008-07-02 à 19:53:09 - Spyware-Secure 
 2008-07-07 à 17:15:50 - Steam 
 2008-07-02 à 10:07:28 - StupidHold 
 2006-09-25 à 12:24:50 - Targa VFD Display
 2007-01-07 à 17:48:25 - Teamspeak2_RC2 
 2008-05-16 à 21:01:11 - TrackMania Nations ESWC
 2006-09-25 à 09:49:23 - Uninstall Information
 2008-01-27 à 13:42:43 - VideoLAN 
 2007-08-01 à 11:37:35 - Viewpoint 
 2006-09-25 à 09:49:39 - Windows Journal Viewer
 2008-03-29 à 19:28:56 - Windows Live
 2006-12-21 à 17:19:13 - Windows Media Connect
 2007-05-20 à 19:56:57 - Windows Media Connect 2
 2007-10-21 à 12:53:04 - Windows Media Player
 2006-09-25 à 09:44:47 - Windows NT
 2006-09-25 à 09:45:53 - WindowsUpdate 
 2006-09-25 à 11:24:51 - Wireless LAN USB Dongle
 2007-08-29 à 15:25:20 - Wolfenstein - Enemy Territory
 2006-09-25 à 09:46:58 - xerox 
 2006-10-14 à 10:06:45 - Yahoo! 

========== Tâches planifiées

AAB3AABC91885B64.job: c:\docume~1\martine\applic~1\stupid~1\TEAM DRIVE DEFAULT.exe 
AE3E3D089069ADE0.job: c:\docume~1\adrien\applic~1\stupid~1\TEAM DRIVE DEFAULT.exe 
AF50067F918BBA0B.job: c:\docume~1ogerp~1\applic~1\stupid~1\TEAM DRIVE DEFAULT.exe 
AppleSoftwareUpdate.job: C:\Program Files\Apple Software Update\SoftwareUpdate.exe -task
User_Feed_Synchronization-{6EADE4E3-6385-4B5F-8939-003506F34A63}.job: C:\WINDOWS\system32\msfeedssync.exe sync

========== Clés registre

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"axis web cake second"="C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web\meta bike.exe"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BibPing"="C:\DOCUME~1\Adrien\APPLIC~1\STUPID~1\TWO 4.exe"


========== Bloqueur popups Internet Explorer

 netbios-wait.com
 www.netbios-wait.com
 www.hdpvidz.com
 kanye-0.skyrock.com
 host-domain-lookup.com
 www.host-domain-lookup.com
 searchweb2.com
 www.searchweb2.com
 www.radiofg.com
 www.radiofrance.fr

==========    Suggestion ( /!\ Nécessite une interprétation.)    ==========

C:\Documents and Settings\Adrien\Application Data\StupidHold
C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web
C:\Documents and Settings\All Users\Application Data\settings surf hold scr
C:\Documents and Settings\Martine\Application Data\StupidHold
C:\Documents and Settings\Roger Prévosto\Application Data\StupidHold
C:\Program Files\Circle Developement
C:\Program Files\StupidHold
C:\WINDOWS	asks\AAB3AABC91885B64.job
C:\WINDOWS	asks\AE3E3D089069ADE0.job
C:\WINDOWS	asks\AF50067F918BBA0B.job

+- Registre:

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"axis web cake second"=-

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BibPing"=-

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow]
"netbios-wait.com"=-
"www.netbios-wait.com"=-
"host-domain-lookup.com"=-
"www.host-domain-lookup.com"=-
"searchweb2.com"=-
"www.searchweb2.com"=-



- Fin du rapport -

jlpjlp · Answer

va dans : Démarrer > Exécuter puis copie/colle la ligne suivante en gras :

"%programfiles%\Lopxp\Lopxp.bat" /Fixme
puis valide, accepte toutes les demandes de suppression et poste le rapport stp
@+


___________



colle un rapport hijackthis 
 
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

manuel :

https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html


Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo. 

ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste 

Ensuite avec Explorer créer un dossier c:\hijackthis 
Décompresser Hijackthis dans ce dossier. 
C'est important pour les sauvegardes."

Woké · Answer

# Rapport Lopxp fait le 07/07/2008 à 20:51:23
# Exécuté dans : C:\Program Files\Lopxp
# Version 3.10 - Maj du 11/04/2008


========== FixLog ==========


+- C:\Documents and Settings\Adrien\Application Data\StupidHold
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\Documents and Settings\All Users\Application Data\settings surf hold scr
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\Documents and Settings\Martine\Application Data\StupidHold
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\Documents and Settings\Roger Prévosto\Application Data\StupidHold
Choix utilisateur : Suppression acceptée.
/!\ Opération annulée, le fichier ou dossier selectionné n'exite pas.

+- C:\Program Files\Circle Developement
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\Program Files\StupidHold
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\WINDOWS	asks\AAB3AABC91885B64.job
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\WINDOWS	asks\AE3E3D089069ADE0.job
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\WINDOWS	asks\AF50067F918BBA0B.job
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- Registre :
Nettoyage effectué.

+- Fichiers temporaires :
Nettoyage effectué.


========== Listing des dossiers Application Data

+- C:\Documents and Settings\Administrateur\Application Data

 2006-09-25 à 12:48:26 - Ahead 
 2006-09-25 à 13:28:16 - AOL 
 2006-09-25 à 09:46:56 - Identities 
 2006-09-25 à 12:11:40 - Macromedia 
 2006-09-25 à 15:17:07 - Microsoft 
 2006-09-25 à 13:28:03 - You've Got Pictures Screensaver

+- C:\Documents and Settings\Administrateur\Local Settings\Application Data

 2006-09-25 à 12:49:36 - Ahead 
 2006-09-25 à 14:37:05 - ApplicationHistory 
 2006-09-25 à 09:49:30 - Microsoft 
 2006-09-25 à 12:36:19 - PowerCinema 

+- C:\Documents and Settings\Adrien\Application Data

 2008-02-08 à 17:54:03 - Adobe 
 2007-04-13 à 10:43:25 - AdobeUM 
 2008-01-03 à 13:03:39 - Ahead 
 2006-09-25 à 13:28:16 - AOL 
 2008-03-21 à 19:31:25 - Apple Computer
 2006-12-20 à 21:59:48 - CyberLink 
 2006-11-23 à 20:29:10 - DivX 
 2007-04-29 à 11:22:37 - Google 
 2006-11-08 à 13:36:02 - HP 
 2006-09-25 à 09:46:56 - Identities 
 2008-03-07 à 21:13:56 - InstallShield 
 2007-03-31 à 18:24:57 - La Bataille pour la Terre du Milieu ™ II
 2008-06-24 à 14:56:58 - LimeWire 
 2006-09-25 à 12:11:40 - Macromedia 
 2008-01-03 à 15:15:48 - Microsoft 
 2008-06-27 à 20:08:52 - mIRC 
 2006-11-23 à 19:35:01 - Mozilla 
 2007-04-29 à 20:08:24 - Screenshot Sender
 2008-03-07 à 21:27:06 - Sony 
 2008-02-10 à 10:38:44 - Sun 
 2006-11-23 à 19:35:22 - Talkback 
 2008-06-26 à 21:59:08 - teamspeak2 
 2007-08-07 à 21:16:25 - uqm 
 2008-01-27 à 13:46:08 - vlc 
 2008-07-07 à 17:17:00 - Xfire 
 2006-09-25 à 13:28:03 - You've Got Pictures Screensaver

+- C:\Documents and Settings\Adrien\Local Settings\Application Data

 2008-02-08 à 17:54:28 - Adobe 
 2006-10-26 à 13:43:20 - Ahead 
 2007-05-01 à 16:59:17 - AOL 
 2008-03-07 à 21:21:47 - Apple 
 2008-03-07 à 21:21:31 - Apple Computer
 2008-07-07 à 17:16:00 - ApplicationHistory 
 2008-06-18 à 10:47:12 - Downloaded Installations
 2006-12-24 à 16:01:39 - GameSpy 
 2007-04-24 à 17:34:21 - Google 
 2006-10-14 à 10:38:12 - HP 
 2006-10-22 à 19:45:05 - Identities 
 2006-10-14 à 10:38:17 - IsolatedStorage 
 2008-03-28 à 21:06:26 - Microsoft 
 2006-11-23 à 19:35:01 - Mozilla 
 2007-06-18 à 15:54:39 - PowerCinema 
 2008-03-07 à 21:25:54 - Sony 
 2008-03-07 à 21:16:27 - Sony Ericsson
 2007-09-14 à 17:54:43 - Steam 
 2008-03-28 à 21:11:34 - WMTools Downloaded Files

+- C:\Documents and Settings\All Users\Application Data

 2008-02-08 à 18:07:36 - Adobe 
 2007-05-01 à 16:58:15 - AOL 
 2008-03-07 à 21:21:45 - Apple 
 2008-03-07 à 21:22:01 - Apple Computer
 2008-03-07 à 21:14:59 - BVRP Software
 2006-10-21 à 21:08:02 - CyberLink 
 2007-04-24 à 17:32:53 - Google 
 2006-10-14 à 10:29:48 - HP 
 2007-04-29 à 20:14:09 - Messenger Plus!
 2008-07-05 à 23:06:27 - Microsoft 
 2006-09-25 à 15:34:02 - nView_Profiles 
 2006-12-10 à 17:05:35 - QuickTime 
 2008-07-03 à 11:30:23 - Razer 
 2006-09-25 à 09:52:43 - SBSI 
 2006-10-14 à 10:28:01 - Sonic 
 2008-03-07 à 21:27:06 - Sony 
 2008-03-07 à 21:14:41 - Sony Ericsson
 2007-06-07 à 17:59:54 - Spybot - Search & Destroy
 2007-06-26 à 19:14:21 - SystemDoctor Free
 2006-09-25 à 13:28:01 - Viewpoint 
 2006-09-25 à 13:56:51 - Windows Genuine Advantage
 2008-03-29 à 19:28:42 - WLInstaller 
 2006-10-14 à 10:34:42 - Yahoo! Companion

+- C:\Documents and Settings\Martine\Application Data

 2008-02-05 à 09:03:17 - Adobe 
 2007-06-20 à 11:53:48 - AdobeUM 
 2006-09-25 à 12:48:26 - Ahead 
 2006-09-25 à 13:28:16 - AOL 
 2006-10-23 à 15:57:15 - CyberLink 
 2008-03-01 à 15:41:10 - DivX 
 2007-05-01 à 08:24:18 - Google 
 2007-01-08 à 17:28:55 - HP 
 2006-09-25 à 09:46:56 - Identities 
 2006-09-25 à 12:11:40 - Macromedia 
 2008-01-02 à 18:23:31 - Microsoft 
 2008-03-06 à 11:17:46 - Mozilla 
 2008-03-06 à 11:17:58 - Talkback 
 2008-01-30 à 09:14:30 - vlc 
 2006-09-25 à 13:28:03 - You've Got Pictures Screensaver

+- C:\Documents and Settings\Martine\Local Settings\Application Data

 2008-02-05 à 09:03:23 - Adobe 
 2006-09-25 à 12:49:36 - Ahead 
 2007-05-02 à 19:42:25 - AOL 
 2008-07-06 à 16:08:06 - ApplicationHistory 
 2007-05-01 à 08:24:18 - Google 
 2006-10-17 à 08:56:33 - HP 
 2007-06-27 à 08:48:41 - Identities 
 2007-10-18 à 18:01:25 - IM 
 2006-10-17 à 08:56:43 - IsolatedStorage 
 2008-05-25 à 14:56:22 - Microsoft 
 2008-03-06 à 11:17:46 - Mozilla 
 2006-10-23 à 15:57:47 - PowerCinema 

+- C:\Documents and Settings\Propri‚taire\Application Data

 2006-10-23 à 15:56:40 - You've Got Pictures Screensaver

+- C:\Documents and Settings\Roger Pr‚vosto\Application Data

 2008-01-30 à 18:23:47 - Adobe 
 2007-12-10 à 11:54:43 - AdobeUM 
 2006-09-25 à 12:48:26 - Ahead 
 2006-09-25 à 13:28:16 - AOL 
 2008-04-18 à 15:03:22 - Apple Computer
 2008-03-10 à 18:31:04 - CyberLink 
 2007-11-22 à 15:14:13 - DivX 
 2007-06-29 à 17:01:46 - Google 
 2007-09-02 à 16:30:33 - HP 
 2006-09-25 à 09:46:56 - Identities 
 2006-09-25 à 12:11:40 - Macromedia 
 2008-01-28 à 20:49:29 - Microsoft 
 2007-10-10 à 12:48:24 - Microsoft Web Folders
 2008-07-02 à 10:09:17 - StupidHold 
 2008-01-30 à 00:43:17 - Sun 
 2007-11-25 à 23:25:47 - Viewpoint 
 2008-01-27 à 21:47:45 - vlc 
 2008-03-23 à 18:20:25 - Xfire 
 2006-09-25 à 13:28:03 - You've Got Pictures Screensaver

+- C:\Documents and Settings\Roger Pr‚vosto\Local Settings\Application Data

 2008-01-28 à 20:33:52 - Adobe 
 2007-11-20 à 11:41:45 - Ahead 
 2007-05-04 à 13:56:05 - AOL 
 2008-03-10 à 18:51:53 - Apple Computer
 2008-07-06 à 15:34:11 - ApplicationHistory 
 2007-05-04 à 13:57:39 - Google 
 2006-10-16 à 12:37:53 - HP 
 2007-09-26 à 10:42:24 - Identities 
 2007-10-19 à 08:23:06 - IM 
 2006-10-16 à 12:37:58 - IsolatedStorage 
 2008-03-29 à 19:30:41 - Microsoft 
 2008-03-10 à 19:05:10 - PowerCinema 

========== Listing du dossier Program Files

+- C:\Program Files

 2008-01-18 à 02:03:11 - 3DBELOTE 
 2008-07-05 à 09:18:46 - Adobe 
 2006-09-25 à 11:13:23 - AMD 
 2006-09-25 à 11:18:32 - Analog Devices
 2007-05-01 à 16:59:04 - AOL 
 2007-06-24 à 16:24:00 - AOL 9.0
 2006-09-25 à 13:28:04 - AOL Compagnon
 2006-11-22 à 20:14:05 - AOL Toolbar
 2008-03-07 à 21:21:46 - Apple Software Update
 2008-03-28 à 20:04:14 - Avanquest update
 2008-06-01 à 12:13:36 - Beston 
 2007-01-09 à 17:44:29 - CA 
 2006-11-24 à 21:40:44 - Common Files
 2006-09-25 à 09:45:21 - ComPlus Applications
 2007-02-10 à 13:09:35 - Custom-Strike 
 2006-09-25 à 15:56:08 - Cyberlink 
 2006-09-25 à 11:22:07 - DIFX 
 2007-09-03 à 13:20:20 - DivX 
 2006-10-14 à 17:31:08 - EA GAMES
 2007-10-29 à 12:14:51 - Electronic Arts
 2008-04-22 à 11:27:38 - eMule 
 2006-09-25 à 12:11:03 - Encarta 
 2008-03-29 à 19:29:04 - Fichiers communs
 2006-11-24 à 21:37:48 - GameSpy 
 2007-04-24 à 17:32:52 - Google 
 2006-10-14 à 10:25:33 - Hewlett-Packard 
 2006-10-14 à 10:29:49 - HP 
 2008-06-20 à 18:00:19 - HyCam2 
 2007-11-21 à 11:25:25 - IncrediMail 
 2008-07-03 à 11:29:52 - InstallShield Installation Information
 2008-06-11 à 21:03:10 - Internet Explorer
 2008-03-14 à 18:22:04 - Java 
 2006-09-25 à 13:28:03 - Learn2.com 
 2008-04-22 à 11:28:04 - LimeWire 
 2006-11-05 à 15:52:44 - Logitech 
 2008-07-07 à 18:53:32 - Lopxp 
 2007-05-20 à 19:56:53 - Messenger 
 2008-03-28 à 23:40:40 - Messenger Plus! Live
 2007-09-24 à 09:13:32 - Micro Application
 2006-09-25 à 12:14:22 - Microsoft AutoRoute
 2007-05-20 à 19:56:54 - Microsoft Digital Image 2006
 2007-10-10 à 12:48:12 - microsoft frontpage
 2006-09-25 à 12:51:51 - Microsoft Games
 2006-09-25 à 12:07:15 - Microsoft Money 2005
 2007-10-10 à 12:48:24 - Microsoft Office
 2007-05-20 à 19:56:53 - Microsoft Works
 2006-09-25 à 11:58:41 - Microsoft Works Suite 2006
 2008-06-27 à 20:08:00 - mIRC 
 2006-09-25 à 09:45:36 - Movie Maker
 2008-07-06 à 16:39:55 - Mozilla Firefox
 2006-09-25 à 09:44:42 - MSN 
 2006-10-13 à 19:30:01 - MSN Apps
 2006-09-25 à 09:44:48 - MSN Gaming Zone
 2008-03-29 à 19:29:54 - MSN Messenger
 2006-11-16 à 21:49:56 - MSXML 4.0
 2006-09-25 à 11:34:03 - Multimedia keyboard utility
 2006-09-25 à 12:47:06 - Nero 
 2006-09-25 à 09:45:38 - NetMeeting 
 2006-09-25 à 09:44:53 - Online Services
 2007-06-13 à 06:50:46 - Outlook Express
 2006-11-03 à 11:29:11 - Portrait Displays
 2008-03-07 à 21:22:28 - QuickTime 
 2008-07-03 à 11:29:53 - Razer 
 2006-09-25 à 13:27:21 - Real 
 2006-12-15 à 19:37:59 - Rockstar Games
 2006-09-25 à 09:45:50 - Services en ligne
 2008-03-07 à 21:23:15 - Sony Ericsson
 2007-06-07 à 17:49:09 - Spybot - Search & Destroy
 2008-07-02 à 19:53:09 - Spyware-Secure 
 2008-07-07 à 17:15:50 - Steam 
 2006-09-25 à 12:24:50 - Targa VFD Display
 2007-01-07 à 17:48:25 - Teamspeak2_RC2 
 2008-05-16 à 21:01:11 - TrackMania Nations ESWC
 2006-09-25 à 09:49:23 - Uninstall Information
 2008-01-27 à 13:42:43 - VideoLAN 
 2007-08-01 à 11:37:35 - Viewpoint 
 2006-09-25 à 09:49:39 - Windows Journal Viewer
 2008-03-29 à 19:28:56 - Windows Live
 2006-12-21 à 17:19:13 - Windows Media Connect
 2007-05-20 à 19:56:57 - Windows Media Connect 2
 2007-10-21 à 12:53:04 - Windows Media Player
 2006-09-25 à 09:44:47 - Windows NT
 2006-09-25 à 09:45:53 - WindowsUpdate 
 2006-09-25 à 11:24:51 - Wireless LAN USB Dongle
 2007-08-29 à 15:25:20 - Wolfenstein - Enemy Territory
 2006-09-25 à 09:46:58 - xerox 
 2006-10-14 à 10:06:45 - Yahoo! 

========== Tâches planifiées

AppleSoftwareUpdate.job: C:\Program Files\Apple Software Update\SoftwareUpdate.exe -task
User_Feed_Synchronization-{6EADE4E3-6385-4B5F-8939-003506F34A63}.job: C:\WINDOWS\system32\msfeedssync.exe sync

========== Clés registre


========== Bloqueur popups Internet Explorer

 www.hdpvidz.com
 kanye-0.skyrock.com
 www.radiofg.com
 www.radiofrance.fr

==========    Suggestion ( /!\ Nécessite une interprétation.)    ==========

C:\Documents and Settings\Roger Prévosto\Application Data\StupidHold

+- Registre : Aucune suggestion.


- Fin du rapport -

jlpjlp · Answer

parfait encore des pubs????????,




colle un rapport hijackthis

http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

manuel :

https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html


Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

Ensuite avec Explorer créer un dossier c:\hijackthis
Décompresser Hijackthis dans ce dossier.
C'est important pour les sauvegardes."

Woké · Answer

C:\Program Files\Razer\Lachesisazerhid.exe
C:\WINDOWS\WebCam\M1000\M1000Mnt.exe
C:\program files\steam\steam.exe
C:\Program Files\Razer\Lachesis\OSD.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\Razer\Lachesisazertra.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Portrait Displays\Pivot Software\floater.exe
C:\Program Files\Razer\Lachesisazerofa.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Targa VFD Display\Targa VFD Display.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Hijackthis\Eden.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [FLMK08KB] C:\Program Files\Multimedia keyboard utility\LED.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe" /c
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1ealmon.exe -s
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [DNSE] "C:\Program Files\Fichiers communs\SystemDoctor\DNSE.exe" -c
O4 - HKLM\..\Run: [DC6V_Check] "C:\Program Files\Fichiers communs\SystemDoctor\usdrdc.exe"
O4 - HKLM\..\Run: [MDRV_Check] "C:\Program Files\Fichiers communs\SystemDoctor\usdrmdr.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [M1000Mnt] M1000Rmv.exe /StartStillMnt
O4 - HKLM\..\Run: [Lachesis] C:\Program Files\Razer\Lachesisazerhid.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Xfire.lnk = C:\Xfire\xfire.exe
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Targa VFD Display.lnk = ?
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.targa.co.uk
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

jlpjlp · Answer

ok tu as SystemDoctor qui est un espion!!!

_______________

lance rogue remover 

pour info :
http://www.libellules.ch/dotclear/index.php?2006/11/29/1518-rogue-remover

pour telecharger :
https://www.01net.com/telecharger/ 

________________


scan avec
MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport

https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

________________

recolle un hijackhtis complet cette fois

Woké · Answer

Etape 1 : jai téléchargé rogue remover et jai remove tous les trucks chelou mais je sais pas si j'ai bien fais , la je fais malware byte et a la fin je refais un rapport hijackthis?

Woké · Answer

Malwarebytes' Anti-Malware 1.19
Version de la base de données: 930
Windows 5.1.2600 Service Pack 2

01:30:10 08/07/2008
mbam-log-7-8-2008 (01-30-10).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 185978
Temps écoulé: 1 hour(s), 2 minute(s), 39 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 4
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 4

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{90b5a95a-afd5-4d11-b9bd-a69d53d22226} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8109fd3d-d891-4f80-8339-50a4913ace6f} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{85e06077-c824-43d0-a8dc-5efb17bc348a} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\ParisHilton (Adware.NaviPromo) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\Fichiers communs\SystemDoctor (Rogue.SystemDoctor) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\Fichiers communs\SystemDoctor\err.log (Rogue.SystemDoctor) -> Quarantined and deleted successfully.
C:\WINDOWS\system32
vs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Documents and Settings\Roger Prévosto\Bureau\Spyware-Secure trial.lnk (Rogue.Spyware-Secure) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\cd11.tmp (Heuristics.Malware) -> Quarantined and deleted successfully.

Woké · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:33:55, on 08/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Cyberlink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\sm56hlpr.exe
C:\Program Files\Multimedia keyboard utility\LED.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\CA\ETRUST~1ealmon.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Razer\Lachesisazerhid.exe
C:\WINDOWS\WebCam\M1000\M1000Mnt.exe
C:\program files\steam\steam.exe
C:\Program Files\Razer\Lachesis\OSD.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\Razer\Lachesisazertra.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Portrait Displays\Pivot Software\floater.exe
C:\Program Files\Razer\Lachesisazerofa.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Targa VFD Display\Targa VFD Display.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Trend Micro\HijackThis\Eden.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [FLMK08KB] C:\Program Files\Multimedia keyboard utility\LED.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe" /c
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1ealmon.exe -s
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [DNSE] "C:\Program Files\Fichiers communs\SystemDoctor\DNSE.exe" -c
O4 - HKLM\..\Run: [DC6V_Check] "C:\Program Files\Fichiers communs\SystemDoctor\usdrdc.exe"
O4 - HKLM\..\Run: [MDRV_Check] "C:\Program Files\Fichiers communs\SystemDoctor\usdrmdr.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [M1000Mnt] M1000Rmv.exe /StartStillMnt
O4 - HKLM\..\Run: [Lachesis] C:\Program Files\Razer\Lachesisazerhid.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Xfire.lnk = C:\Xfire\xfire.exe
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Targa VFD Display.lnk = ?
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.targa.gmbh/eng/targa/
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

jlpjlp · Answer

c'est bon

fais ceci:



Télécharge combofix (par sUBs) ici : 

http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

et enregistre le  sur le Bureau 

déconnecte toi d'internet et ferme toutes tes applications. 

désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware) 


double-clique sur combofix.exe et suis les instructions 

à la fin, il va produire un rapport C:\ComboFix.txt 

réactive ton parefeu, ton antivirus, la garde de ton antispyware 

copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse. 

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi. 

Tu as un tutoriel complet ici : 

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

_______________________


Fais un clic droit sur ce lien : (IL-MAFIOSO)
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe 
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau. 
Ensuite double clique sur navilog1.exe pour lancer l'installation. 
Une fois l'installation terminée, le fix s'exécutera automatiquement. 
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau). 

Laisse-toi guider. Au menu principal, choisis 1 et valides. 
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord) 

Patiente jusqu'au message : 
*** Analyse Termine le ..... *** 
Appuie sur une touche comme demandé, le blocnote va s'ouvrir. 
Copie-colle l'intégralité dans une réponse. Referme le blocnote. 
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

Woké · Answer

Le virus c'est remis :s!!!!

comment je fais pour coupé ma connection internet ???? j'ai cegetel et la connection est automatique ><

jlpjlp · Answer

si tu avais collé ce qui a été demandé en 13 cela ne serait pas arrivé!!!

Woké · Answer

Oui :s autant pour moi j'avais compté de le faire se soir ( je ne suis pas à l'ordi tous les soirs ).

Quesque je dois faire maintenant?

jlpjlp · Answer

le message 13 
et un niouvel hijackthis après

Woké · Answer

ComboFix 08-07-11.1 - Adrien 2008-07-11 22:31:47.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.514 [GMT 2:00]
Endroit: C:\Documents and Settings\Adrien\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Roger Prévosto\Local Settings\Application Data\amwauok.dat
C:\Documents and Settings\Roger Prévosto\Local Settings\Application Data\amwauok.exe
C:\Documents and Settings\Roger Prévosto\Local Settings\Application Data\amwauok_nav.dat
C:\Documents and Settings\Roger Prévosto\Local Settings\Application Data\amwauok_navps.dat
C:\Documents and Settings\Roger Prévosto\Menu Démarrer\Programmes\Spyware-Secure
C:\Documents and Settings\Roger Prévosto\Menu Démarrer\Programmes\Spyware-Secure\Spyware-Secure trial.lnk
C:\Documents and Settings\Roger Prévosto\Menu Démarrer\Programmes\Spyware-Secure\Website.lnk
C:\WINDOWS\system32\oeminfo.ini

.
((((((((((((((((((((((((((((( Fichiers créés 2008-06-11 to 2008-07-11 ))))))))))))))))))))))))))))))))))))
.

2008-07-11 22:25 . 2008-07-11 22:25 2,611,847 --a------ C:\Program Files\ComboFix.exe
2008-07-11 11:35 . 2008-07-11 11:35 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web
2008-07-11 11:34 . 2008-07-11 11:34 <REP> d-------- C:\Program Files\StupidHold
2008-07-08 00:21 . 2008-07-08 00:21 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-07-08 00:21 . 2008-07-08 00:21 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-07-08 00:21 . 2008-07-08 00:21 <REP> d-------- C:\Documents and Settings\Adrien\Application Data\Malwarebytes
2008-07-08 00:21 . 2008-06-28 14:16 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-07-08 00:21 . 2008-06-28 14:16 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-07-08 00:13 . 2008-07-08 00:14 <REP> d-------- C:\Program Files\RogueRemover FREE
2008-07-07 22:14 . 2008-07-07 22:14 <REP> d-------- C:\Program Files\Trend Micro
2008-07-07 20:44 . 2008-07-07 20:53 <REP> d-------- C:\Program Files\Lopxp
2008-07-03 13:30 . 2008-07-03 13:30 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Razer
2008-07-03 13:30 . 2007-08-08 09:51 249,856 --a------ C:\WINDOWS\system32\Lachesis.cpl
2008-07-03 13:30 . 2005-12-21 11:23 14,592 --a------ C:\WINDOWS\system32\drivers\Usbicp.sys
2008-07-03 13:30 . 2007-08-08 11:04 12,032 --a------ C:\WINDOWS\system32\drivers\Lachesis.sys
2008-07-03 13:29 . 2008-07-03 13:29 <REP> d-------- C:\Program Files\Razer
2008-06-24 23:09 . 2008-07-10 14:56 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-06-24 23:09 . 2008-06-24 23:09 1,409 --a------ C:\WINDOWS\QTFont.for
2008-06-20 20:00 . 2008-06-20 20:00 <REP> d-------- C:\Program Files\HyCam2
2008-06-20 19:59 . 2008-06-20 20:00 668,952 --a------ C:\Program Files\HC2Setup.exe
2008-06-18 12:47 . 2008-06-18 12:47 12,270 --a------ C:\WINDOWS\system32\ealregsnapshot1.reg

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-11 20:28 6,190 ----a-w C:\Documents and Settings\Adrien\Application Data\wklnhst.dat
2008-07-11 19:47 --------- d-----w C:\Documents and Settings\Adrien\Application Data\Xfire
2008-07-11 18:50 --------- d-----w C:\Program Files\Steam
2008-07-11 16:52 --------- d-----w C:\Program Files\Avanquest update
2008-07-10 17:52 --------- d-----w C:\Program Files\eMule
2008-07-03 11:29 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-07-02 10:09 --------- d-----w C:\Documents and Settings\Roger Prévosto\Application Data\StupidHold
2008-06-27 20:08 --------- d-----w C:\Program Files\mIRC
2008-06-27 20:08 --------- d-----w C:\Documents and Settings\Adrien\Application Data\mIRC
2008-06-26 21:59 --------- d-----w C:\Documents and Settings\Adrien\Application Data\teamspeak2
2008-06-24 14:56 --------- d-----w C:\Documents and Settings\Adrien\Application Data\LimeWire
2008-06-20 17:41 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-16 00:22 38,108 ----a-w C:\Documents and Settings\Roger Prévosto\Application Data\wklnhst.dat
2008-06-14 17:59 272,768 ----a-w C:\WINDOWS\system32\drivers\bthport.sys
2008-06-01 12:13 --------- d-----w C:\Program Files\Beston
2008-05-16 21:01 --------- d-----w C:\Program Files\TrackMania Nations ESWC
2008-05-15 19:44 66,616 ----a-w C:\Documents and Settings\Martine\Application Data\GDIPFONTCACHEV1.DAT
2008-05-08 16:54 15,608 ----a-w C:\Documents and Settings\Martine\Application Data\wklnhst.dat
2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
2008-04-23 04:16 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-04-22 11:57 107,832 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2008-04-19 10:16 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe
2008-03-25 09:17 66,616 ----a-w C:\Documents and Settings\Roger Prévosto\Application Data\GDIPFONTCACHEV1.DAT
2008-02-03 12:12 66,616 ----a-w C:\Documents and Settings\Adrien\Application Data\GDIPFONTCACHEV1.DAT
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files\steam\steam.exe" [2008-03-28 19:44 1271032]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-20 13:51 68856]
"EA Core"="C:\Program Files\Electronic Arts\EADM\Core.exe" [2008-06-13 18:27 2752512]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 13:00 15360]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2008-02-20 17:19 360448]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 09:59 204288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-06-29 00:43 8466432]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2006-06-23 11:21 847872]
"FLMK08KB"="C:\Program Files\Multimedia keyboard utility\LED.exe" [2006-09-25 13:33 634880]
"PCMService"="C:\Program Files\CyberLink\PowerCinema\PCMService.exe" [2006-08-31 14:37 151552]
"NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40 155648]
"AntivirusRegistration"="C:\Program Files\CA\Etrust Antivirus\Register.exe" [2005-01-31 15:09 458752]
"AOLDialer"="C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe" [2006-11-17 13:41 71216]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 07:24 286720]
"InstantOn"="C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe" [2006-06-21 16:29 93640]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 02:41 49152]
"PivotSoftware"="C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe" [2005-10-21 12:07 800504]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2004-02-12 17:57 188416]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2004-02-12 17:59 77824]
"Realtime Monitor"="C:\PROGRA~1\CA\ETRUST~1\realmon.exe" [2004-06-26 01:17 504080]
"RealTray"="C:\Program Files\Real\RealPlayer\RealPlay.exe" [2006-09-25 15:27 26112]
"HostManager"="C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe" [2006-11-17 15:16 50736]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-06-29 00:43 81920]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
"Lachesis"="C:\Program Files\Razer\Lachesis\razerhid.exe" [2007-09-12 11:52 172032]
"axis web cake second"="C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web\Rule real.exe" [2008-07-11 22:23 5717504]
"nwiz"="nwiz.exe" [2007-06-29 00:43 1626112 C:\WINDOWS\system32\nwiz.exe]
"SMSERIAL"="sm56hlpr.exe" [2005-08-24 21:04 548864 C:\WINDOWS\sm56hlpr.exe]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-05 13:00 110592 C:\WINDOWS\system32\bthprops.cpl]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 13:00 15360]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
AOL 9.0 Ic“ne AOL.lnk - C:\Program Files\AOL 9.0\aoltray.exe [2006-09-25 15:27:03 156784]
D‚marrage rapide de HP Photosmart Premier.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [2006-02-10 07:56:20 73728]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2006-02-19 04:21:22 288472]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 23:05:56 65588]
Targa VFD Display.lnk - C:\WINDOWS\Installer\{635EDAAB-BF20-414D-A87A-3D43BFA3EDB9}\_0F36D9B3E4D771B362D91D.exe [2006-09-25 14:24:50 11166]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.enc"= ITIG726.acm
"VIDC.XFR1"= xfcodec.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Cyberlink\\PowerCinema\\PowerCinema.exe"=
"C:\\Program Files\\Cyberlink\\PowerCinema\\PCMService.exe"=
"C:\\Program Files\\CA\\Etrust Antivirus\\InoRpc.exe"=
"C:\\Program Files\\CA\\Etrust Antivirus\\InocIT.exe"=
"C:\\Program Files\\CA\\Etrust Antivirus\\Realmon.exe"=
"C:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLacsd.exe"=
"C:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLDial.exe"=
"C:\\Program Files\\AOL 9.0\\waol.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"C:\\Program Files\\Wolfenstein - Enemy Territory\\ET.exe"=
"C:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe"=
"C:\\Xfire\\xfire.exe"=
"C:\\Program Files\\Electronic Arts\\Battlefield 2142\\BF2142.exe"=
"C:\\Program Files\\Steam\\SteamApps\\punk64122\\counter-strike source\\hl2.exe"=
"C:\\Program Files\\Steam\\SteamApps\\punk64122\\day of defeat source\\hl2.exe"=
"C:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\game.dat"=
"C:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\patchget.dat"=
"C:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\Program Files\\Steam\\steam.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Documents and Settings\\Martine\\Mes documents\\incredimail_install.exe"=
"C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
"C:\\Documents and Settings\\Martine\\Bureau\\arriere plan de courriel.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\Program Files\\Sony Ericsson\\Sony Ericsson Media Manager 1.0\\MediaManager.exe"=
"C:\\Program Files\\mIRC\\mirc.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"C:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R1 Machnm32;Machnm32 Driver;C:\WINDOWS\system32\Machnm32.sys [2004-11-22 13:07]
R1 Pivot;Pivot;C:\WINDOWS\system32\drivers\pivot.sys [2005-10-21 12:07]
R3 3xHybrid;ASUSTek SAA713x PCI Card;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2006-07-13 11:52]
R3 LachesisFltr;Lachesis Mouse Driver;C:\WINDOWS\system32\drivers\Lachesis.sys [2007-08-08 11:04]
R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08]
S3 M1000Srv;M5603C USB2.0 Camera Driver;C:\WINDOWS\system32\Drivers\M1000KNT.sys [2005-07-20 08:28]
S3 pivotmou;Pivot Mouse/Pointers Filter Driver;C:\WINDOWS\system32\drivers\pivotmou.sys [2005-10-21 12:07]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58]
S3 ZD1211BU(ZyDAS);ZyDAS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ZyDAS);C:\WINDOWS\system32\DRIVERS\zd1211Bu.sys [2005-10-28 11:38]

*Newly Created Service* - CATCHME
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-07-11 20:00:00 C:\WINDOWS\Tasks\AFD26B749185E2FC.job"
- c:\docume~1\marina\applic~1\stupid~1\TEAM DRIVE DEFAULT.exe
"2008-06-18 09:08:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-07-11 16:49:35 C:\WINDOWS\Tasks\User_Feed_Synchronization-{6EADE4E3-6385-4B5F-8939-003506F34A63}.job"
- C:\WINDOWS\system32\msfeedssync.exe
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-NWEReboot - (no file)
HKLM-Run-OEM-Reset - (no file)
HKLM-Run-M1000Mnt - M1000Rmv.exe

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-11 22:35:57
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-07-11 22:36:48
ComboFix-quarantined-files.txt 2008-07-11 20:36:30

Pre-Run: 231,015,067,648 octets libres
Post-Run: 232,621,735,936 octets libres

209 --- E O F --- 2008-07-09 17:50:38

voila pour combofix

Woké · Answer

Search Navipromo version 3.6.0 commencé le 11/07/2008 à 22:45:42,43

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "Adrien" 

Mise à jour le 27.06.2008 à 23h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11 
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit

*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Adrien\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\Martine\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\PROPRI~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ROGERP~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\Adrien\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\Martine\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ROGERP~1\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\Adrien\menudm~1\progra~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\Martine\menudm~1\progra~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ROGERP~1\menudm~1\progra~1" *** 

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Adrien\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\Martine\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\ROGERP~1\locals~1\applic~1" * 



*** Recherche fichiers *** 



*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\Adrien\locals~1\applic~1" : 


* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" : 


* Dans "C:\DOCUME~1\Martine\locals~1\applic~1" : 


* Dans "C:\DOCUME~1\ROGERP~1\locals~1\applic~1" : 


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 11/07/2008 à 22:52:32,07 ***


Voici naviglog

Woké · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:54:05, on 11/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\sm56hlpr.exe
C:\Program Files\Multimedia keyboard utility\LED.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\WebCam\M1000\M1000Mnt.exe
C:\Program Files\Razer\Lachesisazerhid.exe
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Portrait Displays\Pivot Software\floater.exe
C:\Program Files\Cyberlink\Shared files\RichVideo.exe
C:\Program Files\Razer\Lachesis\OSD.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Targa VFD Display\Targa VFD Display.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\Program Files\Razer\Lachesisazerofa.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\Eden.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [FLMK08KB] C:\Program Files\Multimedia keyboard utility\LED.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe" /c
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1ealmon.exe -s
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Lachesis] C:\Program Files\Razer\Lachesisazerhid.exe
O4 - HKLM\..\Run: [axis web cake second] C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web\Rule real.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.targa.gmbh/eng/targa/
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

jlpjlp · Answer

tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

Woké · Answer

-----------------------[  Lop S&D 4.2.2-1  XP/Vista  ]---------------------

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : Adrien ] [ "C:\Lop SD" ] [ Selection : 1 ]
   [ 11/07/2008 | 23:00:31,32 ] [ PC : PRINCIPAL ]
   [ MAJ : 09-07-2008 | 21:02 ]
 
   -------------[ Listing des dossiers dans Application Data ]------------  

   [25/09/2006|14:48] C:\DOCUME~1\ADMINI~1\APPLIC~1\Ahead
   [25/09/2006|15:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\AOL
   [25/09/2006|13:41] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
   [25/09/2006|11:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
   [25/09/2006|14:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
   [25/09/2006|17:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [25/09/2006|15:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

   [08/02/2008|19:54] C:\DOCUME~1\Adrien\APPLIC~1\Adobe
   [13/04/2007|12:43] C:\DOCUME~1\Adrien\APPLIC~1\AdobeUM
   [03/01/2008|15:03] C:\DOCUME~1\Adrien\APPLIC~1\Ahead
   [25/09/2006|15:28] C:\DOCUME~1\Adrien\APPLIC~1\AOL
   [21/03/2008|21:31] C:\DOCUME~1\Adrien\APPLIC~1\Apple Computer
   [20/12/2006|23:59] C:\DOCUME~1\Adrien\APPLIC~1\CyberLink
   [25/09/2006|13:41] C:\DOCUME~1\Adrien\APPLIC~1\desktop.ini
   [23/11/2006|22:29] C:\DOCUME~1\Adrien\APPLIC~1\DivX
   [03/02/2008|14:12] C:\DOCUME~1\Adrien\APPLIC~1\GDIPFONTCACHEV1.DAT
   [29/04/2007|13:22] C:\DOCUME~1\Adrien\APPLIC~1\Google
   [08/11/2006|15:36] C:\DOCUME~1\Adrien\APPLIC~1\HP
   [25/09/2006|11:46] C:\DOCUME~1\Adrien\APPLIC~1\Identities
   [07/03/2008|23:13] C:\DOCUME~1\Adrien\APPLIC~1\InstallShield
   [31/03/2007|20:24] C:\DOCUME~1\Adrien\APPLIC~1\La Bataille pour la Terre du Milieu T II
   [24/06/2008|16:56] C:\DOCUME~1\Adrien\APPLIC~1\LimeWire
   [25/09/2006|14:11] C:\DOCUME~1\Adrien\APPLIC~1\Macromedia
   [08/07/2008|00:21] C:\DOCUME~1\Adrien\APPLIC~1\Malwarebytes
   [03/01/2008|17:15] C:\DOCUME~1\Adrien\APPLIC~1\Microsoft
   [27/06/2008|22:08] C:\DOCUME~1\Adrien\APPLIC~1\mIRC
   [23/11/2006|21:35] C:\DOCUME~1\Adrien\APPLIC~1\Mozilla
   [29/04/2007|22:08] C:\DOCUME~1\Adrien\APPLIC~1\Screenshot Sender
   [07/03/2008|23:27] C:\DOCUME~1\Adrien\APPLIC~1\Sony
   [10/02/2008|12:38] C:\DOCUME~1\Adrien\APPLIC~1\Sun
   [23/11/2006|21:35] C:\DOCUME~1\Adrien\APPLIC~1\Talkback
   [26/06/2008|23:59] C:\DOCUME~1\Adrien\APPLIC~1	eamspeak2
   [07/08/2007|23:16] C:\DOCUME~1\Adrien\APPLIC~1\uqm
   [27/01/2008|15:46] C:\DOCUME~1\Adrien\APPLIC~1\vlc
   [11/07/2008|22:41] C:\DOCUME~1\Adrien\APPLIC~1\wklnhst.dat
   [11/07/2008|21:47] C:\DOCUME~1\Adrien\APPLIC~1\Xfire
   [25/09/2006|15:28] C:\DOCUME~1\Adrien\APPLIC~1\You've Got Pictures Screensaver

   [08/02/2008|20:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [01/05/2007|18:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
   [07/03/2008|23:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [07/03/2008|23:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [11/07/2008|11:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Book Slow Axis Web
   [07/03/2008|23:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
   [21/10/2006|23:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [25/09/2006|13:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [24/04/2007|19:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [14/10/2006|12:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [14/10/2006|12:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
   [08/07/2008|00:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [29/04/2007|22:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [06/07/2008|01:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [25/09/2006|17:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1
View_Profiles
   [04/06/2008|14:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
   [10/12/2006|19:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [03/07/2008|13:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Razer
   [25/09/2006|11:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [14/10/2006|12:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
   [07/03/2008|23:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
   [07/03/2008|23:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
   [07/06/2007|19:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [25/09/2006|15:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
   [25/09/2006|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [29/03/2008|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [14/10/2006|12:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [25/09/2006|14:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Ahead
   [25/09/2006|15:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AOL
   [25/09/2006|13:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [25/09/2006|11:46] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [25/09/2006|14:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
   [25/09/2006|17:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [25/09/2006|15:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

   [25/09/2006|11:49] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [02/11/2007|21:36] C:\DOCUME~1\LOCALS~1\APPLIC~1\Xfire


   [05/02/2008|11:03] C:\DOCUME~1\Martine\APPLIC~1\Adobe
   [20/06/2007|13:53] C:\DOCUME~1\Martine\APPLIC~1\AdobeUM
   [25/09/2006|14:48] C:\DOCUME~1\Martine\APPLIC~1\Ahead
   [25/09/2006|15:28] C:\DOCUME~1\Martine\APPLIC~1\AOL
   [23/10/2006|17:57] C:\DOCUME~1\Martine\APPLIC~1\CyberLink
   [25/09/2006|13:41] C:\DOCUME~1\Martine\APPLIC~1\desktop.ini
   [01/03/2008|17:41] C:\DOCUME~1\Martine\APPLIC~1\DivX
   [15/05/2008|21:44] C:\DOCUME~1\Martine\APPLIC~1\GDIPFONTCACHEV1.DAT
   [01/05/2007|10:24] C:\DOCUME~1\Martine\APPLIC~1\Google
   [08/01/2007|19:28] C:\DOCUME~1\Martine\APPLIC~1\HP
   [25/09/2006|11:46] C:\DOCUME~1\Martine\APPLIC~1\Identities
   [25/09/2006|14:11] C:\DOCUME~1\Martine\APPLIC~1\Macromedia
   [02/01/2008|20:23] C:\DOCUME~1\Martine\APPLIC~1\Microsoft
   [06/03/2008|13:17] C:\DOCUME~1\Martine\APPLIC~1\Mozilla
   [06/03/2008|13:17] C:\DOCUME~1\Martine\APPLIC~1\Talkback
   [30/01/2008|11:14] C:\DOCUME~1\Martine\APPLIC~1\vlc
   [08/05/2008|18:54] C:\DOCUME~1\Martine\APPLIC~1\wklnhst.dat
   [25/09/2006|15:28] C:\DOCUME~1\Martine\APPLIC~1\You've Got Pictures Screensaver

   [25/09/2006|11:49] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
   [21/03/2008|19:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\Xfire

   [23/10/2006|17:56] C:\DOCUME~1\PROPRI~1\APPLIC~1\You've Got Pictures Screensaver

   [30/01/2008|20:23] C:\DOCUME~1\ROGERP~1\APPLIC~1\Adobe
   [10/12/2007|13:54] C:\DOCUME~1\ROGERP~1\APPLIC~1\AdobeUM
   [25/09/2006|14:48] C:\DOCUME~1\ROGERP~1\APPLIC~1\Ahead
   [25/09/2006|15:28] C:\DOCUME~1\ROGERP~1\APPLIC~1\AOL
   [18/04/2008|17:03] C:\DOCUME~1\ROGERP~1\APPLIC~1\Apple Computer
   [10/03/2008|20:31] C:\DOCUME~1\ROGERP~1\APPLIC~1\CyberLink
   [25/09/2006|13:41] C:\DOCUME~1\ROGERP~1\APPLIC~1\desktop.ini
   [22/11/2007|17:14] C:\DOCUME~1\ROGERP~1\APPLIC~1\DivX
   [25/03/2008|11:17] C:\DOCUME~1\ROGERP~1\APPLIC~1\GDIPFONTCACHEV1.DAT
   [29/06/2007|19:01] C:\DOCUME~1\ROGERP~1\APPLIC~1\Google
   [02/09/2007|18:30] C:\DOCUME~1\ROGERP~1\APPLIC~1\HP
   [25/09/2006|11:46] C:\DOCUME~1\ROGERP~1\APPLIC~1\Identities
   [25/09/2006|14:11] C:\DOCUME~1\ROGERP~1\APPLIC~1\Macromedia
   [28/01/2008|22:49] C:\DOCUME~1\ROGERP~1\APPLIC~1\Microsoft
   [10/10/2007|14:48] C:\DOCUME~1\ROGERP~1\APPLIC~1\Microsoft Web Folders
   [02/07/2008|12:09] C:\DOCUME~1\ROGERP~1\APPLIC~1\StupidHold
   [30/01/2008|02:43] C:\DOCUME~1\ROGERP~1\APPLIC~1\Sun
   [26/11/2007|01:25] C:\DOCUME~1\ROGERP~1\APPLIC~1\Viewpoint
   [27/01/2008|23:47] C:\DOCUME~1\ROGERP~1\APPLIC~1\vlc
   [16/06/2008|02:22] C:\DOCUME~1\ROGERP~1\APPLIC~1\wklnhst.dat
   [23/03/2008|20:20] C:\DOCUME~1\ROGERP~1\APPLIC~1\Xfire
   [25/09/2006|15:28] C:\DOCUME~1\ROGERP~1\APPLIC~1\You've Got Pictures Screensaver
 
   ----------------[ Tâches planifiées dans C:\WINDOWS	asks ]---------------

   [11/07/2008 23:00][--ah-----] C:\WINDOWS	asks\AFD26B749185E2FC.job
   [18/06/2008 11:08][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [11/07/2008 18:49][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{6EADE4E3-6385-4B5F-8939-003506F34A63}.job
   [11/07/2008 18:46][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 13:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   AFD26B749185E2FC.job  <-->  c:\docume~1\marina\applic~1\stupid~1\TEAMDRIVEDEFAULT.exe
 
   ---------------[ Listing des dossiers dans C:\Program Files ]--------------
 
   [18/01/2008|04:03] C:\Program Files\3DBELOTE
   [05/07/2008|11:18] C:\Program Files\Adobe
   [25/09/2006|13:13] C:\Program Files\AMD
   [25/09/2006|13:18] C:\Program Files\Analog Devices
   [01/05/2007|18:59] C:\Program Files\AOL
   [24/06/2007|18:24] C:\Program Files\AOL 9.0
   [25/09/2006|15:28] C:\Program Files\AOL Compagnon
   [22/11/2006|22:14] C:\Program Files\AOL Toolbar
   [07/03/2008|23:21] C:\Program Files\Apple Software Update
   [11/07/2008|18:52] C:\Program Files\Avanquest update
   [01/06/2008|14:13] C:\Program Files\Beston
   [09/01/2007|19:44] C:\Program Files\CA
   [11/07/2008|22:25] C:\Program Files\ComboFix.exe
   [24/11/2006|23:40] C:\Program Files\Common Files
   [25/09/2006|11:45] C:\Program Files\ComPlus Applications
   [10/02/2007|15:09] C:\Program Files\Custom-Strike
   [25/09/2006|17:56] C:\Program Files\Cyberlink
   [25/09/2006|13:22] C:\Program Files\DIFX
   [03/09/2007|15:20] C:\Program Files\DivX
   [14/10/2006|19:31] C:\Program Files\EA GAMES
   [29/10/2007|14:14] C:\Program Files\Electronic Arts
   [10/07/2008|19:52] C:\Program Files\eMule
   [25/09/2006|14:11] C:\Program Files\Encarta
   [08/07/2008|01:30] C:\Program Files\Fichiers communs
   [24/11/2006|23:37] C:\Program Files\GameSpy
   [24/04/2007|19:32] C:\Program Files\Google
   [20/06/2008|20:00] C:\Program Files\HC2Setup.exe
   [14/10/2006|12:25] C:\Program Files\Hewlett-Packard
   [07/07/2008|22:20] C:\Program Files\Hijackthis
   [14/10/2006|12:29] C:\Program Files\HP
   [20/06/2008|20:00] C:\Program Files\HyCam2
   [21/11/2007|13:25] C:\Program Files\IncrediMail
   [03/07/2008|13:29] C:\Program Files\InstallShield Installation Information
   [11/06/2008|23:03] C:\Program Files\Internet Explorer
   [14/03/2008|20:22] C:\Program Files\Java
   [25/09/2006|15:28] C:\Program Files\Learn2.com
   [22/04/2008|13:28] C:\Program Files\LimeWire
   [05/11/2006|17:52] C:\Program Files\Logitech
   [07/07/2008|20:53] C:\Program Files\Lopxp
   [08/07/2008|00:21] C:\Program Files\Malwarebytes' Anti-Malware
   [20/05/2007|21:56] C:\Program Files\Messenger
   [29/03/2008|01:40] C:\Program Files\Messenger Plus! Live
   [24/09/2007|11:13] C:\Program Files\Micro Application
   [25/09/2006|14:14] C:\Program Files\Microsoft AutoRoute
   [20/05/2007|21:56] C:\Program Files\Microsoft Digital Image 2006
   [10/10/2007|14:48] C:\Program Files\microsoft frontpage
   [25/09/2006|14:51] C:\Program Files\Microsoft Games
   [25/09/2006|14:07] C:\Program Files\Microsoft Money 2005
   [10/10/2007|14:48] C:\Program Files\Microsoft Office
   [20/05/2007|21:56] C:\Program Files\Microsoft Works
   [25/09/2006|13:58] C:\Program Files\Microsoft Works Suite 2006
   [27/06/2008|22:08] C:\Program Files\mIRC
   [25/09/2006|11:45] C:\Program Files\Movie Maker
   [06/07/2008|18:39] C:\Program Files\Mozilla Firefox
   [25/09/2006|11:44] C:\Program Files\MSN
   [13/10/2006|21:30] C:\Program Files\MSN Apps
   [25/09/2006|11:44] C:\Program Files\MSN Gaming Zone
   [29/03/2008|21:29] C:\Program Files\MSN Messenger
   [16/11/2006|23:49] C:\Program Files\MSXML 4.0
   [25/09/2006|13:34] C:\Program Files\Multimedia keyboard utility
   [11/07/2008|22:52] C:\Program Files\Navilog1
   [25/09/2006|14:47] C:\Program Files\Nero
   [25/09/2006|11:45] C:\Program Files\NetMeeting
   [25/09/2006|11:44] C:\Program Files\Online Services
   [13/06/2007|08:50] C:\Program Files\Outlook Express
   [03/11/2006|13:29] C:\Program Files\Portrait Displays
   [07/03/2008|23:22] C:\Program Files\QuickTime
   [03/07/2008|13:29] C:\Program Files\Razer
   [25/09/2006|15:27] C:\Program Files\Real
   [15/12/2006|21:37] C:\Program Files\Rockstar Games
   [08/07/2008|00:14] C:\Program Files\RogueRemover FREE
   [25/09/2006|11:45] C:\Program Files\Services en ligne
   [07/03/2008|23:23] C:\Program Files\Sony Ericsson
   [07/06/2007|19:49] C:\Program Files\Spybot - Search & Destroy
   [11/07/2008|20:50] C:\Program Files\Steam
   [11/07/2008|11:34] C:\Program Files\StupidHold
   [25/09/2006|14:24] C:\Program Files\Targa VFD Display
   [07/01/2007|19:48] C:\Program Files\Teamspeak2_RC2
   [16/05/2008|23:01] C:\Program Files\TrackMania Nations ESWC
   [07/07/2008|22:14] C:\Program Files\Trend Micro
   [25/09/2006|11:49] C:\Program Files\Uninstall Information
   [27/01/2008|15:42] C:\Program Files\VideoLAN
   [01/08/2007|13:37] C:\Program Files\Viewpoint
   [25/09/2006|11:49] C:\Program Files\Windows Journal Viewer
   [29/03/2008|21:28] C:\Program Files\Windows Live
   [21/12/2006|19:19] C:\Program Files\Windows Media Connect
   [20/05/2007|21:56] C:\Program Files\Windows Media Connect 2
   [21/10/2007|14:53] C:\Program Files\Windows Media Player
   [25/09/2006|11:44] C:\Program Files\Windows NT
   [25/09/2006|11:45] C:\Program Files\WindowsUpdate
   [25/09/2006|13:24] C:\Program Files\Wireless LAN USB Dongle
   [29/08/2007|17:25] C:\Program Files\Wolfenstein - Enemy Territory
   [25/09/2006|11:46] C:\Program Files\xerox
   [14/10/2006|12:06] C:\Program Files\Yahoo!
  
   ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
   
   [08/02/2008|20:07] C:\Program Files\Fichiers communs\Adobe
   [25/09/2006|14:49] C:\Program Files\Fichiers communs\Ahead
   [24/09/2007|14:05] C:\Program Files\Fichiers communs\AOL
   [25/09/2006|15:28] C:\Program Files\Fichiers communs\aolback
   [02/10/2006|09:46] C:\Program Files\Fichiers communs\aolshare
   [24/09/2007|11:15] C:\Program Files\Fichiers communs\Borland Shared
   [25/09/2006|14:03] C:\Program Files\Fichiers communs\Designer
   [14/10/2006|12:24] C:\Program Files\Fichiers communs\Hewlett-Packard
   [14/10/2006|12:27] C:\Program Files\Fichiers communs\HP
   [25/09/2006|14:31] C:\Program Files\Fichiers communs\InstallShield
   [11/01/2008|22:27] C:\Program Files\Fichiers communs\Java
   [05/11/2006|17:52] C:\Program Files\Fichiers communs\Labtec
   [13/10/2006|21:03] C:\Program Files\Fichiers communs\LightScribe
   [29/03/2008|21:29] C:\Program Files\Fichiers communs\Microsoft Shared
   [25/09/2006|11:45] C:\Program Files\Fichiers communs\MSSoap
   [25/09/2006|15:27] C:\Program Files\Fichiers communs\Nullsoft
   [25/09/2006|13:41] C:\Program Files\Fichiers communs\ODBC
   [25/09/2006|15:27] C:\Program Files\Fichiers communs\Real
   [25/09/2006|11:45] C:\Program Files\Fichiers communs\Services
   [14/10/2006|12:28] C:\Program Files\Fichiers communs\Sonic Shared
   [25/09/2006|13:41] C:\Program Files\Fichiers communs\SpeechEngines
   [10/10/2007|14:49] C:\Program Files\Fichiers communs\System
   [29/03/2008|21:29] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   ---------------------------[ Process ]--------------------------

   ... 63

   iexplore.exe ~ [2324]

   ----------------------[ Recherche avec S_Lop ]---------------------

   Aucun fichier / dossier Lop trouvé ! 
 
   -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

   C:\DOCUME~1\ALLUSE~1\APPLIC~1\Book Slow Axis Web
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\Book Slow Axis Web\Rule real.exe
   C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1
   C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\hqmusapj.exe
   C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\hzzijluz.exe
   C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\mliolkhv.exe
   C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\Mode Heck Okay Up.exe
   C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\TEAM DRIVE DEFAULT.exe
   C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\TWO 4.exe
   C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\vcngtpit.exe
   C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\wgbczodl.exe
   C:\Program Files\stupid~1
   C:\WINDOWS\Prefetch\RULE REAL.EXE-345BF0DC.pf
   C:\WINDOWS\Prefetch\TEAM DRIVE DEFAULT.EXE-257B81EF.pf
   C:\WINDOWS\Prefetch\TWO 4.EXE-04ED7220.pf
   C:\DOCUME~1\Adrien\Cookies\adrien@www.adserver5[1].txt
   C:\DOCUME~1\Adrien\Cookies\adrien@adin.bigpoint[2].txt
   C:\DOCUME~1\Adrien\Cookies\adrien@bigpoint[2].txt
   C:\DOCUME~1\Adrien\Cookies\adrien@fr1.seafight.bigpoint[1].txt
   C:\DOCUME~1\Adrien\Cookies\adrien@adopt.euroclick[1].txt
   C:\DOCUME~1\Adrien\Cookies\adrien@fr1.seafight.bigpoint[1].txt
   C:\DOCUME~1\Adrien\Cookies\adrien@32vegas[1].txt
   C:\WINDOWS\Tasks\AFD26B749185E2FC.job
 
   ----------------------[ Verification du Registre ]----------------------

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   "axis web cake second"="C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web\Rule real.exe"

   --------------------[ Verification du fichier Hosts ]---------------------

   Fichier Hosts MODIFIE

   127.0.0.1 bin.errorprotector.com ## added by CiD
   127.0.0.1 br.errorsafe.com ## added by CiD
   127.0.0.1 br.winantivirus.com ## added by CiD
   127.0.0.1 br.winfixer.com ## added by CiD
   127.0.0.1 cdn.drivecleaner.com ## added by CiD
   127.0.0.1 cdn.errorsafe.com ## added by CiD
   127.0.0.1 cdn.winsoftware.com ## added by CiD
   127.0.0.1 de.errorsafe.com ## added by CiD
   127.0.0.1 de.winantivirus.com ## added by CiD
   127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
   127.0.0.1 download.cdn.errorsafe.com ## added by CiD
   127.0.0.1 download.cdn.winsoftware.com ## added by CiD
   127.0.0.1 download.errorsafe.com ## added by CiD
   127.0.0.1 download.systemdoctor.com ## added by CiD
   127.0.0.1 download.winantispyware.com ## added by CiD
   127.0.0.1 download.windrivecleaner.com ## added by CiD
   127.0.0.1 download.winfixer.com ## added by CiD
   127.0.0.1 drivecleaner.com ## added by CiD
   127.0.0.1 dynamique.drivecleaner.com ## added by CiD
   127.0.0.1 errorprotector.com ## added by CiD
   127.0.0.1 errorsafe.com ## added by CiD
   127.0.0.1 es.winantivirus.com ## added by CiD
   127.0.0.1 fr.winantivirus.com ## added by CiD
   127.0.0.1 fr.winfixer.com ## added by CiD
   127.0.0.1 go.drivecleaner.com ## added by CiD
   127.0.0.1 go.errorsafe.com ## added by CiD
   127.0.0.1 go.winantispyware.com ## added by CiD
   127.0.0.1 go.winantivirus.com ## added by CiD
   127.0.0.1 hk.winantivirus.com ## added by CiD
   127.0.0.1 instlog.errorsafe.com ## added by CiD
   127.0.0.1 instlog.winantivirus.com ## added by CiD
   127.0.0.1 instlog.winfixer.com ## added by CiD
   127.0.0.1 jsp.drivecleaner.com ## added by CiD
   127.0.0.1 kb.errorsafe.com ## added by CiD
   127.0.0.1 kb.winantivirus.com ## added by CiD
   127.0.0.1 nl.errorsafe.com ## added by CiD
   127.0.0.1 se.errorsafe.com ## added by CiD
   127.0.0.1 secure.drivecleaner.com ## added by CiD
   127.0.0.1 secure.errorsafe.com ## added by CiD
   127.0.0.1 secure.winantispam.com ## added by CiD
   127.0.0.1 secure.winantispy.com ## added by CiD
   127.0.0.1 secure.winantivirus.com ## added by CiD
   127.0.0.1 support.winantivirus.com ## added by CiD
   127.0.0.1 trial.updates.winsoftware.com ## added by CiD
   127.0.0.1 ulog.winantivirus.com ## added by CiD
   127.0.0.1 utils.errorsafe.com ## added by CiD
   127.0.0.1 utils.winantivirus.com ## added by CiD
   127.0.0.1 utils.winfixer.com ## added by CiD
   127.0.0.1 winantispyware.com ## added by CiD
   127.0.0.1 winantivirus.com ## added by CiD
   127.0.0.1 winfixer.com ## added by CiD
   127.0.0.1 winfixer2006.com ## added by CiD
   127.0.0.1 winsoftware.com ## added by CiD
   127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
   127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
   127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
   127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
   127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
   127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
   127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
   127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
   127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
   127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
   127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
   127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

   -> 72 ( 70 ## added by CiD )

   /!\ 1 Not 127.0.0.1  !!

   ----------------[ Recherche de fichiers avec Catchme ]-----------------
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-07-11 23:01:24
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------[ Recherche d'autres infections ]---------------------

   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackalphatestlightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackalphatestlightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackalphatestpointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackalphatesttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmapalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmapalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmapalphatestlightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmapalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmapalphatestlightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmapalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmapalphatestpointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmapalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmapalphatesttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmaplightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmaplightmappointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmaplightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmaplightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmaplightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmappointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackenvmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcracklightmappointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcracklightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcracklightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackalphatestlightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackalphatestlightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackalphatestpointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackalphatesttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmapalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmapalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmapalphatestlightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmapalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmapalphatestlightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmapalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmapalphatestpointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmapalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmapalphatesttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmaplightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmaplightmappointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmaplightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmaplightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmaplightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmappointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackenvmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncracklightmappointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncracklightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncracklightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackpointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackndetailncracktitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackpointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetailcracktitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackalphatestlightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackalphatestlightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackalphatestpointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackalphatesttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcracklightmappointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcracklightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcracklightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncrackalphatestpointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncrackalphatesttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncracklightmappointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncracklightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncracklightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncrackpointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackndetailncracktitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackpointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3ashaderstmbasedetaildirtcracktitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackalphatestlightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackalphatestlightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackalphatestpointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackalphatesttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmapalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmapalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmapalphatestlightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmapalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmapalphatestlightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmapalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmapalphatestpointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmapalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmapalphatesttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmaplightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmaplightmappointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmaplightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmaplightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmaplightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmappointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackenvmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcracklightmappointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcracklightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcracklightmaptitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackndetailncrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackndetailncrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackndetailncrackalphatestlightmappointlighttitaninterior.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3ashaderstmbasedetailcrackndetailncrackalphatestl

jlpjlp · Answer

vire le fichier  Battlefield 2142 car surement infécté: : en allant dans poste de travail  puis

C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142



________________

refais lop sd et nettoie avec l'option 2 et colle le rapport

__________________

recolle un hijackhtis et dis tes soucis actuels

Woké · Answer

-----------------------[  Lop S&D 4.2.2-1  XP/Vista  ]---------------------

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : Adrien ] [ "C:\Lop SD" ] [ Selection : 2 ]
   [ 12/07/2008 | 13:53:18,92 ] [ PC : PRINCIPAL ]
   [ MAJ : 09-07-2008 | 21:02 ]


   \\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Book Slow Axis Web\Rule real.exe
   Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\hqmusapj.exe
   Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\hzzijluz.exe
   Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\mliolkhv.exe
   Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\Mode Heck Okay Up.exe
   Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\TEAM DRIVE DEFAULT.exe
   Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\TWO 4.exe
   Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\vcngtpit.exe
   Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\wgbczodl.exe
   Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@www.adserver5[1].txt 
   Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@adin.bigpoint[2].txt 
   Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@bigpoint[2].txt 
   Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@fr1.seafight.bigpoint[1].txt 
   Supprime! - C:\WINDOWS\Tasks\AFD26B749185E2FC.job 
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Book Slow Axis Web
   Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1
   Supprime! - C:\Program Files\stupid~1
   RestaurÚ! - Fichier Hosts
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\ 

   Supprime! - C:\Program Files\Viewpoint
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\

 
   -------------[ Listing des dossiers dans Application Data ]------------  

   [25/09/2006|14:48] C:\DOCUME~1\ADMINI~1\APPLIC~1\Ahead
   [25/09/2006|15:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\AOL
   [25/09/2006|13:41] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
   [25/09/2006|11:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
   [25/09/2006|14:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
   [25/09/2006|17:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [25/09/2006|15:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

   [08/02/2008|19:54] C:\DOCUME~1\Adrien\APPLIC~1\Adobe
   [13/04/2007|12:43] C:\DOCUME~1\Adrien\APPLIC~1\AdobeUM
   [03/01/2008|15:03] C:\DOCUME~1\Adrien\APPLIC~1\Ahead
   [25/09/2006|15:28] C:\DOCUME~1\Adrien\APPLIC~1\AOL
   [21/03/2008|21:31] C:\DOCUME~1\Adrien\APPLIC~1\Apple Computer
   [20/12/2006|23:59] C:\DOCUME~1\Adrien\APPLIC~1\CyberLink
   [25/09/2006|13:41] C:\DOCUME~1\Adrien\APPLIC~1\desktop.ini
   [23/11/2006|22:29] C:\DOCUME~1\Adrien\APPLIC~1\DivX
   [03/02/2008|14:12] C:\DOCUME~1\Adrien\APPLIC~1\GDIPFONTCACHEV1.DAT
   [29/04/2007|13:22] C:\DOCUME~1\Adrien\APPLIC~1\Google
   [08/11/2006|15:36] C:\DOCUME~1\Adrien\APPLIC~1\HP
   [25/09/2006|11:46] C:\DOCUME~1\Adrien\APPLIC~1\Identities
   [07/03/2008|23:13] C:\DOCUME~1\Adrien\APPLIC~1\InstallShield
   [31/03/2007|20:24] C:\DOCUME~1\Adrien\APPLIC~1\La Bataille pour la Terre du Milieu T II
   [24/06/2008|16:56] C:\DOCUME~1\Adrien\APPLIC~1\LimeWire
   [25/09/2006|14:11] C:\DOCUME~1\Adrien\APPLIC~1\Macromedia
   [08/07/2008|00:21] C:\DOCUME~1\Adrien\APPLIC~1\Malwarebytes
   [03/01/2008|17:15] C:\DOCUME~1\Adrien\APPLIC~1\Microsoft
   [27/06/2008|22:08] C:\DOCUME~1\Adrien\APPLIC~1\mIRC
   [23/11/2006|21:35] C:\DOCUME~1\Adrien\APPLIC~1\Mozilla
   [29/04/2007|22:08] C:\DOCUME~1\Adrien\APPLIC~1\Screenshot Sender
   [07/03/2008|23:27] C:\DOCUME~1\Adrien\APPLIC~1\Sony
   [10/02/2008|12:38] C:\DOCUME~1\Adrien\APPLIC~1\Sun
   [23/11/2006|21:35] C:\DOCUME~1\Adrien\APPLIC~1\Talkback
   [26/06/2008|23:59] C:\DOCUME~1\Adrien\APPLIC~1	eamspeak2
   [07/08/2007|23:16] C:\DOCUME~1\Adrien\APPLIC~1\uqm
   [27/01/2008|15:46] C:\DOCUME~1\Adrien\APPLIC~1\vlc
   [11/07/2008|22:41] C:\DOCUME~1\Adrien\APPLIC~1\wklnhst.dat
   [11/07/2008|21:47] C:\DOCUME~1\Adrien\APPLIC~1\Xfire
   [25/09/2006|15:28] C:\DOCUME~1\Adrien\APPLIC~1\You've Got Pictures Screensaver

   [08/02/2008|20:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [01/05/2007|18:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
   [07/03/2008|23:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [07/03/2008|23:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [07/03/2008|23:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
   [21/10/2006|23:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [25/09/2006|13:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [24/04/2007|19:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [14/10/2006|12:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [14/10/2006|12:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
   [08/07/2008|00:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [29/04/2007|22:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [06/07/2008|01:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [25/09/2006|17:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1
View_Profiles
   [04/06/2008|14:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
   [10/12/2006|19:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [03/07/2008|13:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Razer
   [25/09/2006|11:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [14/10/2006|12:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
   [07/03/2008|23:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
   [07/03/2008|23:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
   [07/06/2007|19:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [25/09/2006|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [29/03/2008|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [14/10/2006|12:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [25/09/2006|14:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Ahead
   [25/09/2006|15:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AOL
   [25/09/2006|13:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [25/09/2006|11:46] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [25/09/2006|14:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
   [25/09/2006|17:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [25/09/2006|15:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

   [25/09/2006|11:49] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [02/11/2007|21:36] C:\DOCUME~1\LOCALS~1\APPLIC~1\Xfire


   [05/02/2008|11:03] C:\DOCUME~1\Martine\APPLIC~1\Adobe
   [20/06/2007|13:53] C:\DOCUME~1\Martine\APPLIC~1\AdobeUM
   [25/09/2006|14:48] C:\DOCUME~1\Martine\APPLIC~1\Ahead
   [25/09/2006|15:28] C:\DOCUME~1\Martine\APPLIC~1\AOL
   [23/10/2006|17:57] C:\DOCUME~1\Martine\APPLIC~1\CyberLink
   [25/09/2006|13:41] C:\DOCUME~1\Martine\APPLIC~1\desktop.ini
   [01/03/2008|17:41] C:\DOCUME~1\Martine\APPLIC~1\DivX
   [15/05/2008|21:44] C:\DOCUME~1\Martine\APPLIC~1\GDIPFONTCACHEV1.DAT
   [01/05/2007|10:24] C:\DOCUME~1\Martine\APPLIC~1\Google
   [08/01/2007|19:28] C:\DOCUME~1\Martine\APPLIC~1\HP
   [25/09/2006|11:46] C:\DOCUME~1\Martine\APPLIC~1\Identities
   [25/09/2006|14:11] C:\DOCUME~1\Martine\APPLIC~1\Macromedia
   [02/01/2008|20:23] C:\DOCUME~1\Martine\APPLIC~1\Microsoft
   [06/03/2008|13:17] C:\DOCUME~1\Martine\APPLIC~1\Mozilla
   [06/03/2008|13:17] C:\DOCUME~1\Martine\APPLIC~1\Talkback
   [30/01/2008|11:14] C:\DOCUME~1\Martine\APPLIC~1\vlc
   [08/05/2008|18:54] C:\DOCUME~1\Martine\APPLIC~1\wklnhst.dat
   [25/09/2006|15:28] C:\DOCUME~1\Martine\APPLIC~1\You've Got Pictures Screensaver

   [25/09/2006|11:49] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
   [21/03/2008|19:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\Xfire

   [23/10/2006|17:56] C:\DOCUME~1\PROPRI~1\APPLIC~1\You've Got Pictures Screensaver

   [30/01/2008|20:23] C:\DOCUME~1\ROGERP~1\APPLIC~1\Adobe
   [10/12/2007|13:54] C:\DOCUME~1\ROGERP~1\APPLIC~1\AdobeUM
   [25/09/2006|14:48] C:\DOCUME~1\ROGERP~1\APPLIC~1\Ahead
   [25/09/2006|15:28] C:\DOCUME~1\ROGERP~1\APPLIC~1\AOL
   [18/04/2008|17:03] C:\DOCUME~1\ROGERP~1\APPLIC~1\Apple Computer
   [10/03/2008|20:31] C:\DOCUME~1\ROGERP~1\APPLIC~1\CyberLink
   [25/09/2006|13:41] C:\DOCUME~1\ROGERP~1\APPLIC~1\desktop.ini
   [22/11/2007|17:14] C:\DOCUME~1\ROGERP~1\APPLIC~1\DivX
   [25/03/2008|11:17] C:\DOCUME~1\ROGERP~1\APPLIC~1\GDIPFONTCACHEV1.DAT
   [29/06/2007|19:01] C:\DOCUME~1\ROGERP~1\APPLIC~1\Google
   [02/09/2007|18:30] C:\DOCUME~1\ROGERP~1\APPLIC~1\HP
   [25/09/2006|11:46] C:\DOCUME~1\ROGERP~1\APPLIC~1\Identities
   [25/09/2006|14:11] C:\DOCUME~1\ROGERP~1\APPLIC~1\Macromedia
   [28/01/2008|22:49] C:\DOCUME~1\ROGERP~1\APPLIC~1\Microsoft
   [10/10/2007|14:48] C:\DOCUME~1\ROGERP~1\APPLIC~1\Microsoft Web Folders
   [30/01/2008|02:43] C:\DOCUME~1\ROGERP~1\APPLIC~1\Sun
   [26/11/2007|01:25] C:\DOCUME~1\ROGERP~1\APPLIC~1\Viewpoint
   [27/01/2008|23:47] C:\DOCUME~1\ROGERP~1\APPLIC~1\vlc
   [16/06/2008|02:22] C:\DOCUME~1\ROGERP~1\APPLIC~1\wklnhst.dat
   [23/03/2008|20:20] C:\DOCUME~1\ROGERP~1\APPLIC~1\Xfire
   [25/09/2006|15:28] C:\DOCUME~1\ROGERP~1\APPLIC~1\You've Got Pictures Screensaver
 
   ----------------[ Tâches planifiées dans C:\WINDOWS	asks ]---------------

   [18/06/2008 11:08][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [11/07/2008 18:49][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{6EADE4E3-6385-4B5F-8939-003506F34A63}.job
   [12/07/2008 12:02][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 13:00][-r-h-----] C:\WINDOWS	asks\desktop.ini
 
   ---------------[ Listing des dossiers dans C:\Program Files ]--------------
 
   [18/01/2008|04:03] C:\Program Files\3DBELOTE
   [05/07/2008|11:18] C:\Program Files\Adobe
   [25/09/2006|13:13] C:\Program Files\AMD
   [25/09/2006|13:18] C:\Program Files\Analog Devices
   [01/05/2007|18:59] C:\Program Files\AOL
   [24/06/2007|18:24] C:\Program Files\AOL 9.0
   [25/09/2006|15:28] C:\Program Files\AOL Compagnon
   [22/11/2006|22:14] C:\Program Files\AOL Toolbar
   [07/03/2008|23:21] C:\Program Files\Apple Software Update
   [11/07/2008|18:52] C:\Program Files\Avanquest update
   [01/06/2008|14:13] C:\Program Files\Beston
   [09/01/2007|19:44] C:\Program Files\CA
   [11/07/2008|22:25] C:\Program Files\ComboFix.exe
   [24/11/2006|23:40] C:\Program Files\Common Files
   [25/09/2006|11:45] C:\Program Files\ComPlus Applications
   [10/02/2007|15:09] C:\Program Files\Custom-Strike
   [25/09/2006|17:56] C:\Program Files\Cyberlink
   [25/09/2006|13:22] C:\Program Files\DIFX
   [03/09/2007|15:20] C:\Program Files\DivX
   [14/10/2006|19:31] C:\Program Files\EA GAMES
   [29/10/2007|14:14] C:\Program Files\Electronic Arts
   [10/07/2008|19:52] C:\Program Files\eMule
   [25/09/2006|14:11] C:\Program Files\Encarta
   [08/07/2008|01:30] C:\Program Files\Fichiers communs
   [24/11/2006|23:37] C:\Program Files\GameSpy
   [24/04/2007|19:32] C:\Program Files\Google
   [20/06/2008|20:00] C:\Program Files\HC2Setup.exe
   [14/10/2006|12:25] C:\Program Files\Hewlett-Packard
   [07/07/2008|22:20] C:\Program Files\Hijackthis
   [14/10/2006|12:29] C:\Program Files\HP
   [20/06/2008|20:00] C:\Program Files\HyCam2
   [21/11/2007|13:25] C:\Program Files\IncrediMail
   [03/07/2008|13:29] C:\Program Files\InstallShield Installation Information
   [11/06/2008|23:03] C:\Program Files\Internet Explorer
   [14/03/2008|20:22] C:\Program Files\Java
   [25/09/2006|15:28] C:\Program Files\Learn2.com
   [22/04/2008|13:28] C:\Program Files\LimeWire
   [05/11/2006|17:52] C:\Program Files\Logitech
   [07/07/2008|20:53] C:\Program Files\Lopxp
   [08/07/2008|00:21] C:\Program Files\Malwarebytes' Anti-Malware
   [20/05/2007|21:56] C:\Program Files\Messenger
   [29/03/2008|01:40] C:\Program Files\Messenger Plus! Live
   [24/09/2007|11:13] C:\Program Files\Micro Application
   [25/09/2006|14:14] C:\Program Files\Microsoft AutoRoute
   [20/05/2007|21:56] C:\Program Files\Microsoft Digital Image 2006
   [10/10/2007|14:48] C:\Program Files\microsoft frontpage
   [25/09/2006|14:51] C:\Program Files\Microsoft Games
   [25/09/2006|14:07] C:\Program Files\Microsoft Money 2005
   [10/10/2007|14:48] C:\Program Files\Microsoft Office
   [20/05/2007|21:56] C:\Program Files\Microsoft Works
   [25/09/2006|13:58] C:\Program Files\Microsoft Works Suite 2006
   [27/06/2008|22:08] C:\Program Files\mIRC
   [25/09/2006|11:45] C:\Program Files\Movie Maker
   [06/07/2008|18:39] C:\Program Files\Mozilla Firefox
   [25/09/2006|11:44] C:\Program Files\MSN
   [13/10/2006|21:30] C:\Program Files\MSN Apps
   [25/09/2006|11:44] C:\Program Files\MSN Gaming Zone
   [29/03/2008|21:29] C:\Program Files\MSN Messenger
   [16/11/2006|23:49] C:\Program Files\MSXML 4.0
   [25/09/2006|13:34] C:\Program Files\Multimedia keyboard utility
   [11/07/2008|22:52] C:\Program Files\Navilog1
   [25/09/2006|14:47] C:\Program Files\Nero
   [25/09/2006|11:45] C:\Program Files\NetMeeting
   [25/09/2006|11:44] C:\Program Files\Online Services
   [13/06/2007|08:50] C:\Program Files\Outlook Express
   [03/11/2006|13:29] C:\Program Files\Portrait Displays
   [07/03/2008|23:22] C:\Program Files\QuickTime
   [03/07/2008|13:29] C:\Program Files\Razer
   [25/09/2006|15:27] C:\Program Files\Real
   [15/12/2006|21:37] C:\Program Files\Rockstar Games
   [08/07/2008|00:14] C:\Program Files\RogueRemover FREE
   [25/09/2006|11:45] C:\Program Files\Services en ligne
   [07/03/2008|23:23] C:\Program Files\Sony Ericsson
   [07/06/2007|19:49] C:\Program Files\Spybot - Search & Destroy
   [12/07/2008|12:22] C:\Program Files\Steam
   [25/09/2006|14:24] C:\Program Files\Targa VFD Display
   [07/01/2007|19:48] C:\Program Files\Teamspeak2_RC2
   [16/05/2008|23:01] C:\Program Files\TrackMania Nations ESWC
   [07/07/2008|22:14] C:\Program Files\Trend Micro
   [25/09/2006|11:49] C:\Program Files\Uninstall Information
   [27/01/2008|15:42] C:\Program Files\VideoLAN
   [25/09/2006|11:49] C:\Program Files\Windows Journal Viewer
   [29/03/2008|21:28] C:\Program Files\Windows Live
   [21/12/2006|19:19] C:\Program Files\Windows Media Connect
   [20/05/2007|21:56] C:\Program Files\Windows Media Connect 2
   [21/10/2007|14:53] C:\Program Files\Windows Media Player
   [25/09/2006|11:44] C:\Program Files\Windows NT
   [25/09/2006|11:45] C:\Program Files\WindowsUpdate
   [25/09/2006|13:24] C:\Program Files\Wireless LAN USB Dongle
   [29/08/2007|17:25] C:\Program Files\Wolfenstein - Enemy Territory
   [25/09/2006|11:46] C:\Program Files\xerox
   [14/10/2006|12:06] C:\Program Files\Yahoo!
  
   ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
   
   [08/02/2008|20:07] C:\Program Files\Fichiers communs\Adobe
   [25/09/2006|14:49] C:\Program Files\Fichiers communs\Ahead
   [24/09/2007|14:05] C:\Program Files\Fichiers communs\AOL
   [25/09/2006|15:28] C:\Program Files\Fichiers communs\aolback
   [02/10/2006|09:46] C:\Program Files\Fichiers communs\aolshare
   [24/09/2007|11:15] C:\Program Files\Fichiers communs\Borland Shared
   [25/09/2006|14:03] C:\Program Files\Fichiers communs\Designer
   [14/10/2006|12:24] C:\Program Files\Fichiers communs\Hewlett-Packard
   [14/10/2006|12:27] C:\Program Files\Fichiers communs\HP
   [25/09/2006|14:31] C:\Program Files\Fichiers communs\InstallShield
   [11/01/2008|22:27] C:\Program Files\Fichiers communs\Java
   [05/11/2006|17:52] C:\Program Files\Fichiers communs\Labtec
   [13/10/2006|21:03] C:\Program Files\Fichiers communs\LightScribe
   [29/03/2008|21:29] C:\Program Files\Fichiers communs\Microsoft Shared
   [25/09/2006|11:45] C:\Program Files\Fichiers communs\MSSoap
   [25/09/2006|15:27] C:\Program Files\Fichiers communs\Nullsoft
   [25/09/2006|13:41] C:\Program Files\Fichiers communs\ODBC
   [25/09/2006|15:27] C:\Program Files\Fichiers communs\Real
   [25/09/2006|11:45] C:\Program Files\Fichiers communs\Services
   [14/10/2006|12:28] C:\Program Files\Fichiers communs\Sonic Shared
   [25/09/2006|13:41] C:\Program Files\Fichiers communs\SpeechEngines
   [10/10/2007|14:49] C:\Program Files\Fichiers communs\System
   [29/03/2008|21:29] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   ---------------------------[ Process ]--------------------------

   ... 63

   ... OK !

   ----------------------[ Recherche avec S_Lop ]---------------------

   Aucun fichier / dossier Lop trouvé ! 
 
   -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

   C:\DOCUME~1\Adrien\Cookies\adrien@adopt.euroclick[2].txt
   C:\DOCUME~1\Adrien\Cookies\adrien@32vegas[2].txt
   C:\DOCUME~1\Adrien\Cookies\adrien@banner.32vegas[2].txt
 
   ----------------------[ Verification du Registre ]----------------------
 
   ..... OK !

   --------------------[ Verification du fichier Hosts ]---------------------

   Fichier Hosts PROPRE


   ----------------[ Recherche de fichiers avec Catchme ]-----------------
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-07-12 13:54:18
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------[ Recherche d'autres infections ]---------------------

   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrack.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackpointlight.cfx
   => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrack.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatest.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestlightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcracklightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcracklightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrack.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatest.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncracklightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrack.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatest.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestlightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcracklightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcracklightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrack.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrack.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatest.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestlightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackalphatestshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcracklightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcracklightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrack.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatest.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncracklightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackndetailncrackshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetailcrackshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrack.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatest.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestlightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackalphatestshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcracklightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcracklightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrack.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackpointlight.cfx
   => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3ashaderstmbasedetaildirtcrackshadow.cfx


   [F:22][D:4]-> C:\DOCUME~1\Adrien\LOCALS~1\Temp
   [F:339][D:0]-> C:\DOCUME~1\Adrien\Cookies
   [F:1638][D:8]-> C:\DOCUME~1\Adrien\LOCALS~1\TEMPOR~1\content.IE5

   --------------------[ Fin du rapport a 13:55:08,51  ]----------------------






Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:57:11, on 12/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Cyberlink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\sm56hlpr.exe
C:\Program Files\Multimedia keyboard utility\LED.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\CA\ETRUST~1ealmon.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\Razer\Lachesisazerhid.exe
C:\Program Files\Razer\Lachesis\OSD.exe
C:\program files\steam\steam.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Portrait Displays\Pivot Software\floater.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Razer\Lachesisazertra.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Razer\Lachesisazerofa.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\Eden.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [FLMK08KB] C:\Program Files\Multimedia keyboard utility\LED.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe" /c
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1ealmon.exe -s
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Lachesis] C:\Program Files\Razer\Lachesisazerhid.exe
O4 - HKLM\..\Run: [axis web cake second] C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web\Rule real.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.targa.gmbh/eng/targa/
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

jlpjlp · Answer

télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau. 
double-clique sur OTMoveIt.exe pour le lancer. 
copie la liste qui se trouve en citation ci-dessous, 
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved. 

Citation : 

C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web\Rule real.exe 


clique sur MoveIt! pour lancer la suppression. 
le résultat apparaitra dans le cadre "Results". 
clique sur Exit pour fermer. 
poste le rapport situé dans C:\_OTMoveIt\MovedFiles. 

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

Woké · Answer

File/Folder C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web\Rule real.exe not found.
 
OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07122008_151937


voila

jlpjlp · Answer

Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked". 


O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [axis web cake second] C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web\Rule real.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

_________

vire lop sd ,otmovit

__________

utilise  pour supprimer tes traces 

CCLEANER: (lance un nettoyage et répare 3 fois les erreurs) sans installer la barre yahoo   (tu le gardera)

https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

________________


voila pour cid c'est fini!!!



sinon pour voir si rien d'autre:


 colle le rapport d'un scan en ligne 
avec un des suivants: 


bitdefender en ligne : 
http://www.bitdefender.fr/scan_fr/scan8/ie.html 

Panda en ligne : 
http://pandasoftware.fr

Virus CID

27 réponses

Votre réponse

Discussions similaires

Newsletters