Ordi rempli de virus Fermé

Question

Bonjour,

Mon ordi est vraiment rempli de virus, j'ai essayer de nottoyer avec hijackthis en mode sans échec et un scan Smitfraudfix. Mais il y a encore beacoup de virus , le virus bloque mon gestionnaire de taches, mon internet, ma barre démarrer , il y a beacoup de fenetres qui apparait, donc  je peut vraiment rien faire, mon arrière plan change,j'ai un Virus Alert dans ma barre en bas a droite etc..

Je serais en mesure de reprendre la connection internet avec le logiciel; Winshock , mais pour le reste j'ai besoin de votre aide a tout prit.

PS: Ma restauration du système était désactivé , donc je ne pas utiliser cette technique.

Merci de votre aide!

@+

peter · Answer

t'as plus qu'a le formater mon vieux

Destrio5 · Answer

Salut,

- Redémarre ton ordinateur en mode sans échec :
https://blog.sosordi.net/

- Double-clique sur SmitfraudFix.exe, choisis l'option 2 et Entrée

- Réponds O(oui) à ces deux questions si elles te sont posées

Voulez-vous nettoyer le registre ?
Corriger le fichier infecté ?

- Un rapport sera généré, sauvegarde-le sur le bureau

- Redémarre en mode normal

- Poste le rapport SmitfraudFix

olivier_123 · Answer

Voila le rapport Smitfraudfix:

SmitFraudFix v2.346

Rapport fait à 12:56:21,71, 2008-09-13
Executé à partir de C:\Documents and Settings\Administrateur\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est 
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1       localhost



»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

C:\WINDOWS\system32\1.ico supprimé
C:\WINDOWS\system32\2.ico supprimé
C:\Program Files\PCHealthCenter\ supprimé

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» AntiXPVSTFix


»»»»»»»»»»»»»»»»»»»»»»»» DNS



»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
 
Nettoyage terminé. 
 
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Destrio5 · Answer

---> Supprime SmitFraudFix

- Télécharge HijackThis V 2.02 (HijackThis Installer) :
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

- Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

- Clique sur Install ensuite sur I Accept

- Clique sur Do a scan system and save log file

- Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse.

olivier_123 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:27: VIRUS ALERT!, on 2008-09-13
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\ehome\RMSvc.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\inKline Global\PC Booster\pcbooster.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32undll32.exe
C:\Downloads\uTorrent.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Registry Mechanic\RegMech.exe
C:\Program Files\Spyware Terminator\SpywareTerminator.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: UserInit=userinit.exe,
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\Xi\NetXfer\NXToolBar.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [PC Booster] C:\Program Files\inKline Global\PC Booster\pcbooster.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [\YUR34.exe] C:\Windows\system32\YUR34.exe
O4 - HKLM\..\Run: [4c81d226] rundll32.exe "C:\WINDOWS\system32\dcuvyuxd.dll",b
O4 - HKCU\..\Run: [uTorrent] "C:\Downloads\uTorrent.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RegMech.exe /H
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [AdobeUpdater] C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [\YURE.exe] C:\Windows\system32\YURE.exe (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [\YURD.exe] C:\Windows\system32\YURD.exe (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [\YURF.exe] C:\Windows\system32\YURF.exe (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [\YUR10.exe] C:\Windows\system32\YUR10.exe (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [\YUR11.exe] C:\Windows\system32\YUR11.exe (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [\YUR19.exe] C:\Windows\system32\YUR19.exe (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [\YUR1A.exe] C:\Windows\system32\YUR1A.exe (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [\YUR1B.exe] C:\Windows\system32\YUR1B.exe (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [\YUR1C.exe] C:\Windows\system32\YUR1C.exe (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [\YUR1D.exe] C:\Windows\system32\YUR1D.exe (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-500\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Administrateur')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'c:\windows\system32
wprovau.dll' missing
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~4\Office12\GR99D3~1.DLL
O20 - AppInit_DLLs: zufueu.dll yukanx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O24 - Desktop Component 0: Privacy Protection - file:///C:\WINDOWS\privacy_danger\index.htm

Destrio5 · Answer

---> Fais un scan rapide avec MBAM, supprime tout ce qu'il trouve et poste le rapport :
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm

olivier_123 · Answer

Bonjour, j'ai fait le scan et puis jai cliquez sur supprimez les élements. Il a commencer a supprimer la moitié puis le programme a planté en disant: Mémoire insuffisante.




Voici le rapport:

Malwarebytes' Anti-Malware 1.28
Version de la base de données: 1145
Windows 5.1.2600 Service Pack 2

2008-09-13 15:59:04
mbam-log-2008-09-13 (15-58-59).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 212021
Temps écoulé: 48 minute(s), 55 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 5
Clé(s) du Registre infectée(s): 26
Valeur(s) du Registre infectée(s): 5
Elément(s) de données du Registre infecté(s): 17
Dossier(s) infecté(s): 14
Fichier(s) infecté(s): 128

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\dcuvyuxd.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\urqOGxUO.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\qoMfDWml.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\zufueu.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\yukanx.dll (Trojan.Vundo) -> No action taken.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03fc422d-1adc-401e-8ccc-ec96d0966496} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{03fc422d-1adc-401e-8ccc-ec96d0966496} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6afb6f98-289c-442e-b577-5e5125c742e2} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\qomfdwml (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{6afb6f98-289c-442e-b577-5e5125c742e2} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{913a109f-fdb1-432e-b9aa-19263773876f} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{913a109f-fdb1-432e-b9aa-19263773876f} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{59baf55f-18de-48e6-94ca-8b0980c4b1ef} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion	dssdata (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE	dss (Trojan.Agent) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\RegistrySmart (Rogue.RegistrySmart) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoftdfa (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{fae0f23d-b54e-4e92-8575-018fde63ef76} (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{0955bcf0-2db3-4926-b985-1ed8f0894d73} (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{279fb82e-05b3-4c47-ba77-05d0da7f5703} (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{94e952a4-fae1-40e5-bbe1-8199d8cf7fd0} (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{bc54ab1a-deb5-442e-8f55-05b748408c09} (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VSPlugin (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\fqbewlna.bldx (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\fqbewlna.toolbar.1 (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Trojan.Vundo) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\4c81d226 (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{6afb6f98-289c-442e-b577-5e5125c742e2} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\yur34.exe (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components\0\source (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\Control Panel\Desktop\scrnsave.exe (Hijack.Wallpaper) -> No action taken.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\urqogxuo -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\urqogxuo  -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page (Hijack.Homepage) -> Bad: (http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2 Good: (https://www.google.com/?gws_rd=ssl -> No action taken.
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat (Trojan.FakeAlert) -> Bad: (HH:mm: VIRUS ALERT!) Good: (HH:mm:ss) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowControlPanel (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowRun (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyDocs (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyComputer (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuMorePrograms (Hijack.StartMenu) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives (Hijack.Drives) -> Bad: (12) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoToolbarCustomize (Hijack.Explorer) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders (Hijack.Explorer) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispCPL (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

Dossier(s) infecté(s):
C:\Program Files\MicroAV (Rogue.MicroAntivirus) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Data\RegistrySmart (Rogue.RegistrySmart) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Data\RegistrySmart\Log (Rogue.RegistrySmart) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Datahcl90j0e397 (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Datahcl90j0e397\Quarantine (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Datahcl90j0e397\Quarantine\Autorun (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Datahcl90j0e397\Quarantine\Autorun\HKCU (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Datahcl90j0e397\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Datahcl90j0e397\Quarantine\Autorun\HKLM (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Datahcl90j0e397\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Datahcl90j0e397\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Datahcl90j0e397\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Datahcl90j0e397\Quarantine\BrowserObjects (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Datahcl90j0e397\Quarantine\Packages (Rogue.Multiple) -> No action taken.

Fichier(s) infecté(s):
C:\WINDOWS\system32\yukanx.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\qoMfDWml.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\urqOGxUO.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\OUxGOqru.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\OUxGOqru.ini2 (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\dcuvyuxd.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\dxuyvucd.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32
nnllkIA.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\AIkllnnn.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\AIkllnnn.ini2 (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\spksrrel.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\lerrskps.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\vmycfliv.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\vilfcymv.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\wkoohdbc.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\cbdhookw.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\zufueu.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\YUR34.exe (Trojan.FakeAlert) -> No action taken.
C:\x (Trojan.FakeAlert) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Local Settings\Temporary Internet Files\Content.IE5\3L5BNG4Z\upd105320[1] (Trojan.Vundo) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Local Settings\Temporary Internet Files\Content.IE5\PU58JEZ6
d82m0[1] (Trojan.Vundo) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Local Settings\Temporary Internet Files\Content.IE5\PU58JEZ6\upd105320[1] (Trojan.Vundo) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Local Settings\Temporary Internet Files\Content.IE5\XIQUMPLW
d82m0[1] (Trojan.Vundo) -> No action taken.
C:\Documents and Settings\Simon\Local Settings\Temporary Internet Files\Content.IE5\0UENKCHY\upd105320[1] (Trojan.Vundo) -> No action taken.
C:\Documents and Settings\Simon\Local Settings\Temporary Internet Files\Content.IE5\GB1DBBVB\cntr[1] (Trojan.Vundo) -> No action taken.
C:\Documents and Settings\Simon\Local Settings\Temporary Internet Files\Content.IE5\X75M9QBI
d82m0[1] (Trojan.Vundo) -> No action taken.
C:\Program Files\PremierOpinion\pmls.dll (Adware.RK) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP1\A0000015.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP1\A0000037.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP13\A0001315.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP13\A0001316.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP13\A0001317.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP13\A0001318.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP13\A0001319.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP13\A0001320.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP13\A0001321.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP13\A0001322.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP13\A0001323.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP13\A0001324.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP13\A0001325.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP13\A0001326.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002316.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002317.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002318.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002319.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002320.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002321.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002322.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002323.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002324.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002325.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002326.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002327.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002328.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002329.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP16\A0003318.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP16\A0003319.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP16\A0003320.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP16\A0003321.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP16\A0003322.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP16\A0003323.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP16\A0003324.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP16\A0003325.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP16\A0003326.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP16\A0003327.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP16\A0003328.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP16\A0003329.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP16\A0003330.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP16\A0003331.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\emnf.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\awtsPGvT.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\bnrwriej.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\efcyyYSm.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\gzmxue.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\imoqopdy.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\ljJDUllM.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\pmnnNdAq.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\pnvssfsh.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32	dpmma.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\wlmngtnr.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\wvUMghIX.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\YUR11.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\YUR1C.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\YUR1D.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\YUR2.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\YUR3.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\YUR5F5B.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\YUR5FA1.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\YUR5FE5.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\YUR75.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\YURAD5.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\YURC.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\YURD.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\YURF.exe (Trojan.FakeAlert) -> No action taken.
C:\Program Files\MicroAV\MicroAV.cpl (Rogue.MicroAntivirus) -> No action taken.
C:\Program Files\MicroAV\MicroAV.exe (Rogue.MicroAntivirus) -> No action taken.
C:\Program Files\MicroAV\MicroAV.ooo (Rogue.MicroAntivirus) -> No action taken.
C:\Program Files\MicroAV\MicroAV0.dat (Rogue.MicroAntivirus) -> No action taken.
C:\Program Files\MicroAV\MicroAV1.dat (Rogue.MicroAntivirus) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Data\RegistrySmart\Log\2008 Sep 11 - 12_59_07 AM_859.log (Rogue.RegistrySmart) -> No action taken.
C:\Program Files\MSA\msa0.dat (Rogue.MSAntivirus) -> No action taken.
C:\Program Files\MSA\msa1.dat (Rogue.MSAntivirus) -> No action taken.
C:\Program Files\MSA\MSA.cpl (Rogue.MSAntivirus) -> No action taken.
C:\Program Files\MSA\MSA.ooo (Rogue.MSAntivirus) -> No action taken.
C:\WINDOWS\system32\MSa.cpl (Rogue.MSAntivirus) -> No action taken.
C:\WINDOWS\system32\1.ico (Malware.Trace) -> No action taken.
C:\WINDOWS\system32\2.ico (Malware.Trace) -> No action taken.
C:\WINDOWS\system32\ (Malware.Trace) -> No action taken.
C:\WINDOWS\system32\casino1.ico (Malware.Trace) -> No action taken.
C:\WINDOWS\system32\casino2.ico (Malware.Trace) -> No action taken.
C:\WINDOWS\system32\casino3.ico (Malware.Trace) -> No action taken.
C:\WINDOWS\system32	dssadw.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32	dssl.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32	dssmain.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32	dssinit.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32	dsslog.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32	dssservers.dat (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\drivers	dssserv.sys (Trojan.Agent) -> No action taken.
C:\A2.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\dtseqrxk.dll (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\fqbewlna.dll (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\mgxfebsq.dll (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\mqgldfvo.exe (Trojan.FakeAlert) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Bureau\ErrorDoctorSetup.exe (Rogue.ErrorDoctor) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Data\TmpRecentIcons\MS Antivirus.lnk (Rogue.Link) -> No action taken.
C:\Documents and Settings\Owner.Olivier\Application Data\TmpRecentIcons\antivirus-2008pro.lnk (Rogue.Link) -> No action taken.
C:\Documents and Settings\Simon\Bureau\BEST ZOO PORN.url (Rogue.Link) -> No action taken.
C:\Documents and Settings\Simon\Bureau\QUALITY PORN.url (Rogue.Link) -> No action taken.

Destrio5 · Answer

Wahoo les infections.

Beh supprime petit à petit alors en faisant plusieurs scans à la suite.

olivier_123 · Answer

Ouais je sais, mon ordinateur est rempli de virus, en plus je mit connait beacoup en ordinateur et j'ai de la difficulté a les enlever ;). C'est pourquoi je suis venu ici.

Donc, je vais faire plusieurs scans ! @+

babs26 · Answer

Bonjour

Pour suivre ...
merci

olivier_123 · Answer

J'ai effacer le plus possible , le reste ne veux pas supprimer. Que faire maitenant?

Destrio5 · Answer

* Télécharge SDFix (par Andy Manchesta) et sauvegarde-le sur ton bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

* Double-clique sur SDFix.exe et choisis Install pour l'extraire dans son dossier sur le bureau.
* Redémarre le PC en mode sans échec :
https://www.malekal.com/demarrer-windows-mode-sans-echec/
* Choisis ton compte.

Déroule la liste des instructions ci-dessous :
* Ouvre le dossier SDFix qui vient d'être créé sur le bureau et double-clique sur RunThis.bat pour lancer le script.
* Appuie sur Y pour commencer le nettoyage.
* Quand il te le demandera, appuie sur une touche pour redémarrer le PC.
* Ton système sera plus long à redémarrer car l'outil va continuer à s'exécuter et supprimer des fichiers.
* Après le chargement du bureau, l'outil aura terminé et affichera Finished.
* Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton bureau.
* Le rapport SDFix s'ouvrira et il sera enregistré dans le dossier SDFix sous le nom Report.txt.
* Enfin, copie/colle le rapport du fichier Report.txt.

olivier_123 · Answer

Voici le rapport:


[b]SDFix: Version 1.222 [/b]
Run by Administrateur on 2008-09-13 at 19:15

Microsoft Windows XP [version 5.1.2600]
Running From: C:\Documents and Settings\Owner.Olivier\Mes documents\Autres\Virus Cleaner\SDFix

[b]Checking Services [/b]:

[b]Rootkit[/b]:
C:\WINDOWS\system32\drivers	dssserv.sys - [B]Rootkit.Win32.Agent.cku[/B]

[b]Name [/b]: 
tdssserv

[b]Path [/b]:
\systemroot\system32\drivers\TDSSserv.sys 

tdssserv - Deleted



Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]: 

Trojan Files Found:

C:\WINDOWS\system32\drivers	dssserv.sys  - Deleted
C:\WINDOWS\system32	dssadw.dll  - Deleted
C:\WINDOWS\system32	dssinit.dll  - Deleted
C:\WINDOWS\system32	dssl.dll  - Deleted
C:\WINDOWS\system32	dsslog.dll  - Deleted
C:\WINDOWS\system32	dssmain.dll  - Deleted
C:\WINDOWS\system32	dssservers.dat  - Deleted





Removing Temp Files

[b]ADS Check [/b]:
 


                                 [b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-13 19:29:50
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:fe,1e,5b,81,f5,f4,a5,aa,90,5a,93,d3,40,5d,26,12,11,ef,bf,27,97,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,c7,cd,f3,13,1c,3f,37,1e,9b,d7,13,ed,59,3d,2b,f6,99,..
"khjeh"=hex:76,d7,52,86,bf,5c,e2,e3,27,8d,d5,83,e7,46,29,22,c8,ca,f1,3f,bc,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:88,47,c9,49,0b,5a,0e,c8,b1,30,1d,6b,51,44,9f,07,25,76,ca,58,f1,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:fe,1e,5b,81,f5,f4,a5,aa,90,5a,93,d3,40,5d,26,12,11,ef,bf,27,97,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,c7,cd,f3,13,1c,3f,37,1e,9b,d7,13,ed,59,3d,2b,f6,99,..
"khjeh"=hex:76,d7,52,86,bf,5c,e2,e3,27,8d,d5,83,e7,46,29,22,c8,ca,f1,3f,bc,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:88,47,c9,49,0b,5a,0e,c8,b1,30,1d,6b,51,44,9f,07,25,76,ca,58,f1,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System]
"OODEFRAG10.00.00.01WORKSTATION"="666851D80C2D0EF6C7F2A7FC9C3070015518D5639632ADB8A848E4026B6235E7A79DA20AB20FE123199A720244CE0B9B4C3EA1BE6C71A9AF5054D69EA6C48656392B89176E2F01DA770C8C9F1A0A60DF3F8AA856CD5C343AF91C4B89F661C89BD38B3A825C57AA064EAC6229BBA8B59AE671B1F2F7DABC2B4E4201A4D959B4AB312A0EE05C09FEFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933BA7FD869164D6794A9C6AECB7A5D14075D575E7D6A3B9808033F70C505EBCF81B26F93F03004D82AC47ED42190C5D3419A286D61412615AACEC05B50B3E3A017277F039AC0DB38C9BE5234050761C2E69E477208A12F7EDB07008F771FE707CC243A1FBED9A3AA96FE652CAD150B8DE748C9C7CE6F0A9E5C73BEE5D3208EDBB11A718D9089D1E68B373B4C841C3C6846B2058C77025148D53345A9A023322E3B4B7EE4E2F122D707F1DB9B1813B13CE8C853536A45E38159365D9BBD27F1C1414E3D3530C7961D4709569319046D2399CB11A43038E28158C4546DB043B20B800F8B7E9354F10CF3AC38A2DD0CB3F00851A0F87AECB4B72CF600C91F9D19B599CACE34CF74BCAA1560992BE1DE0E29C441E7439A0D04458FBA344CD672139F9015EC4149994235197D8F82C0C24A834757506286D1BD80A1D2CC83C593CC5CCCD4530287CA159952AD3AF2BD91786C6A2648B05B8B94F0E554287402E3BC331DC4EFC7B99D077DF3F2B73BBEB86E056B12BFF6D61DFED544A9A918415B979BAF7238572FC2B038191F2D8C4CBCC4226DD32EF5DB7DB71F078E3658618758C69A4322E95D7AEED2BDD9448C16B159CB76788BDF7139BB745E173A176109C016D4EBAAAB5D19E010C42129D66DC24CBE716057DAC2EDCDADDD282327651150203C7751BE6B09EBE0F2428B76C7AE836BACBF11031ECF73D9FB7BE4D135EB513010459838E9C638EE70E3A1F13F472975599F40677626F7B7159F75D13CF34DC374070AA05B64B094CC7A23BA12F128B710DD6E8A644B69BF69744F578A98150F73452FF3E90606617854CC3EA12AB33C492AA76420B0981B1A327086D4DF39F577591925E367AC99C80FDFD8F37D3FC4E40A7E5E0B571CA530E0DDF8F1E092155172DA9937525CB277A0205C338F05C5245509D8A5D7CFF116DE1C38DEC8BBBAB7938C27FAAA925B214F56102D1581682E39E027185DCE459C5D36C63B579468C092499DE7E48D70C7B74FACD4D9F6878C38A20E2EA67E19F4E3BA16C9DF3F55681C323EDA8AD107D0C9DC62BDB9E8B5AE23F14BD587831BB8C9BC8F734C24EB112D68BB53B728E586C8D1CF24292235E6A6F28C2166C62E62BED2904519ECCBFD991541F71F1D0894CB088D63ADAF806A3E4F75C83F7865D1C398E56C540AC5D787"

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\WINDOWS\ehome\ehshell.exe"="C:\WINDOWS\ehome\ehshell.exe:LocalSubNet:Enabled:Media Center"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:æTorrent"
"C:\Documents and Settings\Owner.Olivier\Local Settings\Temp\nso16F.tmp\utorrent.exe"="C:\Documents and Settings\Owner.Olivier\Local Settings\Temp\nso16F.tmp\utorrent.exe:*:Enabled:æTorrent"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Sierra\FEAR\FEAR.exe"="C:\Program Files\Sierra\FEAR\FEAR.exe:*:Enabled:FEAR"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\WINDOWS\system32\scvhost32.exe"="C:\WINDOWS\system32\scvhost32.exe:*:Disabled:scvhost32"
"C:\Program Files\FlashGet\flashget.exe"="C:\Program Files\FlashGet\flashget.exe:*:Enabled:Flashget"
"C:\Program Files\CyberLink\PCM4Everio\PCM4Everio.exe"="C:\Program Files\CyberLink\PCM4Everio\PCM4Everio.exe:*:Enabled:CyberLink PowerCinema NE for Everio"
"C:\Program Files\CyberLink\PCM4Everio\EverioService.exe"="C:\Program Files\CyberLink\PCM4Everio\EverioService.exe:*:Enabled:CyberLink PowerCinema NE for Everio Resident Program"
"C:\Program Files\CyberLink\PowerDirector Express\PDX.exe"="C:\Program Files\CyberLink\PowerDirector Express\PDX.exe:*:Enabled:CyberLink PowerDirector Express"
"C:\Program Files\FrostWire\FrostWire.exe"="C:\Program Files\FrostWire\FrostWire.exe:*:Enabled:LimeWire"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\ACSPMonitor\ASMonitor.exe"="C:\Program Files\ACSPMonitor\ASMonitor.exe:*:Enabled:System"
"C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe"="C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe:*:Enabled:Assistance … distance - Windows Messenger et voix"
"c:\program files\premieropinion\pmropn.exe"="c:\program files\premieropinion\pmropn.exe:*:Enabled:pmropn.exe"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Downloads\uTorrent.exe"="C:\Downloads\uTorrent.exe:*:Enabled:æTorrent"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[b]Remaining Files [/b]:


File Backups: - C:\DOCUME~1\OWNER~1.OLI\MESDOC~1\Autres\VIRUSC~1\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Wed 22 Aug 2007         4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Fri 12 Oct 2007       145,920 ..SHR --- "C:\Program Files\BillP Studios\WinPatrol\Setup.exe"
Sun 22 Apr 2007        15,872 A.SHR --- "C:\Program Files\BillP Studios\WinPatrol\_Setup.dll"
Fri 17 Aug 2007             0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Wed 19 Dec 2007        73,216 ...H. --- "C:\Documents and Settings\Owner.Olivier\Bureau\Max\~WRL0001.tmp"

[b]Finished![/b]

Destrio5 · Answer

---> Télécharge ComboFix.exe de sUBs sur ton Bureau :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

/!\ Déconnecte-toi du net et ferme toutes les applications, antivirus et antispyware y compris /!\

---> Double-clique sur Combofix.exe
Un "pop-up" va apparaître qui dit que "ComboFix est utilisé à vos risques et avec aucune garantie...".
Accepte en cliquant sur "Oui"

---> Mets-le en langue française F
Tape sur la touche 1 (Yes) pour démarrer le scan.

/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\

En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

/!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

Note : Le rapport se trouve également là : C:\ComboFix.txt

olivier_123 · Answer

ComboFix 08-09-13.03 - Owner 2008-09-13 19:46:56.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.1336 [GMT -4:00] Lancé depuis: C:\Documents and Settings\Owner.Olivier\Bureau\ComboFix.exe * Un nouveau point de restauration a été créé * Resident AV is active [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\MCX1\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML C:\Documents and Settings\Owner.Olivier\Application Data\inst.exe C:\Documents and Settings\Simon\Cookies\simon@mediaarea[2].txt C:\Program Files\messenger\msnmsgr.exe C:\WINDOWS\system32\ieirlruc.ini C:\WINDOWS\system32 dpmma.dll C:\WINDOWS\system32 dsspopup.dll C:\WINDOWS\system32 dsspopup1.url C:\WINDOWS\system32 dsspopup2.url C:\WINDOWS\system32 dsspopup3.url C:\WINDOWS\system32\url(3).dll C:\WINDOWS\system32\XHjSvyay.ini C:\WINDOWS\system32\XHjSvyay.ini2 . ((((((((((((((((((((((((((((( Fichiers créés du 2008-08-13 au 2008-09-13 )))))))))))))))))))))))))))))))))))) . 2015-03-12 21:41 . 2007-09-06 21:59 d-------- C:\Program Files\Rapidown 2015-03-12 21:41 . 2015-03-12 21:41 754 --a--c--- C:\WINDOWS\WORDPAD.INI 2008-09-13 14:47 . 2008-09-13 14:47 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-09-13 14:47 . 2008-09-13 14:47 d-------- C:\Documents and Settings\Owner.Olivier\Application Data\Malwarebytes 2008-09-13 14:47 . 2008-09-13 14:47 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-09-13 14:47 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-09-13 14:47 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-09-13 14:27 . 2008-09-13 14:27 d-------- C:\Program Files\Trend Micro 2008-09-13 13:05 . 2008-09-13 13:06 d-------- C:\Documents and Settings\Administrateur\Application Data\Spyware Terminator 2008-09-11 18:02 . 2008-09-11 18:02 244 --ah----- C:\sqmnoopt06.sqm 2008-09-11 18:02 . 2008-09-11 18:02 244 --ah----- C:\sqmdata06.sqm 2008-09-11 17:46 . 2008-09-13 14:10 1,187,359 --a------ C:\empa.exe 2008-09-11 17:45 . 2008-09-11 17:45 d-------- C:\Program Files\ESET 2008-09-11 17:45 . 2008-09-11 17:45 d-------- C:\Documents and Settings\All Users\Application Data\ESET 2008-09-11 01:24 . 2008-09-13 18:08 d-------- C:\Program Files\MSA 2008-09-11 01:24 . 2008-09-10 23:40 368,640 --a------ C:\WINDOWS\dtseqrxk.dll 2008-09-11 01:24 . 2008-09-10 23:40 204,800 --a------ C:\WINDOWS\mgxfebsq.dll 2008-09-11 01:24 . 2008-09-10 23:40 192,512 --a------ C:\WINDOWS\fqbewlna.dll 2008-09-11 01:24 . 2008-09-10 23:40 94,208 --a------ C:\WINDOWS\mqgldfvo.exe 2008-09-11 00:18 . 2008-09-11 00:18 d-------- C:\Program Files\Rundll Errors Fix Wizard 2008-09-11 00:18 . 2005-10-11 15:40 356,352 --a------ C:\WINDOWS\eSellerateEngine.dll 2008-09-11 00:18 . 2003-06-06 12:21 81,920 --a------ C:\WINDOWS\eSellerateControl350.dll 2008-09-11 00:02 . 2008-09-11 00:09 d-------- C:\Documents and Settings\Owner.Olivier\Application Data\ErrorSmart 2008-09-09 20:15 . 2008-09-09 20:15 d-------- C:\Program Files\Minimath 2008-09-09 19:46 . 2008-09-09 19:46 d-------- C:\Program Files\inKline Global 2008-09-08 22:31 . 2008-09-08 22:31 355,584 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-09-08 22:31 . 2008-05-29 09:28 28,416 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-09-08 22:30 . 2008-09-08 22:31 d-------- C:\Program Files\TuneUp Utilities 2008 2008-09-08 21:58 . 2008-09-08 21:58 d-------- C:\Program Files\MSN Messenger 2008-09-07 21:32 . 2008-09-07 21:32 d-------- C:\WINDOWS\ERUNT 2008-09-07 21:17 . 2008-09-07 04:40 d-------- C:\SDFix 2008-09-07 17:22 . 2008-09-07 17:22 d---s---- C:\Documents and Settings\LocalService\Favoris 2008-09-07 03:33 . 2008-09-02 23:58 88,576 --a------ C:\WINDOWS\system32\AntiXPVSTFix.exe 2008-09-06 11:47 . 2008-09-06 11:47 98 --a------ C:\WINDOWS\wininit.ini 2008-09-04 03:54 . 2008-09-07 21:56 d-------- C:\WINDOWS\system32\CatRoot_bak 2008-08-30 00:03 . 2008-08-30 00:14 d-------- C:\Program Files\Cheat Engine 2008-08-30 00:03 . 2007-12-26 17:30 1,970,176 --a------ C:\WINDOWS\system32\d3dx9.dll 2008-08-30 00:03 . 2007-12-26 17:30 679,936 --a------ C:\WINDOWS\system32\D3DX81ab.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-09-13 23:45 --------- d-----w C:\Documents and Settings\Owner.Olivier\Application Data\uTorrent 2008-09-13 23:44 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2008-09-13 23:37 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-09-13 22:56 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-09-13 18:39 --------- d-----w C:\Program Files\Dealio 2008-09-13 18:38 --------- d-----w C:\Program Files\Frets on Fire 2008-09-13 18:22 --------- d-----w C:\Program Files\Spyware Terminator 2008-09-13 18:22 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spyware Terminator 2008-09-13 18:18 --------- d-----w C:\Documents and Settings\Owner.Olivier\Application Data\Spyware Terminator 2008-09-13 16:58 15,762 ----a-w C:\WINDOWS\system32 mp.reg 2008-09-13 01:14 --------- d-----w C:\Documents and Settings\Simon\Application Data\Spyware Terminator 2008-09-11 23:08 --------- d-----w C:\Program Files\PremierOpinion 2008-09-11 05:24 --------- d-----w C:\Documents and Settings\Owner.Olivier\Application Data\Vso 2008-09-11 03:03 --------- d-----w C:\Program Files\FrostWire 2008-09-10 16:10 141,312 ----a-w C:\WINDOWS\system32\drivers\sp_rsdrv2.sys 2008-09-09 02:30 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-09-09 02:30 --------- d-----w C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-09-08 02:03 --------- d-----w C:\Program Files\SpywareBlaster 2008-09-06 15:46 --------- d-----w C:\Program Files\AKProg 2008-09-05 23:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller 2008-09-03 20:25 --------- d-----w C:\Program Files\ACSPMonitor 2008-08-31 18:45 --------- d-----w C:\Documents and Settings\Owner.Olivier\Application Data\dvdcss 2008-08-18 22:44 --------- d-----w C:\Documents and Settings\Simon\Application Data\Audacity 2008-08-11 17:04 --------- d-----w C:\Documents and Settings\Simon\Application Data\LimeWire 2008-08-06 07:02 --------- d-----w C:\Program Files\Windows Live 2008-08-05 19:37 --------- d-----w C:\Documents and Settings\Simon\Application Data\FrostWire 2008-08-04 16:47 --------- d-----w C:\Program Files\Microsoft SQL Server Compact Edition 2008-08-02 03:22 --------- d-----w C:\Program Files\iTunes 2008-08-02 03:22 --------- d-----w C:\Program Files\iPod 2008-07-31 07:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help 2008-07-30 16:05 --------- d-----w C:\Program Files\Search Settings 2008-07-30 16:05 --------- d-----w C:\Documents and Settings\Owner.Olivier\Application Data\Search Settings 2008-07-29 23:59 --------- d-----w C:\Documents and Settings\Owner.Olivier\Application Data\ImgBurn 2008-07-28 15:30 --------- d-----w C:\Documents and Settings\Simon\Application Data\Dealio 2008-07-28 15:25 --------- d-----w C:\Program Files\YouTUBE (TM) movie downloader 2008-07-25 15:35 --------- d-----w C:\Program Files\QuickTime 2008-07-25 15:30 --------- d-----w C:\Program Files\Safari 2008-07-23 17:37 --------- d-----w C:\Program Files\Diablo II 2008-07-21 22:40 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Lavasoft 2008-07-21 02:50 --------- d-----w C:\Program Files\PDM 2008-07-21 02:38 --------- d-----w C:\Program Files\HTV 2008-07-19 02:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll 2008-07-19 02:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe 2008-07-19 02:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll 2008-07-19 02:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll 2008-07-19 02:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll 2008-07-19 02:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll 2008-07-19 02:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll 2008-07-19 02:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll 2008-07-18 23:29 --------- d-----w C:\Program Files\Warcraft III 2008-07-18 18:39 587,264 ----a-w C:\WINDOWS\WLXPGSS.SCR 2008-07-17 21:27 --------- d-----w C:\Program Files\FlashGet 2008-07-17 06:53 --------- d-----w C:\Program Files\EssNetTools 2008-07-17 05:34 271,872 ----a-w C:\WINDOWS\system32\upx.exe 2008-07-16 21:42 --------- d-----w C:\Documents and Settings\Owner.Olivier\Application Data\FileZilla 2008-07-16 21:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\FLEXnet 2008-07-16 21:36 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-07-16 21:28 --------- d-----w C:\Program Files\Fichiers communs\Macrovision Shared 2008-07-16 16:03 --------- d-----w C:\Documents and Settings\Simon\Application Data\TmpRecentIcons 2008-07-16 03:41 --------- d-----w C:\Documents and Settings\Owner.Olivier\Application Data\AdobeUM 2008-06-20 17:41 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll 2007-09-13 01:02 47,360 ----a-w C:\Documents and Settings\Owner.Olivier\Application Data\pcouffin.sys . ------- Sigcheck ------- 2007-06-13 09:22 2716160 6f341b3ca16af1e82d1fd2a54177e997 C:\WINDOWS\explorer.exe 2007-06-13 09:10 1037312 b795475444d6d57a572c14b9e1a29839 C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe 2004-08-10 15:00 1884672 90e794c5d2d368686fe71b4a0354462c C:\WINDOWS\$NtUninstallKB938828$\explorer.exe 2008-04-13 22:34 1037824 f2317622d29f9ff0f88aeecd5f60f0dd C:\WINDOWS\SoftwareDistribution\Download\23ec66f2314a80d718b5483ab6e865af\explorer.exe 2007-06-13 09:22 2716160 6f341b3ca16af1e82d1fd2a54177e997 C:\WINDOWS\system32\dllcache\explorer.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "uTorrent"="C:\Downloads\uTorrent.exe" [2008-08-27 267056] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 15360] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 1694208] "RegistryMechanic"="C:\Program Files\Registry Mechanic\RegMech.exe" [2008-07-08 2828184] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-05-27 413696] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-07-30 289064] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 6731312] "SpywareTerminator"="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe" [2008-09-10 1783808] "egui"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-07-01 1447168] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "AllowLegacyWebView"= 1 (0x1) "AllowUnhashedWebView"= 1 (0x1) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoInstrumentation"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=zufueu.dll yukanx.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.clmp3enc"= C:\PROGRA~1\CYBERL~1\Power2Go\CLMP3Enc.ACM [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^BigFix.lnk] backup=C:\WINDOWS\pss\BigFix.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk] backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^Owner.Olivier^Menu Démarrer^Programmes^Démarrage^Rapidown.lnk] backup=C:\WINDOWS\pss\Rapidown.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Owner.Olivier^Menu Démarrer^Programmes^Démarrage^Y'z Toolbar.lnk] backup=C:\WINDOWS\pss\Y'z Toolbar.lnkStartup HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\STYLEXP [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware] --a------ 2007-06-11 05:25 6731312 C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] --a------ 2007-06-27 19:03 152872 C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray] --a------ 2006-09-28 15:21 57344 C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] --a------ 2004-08-10 15:00 15360 C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools] --a------ 2007-04-03 18:29 165784 C:\Program Files\DAEMON Tools\daemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray] --a--c--- 2005-08-05 23:34 64512 C:\WINDOWS\ehome\ehtray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Flashget] --a------ 2007-07-23 03:14 1994800 C:\PROGRA~1\FlashGet\flashget.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search] --a------ 2007-07-10 03:01 169984 C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor] --a------ 2006-10-27 00:47 31016 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] --a------ 2008-07-30 10:47 289064 C:\Program Files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechSoftwareUpdate] --a------ 2005-06-08 14:44 196608 C:\Program Files\Logitech\Video\ManifestEngine.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoRepair] --a------ 2005-06-08 15:24 458752 C:\Program Files\Logitech\Video\ISStart.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoTray] --a------ 2005-06-08 15:14 217088 C:\Program Files\Logitech\Video\LogiTray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSKDetectorExe] --a------ 2005-07-12 21:05 1117184 C:\Program Files\McAfee\SpamKiller\MSKDetct.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] --a------ 2007-01-19 12:54 5674352 C:\Program Files\MSN Messenger\msnmsgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a------ 2007-03-01 15:57 153136 C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray] --a------ 2007-06-29 00:01 2512128 C:\WINDOWS\system32\oodtray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE] --a------ 2007-08-06 20:05 200704 C:\Program Files\PowerISO\PWRISOVM.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a------ 2008-05-27 10:50 413696 C:\Program Files\QuickTime\QTTask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg eadericon] --a------ 2005-12-09 20:44 139264 C:\Program Files\Digital Media Reader eadericon45G.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] --a------ 2008-03-28 19:58 1271032 C:\Program Files\Steam\Steam.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] --a------ 2007-07-10 14:30 68856 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Transcode360] --a------ 2006-05-02 13:01 192512 C:\Program Files\Transcode360\Transcode360Tray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr] -ra------ 2006-03-30 16:45 313472 C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent] --a------ 2008-08-17 15:38 267056 C:\Program Files\uTorrent\uTorrent.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\XboxStat] --a------ 2007-02-12 17:21 734624 c:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg wiz] --a------ 2007-09-17 01:07 1626112 C:\WINDOWS\system32 wiz.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "PrismXL"=2 (0x2) "NVSvc"=2 (0x2) "WMPNetworkSvc"=3 (0x3) "usnjsvc"=3 (0x3) "NMIndexingService"=3 (0x3) "NBService"=3 (0x3) "iPod Service"=3 (0x3) "gusvc"=3 (0x3) "AVG Anti-Spyware Guard"=2 (0x2) "RemoteRegistry"=2 (0x2) "ose"=3 (0x3) "odserv"=3 (0x3) "Microsoft Office Groove Audit Service"=3 (0x3) "idsvc"=3 (0x3) "Apple Mobile Device"=2 (0x2) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "C:\Program Files\Messenger\msmsgs.exe"= "C:\Program Files\uTorrent\uTorrent.exe"= "C:\Program Files\Mozilla Firefox\firefox.exe"= "C:\Program Files\LimeWire\LimeWire.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "C:\Program Files\Sierra\FEAR\FEAR.exe"= "C:\Program Files\FlashGet\flashget.exe"= "C:\Program Files\CyberLink\PCM4Everio\PCM4Everio.exe"= "C:\Program Files\CyberLink\PCM4Everio\EverioService.exe"= "C:\Program Files\CyberLink\PowerDirector Express\PDX.exe"= "C:\Program Files\FrostWire\FrostWire.exe"= "C:\Program Files\iTunes\iTunes.exe"= "C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe"= "C:\Downloads\uTorrent.exe"= "C:\Program Files\MSN Messenger\msnmsgr.exe"= "C:\Program Files\MSN Messenger\livecall.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3776:UDP"= 3776:UDP:Service de Media Center Extender "3390:TCP"= 3390:TCP:Services Media Center à distance R1 epfwtdir;epfwtdir;C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2008-07-01 34312] R1 sp_rsdrv2;Spyware Terminator Driver 2;C:\WINDOWS\system32\drivers\sp_rsdrv2.sys [2008-09-10 141312] R2 RMSvc;Media Center Extender Resource Monitor;C:\WINDOWS\ehome\RMSvc.exe [2005-10-20 28160] R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2004-08-10 14336] R3 AmdTools;AMD Special Tools Driver;C:\WINDOWS\system32\DRIVERS\AmdTools.sys [2006-06-27 31744] R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496] S3 QWAVE;QWAVE service;C:\WINDOWS\system32\svchost.exe [2004-08-10 14336] S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-09-08 355584] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] QWAVE REG_MULTI_SZ QWAVE HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp *Newly Created Service* - PROCEXP90 . Contenu du dossier 'Tâches planifiées' . - - - - ORPHELINS SUPPRIMES - - - - BHO-{7287293E-B0BE-4A31-B52B-EA15F57679E3} - (no file) ShellExecuteHooks-{935FA400-243D-11D3-B06E-857B2AE2BE64} - (no file) MSConfigStartUp-COMODO Firewall Pro - C:\Program Files\Comodo\Firewall\cfp.exe MSConfigStartUp-Uniblue RegistryBooster 2 - C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe . ------- Examen supplémentaire ------- . FireFox -: Profile - C:\Documents and Settings\Owner.Olivier\Application Data\Mozilla\Firefox\Profiles\vs0r0ilf.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.com/ FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser ppdf32.dll FF -: plugin - C:\Program Files\DivX\DivX Content Uploader pUpload.dll FF -: plugin - C:\Program Files\Download Manager pfpdlm.dll FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins pitunes.dll FF -: plugin - C:\Program Files\Yahoo!\Common pyaxmpb.dll . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-09-13 19:48:07 Windows 5.1.2600 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . Heure de fin: 2008-09-13 19:50:26 ComboFix-quarantined-files.txt 2008-09-13 23:50:02 Avant-CF: 29,962,620,928 octets libres AprŠs-CF: 30,272,950,272 octets libres 311 --- E O F --- 2008-09-08 01:56:10

Destrio5 · Answer

Refais le scan avec MBAM en mode sans échec cette fois-ci.

olivier_123 · Answer

Je vais faire sa demain. Merci ! @+

Destrio5 · Answer

Ok, bonne nuit.

olivier_123 · Answer

J'oubliait , merci beacoup pour l'aide !

@+ et a demain.

olivier_123 · Answer

Bon je vais faire le scan. Je reviens, le scan devrait prendre environ 1 heure.


@+

Destrio5 · Answer

Ok.

olivier_123 · Answer

Le programme a encore planté... Je ne refait pas le scan mais je vais envoyer le rapport:

Malwarebytes' Anti-Malware 1.28
Database version: 1145
Windows 5.1.2600 Service Pack 2

2008-09-14 18:40:52
mbam-log-2008-09-14 (18-40-45).txt

Scan type: Full Scan (C:\|)
Objects scanned: 210291
Time elapsed: 2 hour(s), 40 minute(s), 57 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 24

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\PremierOpinion\pmls.dll (Adware.RK) -> No action taken.
C:\QooBox\Quarantine\C\WINDOWS\system32	dpmma.dll.vir (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002316.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002317.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002318.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002319.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002320.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002321.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002322.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002323.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002324.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002325.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002326.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002327.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002328.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002329.exe (Trojan.FakeAlert) -> No action taken.
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP20\A0003420.dll (Trojan.Vundo) -> No action taken.
C:\A2.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\dtseqrxk.dll (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\fqbewlna.dll (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\mgxfebsq.dll (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\mqgldfvo.exe (Trojan.FakeAlert) -> No action taken.
C:\Documents and Settings\Simon\Bureau\BEST ZOO PORN.url (Rogue.Link) -> No action taken.
C:\Documents and Settings\Simon\Bureau\QUALITY PORN.url (Rogue.Link) -> No action taken.

Destrio5 · Answer

---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger :
http://www.infos-du-net.com/forum/272480-11-desactiver-activer-restauration-systeme

---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
https://www.vulgarisation-informatique.com/creer-point-restauration.php

olivier_123 · Answer

Lorsque je clique sur Restauration du système , la page est blanche. Pourquoi?

Destrio5 · Answer

Aucune idée.

Avec MBAM, pourquoi tu ne ferais pas un scan rapide ?

olivier_123 · Answer

J'ai fait environ 20 scans , il plante toujours , j'ai décocher etc... Rien n'y faire.

Destrio5 · Answer

---> Télécharge OTMoveIt2 à partir du lien ci-dessous : 
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe 

---> Enregistre le fichier sur le Bureau.

---> Double-clique sur le fichier OTMoveIt2.exe pour lancer l'outil.
Assure-toi que la case Unregister Dll's and Ocx's soit bien cochée.

---> Copie l'intégralité du texte ci-dessous et colle-le dans la fenêtre intitulée Paste List Of Files/Folders to Move.



C:\Program Files\PremierOpinion\pmls.dll 
C:\QooBox\Quarantine\C\WINDOWS\system32	dpmma.dll.vir
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002316.exe 
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002317.exe 
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002318.exe 
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002319.exe 
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002320.exe 
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002321.exe 
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002322.exe 
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002323.exe 
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002324.exe 
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002325.exe 
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002326.exe 
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002327.dll 
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002328.exe 
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP15\A0002329.exe 
C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP20\A0003420.dll 
C:\A2.tmp
C:\WINDOWS\dtseqrxk.dll 
C:\WINDOWS\fqbewlna.dll 
C:\WINDOWS\mgxfebsq.dll 
C:\WINDOWS\mqgldfvo.exe
C:\Documents and Settings\Simon\Bureau\BEST ZOO PORN.url 
C:\Documents and Settings\Simon\Bureau\QUALITY PORN.url 



---> Clique sur MoveIt! pour lancer la suppression.
Lorsqu'un résultat apparaît dans le cadre Results, clique sur Exit.

Note : Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. Accepte en cliquant sur YES. 

---> Poste le rapport de OTMoveIt qui se trouve dans C:\_OTMoveIt\MovedFiles.

olivier_123 · Answer

Pas besoin d'envoyer le rapport , j'ai tout supprimer. Quoi faire maitenant?

Destrio5 · Answer

Normalement, MBAM ne devrait plus rien détecter.

olivier_123 · Answer

Je fait un test, je vais te dire sa dans quelques minutes

olivier_123 · Answer

En effet il a rien trouver.

Destrio5 · Answer

Ton PC fonctionne mieux ?

olivier_123 · Answer

Oui beacoup mieux

Destrio5 · Answer

---> Mets à jour Java :
https://www.java.com/fr/download/manual.jsp

---> Relance MBAM, va dans Quarantaine et supprime tout

---> Poste un nouveau rapport HijackThis

olivier_123 · Answer

Mais j'ai un petit probleme, je suis pas capable de me connecter sur windows live messenger. J'ai réussi a trouver la source du problème qui est mon fichier: msxml3.dll . Je l'ai redownloader mais je ne sais pas comment le remplacer. 

Merci de ton aide

olivier_123 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:48:02, on 2008-09-14
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\ehome\RMSvc.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Downloads\uTorrent.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\windows\system32\BAE.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\Xi\NetXfer\NXToolBar.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Downloads\uTorrent.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RegMech.exe /H
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [AdobeUpdater] C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'Simon')
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-500\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Administrateur')
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~4\Office12\GR99D3~1.DLL
O20 - AppInit_DLLs: zufueu.dll yukanx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O24 - Desktop Component 0: Privacy Protection - (no file)

Destrio5 · Answer

---> Clique sur Démarrer puis Exécuter

---> Tape Regsvr32 %windir%\system32\msxml3.dll et valide par OK

olivier_123 · Answer

Ouais j'ai déja essayer cette manipulation, sa n'a pas fonctionner. Je viens de le refaire et sa marque: DllRegisterServer dans C:\Windows\system32\msxml3.dll a échoué , Le code renvoyé était : 0x8004005

Destrio5 · Answer

http://www.microsoft.com/downloads/details.aspx?displaylang=fr&FamilyID=28494391-052b-42ff-9674-f752bdca9582

olivier_123 · Answer

j'ai la meme erreur , curieux

Destrio5 · Answer

Normalement, le fichier doit se trouver dans C:\Windows\System32\ je pense.

olivier_123 · Answer

Ouais je sé dans le system32, mais quesque je fait maitenant pour arranger mon probleme?

Destrio5 · Answer

T'as essayé de réinstaller WLM pour voir ?

olivier_123 · Answer

Ouais, sans succes

Destrio5 · Answer

Je n'ai plus d'idée pour WLM.

olivier_123 · Answer

Cherche, cherche :P

Destrio5 · Answer

Par rapport à ton antivirus, tu veux pas le changer ?

olivier_123 · Answer

Il est pas bon ? lol

Destrio5 · Answer

Tu trouves qu'il t'a bien protégé ?

olivier_123 · Answer

Je sais pas si sa peux aider pour WLM , lorsque je me connecte sa affiche: Signing in to Windows Live Messenger failed because the service is temporarly unavailable. PLease try again.  Error code: 800401f3

olivier_123 · Answer

Non mais je l'ai changer justement apres le virus. Maitenant j'utilise Nod32 , il parait c'est l'un des meilleurs antivirus

Destrio5 · Answer

Tu as la bonne heure et la bonne date ?

olivier_123 · Answer

Oui

olivier_123 · Answer

quesque tu me conseille comme autre antivirus ? Je vais le changer

pico.l · Answer

Bonjour,

Un bon travail effectué grâce à Destrio5..

Seulement dans les deux rapports hijackthis, on voit pas d´Antivirus actif ni le  par feu ?

Pour le problème de MSXML3.dll  j´ai trouvé ca dans le net >>>

1. Inscrivez MSXML3.dll
Cliquez sur Démarrer.
Choisissez Exécuter.
Dans la boîte de dialogue Exécuter, entrez regsvr32 MSXML3.dll. Cliquez sur OK.

Et ce qui concerne  le message d´erreur ,regarde ici >>> 0x8004005

Pico

Destrio5 · Answer

Antivir :
http://dl1.avgate.net/down/windows/antivir_workstation_winu_fr_h.exe

olivier_123 · Answer

C'est ce que j'utilisait avant ;)

Destrio5 · Answer

Même avec ça, tu as eu des virus ?

olivier_123 · Answer

J'ai surement faite quelque chose comme désactiver mon antivirus , je m'en souvien plus

Destrio5 · Answer

---> Relance HijackThis et choisis Do a system scan only

---> Coche les cases qui sont devant les lignes suivantes :

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime     

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"     

O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-1007\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Simon')     

O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-500\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Administrateur')     

O20 - AppInit_DLLs: zufueu.dll yukanx.dll 

O24 - Desktop Component 0: Privacy Protection - (no file) 

---> Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose.

---> Redémarre ton PC et poste un nouveau rapport HijackThis

olivier_123 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:23:35, on 2008-09-15
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\ehome\RMSvc.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Downloads\uTorrent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Registry Mechanic\RegMech.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\windows\system32\BAE.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\Xi\NetXfer\NXToolBar.dll
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [uTorrent] "C:\Downloads\uTorrent.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RegMech.exe /H
O4 - HKUS\S-1-5-21-3689773760-372661124-4031406792-500\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'Administrateur')
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~4\Office12\GR99D3~1.DLL
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O24 - Desktop Component 0: Privacy Protection - (no file)

Destrio5 · Answer

Tu as deux antispywares, ça fait beaucoup.

Tu as toujours cette ligne :
O24 - Desktop Component 0: Privacy Protection - (no file) 

SmitFraudFix option 2 devrait corriger ce problème.

olivier_123 · Answer

Merci, et pour WLM mon msxml2.dll marche pas non plus j'ai fait cette commande: Regsvr32 C:\Windows\System32\Msxml2.dll , et une erreur apparait le msxml.dll marche tres bien mais le 2 et le 3 non. c'est du ca cause dun spyware mais comment fixer le probleme?

Destrio5 · Answer

Même en prenant ceci :
https://www.dll-files.com/msxml3.dll.html

olivier_123 · Answer

Il me faut un logiciel pour remplacer des fichiers dll , parce que la sa marche pas.

Destrio5 · Answer

Comment ça ?

olivier_123 · Answer

Accès refusé lorsque j'essaie de remplacer

Destrio5 · Answer

Et en mode sans échec ?

Destrio5 · Answer

Je te laisse, je vais dormir.

olivier_123 · Answer

Bonne nuit , et merci beacoup

olivier_123 · Answer

Aucune idée pour mon WLM?

Destrio5 · Answer

Non désolé.

olivier_123 · Answer

J'essaie de quoi en ce moment et je pense que sa va marcher ;) pour mon WLM

Destrio5 · Answer

Tu as résolu ton problème ?

olivier_123 · Answer

non ;(

olivier_123 · Answer

Mais j'ai aussi un autre probleme, des fois lorsque j'ouvre une fenetre. Une erreur s'affiche: Erreur script dans internet explorer. Et je doit faire Alt+f4 (en tenant mon doigt pendant 5 seconde avant que sa quitte complètement de la/les fenetres)

Aides-moi svp !

@+

Destrio5 · Answer

Vu les petits problèmes que tu rencontres, ça serait bien de réinstaller Windows proprement, non ?

olivier_123 · Answer

Tu veux dire Formater?

Destrio5 · Answer

Exact.

olivier_123 · Answer

Jamais ;)

Destrio5 · Answer

LOL 

Pourquoi cela ?

olivier_123 · Answer

J'ai beacoup trop de Trucs sur mon ordinateur , je veux pas tout perde :P

Destrio5 · Answer

C'est pour cela que les disques durs externes et les DVD existent.

olivier_123 · Answer

J'ai juste un DD interne ;) Et un autre pour Le Recovery de 5go

Destrio5 · Answer

Et si ton disque dur lâche ?

olivier_123 · Answer

Le Recovery?

Destrio5 · Answer

Tu parles de quel Recovery ?

olivier_123 · Answer

J'ai un probléme , je ne peux plus me connecter sur msn depuis 20 minutes. Mais je peux me connceter sur l'accounte de mon frere. Comment arranger ce probleme?

Destrio5 · Answer

MSN refonctionnait ?

olivier_123 · Answer

Non non , jutilise msn 5.0 , lui y marche. Mais la sa ne marche plus. Aide moi svp ! Trouve une solution. On dirait que quelqu'un bloque mon msn ou un virus

olivier_123 · Answer

Ce n'est pas msn le probleme

olivier_123 · Answer

j'ai fait un scan avec ComboFix, voici mon rapport: ComboFix 08-09-20.05 - Owner 2008-09-22 23:15:36.3 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.1198 [GMT -4:00] Lancé depuis: C:\Documents and Settings\Owner.Olivier\Bureau\ComboFix.exe [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\tcpwrk.dll . ---- Previous Run ------- . C:\WINDOWS\system32\_003444_.tmp.dll C:\WINDOWS\system32\_003445_.tmp.dll C:\WINDOWS\system32\_003446_.tmp.dll C:\WINDOWS\system32\_003447_.tmp.dll C:\WINDOWS\system32\_003454_.tmp.dll C:\WINDOWS\system32\_003455_.tmp.dll C:\WINDOWS\system32\_003456_.tmp.dll C:\WINDOWS\system32\_003457_.tmp.dll C:\WINDOWS\system32\_003459_.tmp.dll C:\WINDOWS\system32\_003460_.tmp.dll C:\WINDOWS\system32\_003463_.tmp.dll C:\WINDOWS\system32\_003464_.tmp.dll C:\WINDOWS\system32\_003466_.tmp.dll C:\WINDOWS\system32\_003467_.tmp.dll C:\WINDOWS\system32\_003468_.tmp.dll C:\WINDOWS\system32\_003470_.tmp.dll C:\WINDOWS\system32\_003472_.tmp.dll C:\WINDOWS\system32\_003473_.tmp.dll C:\WINDOWS\system32\_003474_.tmp.dll C:\WINDOWS\system32\_003477_.tmp.dll C:\WINDOWS\system32\_003478_.tmp.dll C:\WINDOWS\system32\_003480_.tmp.dll C:\WINDOWS\system32\_003483_.tmp.dll C:\WINDOWS\system32\_003485_.tmp.dll C:\WINDOWS\system32\_003486_.tmp.dll C:\WINDOWS\system32\_003487_.tmp.dll C:\WINDOWS\system32\_003488_.tmp.dll C:\WINDOWS\system32\_003489_.tmp.dll C:\WINDOWS\system32\_003492_.tmp.dll C:\WINDOWS\system32\_003493_.tmp.dll C:\WINDOWS\system32\_003494_.tmp.dll C:\WINDOWS\system32\_003495_.tmp.dll C:\WINDOWS\system32\_003496_.tmp.dll C:\WINDOWS\system32\_003501_.tmp.dll C:\WINDOWS\system32\_003503_.tmp.dll C:\WINDOWS\system32\_004013_.tmp.dll C:\WINDOWS\system32\_004014_.tmp.dll C:\WINDOWS\system32\_004015_.tmp.dll C:\WINDOWS\system32\_004016_.tmp.dll C:\WINDOWS\system32\_004020_.tmp.dll C:\WINDOWS\system32\_004021_.tmp.dll C:\WINDOWS\system32\_004022_.tmp.dll C:\WINDOWS\system32\_004023_.tmp.dll C:\WINDOWS\system32\_004024_.tmp.dll C:\WINDOWS\system32\_004025_.tmp.dll C:\WINDOWS\system32\_004026_.tmp.dll C:\WINDOWS\system32\_004027_.tmp.dll C:\WINDOWS\system32\_004028_.tmp.dll C:\WINDOWS\system32\_004031_.tmp.dll C:\WINDOWS\system32\_004032_.tmp.dll C:\WINDOWS\system32\_004034_.tmp.dll C:\WINDOWS\system32\_004035_.tmp.dll C:\WINDOWS\system32\_004036_.tmp.dll C:\WINDOWS\system32\_004038_.tmp.dll C:\WINDOWS\system32\_004040_.tmp.dll C:\WINDOWS\system32\_004041_.tmp.dll C:\WINDOWS\system32\_004042_.tmp.dll C:\WINDOWS\system32\_004044_.tmp.dll C:\WINDOWS\system32\_004045_.tmp.dll C:\WINDOWS\system32\_004046_.tmp.dll C:\WINDOWS\system32\_004047_.tmp.dll C:\WINDOWS\system32\_004048_.tmp.dll C:\WINDOWS\system32\_004049_.tmp.dll C:\WINDOWS\system32\_004051_.tmp.dll C:\WINDOWS\system32\_004052_.tmp.dll C:\WINDOWS\system32\_004053_.tmp.dll C:\WINDOWS\system32\_004054_.tmp.dll C:\WINDOWS\system32\_004055_.tmp.dll C:\WINDOWS\system32\_004056_.tmp.dll C:\WINDOWS\system32\_004057_.tmp.dll C:\WINDOWS\system32\_004059_.tmp.dll C:\WINDOWS\system32\_004060_.tmp.dll C:\WINDOWS\system32\_004061_.tmp.dll C:\WINDOWS\system32\_004062_.tmp.dll C:\WINDOWS\system32\_004063_.tmp.dll C:\WINDOWS\system32\_004065_.tmp.dll C:\WINDOWS\system32\_004066_.tmp.dll C:\WINDOWS\system32\_004068_.tmp.dll C:\WINDOWS\system32\_004069_.tmp.dll C:\WINDOWS\system32\_004070_.tmp.dll C:\WINDOWS\system32\_004071_.tmp.dll C:\WINDOWS\system32\_004072_.tmp.dll C:\WINDOWS\system32\_004074_.tmp.dll C:\WINDOWS\system32\_004076_.tmp.dll C:\WINDOWS\system32\_004077_.tmp.dll C:\WINDOWS\system32\_004078_.tmp.dll C:\WINDOWS\system32\_004081_.tmp.dll C:\WINDOWS\system32\_004082_.tmp.dll C:\WINDOWS\system32\_004084_.tmp.dll C:\WINDOWS\system32\_004087_.tmp.dll C:\WINDOWS\system32\_004089_.tmp.dll C:\WINDOWS\system32\_004090_.tmp.dll C:\WINDOWS\system32\_004091_.tmp.dll C:\WINDOWS\system32\_004092_.tmp.dll C:\WINDOWS\system32\_004095_.tmp.dll C:\WINDOWS\system32\_004096_.tmp.dll C:\WINDOWS\system32\_004097_.tmp.dll C:\WINDOWS\system32\_004098_.tmp.dll C:\WINDOWS\system32\_004099_.tmp.dll C:\WINDOWS\system32\_004104_.tmp.dll C:\WINDOWS\system32\_004106_.tmp.dll C:\WINDOWS\system32\_007195_.tmp.dll C:\WINDOWS\system32\_007197_.tmp.dll C:\WINDOWS\system32\_007205_.tmp.dll C:\WINDOWS\system32\_007206_.tmp.dll C:\WINDOWS\system32\_007208_.tmp.dll C:\WINDOWS\system32\_007209_.tmp.dll C:\WINDOWS\system32\_007212_.tmp.dll C:\WINDOWS\system32\_007213_.tmp.dll C:\WINDOWS\system32\_007222_.tmp.dll C:\WINDOWS\system32\_007223_.tmp.dll C:\WINDOWS\system32\_007227_.tmp.dll C:\WINDOWS\system32\_007229_.tmp.dll C:\WINDOWS\system32\_007232_.tmp.dll C:\WINDOWS\system32\_007236_.tmp.dll C:\WINDOWS\system32\_007237_.tmp.dll C:\WINDOWS\system32\_007241_.tmp.dll C:\WINDOWS\system32\_007242_.tmp.dll C:\WINDOWS\system32\_007243_.tmp.dll C:\WINDOWS\system32\_007244_.tmp.dll C:\WINDOWS\system32\_007249_.tmp.dll . ((((((((((((((((((((((((((((( Fichiers créés du 2008-08-23 au 2008-09-23 )))))))))))))))))))))))))))))))))))) . 2015-03-12 21:41 . 2007-09-06 21:59 d-------- C:\Program Files\Rapidown 2015-03-12 21:41 . 2015-03-12 21:41 754 --a--c--- C:\WINDOWS\WORDPAD.INI 2008-09-22 22:56 . 2008-09-22 23:15 d-------- C:\Documents and Settings\Owner.Olivier\amsn 2008-09-22 22:54 . 2008-09-22 22:55 d-------- C:\Program Files\aMSN 2008-09-20 01:20 . 2008-04-13 11:36 2,986,496 --a------ C:\WINDOWS\system32\SET1272.tmp 2008-09-20 01:20 . 2008-04-13 19:33 354,304 --a------ C:\WINDOWS\system32\SET1264.tmp 2008-09-20 01:20 . 2008-04-13 19:31 177,152 --a------ C:\WINDOWS\system32\SET1299.tmp 2008-09-20 01:14 . 2008-04-13 19:33 527,360 --a------ C:\WINDOWS\system32\SET698.tmp 2008-09-20 01:14 . 2008-04-13 19:33 95,744 --a------ C:\WINDOWS\system32\SET6A9.tmp 2008-09-20 01:13 . 2008-04-13 19:34 1,037,824 --a------ C:\WINDOWS\SET52E.tmp 2008-09-20 01:11 . 2008-04-13 19:33 2,843,136 --a------ C:\WINDOWS\system32\SET2FD.tmp 2008-09-20 01:10 . 2008-04-13 19:33 8,517,632 --a------ C:\WINDOWS\system32\SET1D9.tmp 2008-09-20 01:07 . 2006-12-28 12:01 19,569 --a------ C:\WINDOWS\[u]0[/u]06366_.tmp 2008-09-20 01:03 . 2007-10-25 12:43 8,516,608 --a------ C:\WINDOWS\system32\dllcache\shell32.dll 2008-09-20 01:02 . 2004-08-10 15:00 3,053,568 --a------ C:\WINDOWS\system32\syssetup.dll 2008-09-19 23:54 . 2008-09-19 23:55 d-------- C:\e6180f2b8f32b6fa62f0a045113edd 2008-09-19 19:36 . 2008-09-19 19:55 d-------- C:\Documents and Settings\Owner.Olivier\Application Data\mIRC 2008-09-17 23:50 . 2008-09-17 23:50 d-------- C:\Program Files\Guitar Pro 5 2008-09-17 22:46 . 2004-08-10 15:00 71,040 --------- C:\WINDOWS\system32\drivers\_007170_.tmp.dll 2008-09-17 22:08 . 2008-09-22 22:16 d-------- C:\Documents and Settings\Owner.Olivier\Tracing 2008-09-17 22:03 . 2008-09-17 22:03 d-------- C:\Program Files\Microsoft 2008-09-17 21:58 . 2008-09-17 21:58 d-------- C:\Program Files\Fichiers communs\Windows Live 2008-09-17 21:22 . 2008-09-17 21:22 d-------- C:\Program Files\Power IE 2008-09-16 23:25 . 2004-08-10 15:00 71,040 --------- C:\WINDOWS\system32\drivers\_003996_.tmp.dll 2008-09-16 23:19 . 2008-04-13 22:33 8,517,632 --a------ C:\WINDOWS\system32\SET711.tmp 2008-09-16 23:18 . 2008-04-13 22:33 1,097,728 --a------ C:\WINDOWS\system32\SET8F8.tmp 2008-09-16 23:17 . 2008-04-13 22:33 1,267,200 --a------ C:\WINDOWS\system32\SET966.tmp 2008-09-16 23:06 . 2008-09-16 23:06 d-------- C:\MSXML3msms 2008-09-16 20:35 . 2008-09-17 21:52 d-------- C:\Program Files\MSN Messenger 2008-09-16 19:20 . 2008-09-16 19:20 d-------- C:\Program Files\Windows Resource Kits 2008-09-16 19:14 . 2001-08-17 20:14 952,007 --a--c--- C:\WINDOWS\system32\dllcache\diwan.sys 2008-09-16 19:13 . 2004-08-10 15:00 1,677,824 --a--c--- C:\WINDOWS\system32\dllcache\chsbrkr.dll 2008-09-16 19:12 . 2001-08-17 21:28 871,388 --a--c--- C:\WINDOWS\system32\dllcache\bcmdm.sys 2008-09-16 19:11 . 2001-08-17 21:28 762,780 --a--c--- C:\WINDOWS\system32\dllcache\3cwmcru.sys 2008-09-16 19:10 . 2003-04-14 20:29 217,088 --a--c--- C:\WINDOWS\system32\dllcache\fpmmcsat.dll 2008-09-16 19:10 . 2004-08-10 15:00 173,056 --a--c--- C:\WINDOWS\system32\dllcache\iisui.dll 2008-09-16 19:10 . 2004-08-10 15:00 96,768 --a--c--- C:\WINDOWS\system32\dllcache\certmap.ocx 2008-09-16 19:10 . 2001-08-23 17:46 66,048 --a--c--- C:\WINDOWS\system32\dllcache\s3legacy.dll 2008-09-16 19:10 . 2004-08-10 15:00 19,968 --a--c--- C:\WINDOWS\system32\dllcache\inetsloc.dll 2008-09-16 19:10 . 2004-08-10 15:00 14,848 --a--c--- C:\WINDOWS\system32\dllcache\iisreset.exe 2008-09-16 19:10 . 2004-08-10 15:00 7,680 --a--c--- C:\WINDOWS\system32\dllcache\inetmgr.exe 2008-09-16 19:10 . 2004-08-10 15:00 6,144 --a--c--- C:\WINDOWS\system32\dllcache\ftpsapi2.dll 2008-09-16 19:10 . 2004-08-10 15:00 5,632 --a--c--- C:\WINDOWS\system32\dllcache\iisrstap.dll 2008-09-15 19:42 . 2008-09-20 01:20 d-------- C:\WINDOWS\system32\fr 2008-09-15 19:42 . 2008-09-20 03:01 d-------- C:\WINDOWS\system32\bits 2008-09-15 19:42 . 2008-09-20 01:20 d-------- C:\WINDOWS\l2schemas 2008-09-15 19:37 . 2008-09-17 23:02 1,374 --a------ C:\WINDOWS\imsins.BAK 2008-09-15 19:34 . 2004-08-10 15:00 71,040 --------- C:\WINDOWS\system32\drivers\_003989_.tmp.dll 2008-09-15 02:05 . 2008-09-15 02:06 d-------- C:\Program Files\ExpressZIP 2008-09-15 01:02 . 2008-09-15 01:02 d-------- C:\Program Files\Avira 2008-09-15 01:02 . 2008-09-15 01:02 d-------- C:\Documents and Settings\All Users\Application Data\Avira 2008-09-15 00:58 . 2008-04-13 22:33 483,840 --a------ C:\WINDOWS\system32\SET237.tmp 2008-09-15 00:58 . 2008-04-13 22:33 265,216 --a------ C:\WINDOWS\system32\SET249.tmp 2008-09-15 00:58 . 2008-04-13 22:33 82,432 --a------ C:\WINDOWS\system32\SET246.tmp 2008-09-15 00:58 . 2008-04-13 22:33 80,896 --a------ C:\WINDOWS\system32\SET11E0.tmp 2008-09-15 00:58 . 2008-04-13 22:33 52,736 --a------ C:\WINDOWS\system32\SET238.tmp 2008-09-15 00:58 . 2008-04-13 22:33 25,088 --a------ C:\WINDOWS\system32\SET23C.tmp 2008-09-15 00:58 . 2008-04-13 22:33 19,968 --a------ C:\WINDOWS\system32\SET245.tmp 2008-09-15 00:58 . 2008-04-13 22:33 19,456 --a------ C:\WINDOWS\system32\SET23E.tmp 2008-09-15 00:58 . 2008-04-13 22:33 18,432 --a------ C:\WINDOWS\system32\SET23A.tmp 2008-09-15 00:58 . 2008-04-13 22:33 6,656 --a------ C:\WINDOWS\system32\SET11DB.tmp 2008-09-15 00:56 . 2008-04-13 22:33 2,843,136 --a------ C:\WINDOWS\system32\SET3A8.tmp 2008-09-14 23:45 . 2008-09-14 23:45 d-------- C:\Program Files\Sun 2008-09-14 15:56 . 2008-09-14 15:56 d-------- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes 2008-09-13 14:47 . 2008-09-13 14:47 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-09-13 14:47 . 2008-09-13 14:47 d-------- C:\Documents and Settings\Owner.Olivier\Application Data\Malwarebytes 2008-09-13 14:47 . 2008-09-13 14:47 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-09-13 14:47 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-09-13 14:47 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-09-13 14:27 . 2008-09-13 14:27 d-------- C:\Program Files\Trend Micro 2008-09-13 13:05 . 2008-09-13 13:06 d-------- C:\Documents and Settings\Administrateur\Application Data\Spyware Terminator 2008-09-11 18:02 . 2008-09-11 18:02 244 --ah----- C:\sqmnoopt06.sqm 2008-09-11 18:02 . 2008-09-11 18:02 244 --ah----- C:\sqmdata06.sqm 2008-09-11 17:45 . 2008-09-11 17:45 d-------- C:\Documents and Settings\All Users\Application Data\ESET 2008-09-11 01:24 . 2008-09-13 18:08 d-------- C:\Program Files\MSA 2008-09-11 00:18 . 2008-09-11 00:18 d-------- C:\Program Files\Rundll Errors Fix Wizard 2008-09-11 00:18 . 2005-10-11 15:40 356,352 --a------ C:\WINDOWS\eSellerateEngine.dll 2008-09-11 00:18 . 2003-06-06 12:21 81,920 --a------ C:\WINDOWS\eSellerateControl350.dll 2008-09-11 00:02 . 2008-09-11 00:09 d-------- C:\Documents and Settings\Owner.Olivier\Application Data\ErrorSmart 2008-09-09 20:15 . 2008-09-09 20:15 d-------- C:\Program Files\Minimath 2008-09-09 19:46 . 2008-09-09 19:46 d-------- C:\Program Files\inKline Global 2008-09-09 00:03 . 2008-09-09 00:03 51,712 --a------ C:\WINDOWS\system32\sirenacm.dll 2008-09-08 22:31 . 2008-09-08 22:31 355,584 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-09-08 22:31 . 2008-05-29 09:28 28,416 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-09-08 22:30 . 2008-09-08 22:31 d-------- C:\Program Files\TuneUp Utilities 2008 2008-09-07 21:32 . 2008-09-07 21:32 d-------- C:\WINDOWS\ERUNT 2008-09-07 21:17 . 2008-09-07 04:40 d-------- C:\SDFix 2008-09-07 17:22 . 2008-09-07 17:22 d---s---- C:\Documents and Settings\LocalService\Favoris 2008-09-07 03:33 . 2008-09-02 23:58 88,576 --a------ C:\WINDOWS\system32\AntiXPVSTFix.exe 2008-09-06 11:47 . 2008-09-06 11:47 98 --a------ C:\WINDOWS\wininit.ini 2008-09-05 16:04 . 2008-09-05 16:04 288,768 --a------ C:\WINDOWS\WLXPGSS.SCR 2008-09-04 03:54 . 2008-09-20 01:21 d-------- C:\WINDOWS\system32\CatRoot_bak 2008-08-30 00:03 . 2008-08-30 00:14 d-------- C:\Program Files\Cheat Engine 2008-08-30 00:03 . 2007-12-26 17:30 1,970,176 --a------ C:\WINDOWS\system32\d3dx9.dll 2008-08-30 00:03 . 2007-12-26 17:30 679,936 --a------ C:\WINDOWS\system32\D3DX81ab.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-09-23 03:09 --------- d-----w C:\Documents and Settings\Owner.Olivier\Application Data\uTorrent 2008-09-22 21:31 --------- d-----w C:\Program Files\FrostWire 2008-09-22 15:00 --------- d-----w C:\Documents and Settings\Simon\Application Data\Spyware Terminator 2008-09-22 15:00 --------- d-----w C:\Documents and Settings\Owner.Olivier\Application Data\Spyware Terminator 2008-09-21 18:10 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spyware Terminator 2008-09-21 18:09 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2008-09-20 17:02 --------- d-----w C:\Program Files\Spyware Terminator 2008-09-19 23:36 --------- d-----w C:\Program Files\mIRC 2008-09-18 02:06 --------- d-----w C:\Program Files\Windows Live 2008-09-18 01:56 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller 2008-09-15 03:45 --------- d-----w C:\Program Files\Java 2008-09-15 03:19 --------- d-----w C:\Program Files\PremierOpinion 2008-09-13 23:37 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-09-13 22:56 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-09-13 18:39 --------- d-----w C:\Program Files\Dealio 2008-09-13 18:38 --------- d-----w C:\Program Files\Frets on Fire 2008-09-13 16:58 15,762 ----a-w C:\WINDOWS\system32\tmp.reg 2008-09-11 05:24 --------- d-----w C:\Documents and Settings\Owner.Olivier\Application Data\Vso 2008-09-10 16:10 141,312 ----a-w C:\WINDOWS\system32\drivers\sp_rsdrv2.sys 2008-09-09 02:30 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-09-09 02:30 --------- d-----w C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-09-08 02:03 --------- d-----w C:\Program Files\SpywareBlaster 2008-09-06 15:46 --------- d-----w C:\Program Files\AKProg 2008-09-03 20:25 --------- d-----w C:\Program Files\ACSPMonitor 2008-08-31 18:45 --------- d-----w C:\Documents and Settings\Owner.Olivier\Application Data\dvdcss 2008-08-18 22:44 --------- d-----w C:\Documents and Settings\Simon\Application Data\Audacity 2008-08-11 17:04 --------- d-----w C:\Documents and Settings\Simon\Application Data\LimeWire 2008-08-05 19:37 --------- d-----w C:\Documents and Settings\Simon\Application Data\FrostWire 2008-08-04 16:47 --------- d-----w C:\Program Files\Microsoft SQL Server Compact Edition 2008-08-02 03:22 --------- d-----w C:\Program Files\iTunes 2008-08-02 03:22 --------- d-----w C:\Program Files\iPod 2008-07-31 07:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help 2008-07-30 16:05 --------- d-----w C:\Program Files\Search Settings 2008-07-30 16:05 --------- d-----w C:\Documents and Settings\Owner.Olivier\Application Data\Search Settings 2008-07-29 23:59 --------- d-----w C:\Documents and Settings\Owner.Olivier\Application Data\ImgBurn 2008-07-28 15:30 --------- d-----w C:\Documents and Settings\Simon\Application Data\Dealio 2008-07-28 15:25 --------- d-----w C:\Program Files\YouTUBE (TM) movie downloader 2008-07-25 15:35 --------- d-----w C:\Program Files\QuickTime 2008-07-25 15:30 --------- d-----w C:\Program Files\Safari 2008-07-23 17:37 --------- d-----w C:\Program Files\Diablo II 2008-07-19 02:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll 2008-07-19 02:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe 2008-07-19 02:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll 2008-07-19 02:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll 2008-07-19 02:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll 2008-07-19 02:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll 2008-07-19 02:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll 2008-07-19 02:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll 2008-07-17 05:34 271,872 ----a-w C:\WINDOWS\system32\upx.exe 2007-09-13 01:02 47,360 ----a-w C:\Documents and Settings\Owner.Olivier\Application Data\pcouffin.sys . ------- Sigcheck ------- 2007-06-13 09:22 2716160 6f341b3ca16af1e82d1fd2a54177e997 C:\WINDOWS\explorer.exe 2007-06-13 09:10 1037312 b795475444d6d57a572c14b9e1a29839 C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe 2004-08-10 15:00 1884672 90e794c5d2d368686fe71b4a0354462c C:\WINDOWS\$NtUninstallKB938828$\explorer.exe 2008-04-13 22:34 1037824 f2317622d29f9ff0f88aeecd5f60f0dd C:\WINDOWS\SoftwareDistribution\Download\23ec66f2314a80d718b5483ab6e865af\explorer.exe 2007-06-13 09:22 2716160 6f341b3ca16af1e82d1fd2a54177e997 C:\WINDOWS\system32\dllcache\explorer.exe . ((((((((((((((((((((((((((((( snapshot@2008-09-13_19.49.46.46 ))))))))))))))))))))))))))))))))))))))))) . - 2005-08-19 21:10:54 8,704 -c--a-w C:\WINDOWS\assembly\GAC\Accessibility\1.0.3300.0__b03f5f7f11d50a3a\Accessibility.dll + 2008-09-20 07:08:43 8,704 ----a-w C:\WINDOWS\assembly\GAC\Accessibility\1.0.3300.0__b03f5f7f11d50a3a\Accessibility.dll - 2005-08-19 21:10:54 12,288 -c--a-w C:\WINDOWS\assembly\GAC\cscompmgd\7.0.3300.0__b03f5f7f11d50a3a\cscompmgd.dll + 2008-09-20 07:08:39 12,288 ----a-w C:\WINDOWS\assembly\GAC\cscompmgd\7.0.3300.0__b03f5f7f11d50a3a\cscompmgd.dll - 2005-08-19 21:10:54 34,816 -c--a-w C:\WINDOWS\assembly\GAC\CustomMarshalers\1.0.3300.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2008-09-20 07:08:42 34,816 ----a-w C:\WINDOWS\assembly\GAC\CustomMarshalers\1.0.3300.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2005-08-19 21:10:55 7,168 -c--a-w C:\WINDOWS\assembly\GAC\IEExecRemote\1.0.3300.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2008-09-20 07:08:55 7,168 ----a-w C:\WINDOWS\assembly\GAC\IEExecRemote\1.0.3300.0__b03f5f7f11d50a3a\IEExecRemote.dll - 2005-08-19 21:10:55 32,768 -c--a-w C:\WINDOWS\assembly\GAC\IEHost\1.0.3300.0__b03f5f7f11d50a3a\IEHost.dll + 2008-09-20 07:08:56 32,768 ----a-w C:\WINDOWS\assembly\GAC\IEHost\1.0.3300.0__b03f5f7f11d50a3a\IEHost.dll - 2005-08-19 21:10:55 4,096 -c--a-w C:\WINDOWS\assembly\GAC\IIEHost\1.0.3300.0__b03f5f7f11d50a3a\IIEHost.dll + 2008-09-20 07:08:56 4,096 ----a-w C:\WINDOWS\assembly\GAC\IIEHost\1.0.3300.0__b03f5f7f11d50a3a\IIEHost.dll - 2005-08-19 21:10:55 27,136 -c--a-w C:\WINDOWS\assembly\GAC\ISymWrapper\1.0.3300.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2008-09-20 07:08:57 27,136 ----a-w C:\WINDOWS\assembly\GAC\ISymWrapper\1.0.3300.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2005-08-19 21:10:54 712,704 -c--a-w C:\WINDOWS\assembly\GAC\Microsoft.JScript\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2008-09-20 07:08:39 712,704 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.JScript\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2005-08-19 21:10:54 28,672 -c--a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2008-09-20 07:08:38 28,672 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll - 2005-08-19 21:10:54 286,720 -c--a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualBasic\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2008-09-20 07:08:40 286,720 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualBasic\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2005-08-19 21:10:54 5,632 -c--a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualC\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualC.dll + 2008-09-20 07:08:40 5,632 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualC\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualC.dll - 2005-08-19 21:10:54 11,264 -c--a-w C:\WINDOWS\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2008-09-20 07:08:37 11,264 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2005-08-19 21:10:54 18,944 -c--a-w C:\WINDOWS\assembly\GAC\Microsoft.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2008-09-20 07:08:38 18,944 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll - 2005-08-19 21:10:54 6,656 -c--a-w C:\WINDOWS\assembly\GAC\Microsoft_VsaVb\7.0.3300.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2008-09-20 07:08:38 6,656 ----a-w C:\WINDOWS\assembly\GAC\Microsoft_VsaVb\7.0.3300.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll - 2005-08-19 21:10:55 1,564,672 -c--a-w C:\WINDOWS\assembly\GAC\mscorcfg\1.0.3300.0__b03f5f7f11d50a3a\mscorcfg.dll + 2008-09-20 07:08:57 1,564,672 ----a-w C:\WINDOWS\assembly\GAC\mscorcfg\1.0.3300.0__b03f5f7f11d50a3a\mscorcfg.dll - 2005-08-19 21:10:54 32,768 -c--a-w C:\WINDOWS\assembly\GAC\Regcode\1.0.3300.0__b03f5f7f11d50a3a\RegCode.dll + 2008-09-20 07:08:41 32,768 ----a-w C:\WINDOWS\assembly\GAC\Regcode\1.0.3300.0__b03f5f7f11d50a3a\RegCode.dll - 2005-08-19 21:10:54 77,824 -c--a-w C:\WINDOWS\assembly\GAC\System.Configuration.Install\1.0.3300.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2008-09-20 07:08:43 77,824 ----a-w C:\WINDOWS\assembly\GAC\System.Configuration.Install\1.0.3300.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2005-08-19 21:10:55 1,179,648 -c--a-w C:\WINDOWS\assembly\GAC\System.Data\1.0.3300.0__b77a5c561934e089\System.Data.dll + 2008-09-20 07:08:51 1,179,648 ----a-w C:\WINDOWS\assembly\GAC\System.Data\1.0.3300.0__b77a5c561934e089\System.Data.dll - 2005-08-19 21:10:55 1,695,744 -c--a-w C:\WINDOWS\assembly\GAC\System.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Design.dll + 2008-09-20 07:08:52 1,695,744 ----a-w C:\WINDOWS\assembly\GAC\System.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Design.dll - 2005-08-19 21:10:54 86,016 -c--a-w C:\WINDOWS\assembly\GAC\System.DirectoryServices\1.0.3300.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2008-09-20 07:08:44 86,016 ----a-w C:\WINDOWS\assembly\GAC\System.DirectoryServices\1.0.3300.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2005-08-19 21:10:54 65,536 -c--a-w C:\WINDOWS\assembly\GAC\System.Drawing.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2008-09-20 07:08:44 65,536 ----a-w C:\WINDOWS\assembly\GAC\System.Drawing.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.Design.dll - 2005-08-19 21:10:55 462,848 -c--a-w C:\WINDOWS\assembly\GAC\System.Drawing\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.dll + 2008-09-20 07:08:53 462,848 ----a-w C:\WINDOWS\assembly\GAC\System.Drawing\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.dll - 2005-08-19 21:10:54 212,992 -c--a-w C:\WINDOWS\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2008-09-20 07:08:41 212,992 ----a-w C:\WINDOWS\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2005-08-19 21:10:54 48,640 -c--a-w C:\WINDOWS\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll + 2008-09-20 07:08:41 48,640 ----a-w C:\WINDOWS\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll - 2005-08-19 21:10:55 352,256 -c--a-w C:\WINDOWS\assembly\GAC\System.Management\1.0.3300.0__b03f5f7f11d50a3a\System.Management.dll + 2008-09-20 07:08:58 352,256 ----a-w C:\WINDOWS\assembly\GAC\System.Management\1.0.3300.0__b03f5f7f11d50a3a\System.Management.dll - 2005-08-19 21:10:55 241,664 -c--a-w C:\WINDOWS\assembly\GAC\System.Messaging\1.0.3300.0__b03f5f7f11d50a3a\System.Messaging.dll + 2008-09-20 07:08:55 241,664 ----a-w C:\WINDOWS\assembly\GAC\System.Messaging\1.0.3300.0__b03f5f7f11d50a3a\System.Messaging.dll - 2005-08-19 21:10:55 311,296 -c--a-w C:\WINDOWS\assembly\GAC\System.Runtime.Remoting\1.0.3300.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2008-09-20 07:08:59 311,296 ----a-w C:\WINDOWS\assembly\GAC\System.Runtime.Remoting\1.0.3300.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2005-08-19 21:10:55 131,072 -c--a-w C:\WINDOWS\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.3300.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2008-09-20 07:08:59 131,072 ----a-w C:\WINDOWS\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.3300.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2005-08-19 21:10:54 77,824 -c--a-w C:\WINDOWS\assembly\GAC\System.Security\1.0.3300.0__b03f5f7f11d50a3a\System.Security.dll + 2008-09-20 07:08:42 77,824 ----a-w C:\WINDOWS\assembly\GAC\System.Security\1.0.3300.0__b03f5f7f11d50a3a\System.Security.dll - 2005-08-19 21:10:54 126,976 -c--a-w C:\WINDOWS\assembly\GAC\System.ServiceProcess\1.0.3300.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2008-09-20 07:08:45 126,976 ----a-w C:\WINDOWS\assembly\GAC\System.ServiceProcess\1.0.3300.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2005-08-19 21:10:54 61,440 -c--a-w C:\WINDOWS\assembly\GAC\System.Web.RegularExpressions\1.0.3300.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2008-09-20 07:08:46 61,440 ----a-w C:\WINDOWS\assembly\GAC\System.Web.RegularExpressions\1.0.3300.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll - 2005-08-19 21:10:54 507,904 -c--a-w C:\WINDOWS\assembly\GAC\System.Web.Services\1.0.3300.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2008-09-20 07:08:47 507,904 ----a-w C:\WINDOWS\assembly\GAC\System.Web.Services\1.0.3300.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2007-07-10 18:21:56 1,200,128 -c--a-w C:\WINDOWS\assembly\GAC\System.Web\1.0.3300.0__b03f5f7f11d50a3a\System.Web.dll + 2008-09-20 07:08:45 1,200,128 ----a-w C:\WINDOWS\assembly\GAC\System.Web\1.0.3300.0__b03f5f7f11d50a3a\System.Web.dll - 2005-08-19 21:10:54 2,002,944 -c--a-w C:\WINDOWS\assembly\GAC\System.Windows.Forms\1.0.3300.0__b77a5c561934e089\System.Windows.Forms.dll + 2008-09-20 07:08:48 2,002,944 ----a-w C:\WINDOWS\assembly\GAC\System.Windows.Forms\1.0.3300.0__b77a5c561934e089\System.Windows.Forms.dll - 2005-08-19 21:10:55 1,302,528 -c--a-w C:\WINDOWS\assembly\GAC\System.Xml\1.0.3300.0__b77a5c561934e089\System.Xml.dll + 2008-09-20 07:08:49 1,302,528 ----a-w C:\WINDOWS\assembly\GAC\System.Xml\1.0.3300.0__b77a5c561934e089\System.Xml.dll - 2005-08-19 21:10:55 1,179,648 -c--a-w C:\WINDOWS\assembly\GAC\System\1.0.3300.0__b77a5c561934e089\System.dll + 2008-09-20 07:08:54 1,179,648 ----a-w C:\WINDOWS\assembly\GAC\System\1.0.3300.0__b77a5c561934e089\System.dll + 2008-09-18 02:03:33 64,520 ----a-r C:\WINDOWS\Installer\{868EC13B-52DA-43B9-8C05-50CD897674DF}\IconWlc.exe + 2008-09-18 02:06:55 119,296 ----a-r C:\WINDOWS\Installer\{B229A0D2-F322-4A30-8E0F-F4AEA3000A14}\WLXPhotoGalleryIcon.exe + 2008-09-18 02:04:28 86,746 ----a-r C:\WINDOWS\Installer\{DA0FC90D-5D87-445E-90B4-B938C57FE16F}\wlmail.exe + 2008-09-18 02:04:11 29,926 ----a-r C:\WINDOWS\Installer\{F72F8316-91E8-4C80-9E39-EBE933E1EDFB}\MsblIco.Exe - 2007-06-15 08:12:42 1,044,992 ----a-w C:\WINDOWS\system32\BROWSEUI.DLL + 2004-08-10 19:00:00 1,017,344 ----a-w C:\WINDOWS\system32\browseui.dll - 2004-08-10 19:00:00 266,240 ----a-w C:\WINDOWS\system32\calc.exe + 2004-08-10 19:00:00 115,200 ----a-w C:\WINDOWS\system32\calc.exe - 2004-08-10 19:00:00 551,424 ----a-w C:\WINDOWS\system32\cleanmgr.exe + 2004-08-10 19:00:00 65,536 ----a-w C:\WINDOWS\system32\cleanmgr.exe - 2004-08-10 19:00:00 549,888 ----a-w C:\WINDOWS\system32\cmd.exe + 2004-08-10 19:00:00 400,896 ----a-w C:\WINDOWS\system32\cmd.exe - 2008-09-13 23:05:14 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat + 2008-09-19 05:02:57 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat - 2008-09-13 23:05:14 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat + 2008-09-19 05:02:57 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat + 2008-09-19 05:02:57 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat - 2004-08-10 19:00:00 218,112 ----a-w C:\WINDOWS\system32\console.dll + 2004-08-10 19:00:00 67,072 ----a-w C:\WINDOWS\system32\console.dll - 2004-08-10 19:00:00 336,896 ----a-w C:\WINDOWS\system32\credui.dll + 2004-08-10 19:00:00 165,888 ----a-w C:\WINDOWS\system32\credui.dll + 2004-08-04 06:10:08 53,248 ----a-w C:\WINDOWS\system32\dllcache\1394bus.sys + 2001-08-18 02:06:48 11,264 -c--a-w C:\WINDOWS\system32\dllcache\1394vdbg.sys + 2001-08-23 21:46:44 689,216 -c--a-w C:\WINDOWS\system32\dllcache\3dfxvs.dll + 2001-08-18 00:48:32 148,352 -c--a-w C:\WINDOWS\system32\dllcache\3dfxvsm.sys + 2004-08-04 03:00:04 12,288 ----a-w C:\WINDOWS\system32\dllcache\4mmdat.sys + 2004-08-04 03:10:12 48,128 ----a-w C:\WINDOWS\system32\dllcache\61883.sys + 2001-08-23 21:46:44 38,400 -c--a-w C:\WINDOWS\system32\dllcache\8514a.dll + 2001-08-23 21:46:58 98,304 -c--a-w C:\WINDOWS\system32\dllcache\a3d.dll + 2001-08-23 21:46:58 462,848 -c--a-w C:\WINDOWS\system32\dllcache\a3dapi.dll + 2004-08-10 19:00:00 26,624 -c--a-w C:\WINDOWS\system32\dllcache\aaaamon.dll + 2001-08-18 11:52:00 23,552 -c--a-w C:\WINDOWS\system32\dllcache\abp480n5.sys + 2004-08-04 02:32:22 231,552 -c--a-w C:\WINDOWS\system32\dllcache\ac97ali.sys + 2001-08-18 00:20:04 96,256 -c--a-w C:\WINDOWS\system32\dllcache\ac97intc.sys + 2001-08-18 00:20:16 297,728 -c--a-w C:\WINDOWS\system32\dllcache\ac97sis.sys + 2004-08-04 02:32:32 84,480 -c--a-w C:\WINDOWS\system32\dllcache\ac97via.sys + 2004-08-10 19:00:00 72,192 -c--a-w C:\WINDOWS\system32\dllcache\acctres.dll + 2004-08-10 19:00:00 189,952 ----a-w C:\WINDOWS\system32\dllcache\accwiz.exe + 2001-08-23 21:46:58 61,952 -c--a-w C:\WINDOWS\system32\dllcache\acerscad.dll + 2004-08-10 19:00:00 1,852,416 ----a-w C:\WINDOWS\system32\dllcache\acgenral.dll + 2004-08-10 19:00:00 450,048 ----a-w C:\WINDOWS\system32\dllcache\aclayers.dll + 2004-08-10 19:00:00 135,680 -c--a-w C:\WINDOWS\system32\dllcache\acledit.dll + 2004-08-10 19:00:00 137,728 ----a-w C:\WINDOWS\system32\dllcache\aclua.dll + 2004-08-10 19:00:00 119,296 ----a-w C:\WINDOWS\system32\dllcache\aclui.dll + 2004-08-10 19:00:00 188,672 ----a-w C:\WINDOWS\system32\dllcache\acpi.sys + 2004-08-10 19:00:00 12,032 -c--a-w C:\WINDOWS\system32\dllcache\acpiec.sys + 2004-08-10 19:00:00 244,736 ----a-w C:\WINDOWS\system32\dllcache\acspecfc.dll + 2004-08-10 19:00:00 194,048 ----a-w C:\WINDOWS\system32\dllcache\activeds.dll + 2004-08-10 19:00:00 4,096 ----a-w C:\WINDOWS\system32\dllcache\actmovie.exe + 2004-08-10 19:00:00 101,888 ----a-w C:\WINDOWS\system32\dllcache\actxprxy.dll + 2004-08-10 19:00:00 116,224 ----a-w C:\WINDOWS\system32\dllcache\acxtrnal.dll + 2001-08-18 01:53:02 7,424 -c--a-w C:\WINDOWS\system32\dllcache\adicvls.sys + 2001-08-18 00:11:18 20,160 -c--a-w C:\WINDOWS\system32\dllcache\adm8511.sys + 2001-08-18 00:19:10 584,448 -c--a-w C:\WINDOWS\system32\dllcache\adm8810.sys + 2001-08-18 00:19:14 553,984 -c--a-w C:\WINDOWS\system32\dllcache\adm8820.sys + 2001-08-18 00:19:14 747,392 -c--a-w C:\WINDOWS\system32\dllcache\adm8830.sys + 2004-08-10 19:00:00 29,696 ----a-w C:\WINDOWS\system32\dllcache\admexs.dll + 2003-03-24 19:52:04 20,540 ----a-w C:\WINDOWS\system32\dllcache\admin.dll + 2003-03-24 19:52:04 16,439 ----a-w C:\WINDOWS\system32\dllcache\admin.exe + 2004-08-04 02:32:24 10,880 -c--a-w C:\WINDOWS\system32\dllcache\admjoy.sys + 2004-08-10 19:00:00 43,520 ----a-w C:\WINDOWS\system32\dllcache\admwprox.dll + 2004-08-10 19:00:00 6,144 -c--a-w C:\WINDOWS\system32\dllcache\admxprox.dll + 2004-08-10 19:00:00 26,112 -c--a-w C:\WINDOWS\system32\dllcache\adptif.dll + 2001-08-18 00:11:16 46,112 -c--a-w C:\WINDOWS\system32\dllcache\adptsf50.sys + 2001-08-18 12:07:32 101,888 -c--a-w C:\WINDOWS\system32\dllcache\adpu160m.sys + 2004-08-10 19:00:00 50,176 -c--a-w C:\WINDOWS\system32\dllcache\adrot.dll + 2004-08-10 19:00:00 290,816 ----a-w C:\WINDOWS\system32\dllcache\adsiis51.dll + 2004-08-10 19:00:00 175,616 ----a-w C:\WINDOWS\system32\dllcache\adsldp.dll + 2004-08-10 19:00:00 143,360 ----a-w C:\WINDOWS\system32\dllcache\adsldpc.dll + 2004-08-10 19:00:00 68,096 ----a-w C:\WINDOWS\system32\dllcache\adsmsext.dll + 2004-08-10 19:00:00 163,328 -c--a-w C:\WINDOWS\system32\dllcache\adsnds.dll + 2004-08-10 19:00:00 263,680 ----a-w C:\WINDOWS\system32\dllcache\adsnt.dll + 2004-08-10 19:00:00 109,568 ----a-w C:\WINDOWS\system32\dllcache\adsnw.dll + 2004-08-04 04:54:22 4,255 ----a-w C:\WINDOWS\system32\dllcache\adv01nt5.dll + 2004-08-04 04:54:22 3,967 ----a-w C:\WINDOWS\system32\dllcache\adv02nt5.dll + 2004-08-04 04:54:22 3,615 ----a-w C:\WINDOWS\system32\dllcache\adv05nt5.dll + 2004-08-04 04:54:22 3,647 ----a-w C:\WINDOWS\system32\dllcache\adv07nt5.dll + 2004-08-04 04:54:22 3,135 ----a-w C:\WINDOWS\system32\dllcache\adv08nt5.dll + 2004-08-04 04:54:22 3,711 ----a-w C:\WINDOWS\system32\dllcache\adv09nt5.dll + 2004-08-04 04:54:22 3,775 ----a-w C:\WINDOWS\system32\dllcache\adv11nt5.dll + 2004-08-10 19:00:00 685,056 ----a-w C:\WINDOWS\system32\dllcache\advapi32.dll + 2004-08-10 19:00:00 24,064 ----a-w C:\WINDOWS\system32\dllcache\agentanm.dll + 2004-08-10 19:00:00 214,016 ----a-w C:\WINDOWS\system32\dllcache\agentctl.dll + 2004-08-10 19:00:00 49,152 ----a-w C:\WINDOWS\system32\dllcache\agentmpx.dll + 2004-08-10 19:00:00 24,064 ----a-w C:\WINDOWS\system32\dllcache\agentpsh.dll + 2004-08-10 19:00:00 44,032 ----a-w C:\WINDOWS\system32\dllcache\agentsr.dll + 2004-08-04 13:07:42 42,368 ----a-w C:\WINDOWS\system32\dllcache\agp440.sys + 2004-08-04 13:07:44 44,928 ----a-w C:\WINDOWS\system32\dllcache\agpcpq.sys + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt0401.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt0404.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt0405.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt0406.dll + 2004-08-10 19:00:00 21,504 ----a-w C:\WINDOWS\system32\dllcache\agt0407.dll + 2004-08-10 19:00:00 22,016 ----a-w C:\WINDOWS\system32\dllcache\agt0408.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt0409.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt040b.dll + 2004-08-10 19:00:00 21,504 ----a-w C:\WINDOWS\system32\dllcache\agt040c.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt040d.dll + 2004-08-10 19:00:00 19,968 ----a-w C:\WINDOWS\system32\dllcache\agt040e.dll + 2004-08-10 19:00:00 20,992 ----a-w C:\WINDOWS\system32\dllcache\agt0410.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt0411.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt0412.dll + 2004-08-10 19:00:00 20,992 ----a-w C:\WINDOWS\system32\dllcache\agt0413.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt0414.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt0415.dll + 2004-08-10 19:00:00 20,480 ----a-w C:\WINDOWS\system32\dllcache\agt0416.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt0419.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt041d.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt041f.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\agt0804.dll + 2004-08-10 19:00:00 20,992 ----a-w C:\WINDOWS\system32\dllcache\agt0816.dll + 2004-08-10 19:00:00 20,480 ----a-w C:\WINDOWS\system32\dllcache\agt0c0a.dll + 2004-08-10 19:00:00 24,064 ----a-w C:\WINDOWS\system32\dllcache\agtintl.dll + 2001-08-18 11:52:02 12,800 -c--a-w C:\WINDOWS\system32\dllcache\aha154x.sys + 2004-08-10 19:00:00 98,304 ----a-w C:\WINDOWS\system32\dllcache\ahui.exe + 2001-08-18 12:07:36 55,168 -c--a-w C:\WINDOWS\system32\dllcache\aic78u2.sys + 2001-08-18 12:07:38 56,960 -c--a-w C:\WINDOWS\system32\dllcache\aic78xx.sys + 2004-08-10 19:00:00 44,544 ----a-w C:\WINDOWS\system32\dllcache\alg.exe + 2001-08-18 00:11:18 27,678 -c--a-w C:\WINDOWS\system32\dllcache\ali5261.sys + 2001-08-18 01:49:02 26,624 -c--a-w C:\WINDOWS\system32\dllcache\alifir.sys + 2001-08-18 11:51:56 5,248 -c--a-w C:\WINDOWS\system32\dllcache\aliide.sys + 2004-08-04 13:07:42 42,752 ----a-w C:\WINDOWS\system32\dllcache\alim1541.sys + 2004-08-10 19:00:00 17,408 ----a-w C:\WINDOWS\system32\dllcache\alrsvc.dll + 2001-08-18 00:11:20 16,969 -c--a-w C:\WINDOWS\system32\dllcache\amb8002.sys + 2004-08-04 13:07:44 43,008 ----a-w C:\WINDOWS\system32\dllcache\amdagp.sys + 2004-08-10 19:00:00 41,216 ----a-w C:\WINDOWS\system32\dllcache\amdk6.sys + 2004-08-10 19:00:00 41,600 ----a-w C:\WINDOWS\system32\dllcache\amdk7.sys + 2001-08-18 11:52:04 12,032 -c--a-w C:\WINDOWS\system32\dllcache\amsint.sys + 2004-08-10 19:00:00 70,656 ----a-w C:\WINDOWS\system32\dllcache\amstream.dll + 2004-08-04 02:31:20 36,224 -c--a-w C:\WINDOWS\system32\dllcache\an983.sys + 2004-08-10 19:00:00 9,037 -c--a-w C:\WINDOWS\system32\dllcache\ansi.sys + 2004-08-10 19:00:00 102,912 -c--a-w C:\WINDOWS\system32\dllcache\apcups.dll + 2001-08-18 01:47:22 6,272 -c--a-w C:\WINDOWS\system32\dllcache\apmbatt.sys + 2004-08-10 19:00:00 110,080 ----a-w C:\WINDOWS\system32\dllcache\appconf.dll + 2004-08-10 19:00:00 12,642 -c--a-w C:\WINDOWS\system32\dllcache\append.exe + 2004-08-10 19:00:00 126,976 ----a-w C:\WINDOWS\system32\dllcache\apphelp.dll + 2004-08-10 19:00:00 176,640 ----a-w C:\WINDOWS\system32\dllcache\appmgmts.dll + 2004-08-10 19:00:00 302,592 ----a-w C:\WINDOWS\system32\dllcache\appmgr.dll + 2004-08-10 19:00:00 334,336 ----a-w C:\WINDOWS\system32\dllcache\aqueue.dll + 2004-08-10 19:00:00 19,968 -c--a-w C:\WINDOWS\system32\dllcache\arp.exe + 2004-08-10 19:00:00 60,800 ----a-w C:\WINDOWS\system32\dllcache\arp1394.sys + 2001-08-18 11:52:00 26,496 -c--a-w C:\WINDOWS\system32\dllcache\asc.sys + 2001-08-18 11:52:04 22,400 -c--a-w C:\WINDOWS\system32\dllcache\asc3350p.sys + 2001-08-18 11:51:58 14,848 -c--a-w C:\WINDOWS\system32\dllcache\asc3550.sys + 2004-08-10 19:00:00 377,344 ----a-w C:\WINDOWS\system32\dllcache\asp51.dll + 2001-08-18 00:12:34 97,354 -c--a-w C:\WINDOWS\system32\dllcache\aspndis3.sys + 2004-08-10 19:00:00 10,240 -c--a-w C:\WINDOWS\system32\dllcache\aspperf.dll + 2004-08-10 19:00:00 29,184 -c--a-w C:\WINDOWS\system32\dllcache\asptxn.dll + 2004-08-10 19:00:00 30,720 ----a-w C:\WINDOWS\system32\dllcache\asr_fmt.exe + 2004-08-10 19:00:00 37,888 -c--a-w C:\WINDOWS\system32\dllcache\asr_ldm.exe + 2004-08-10 19:00:00 32,768 ----a-w C:\WINDOWS\system32\dllcache\asr_pfu.exe + 2004-08-10 19:00:00 65,024 ----a-w C:\WINDOWS\system32\dllcache\asycfilt.dll + 2004-08-10 19:00:00 14,336 ----a-w C:\WINDOWS\system32\dllcache\asyncmac.sys + 2004-08-10 19:00:00 25,088 ----a-w C:\WINDOWS\system32\dllcache\at.exe + 2004-08-04 12:59:44 95,360 ----a-w C:\WINDOWS\system32\dllcache\atapi.sys + 2001-08-23 21:46:44 96,128 -c--a-w C:\WINDOWS\system32\dllcache\ati.dll + 2001-08-23 20:59:32 77,824 -c--a-w C:\WINDOWS\system32\dllcache\ati.sys + 2004-08-04 02:29:30 56,623 -c--a-w C:\WINDOWS\system32\dllcache\ati1btxx.sys + 2004-08-04 02:29:30 11,615 -c--a-w C:\WINDOWS\system32\dllcache\ati1mdxx.sys + 2004-08-04 02:29:30 12,047 -c--a-w C:\WINDOWS\system32\dllcache\ati1pdxx.sys + 2004-08-04 02:29:32 30,671 -c--a-w C:\WINDOWS\system32\dllcache\ati1raxx.sys + 2004-08-04 02:29:32 63,663 -c--a-w C:\WINDOWS\system32\dllcache\ati1rvxx.sys + 2004-08-04 02:29:32 26,367 -c--a-w C:\WINDOWS\system32\dllcache\ati1snxx.sys + 2004-08-04 02:29:32 21,343 -c--a-w C:\WINDOWS\system32\dllcache\ati1ttxx.sys + 2004-08-04 02:29:32 36,463 -c--a-w C:\WINDOWS\system32\dllcache\ati1tuxx.sys + 2004-08-04 02:29:32 29,455 -c--a-w C:\WINDOWS\system32\dllcache\ati1xbxx.sys + 2004-08-04 02:29:32 34,735 -c--a-w C:\WINDOWS\system32\dllcache\ati1xsxx.sys + 2004-08-04 04:54:22 229,376 ----a-w C:\WINDOWS\system32\dllcache\ati2cqag.dll + 2004-08-04 04:54:22 377,984 ----a-w C:\WINDOWS\system32\dllcache\ati2dvaa.dll + 2004-08-04 04:54:22 201,728 ----a-w C:\WINDOWS\system32\dllcache\ati2dvag.dll + 2004-08-04 04:38:42 327,168 -c--a-w C:\WINDOWS\system32\dllcache\ati2mtaa.sys + 2004-08-04 04:38:44 701,440 -c--a-w C:\WINDOWS\system32\dllcache\ati2mtag.sys + 2004-08-04 04:54:22 870,784 ----a-w C:\WINDOWS\system32\dllcache\ati3d1ag.dll + 2004-08-04 04:54:22 1,888,992 ----a-w C:\WINDOWS\system32\dllcache\ati3duag.dll + 2001-08-18 00:49:04 46,464 -c--a-w C:\WINDOWS\system32\dllcache\atibt829.sys + 2001-08-23 21:46:44 382,592 -c--a-w C:\WINDOWS\system32\dllcache\atidrab.dll + 2001-08-23 21:46:44 137,216 -c--a-w C:\WINDOWS\system32\dllcache\atidrae.dll + 2001-08-23 21:46:44 268,160 -c--a-w C:\WINDOWS\system32\dllcache\atidvai.dll + 2001-08-23 21:47:26 37,376 -c--a-w C:\WINDOWS\system32\dllcache\atievxx.exe + 2001-08-23 20:59:36 289,920 -c--a-w C:\WINDOWS\system32\dllcache\atimpab.sys + 2001-08-23 20:59:36 75,392 -c--a-w C:\WINDOWS\system32\dllcache\atimpae.sys + 2001-08-23 20:59:38 281,728 -c--a-w C:\WINDOWS\system32\dllcache\atimtai.sys + 2004-08-04 02:29:28 57,856 -c--a-w C:\WINDOWS\system32\dllcache\atinbtxx.sys + 2004-08-04 02:29:30 13,824 -c--a-w C:\WINDOWS\system32\dllcache\atinmdxx.sys + 2004-08-04 02:29:30 14,336 -c--a-w C:\WINDOWS\system32\dllcache\atinpdxx.sys + 2004-08-04 02:29:30 52,224 -c--a-w C:\WINDOWS\system32\dllcache\atinraxx.sys + 2004-08-04 02:29:32 104,960 -c--a-w C:\WINDOWS\system32\dllcache\atinrvxx.sys + 2004-08-04 02:29:32 28,672 -c--a-w C:\WINDOWS\system32\dllcache\atinsnxx.sys + 2004-08-04 02:29:32 13,824 -c--a-w C:\WINDOWS\system32\dllcache\atinttxx.sys + 2004-08-04 02:29:32 73,216 -c--a-w C:\WINDOWS\system32\dllcache\atintuxx.sys + 2004-08-04 02:29:32 31,744 -c--a-w C:\WINDOWS\system32\dllcache\atinxbxx.sys + 2004-08-04 02:29:32 63,488 -c--a-w C:\WINDOWS\system32\dllcache\atinxsxx.sys + 2001-08-18 00:49:36 10,240 -c--a-w C:\WINDOWS\system32\dllcache\atipcxxx.sys + 2001-08-23 21:46:44 104,832 -c--a-w C:\WINDOWS\system32\dllcache\atiraged.dll + 2001-08-23 20:59:40 70,784 -c--a-w C:\WINDOWS\system32\dllcache\atiragem.sys + 2001-08-18 00:49:12 49,920 -c--a-w C:\WINDOWS\system32\dllcache\atirtcap.sys + 2001-08-18 00:49:18 26,880 -c--a-w C:\WINDOWS\system32\dllcache\atirtsnd.sys + 2001-08-18 00:49:22 17,152 -c--a-w C:\WINDOWS\system32\dllcache\atitunep.sys + 2001-08-18 00:49:28 17,152 -c--a-w C:\WINDOWS\system32\dllcache\atitvsnd.sys + 2001-08-18 00:49:38 9,472 -c--a-w C:\WINDOWS\system32\dllcache\ativmdcd.sys + 2004-08-04 04:54:22 32,768 ----a-w C:\WINDOWS\system32\dllcache\ativtmxx.dll + 2001-08-18 00:49:44 19,456 -c--a-w C:\WINDOWS\system32\dllcache\ativttxx.sys + 2004-08-04 04:54:22 516,768 ----a-w C:\WINDOWS\system32\dllcache\ativvaxx.dll + 2001-08-18 00:49:48 26,624 -c--a-w C:\WINDOWS\system32\dllcache\ativxbar.sys + 2001-08-18 00:49:34 23,552 -c--a-w C:\WINDOWS\system32\dllcache\atixbar.sys + 2004-08-10 19:00:00 14,336 -c--a-w C:\WINDOWS\system32\dllcache\atkctrs.dll + 2004-08-10 19:00:00 58,880 ----a-w C:\WINDOWS\system32\dllcache\atl.dll + 2004-08-10 19:00:00 11,264 ----a-w C:\WINDOWS\system32\dllcache\atmadm.exe + 2004-08-10 19:00:00 59,904 ----a-w C:\WINDOWS\system32\dllcache\atmarpc.sys + 2004-08-10 19:00:00 31,360 -c--a-w C:\WINDOWS\system32\dllcache\atmepvc.sys + 2004-08-10 19:00:00 285,696 ----a-w C:\WINDOWS\system32\dllcache\atmfd.dll + 2004-08-10 19:00:00 55,936 ----a-w C:\WINDOWS\system32\dllcache\atmlane.sys + 2004-08-10 19:00:00 30,208 ----a-w C:\WINDOWS\system32\dllcache\atmlib.dll + 2004-08-10 19:00:00 34,816 -c--a-w C:\WINDOWS\system32\dllcache\atmpvcno.dll + 2004-08-10 19:00:00 352,256 -c--a-w C:\WINDOWS\system32\dllcache\atmuni.sys + 2004-08-10 19:00:00 11,264 -c--a-w C:\WINDOWS\system32\dllcache\atrace.dll + 2004-08-10 19:00:00 11,264 ----a-w C:\WINDOWS\system32\dllcache\attrib.exe + 2004-08-04 04:54:22 21,183 ----a-w C:\WINDOWS\system32\dllcache\atv01nt5.dll + 2004-08-04 04:54:22 11,359 ----a-w C:\WINDOWS\system32\dllcache\atv02nt5.dll + 2004-08-04 04:54:22 25,471 ----a-w C:\WINDOWS\system32\dllcache\atv04nt5.dll + 2004-08-04 04:54:22 14,143 ----a-w C:\WINDOWS\system32\dllcache\atv06nt5.dll + 2004-08-04 04:54:22 17,279 ----a-w C:\WINDOWS\system32\dllcache\atv10nt5.dll + 2004-08-10 19:00:00 42,496 ----a-w C:\WINDOWS\system32\dllcache\audiosrv.dll + 2004-08-10 19:00:00 14,336 ----a-w C:\WINDOWS\system32\dllcache\auditusr.exe + 2001-08-18 04:59:44 3,072 -c--a-w C:\WINDOWS\system32\dllcache\audstub.sys + 2004-08-10 19:00:00 9,216 -c--a-w C:\WINDOWS\system32\dllcache\authfilt.dll + 2003-03-24 19:52:04 20,540 ----a-w C:\WINDOWS\system32\dllcache\author.dll + 2003-03-24 19:52:04 16,439 ----a-w C:\WINDOWS\system32\dllcache\author.exe + 2005-03-02 18:10:36 56,832 ----a-w C:\WINDOWS\system32\dllcache\authz.dll + 2004-08-10 19:00:00 625,152 ----a-w C:\WINDOWS\system32\dllcache\autochk.exe + 2004-08-10 19:00:00 638,976 ----a-w C:\WINDOWS\system32\dllcache\autoconv.exe + 2004-08-10 19:00:00 81,408 -c--a-w C:\WINDOWS\system32\dllcache\autodisc.dll + 2004-08-10 19:00:00 616,960 ----a-w C:\WINDOWS\system32\dllcache\autofmt.exe + 2004-08-10 19:00:00 11,264 ----a-w C:\WINDOWS\system32\dllcache\autolfn.exe + 2004-08-04 03:10:12 38,912 ----a-w C:\WINDOWS\system32\dllcache\avc.sys + 2001-08-18 02:01:12 36,096 -c--a-w C:\WINDOWS\system32\dllcache\avcaudio.sys + 2004-08-04 03:10:00 13,696 ----a-w C:\WINDOWS\system32\dllcache\avcstrm.sys + 2004-08-10 19:00:00 70,352 -c--a-w C:\WINDOWS\system32\dllcache\avicap.dll + 2004-08-10 19:00:00 66,048 -c--a-w C:\WINDOWS\system32\dllcache\avicap32.dll + 2004-08-10 19:00:00 85,504 ----a-w C:\WINDOWS\system32\dllcache\avifil32.dll + 2004-08-10 19:00:00 109,568 -c--a-w C:\WINDOWS\system32\dllcache\avifile.dll + 2001-08-23 21:46:58 87,552 -c--a-w C:\WINDOWS\system32\dllcache\avmcoxp.dll + 2001-08-23 21:46:58 144,384 -c--a-w C:\WINDOWS\system32\dllcache\avmenum.dll + 2004-08-10 19:00:00 16,384 -c--a-w C:\WINDOWS\system32\dllcache\avmeter.dll + 2001-08-18 00:13:48 37,568 -c--a-w C:\WINDOWS\system32\dllcache\avmwan.sys + 2004-08-10 19:00:00 232,960 -c--a-w C:\WINDOWS\system32\dllcache\avtapi.dll + 2004-08-10 19:00:00 73,216 -c--a-w C:\WINDOWS\system32\dllcache\avwav.dll + 2001-08-18 00:19:16 36,992 -c--a-w C:\WINDOWS\system32\dllcache\aztw2320.sys + 2001-08-18 00:13:56 89,952 -c--a-w C:\WINDOWS\system32\dllcache\b1cbase.sys + 2001-08-23 21:00:08 97,248 -c--a-w C:\WINDOWS\system32\dllcache\b57xp32.sys + 2001-08-23 21:46:44 342,336 -c--a-w C:\WINDOWS\system32\dllcache\banshee.dll + 2001-08-18 00:48:28 36,128 -c--a-w C:\WINDOWS\system32\dllcache\banshee.sys + 2004-08-10 19:00:00 52,736 ----a-w C:\WINDOWS\system32\dllcache\basesrv.dll + 2004-08-10 19:00:00 28,672 ----a-w C:\WINDOWS\system32\dllcache\batmeter.dll + 2004-08-10 19:00:00 8,704 ----a-w C:\WINDOWS\system32\dllcache\batt.dll + 2001-08-18 01:57:54 14,080 ----a-w C:\WINDOWS\system32\dllcache\battc.sys + 2004-08-10 19:00:00 82,501 -c--a-w C:\WINDOWS\system32\dllcache\bckg.dll + 2004-08-10 19:00:00 1,817,687 -c--a-w C:\WINDOWS\system32\dllcache\bckgres.dll + 2004-08-10 19:00:00 42,577 -c--a-w C:\WINDOWS\system32\dllcache\bckgzm.exe + 2001-08-18 00:11:28 66,557 -c--a-w C:\WINDOWS\system32\dllcache\bcm42u.sys + 2001-08-18 00:11:26 54,271 -c--a-w C:\WINDOWS\system32\dllcache\bcm42xx5.sys + 2001-08-18 00:11:30 26,568 -c--a-w C:\WINDOWS\system32\dllcache\bcm4e5.sys + 2004-08-04 03:10:14 11,776 ----a-w C:\WINDOWS\system32\dllcache\bdasup.sys + 2004-08-10 19:00:00 4,224 -c--a-w C:\WINDOWS\system32\dllcache\beep.sys + 2004-08-10 19:00:00 17,408 ----a-w C:\WINDOWS\system32\dllcache\bidispl.dll + 2001-08-23 21:46:58 105,472 -c--a-w C:\WINDOWS\system32\dllcache\binlsvc.dll + 2004-08-10 19:00:00 8,192 ----a-w C:\WINDOWS\system32\dllcache\bitsprx2.dll + 2004-08-10 19:00:00 7,168 ----a-w C:\WINDOWS\system32\dllcache\bitsprx3.dll + 2006-10-19 01:47:10 542,720 -c--a-w C:\WINDOWS\system32\dllcache\blackbox.dll + 2004-08-10 19:00:00 71,680 ----a-w C:\WINDOWS\system32\dllcache\blastcln.exe + 2004-08-10 19:00:00 152,576 -c--a-w C:\WINDOWS\system32\dllcache\bnts.dll + 2004-08-10 19:00:00 152,064 ----a-w C:\WINDOWS\system32\dllcache\bootcfg.exe + 2004-08-10 19:00:00 4,608 -c--a-w C:\WINDOWS\system32\dllcache\bootok.exe + 2004-08-10 19:00:00 12,288 -c--a-w C:\WINDOWS\system32\dllcache\bootvid.dll + 2004-08-10 19:00:00 5,120 -c--a-w C:\WINDOWS\system32\dllcache\bootvrfy.exe + 2001-08-23 21:46:58 19,456 -c--a-w C:\WINDOWS\system32\dllcache\brbidiif.dll + 2001-08-23 21:46:58 9,728 -c--a-w C:\WINDOWS\system32\dllcache\brcoinst.dll + 2001-08-23 21:46:58 12,800 -c--a-w C:\WINDOWS\system32\dllcache\brevif.dll + 2001-08-18 01:12:12 2,944 -c--a-w C:\WINDOWS\system32\dllcache\brfilt.sys + 2001-08-18 01:12:22 12,160 -c--a-w C:\WINDOWS\system32\dllcache\brfiltlo.sys + 2001-08-18 01:12:24 3,968 -c--a-w C:\WINDOWS\system32\dllcache\brfiltup.sys + 2004-08-10 19:00:00 71,552 ----a-w C:\WINDOWS\system32\dllcache\bridge.sys + 2001-08-23 21:46:58 15,360 -c--a-w C:\WINDOWS\system32\dllcache\brmfbidi.dll + 2001-08-23 21:46:58 81,920 -c--a-w C:\WINDOWS\system32\dllcache\brmfcwia.dll + 2001-08-23 21:46:58 29,696 -c--a-w C:\WINDOWS\system32\dllcache\brmflpt.dll + 2001-08-23 21:47:30 32,256 -c--a-w C:\WINDOWS\system32\dllcache\brmfrsmg.exe + 2001-08-23 21:46:58 41,472 -c--a-w C:\WINDOWS\system32\dllcache\brmfusb.dll + 2004-08-10 19:00:00 45,568 -c--a-w C:\WINDOWS\system32\dllcache\browscap.dll + 2004-08-10 19:00:00 70,144 ----a-w C:\WINDOWS\system32\dllcache\browselc.dll + 2004-08-10 19:00:00 77,312 ----a-w C:\WINDOWS\system32\dllcache\browser.dll - 2007-06-15 08:12:42 1,044,992 -c--a-w C:\WINDOWS\system32\dllcache\browseui.dll + 2004-08-10 19:00:00 1,017,344 ----a-w C:\WINDOWS\system32\dllcache\browseui.dll + 2004-08-10 19:00:00 78,336 ----a-w C:\WINDOWS\system32\dllcache\browsewm.dll + 2001-08-18 01:12:24 3,168 -c--a-w C:\WINDOWS\system32\dllcache\brparimg.sys + 2001-08-23 21:01:54 39,808 -c--a-w C:\WINDOWS\system32\dllcache\brparwdm.sys + 2004-08-10 19:00:00 21,504 -c--a-w C:\WINDOWS\system32\dllcache\brpinfo.dll + 2001-08-23 21:46:58 5,120 -c--a-w C:\WINDOWS\system32\dllcache\brscnrsm.dll + 2001-08-23 21:46:58 9,728 -c--a-w C:\WINDOWS\system32\dllcache\brserif.dll + 2001-08-18 01:12:20 60,416 -c--a-w C:\WINDOWS\system32\dllcache\brserwdm.sys + 2001-08-18 01:12:20 11,008 -c--a-w C:\WINDOWS\system32\dllcache\brusbmdm.sys + 2001-08-18 01:12:22 10,368 -c--a-w C:\WINDOWS\system32\dllcache\brusbscn.sys + 2001-08-18 00:11:24 31,529 -c--a-w C:\WINDOWS\system32\dllcache\brzwlan.sys + 2004-08-10 19:00:00 20,992 ----a-w C:\WINDOWS\system32\dllcache\bthci.dll + 2004-08-04 03:10:40 17,024 ----a-w C:\WINDOWS\system32\dllcache\bthenum.sys + 2004-08-04 03:10:40 38,016 ----a-w C:\WINDOWS\system32\dllcache\bthmodem.sys + 2004-08-04 02:58:40 100,992 ----a-w C:\WINDOWS\system32\dllcache\bthpan.sys + 2004-08-04 03:10:38 35,456 ----a-w C:\WINDOWS\system32\dllcache\bthprint.sys + 2004-08-10 19:00:00 30,208 ----a-w C:\WINDOWS\system32\dllcache\bthserv.dll + 2004-08-04 03:10:36 18,944 ----a-w C:\WINDOWS\system32\dllcache\bthusb.sys + 2004-08-10 19:00:00 50,688 ----a-w C:\WINDOWS\system32\dllcache\btpanui.dll + 2001-08-23 21:02:02 14,080 -c--a-w C:\WINDOWS\system32\dllcache\bulltlp3.sys + 2004-08-10 19:00:00 218,112 ----a-w C:\WINDOWS\system32\dllcache\c_g18030.dll + 2004-08-10 19:00:00 6,656 -c--a-w C:\WINDOWS\system32\dllcache\c_is2022.dll + 2004-08-10 19:00:00 10,752 -c--a-w C:\WINDOWS\system32\dllcache\c_iscii.dll + 2004-08-10 19:00:00 59,904 ----a-w C:\WINDOWS\system32\dllcache\cabinet.dll + 2004-08-10 19:00:00 85,504 ----a-w C:\WINDOWS\system32\dllcache\cabview.dll + 2004-08-10 19:00:00 19,456 ----a-w C:\WINDOWS\system32\dllcache\cacls.exe + 2004-08-10 19:00:00 115,200 -c--a-w C:\WINDOWS\system32\dllcache\calc.exe + 2004-08-10 19:00:00 385,024 ----a-w C:\WINDOWS\system32\dllcache\callcont.dll + 2001-08-18 02:05:48 314,752 -c--a-w C:\WINDOWS\system32\dllcache\camdro21.sys + 2001-08-18 02:04:46 223,232 -c--a-w C:\WINDOWS\system32\dllcache\camdrv21.sys + 2001-08-18 02:04:48 171,264 -c--a-w C:\WINDOWS\system32\dllcache\camdrv30.sys + 2001-08-23 21:47:00 74,240 -c--a-w C:\WINDOWS\system32\dllcache\camexo20.dll + 2001-08-23 21:47:00 236,032 -c--a-w C:\WINDOWS\system32\dllcache\camext20.dll + 2001-08-23 21:47:00 119,296 ----a-w C:\WINDOWS\system32\dllcache\camext30.dll + 2004-08-10 19:00:00 50,688 ----a-w C:\WINDOWS\system32\dllcache\camocx.dll + 2004-08-10 19:00:00 54,528 -c--a-w C:\WINDOWS\system32\dllcache\cap7146.sys + 2004-08-10 19:00:00 146,432 ----a-w C:\WINDOWS\system32\dllcache\capesnpn.dll + 2004-08-10 19:00:00 359,936 -c--a-w C:\WINDOWS\system32\dllcache\cards.dll + 2005-07-26 04:39:54 225,792 ----a-w C:\WINDOWS\system32\dllcache\catsrv.dll + 2004-08-10 19:00:00 85,504 ----a-w C:\WINDOWS\system32\dllcache\catsrvps.dll + 2005-07-26 04:39:54 625,152 ----a-w C:\WINDOWS\system32\dllcache\catsrvut.dll + 2001-08-18 00:12:16 37,916 -c--a-w C:\WINDOWS\system32\dllcache\cb102.sys + 2004-08-10 19:00:00 12,288 -c--a-w C:\WINDOWS\system32\dllcache\cb32.exe + 2001-08-18 00:12:42 39,680 -c--a-w C:\WINDOWS\system32\dllcache\cb325.sys + 2001-08-18 00:13:14 46,108 -c--a-w C:\WINDOWS\system32\dllcache\cben5.sys + 2001-08-18 11:52:08 13,952 -c--a-w C:\WINDOWS\system32\dllcache\cbidf2k.sys + 2001-08-23 21:03:10 715,466 -c--a-w C:\WINDOWS\system32\dllcache\cbmdmkxx.sys + 2004-08-10 19:00:00 27,648 -c--a-w C:\WINDOWS\system32\dllcache\ccfgnt.dll + 2001-08-18 11:52:06 7,680 -c--a-w C:\WINDOWS\system32\dllcache\cd20xrnt.sys + 2004-08-10 19:00:00 18,688 -c--a-w C:\WINDOWS\system32\dllcache\cdaudio.sys + 2004-08-10 19:00:00 63,744 ----a-w C:\WINDOWS\system32\dllcache\cdfs.sys + 2004-08-10 19:00:00 15,872 -c--a-w C:\WINDOWS\system32\dllcache\cdmodem.dll + 2005-09-10 01:55:14 2,067,968 ----a-w C:\WINDOWS\system32\dllcache\cdosys.dll + 2004-08-10 19:00:00 49,536 ----a-w C:\WINDOWS\system32\dllcache\cdrom.sys + 2001-08-23 21:03:18 21,530 -c--a-w C:\WINDOWS\system32\dllcache\ce2n5.sys + 2001-08-23 21:03:18 27,164 -c--a-w C:\WINDOWS\system32\dllcache\ce3n5.sys + 2001-08-23 21:03:18 22,556 -c--a-w C:\WINDOWS\system32\dllcache\cem28n5.sys + 2001-08-23 21:03:20 22,556 -c--a-w C:\WINDOWS\system32\dllcache\cem33n5.sys + 2001-08-23 21:03:20 49,182 -c--a-w C:\WINDOWS\system32\dllcache\cem56n5.sys + 2004-08-10 19:00:00 200,192 ----a-w C:\WINDOWS\system32\dllcache\certcli.dll + 2004-08-10 19:00:00 467,968 ----a-w C:\WINDOWS\system32\dllcache\certmgr.dll + 2006-10-19 01:47:10 229,376 -c--a-w C:\WINDOWS\system32\dllcache\cewmdm.dll + 2004-08-10 19:00:00 39,424 ----a-w C:\WINDOWS\system32\dllcache\cfgbkend.dll + 2004-08-10 19:00:00 16,896 ----a-w C:\WINDOWS\system32\dllcache\cfgmgr32.dll + 2003-03-24 19:52:04 188,480 ----a-w C:\WINDOWS\system32\dllcache\cfgwiz.exe + 2004-08-04 04:54:24 15,423 ----a-w C:\WINDOWS\system32\dllcache\ch7xxnt5.dll + 2004-08-10 19:00:00 10,240 -c--a-w C:\WINDOWS\system32\dllcache\change.exe + 2004-08-04 03:00:14 8,192 ----a-w C:\WINDOWS\system32\dllcache\changer.sys + 2004-08-10 19:00:00 80,896 -c--a-w C:\WINDOWS\system32\dllcache\charmap.exe + 2004-08-10 19:00:00 13,824 -c--a-w C:\WINDOWS\system32\dllcache\chglogon.exe + 2004-08-10 19:00:00 15,872 -c--a-w C:\WINDOWS\system32\dllcache\chgport.exe + 2004-08-10 19:00:00 14,848 -c--a-w C:\WINDOWS\system32\dllcache\chgusr.exe + 2004-08-10 19:00:00 11,776 -c--a-w C:\WINDOWS\system32\dllcache\chkdsk.exe + 2004-08-10 19:00:00 11,264 -c--a-w C:\WINDOWS\system32\dllcache\chkntfs.exe + 2004-08-10 19:00:00 40,515 -c--a-w C:\WINDOWS\system32\dllcache\chkr.dll + 2004-08-10 19:00:00 781,397 -c--a-w C:\WINDOWS\system32\dllcache\chkrres.dll + 2004-08-10 19:00:00 42,575 -c--a-w C:\WINDOWS\system32\dllcache\chkrzm.exe + 2004-08-10 19:00:00 838,144 -c--a-w C:\WINDOWS\system32\dllcache\chtbrkr.dll + 2004-08-10 19:00:00 97,792 ----a-w C:\WINDOWS\system32\dllcache\chtmbx.dll + 2004-08-10 19:00:00 56,320 ----a-w C:\WINDOWS\system32\dllcache\chtskdic.dll + 2004-08-10 19:00:00 173,568 ----a-w C:\WINDOWS\system32\dllcache\chtskf.dll + 2004-08-10 19:00:00 166,400 -c--a-w C:\WINDOWS\system32\dllcache\ciadmin.dll + 2004-08-10 19:00:00 109,568 ----a-w C:\WINDOWS\system32\dllcache\cic.dll + 2001-08-23 21:04:00 980,034 -c--a-w C:\WINDOWS\system32\dllcache\cicap.sys + 2004-08-10 19:00:00 8,192 -c--a-w C:\WINDOWS\system32\dllcache\cidaemon.exe + 2004-08-10 19:00:00 1,352,704 ----a-w C:\WINDOWS\system32\dllcache\cimwin32.dll + 2001-08-23 21:04:06 272,640 -c--a-w C:\WINDOWS\system32\dllcache\cinemclc.sys + 2004-08-10 19:00:00 262,528 -c--a-w C:\WINDOWS\system32\dllcache\cinemst2.sys + 2004-08-10 19:00:00 198,656 ----a-w C:\WINDOWS\system32\dllcache\cintime.dll + 2004-08-10 19:00:00 480,256 -c--a-w C:\WINDOWS\system32\dllcache\cintsetp.exe + 2004-08-10 19:00:00 56,832 ----a-w C:\WINDOWS\system32\dllcache\cipher.exe + 2001-08-23 21:46:44 91,264 -c--a-w C:\WINDOWS\system32\dllcache\cirrus.dll + 2001-08-18 01:57:16 45,696 -c--a-w C:\WINDOWS\system32\dllcache\cirrus.sys + 2004-08-10 19:00:00 5,632 ----a-w C:\WINDOWS\system32\dllcache\cisvc.exe + 2004-08-10 19:00:00 7,680 -c--a-w C:\WINDOWS\system32\dllcache\ckcnv.exe + 2001-08-23 21:46:44 111,232 -c--a-w C:\WINDOWS\system32\dllcache\cl5465.dll + 2001-08-23 21:46:44 170,880 -c--a-w C:\WINDOWS\system32\dllcache\cl546x.dll + 2001-08-18 01:57:36 248,064 -c--a-w C:\WINDOWS\system32\dllcache\cl546xm.sys + 2004-08-10 19:00:00 49,664 ----a-w C:\WINDOWS\system32\dllcache\classpnp.sys + 2004-08-10 19:00:00 11,264 -c--a-w C:\WINDOWS\system32\dllcache\clb.dll + 2005-07-26 04:39:55 110,080 ----a-w C:\WINDOWS\system32\dllcache\clbcatex.dll + 2005-07-26 04:39:55 498,688 ----a-w C:\WINDOWS\system32\dllcache\clbcatq.dll + 2004-08-10 19:00:00 65,536 ----a-w C:\WINDOWS\system32\dllcache\cleanmgr.exe + 2004-08-10 19:00:00 104,448 ----a-w C:\WINDOWS\system32\dllcache\clipbrd.exe + 2004-08-10 19:00:00 33,280 ----a-w C:\WINDOWS\system32\dllcache\clipsrv.exe + 2004-08-10 19:00:00 57,856 ----a-w C:\WINDOWS\system32\dllcache\clusapi.dll + 2004-08-04 03:07:40 14,080 ----a-w C:\WINDOWS\system32\dllcache\cmbatt.sys + 2001-08-23 21:04:40 20,864 -c--a-w C:\WINDOWS\system32\dllcache\cmbp0wdm.sys + 2004-08-10 19:00:00 15,872 ----a-w C:\WINDOWS\system32\dllcache\cmcfg32.dll + 2004-08-10 19:00:00 400,896 ----a-w C:\WINDOWS\system32\dllcache\cmd.exe + 2004-08-10 19:00:00 352,256 ----a-w C:\WINDOWS\system32\dllcache\cmdial32.dll + 2001-08-24 07:04:44 6,656 -c--a-w C:\WINDOWS\system32\dllcache\cmdide.sys + 2004-08-10 19:00:00 47,104 ----a-w C:\WINDOWS\system32\dllcache\cmdl32.exe + 2004-08-10 19:00:00 40,448 ----a-w C:\WINDOWS\system32\dllcache\cmmon32.exe + 2004-08-10 19:00:00 217,160 -c--a-w C:\WINDOWS\system32\dllcache\cmnclim.dll + 2004-08-10 19:00:00 1,042,515 -c--a-w C:\WINDOWS\system32\dllcache\cmnresm.dll + 2004-08-10 19:00:00 14,336 -c--a-w C:\WINDOWS\sy

Destrio5 · Answer

- Fais un scan en ligne ici https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr (Avec Internet Explorer)

- En bas à droite, clique sur Démarrer Online-scanner

- Dans la nouvelle fenêtre qui s'affiche, clique sur J'accepte

- Accepte les Contrôles ActiveX

- Choisis Poste de travail pour le scan.

- Celui-ci terminé, sauvegarde (Choisis fichier texte) et poste le rapport

- Pour t'aider à utiliser le scan en ligne :
https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId291566

NOTE : Si tu reçois le message "La licence de Kaspersky On-line Scanner est périmée", va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner, reconnecte-toi sur le site de Kaspersky pour retenter le scan en ligne.

- Lis ceci en cas de problème d'installation du Contrôle ActiveX :
http://cybersecurite.xooit.com/t123-Les-controles-ActiveX.htm

olivier_123 · Answer

N'oublie pas , je ne peux pas ouvrir mon internet explorer :S. Un fenetre s'affiche disant que internet explorer doit fermer(une fenetre de rapport, envoyer le rapport , ne pas envoyer...)

Que faire?

Destrio5 · Answer

T'as essayé de le réinstaller ?

olivier_123 · Answer

Oui

Destrio5 · Answer

Regarde si celui-ci fonctionne sous Firefox ou non :
https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan

olivier_123 · Answer

Je suis de retour , désolé j'avais de quoi d'important a faire. Alors je mit met sur le scan, il marche ;) je vais envoyer le rapport une fois le scan fini.

@+

olivier_123 · Answer

Mais le scan est a 0% depuis 5 mins , Est-ce normal?

olivier_123 · Answer

Ok le scan est en cours , je vais t'envoyer le rapport d'ici peu. 

@+

olivier_123 · Answer

;***********************************************************************************************************************************************************************************
ANALYSIS: 2008-09-23 22:37:18
PROTECTIONS: 1
MALWARE: 23
SUSPECTS: 6
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description                                  Version                       Active    Updated
;===================================================================================================================================================================================
Avira AntiVir PersonalEdition Classic        8.0.1.27                      Yes       Yes
;===================================================================================================================================================================================
MALWARE
Id        Description                        Type                Active    Severity  Disinfectable  Disinfected Location
;===================================================================================================================================================================================
00139535  Application/Processor              HackTools           No        0         Yes            No           C:\Program Files\Mozilla Firefox\SmitfraudFix\Process.exe
00139535  Application/Processor              HackTools           No        0         Yes            No           C:\Documents and Settings\Administrateur\Bureau\SmitfraudFix\Process.exe
00139535  Application/Processor              HackTools           No        0         Yes            No           C:\Documents and Settings\Simon\SmitfraudFix\Process.exe
00139535  Application/Processor              HackTools           No        0         Yes            No           C:\Documents and Settings\Owner.Olivier\Bureau\incl\Process.exe
00139535  Application/Processor              HackTools           No        0         Yes            No           C:\Documents and Settings\Owner.Olivier\Mes documents\Autres\Virus Cleaner\SmitfraudFix\Process.exe
00139535  Application/Processor              HackTools           No        0         Yes            No           C:\Documents and Settings\Owner.Olivier\Bureau\SmitfraudFix\Process.exe
00139535  Application/Processor              HackTools           No        0         Yes            No           C:\Documents and Settings\Owner.Olivier\Mes documents\Autres\Virus Cleaner\SDFix\apps\Process.exe
00139535  Application/Processor              HackTools           No        0         Yes            No           C:\WINDOWS\system32\Process.exe
00139535  Application/Processor              HackTools           No        0         No             No           C:\Documents and Settings\Owner.Olivier\Mes documents\Mes fichiers reçus\SDFix.rar[SDFix.exe][SDFix.exe][SDFix\apps\Process.exe]
00139535  Application/Processor              HackTools           No        0         Yes            No           C:\SDFix\apps\Process.exe
00139535  Application/Processor              HackTools           No        0         Yes            No           C:\Program Files\Navilog1\Process.exe
00145758  Cookie/Mysearch                    TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Simon\Cookies\simon@mysearch[2].txt
00167704  Cookie/Xiti                        TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Simon\Cookies\simon@xiti[1].txt
00167747  Cookie/Azjmp                       TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Simon\Cookies\simon@azjmp[2].txt
00249100  Cookie/Cgi-bin                     TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Simon\Cookies\simon@www2.addfreestats[1].txt
00262020  Cookie/Atwola                      TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Simon\Cookies\simon@atwola[2].txt
00386444  Rootkit/Agent.JWJ                  Virus/Trojan        No        1         Yes            No           C:\QooBox\Quarantine\catchme2008-09-13_194806.20.zip[Documents and Settings/Administrateur/Bureau/catchme.zip][tdssserv.sys]
01048936  Generic Malware                    Virus/Trojan        No        0         Yes            No           C:\Program Files\GameSpy Arcade\Services\_common\PortraitLoader.dll
01185375  Application/Psexec.A               HackTools           No        0         Yes            No           C:\System Volume Information\_restore{19B36CF1-12AA-4058-8328-3769885FB8AB}\RP24\A0014568.EXE
02890449  Adware/Lop                         Adware              No        0         Yes            No           C:\Documents and Settings\All Users\Application Data\Joy coal mpeg heck\Bone Comp.exe
03074964  Trj/CI.A                           Virus/Trojan        No        0         Yes            No           C:\Documents and Settings\Owner.Olivier\Mes documents\Autres\Virus Cleaner\SDFix\backups_old\backups.zip[backups/agpqlrfm.exe]
03074964  Trj/CI.A                           Virus/Trojan        No        0         Yes            No           C:\Documents and Settings\Owner.Olivier\Mes documents\Autres\Virus Cleaner\SDFix\backups_old\backups.zip[backups/emxf.exe]
03582346  Generic Malware                    Virus/Trojan        No        0         Yes            No           C:\Documents and Settings\Owner.Olivier\Bureau\SmitfraudFix\IEDFix.C.exe
03582346  Generic Malware                    Virus/Trojan        No        0         Yes            No           C:\Documents and Settings\Administrateur\Bureau\SmitfraudFix\IEDFix.C.exe
03582346  Generic Malware                    Virus/Trojan        No        0         Yes            No           C:\Program Files\Mozilla Firefox\SmitfraudFix\IEDFix.C.exe
03610262  Adware/RogueAntimalware2008        Adware              No        0         Yes            No           C:\Documents and Settings\Owner.Olivier\Mes documents\Autres\Virus Cleaner\SDFix\backups\backups.zip[backups/tdssl.dll]
03610263  Adware/RogueAntimalware2008        Adware              No        0         Yes            No           C:\Documents and Settings\Owner.Olivier\Mes documents\Autres\Virus Cleaner\SDFix\backups\backups.zip[backups/tdsslog.dll]
03610263  Adware/RogueAntimalware2008        Adware              No        0         Yes            No           C:\Documents and Settings\Owner.Olivier\Mes documents\Autres\Virus Cleaner\SDFix\backups_old\backups.zip[backups/tdsslog.dll]
03610264  Adware/RogueAntimalware2008        Adware              No        0         Yes            No           C:\Documents and Settings\Owner.Olivier\Mes documents\Autres\Virus Cleaner\SDFix\backups\backups.zip[backups/tdssmain.dll]
03610264  Adware/RogueAntimalware2008        Adware              No        0         Yes            No           C:\Documents and Settings\Owner.Olivier\Mes documents\Autres\Virus Cleaner\SDFix\backups_old\backups.zip[backups/tdssmain.dll]
03644242  Trj/Downloader.MDW                 Virus/Trojan        No        1         Yes            No           C:\Documents and Settings\Owner.Olivier\Mes documents\Autres\Virus Cleaner\SDFix\backups\backups.zip[backups/tdssadw.dll]
03672890  Generic Trojan                     Virus/Trojan        No        0         Yes            No           C:\_OTMoveIt\MovedFiles\09142008_232001\QooBox\Quarantine\C\WINDOWS\system32	dpmma.dll.vir
03682902  Application/UltimateDefender       HackTools           No        0         Yes            No           C:\QooBox\Quarantine\C\WINDOWS\system32	dsspopup.dll.vir
03713610  Generic Trojan                     Virus/Trojan        No        0         Yes            No           C:\_OTMoveIt\MovedFiles\09142008_232214\WINDOWS\fqbewlna.dll
03726385  Generic Trojan                     Virus/Trojan        No        0         Yes            No           C:\_OTMoveIt\MovedFiles\09142008_232214\WINDOWS\mgxfebsq.dll
03727865  Generic Malware                    Virus/Trojan        No        0         Yes            No           C:\Documents and Settings\Simon\SmitfraudFix\IEDFix.C.exe
03729248  Generic Trojan                     Virus/Trojan        No        0         Yes            No           C:\_OTMoveIt\MovedFiles\09142008_232214\WINDOWS\dtseqrxk.dll
03738449  Spyware/MarketScore                Spyware             No        1         Yes            No           C:\_OTMoveIt\MovedFiles\09142008_231948\Program Files\PremierOpinion\pmls.dll
;===================================================================================================================================================================================
SUSPECTS
Sent      Location                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              (
;===================================================================================================================================================================================
No        C:\Downloads\Nod32 v2.70.39.Fr\NOD32.FiX.v2.2-nsane.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                               (
No        C:\Documents and Settings\Owner.Olivier\Bureau\backups\backup-20080723-132335-769.dll                                                                                                                                                                                                                                                                                                                                                                                                                                 (
No        C:\Documents and Settings\Owner.Olivier\Bureau\ComboFix.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                           (
No        C:\Program Files\ACSPMonitor\hk.dll                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   (
No        C:\Documents and Settings\Owner.Olivier\Bureau\ComboFix.exe[32788R22FWJFW\psexec.cfexe]                                                                                                                                                                                                                                                                                                                                                                                                                               (
No        C:\_OTMoveIt\MovedFiles\09142008_232214\WINDOWS\mqgldfvo.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                          (
;===================================================================================================================================================================================
VULNERABILITIES
Id        Severity   Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                (
;===================================================================================================================================================================================
;===================================================================================================================================================================================

Destrio5 · Answer

---> Télécharge Lop S&D sur ton Bureau
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
---> Double-clique dessus pour lancer l'installation
---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
---> Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
---> Patiente jusqu'à la fin du scan
---> Poste le rapport généré (C:\lopR.txt)

aquarelle · Answer

Bonjour,
Voici le rapport posté qu' olivier_123 n'arrive pas à poster.
Bonne continuation


00:03:17	olivier_123	

	
--------------------\ Lop S&D 4.2.4-4 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : Owner ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.27 (Activated)
C:\ (Local Disk) - NTFS - Total : 228 Go Free : 17 Go
D:\ (Local Disk) - FAT32 - Total : 4 Go Free : 1 Go
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [1] ( 2008-09-24| 9:06 )

--------------------\ Listing des dossiers dans APPLIC~1

[2005-08-19|17:22] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[2008-07-21|18:40] C:\DOCUME~1\ADMINI~1\APPLIC~1\Lavasoft
[2008-09-14|15:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
[2008-09-11|18:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[2008-09-07|17:34] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
[2007-07-10|03:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\SampleView
[2008-09-13|13:06] C:\DOCUME~1\ADMINI~1\APPLIC~1\Spyware Terminator
[2008-07-17|19:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\WinRAR


[2008-06-07|13:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Acoustica
[2008-07-17|02:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2007-12-24|12:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[2007-08-06|23:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[2007-08-20|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2008-09-15|01:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[2007-08-21|09:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[2007-12-02|14:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Christmasville
[2007-12-21|16:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Comodo
[2008-02-26|21:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[2008-04-08|20:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[2008-09-11|17:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ESET
[2008-07-16|17:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[2007-07-10|13:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[2007-09-02|00:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[2007-08-01|13:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IconTweaker
[2008-01-03|00:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Joy coal mpeg heck
[2007-09-16|12:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab(2)
[2008-09-13|14:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[2007-10-12|15:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Martau
[2007-07-10|03:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
[2007-07-10|03:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com
[2007-07-10|03:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com Personal Firewall
[2008-09-17|22:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2008-07-31|03:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[2007-08-30|16:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[2007-10-06|16:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[2007-07-10|02:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Prism Deploy
[2007-09-11|19:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\RoboForm
[2008-09-13|18:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[2008-09-21|14:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spyware Terminator
[2008-09-22|23:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[2007-08-21|12:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
[2008-09-08|22:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
[2007-09-15|00:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\vsosdk
[2007-08-16|16:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2008-09-17|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[2007-11-04|18:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[2005-08-19|17:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[2007-07-10|03:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[2007-07-10|03:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView

[2008-02-20|00:13] C:\DOCUME~1\LOCALS~1\APPLIC~1\CyberLink
[2007-08-18|17:40] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[2007-08-10|22:15] C:\DOCUME~1\MCX1\APPLIC~1\DivX
[2005-08-19|17:22] C:\DOCUME~1\MCX1\APPLIC~1\Identities
[2007-07-31|14:58] C:\DOCUME~1\MCX1\APPLIC~1\Microsoft
[2007-07-10|03:15] C:\DOCUME~1\MCX1\APPLIC~1\SampleView

[2005-08-19|17:21] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


[2008-06-07|13:07] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Acoustica
[2008-07-30|12:05] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Adobe
[2008-07-15|23:41] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\AdobeUM
[2008-01-26|23:52] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Ahead
[2007-08-21|23:31] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Apple Computer
[2008-05-19|14:34] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Audacity
[2007-12-21|16:04] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Comodo
[2008-02-26|21:52] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\CyberLink
[2007-08-07|13:01] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\DivX
[2008-01-02|19:08] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\downloadantihide
[2008-08-31|14:45] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\dvdcss
[2008-09-11|00:09] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\ErrorSmart
[2008-07-16|17:42] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\FileZilla
[2008-04-26|20:36] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\FrostWire
[2007-09-28|23:17] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Google
[2007-09-02|00:39] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Grisoft
[2007-08-01|13:35] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\IconTweaker
[2005-08-19|17:22] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Identities
[2008-05-19|17:13] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\IGN_DLM
[2008-07-29|19:59] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\ImgBurn
[2007-09-02|10:29] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Lavasoft
[2008-04-26|17:43] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\LimeWire
[2007-10-17|18:59] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Macromedia
[2008-09-13|14:47] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Malwarebytes
[2007-07-10|13:37] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\McAfee.com Personal Firewall
[2007-12-04|16:48] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Microsoft
[2008-09-19|19:55] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\mIRC
[2008-06-20|10:58] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Mozilla
[2007-08-01|13:36] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\PE Explorer
[2007-07-10|03:15] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\SampleView
[2008-07-30|12:05] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Search Settings
[2007-08-05|19:53] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Sports Interactive
[2008-09-23|11:00] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Spyware Terminator
[2007-09-01|21:10] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Sun
[2007-08-01|14:47] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\TuneUp Software
[2007-09-08|21:50] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Uniblue
[2008-05-18|16:18] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\URSoft
[2007-11-18|18:10] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\UseNeXT
[2008-09-24|09:01] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\uTorrent
[2007-10-26|19:21] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Ventrilo
[2007-08-01|18:18] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\vlc
[2008-09-11|01:24] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\Vso
[2007-10-12|16:15] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\WinPatrol
[2007-07-31|17:26] C:\DOCUME~1\OWNER~1.OLI\APPLIC~1\WinRAR


[2008-09-18|14:18] C:\DOCUME~1\Simon\APPLIC~1\Adobe
[2007-10-13|20:44] C:\DOCUME~1\Simon\APPLIC~1\AdobeUM
[2008-01-10|23:40] C:\DOCUME~1\Simon\APPLIC~1\Ahead
[2008-04-05|17:26] C:\DOCUME~1\Simon\APPLIC~1\Amazon
[2007-08-25|20:58] C:\DOCUME~1\Simon\APPLIC~1\Apple Computer
[2008-08-18|18:44] C:\DOCUME~1\Simon\APPLIC~1\Audacity
[2007-08-21|09:10] C:\DOCUME~1\Simon\APPLIC~1\AVS4YOU
[2008-02-19|13:58] C:\DOCUME~1\Simon\APPLIC~1\AVSMedia
[2007-11-23|12:12] C:\DOCUME~1\Simon\APPLIC~1\Comodo
[2008-04-03|20:27] C:\DOCUME~1\Simon\APPLIC~1\CyberLink
[2008-07-28|11:30] C:\DOCUME~1\Simon\APPLIC~1\Dealio
[2007-08-21|09:10] C:\DOCUME~1\Simon\APPLIC~1\DivX
[2008-01-27|13:07] C:\DOCUME~1\Simon\APPLIC~1\downloadantihide
[2008-08-05|15:37] C:\DOCUME~1\Simon\APPLIC~1\FrostWire
[2007-07-31|14:18] C:\DOCUME~1\Simon\APPLIC~1\Google
[2007-09-02|09:13] C:\DOCUME~1\Simon\APPLIC~1\Grisoft
[2005-08-19|17:22] C:\DOCUME~1\Simon\APPLIC~1\Identities
[2008-08-11|13:04] C:\DOCUME~1\Simon\APPLIC~1\LimeWire
[2008-03-11|16:49] C:\DOCUME~1\Simon\APPLIC~1\Macromedia
[2007-12-21|11:01] C:\DOCUME~1\Simon\APPLIC~1\MEGAUPLOADTOOLBAR
[2008-08-05|15:34] C:\DOCUME~1\Simon\APPLIC~1\Microsoft
[2008-06-20|11:43] C:\DOCUME~1\Simon\APPLIC~1\Mozilla
[2007-08-26|11:34] C:\DOCUME~1\Simon\APPLIC~1\PE Explorer
[2007-07-10|03:15] C:\DOCUME~1\Simon\APPLIC~1\SampleView
[2008-05-09|17:32] C:\DOCUME~1\Simon\APPLIC~1\Search Settings
[2008-09-23|11:00] C:\DOCUME~1\Simon\APPLIC~1\Spyware Terminator
[2007-09-28|17:23] C:\DOCUME~1\Simon\APPLIC~1\Sun
[2008-07-16|12:03] C:\DOCUME~1\Simon\APPLIC~1\TmpRecentIcons
[2008-05-19|18:31] C:\DOCUME~1\Simon\APPLIC~1\URSoft
[2007-08-25|21:06] C:\DOCUME~1\Simon\APPLIC~1\vlc
[2007-08-20|22:52] C:\DOCUME~1\Simon\APPLIC~1\WinRAR

--------------------\ Tâches planifiées dans C:\WINDOWS\tasks

[2008-09-24 09:00][--a------] C:\WINDOWS\tasks\1-Click Maintenance.job
[2007-11-04 20:47][--a------] C:\WINDOWS\tasks\Spybot - Search & Destroy - Scheduled Task.job
[2008-09-19 23:16][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2007-07-10 12:27][--a------] C:\WINDOWS\tasks\Rappel d'abonnement 3 auprŠs de l'ISP.job
[2007-07-10 12:27][--a------] C:\WINDOWS\tasks\Rappel d'abonnement 2 auprŠs de l'ISP.job
[2007-07-10 12:27][--a------] C:\WINDOWS\tasks\Rappel d'abonnement 1 auprŠs de l'ISP.job
[2008-09-22 23:21][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2004-08-10 15:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\ Listing des dossiers dans C:\Program Files

[2008-06-07|13:07] C:\Program Files\Acoustica Mixcraft 4
[2008-06-07|13:07] C:\Program Files\Acoustica Shared Effects
[2008-09-03|16:25] C:\Program Files\ACSPMonitor
[2008-09-18|14:21] C:\Program Files\Adobe
[2008-09-06|11:46] C:\Program Files\AKProg
[2007-07-10|14:05] C:\Program Files\Alwil Software
[2007-07-10|02:52] C:\Program Files\AMD
[2008-09-22|22:55] C:\Program Files\aMSN
[2008-04-21|15:24] C:\Program Files\Apple Software Update
[2008-01-10|10:42] C:\Program Files\Audacity 1.3 Beta (Unicode)
[2007-08-05|19:46] C:\Program Files\AVI Movie Player
[2008-09-15|01:02] C:\Program Files\Avira
[2007-07-10|03:11] C:\Program Files\AvRack
[2008-05-11|10:43] C:\Program Files\AVS4YOU
[2008-01-10|22:20] C:\Program Files\AVSMedia
[2007-10-04|16:44] C:\Program Files\BigFix
[2007-10-12|16:09] C:\Program Files\BillP Studios
[2007-09-16|12:56] C:\Program Files\Bits N Bytes
[2007-12-01|00:03] C:\Program Files\Bodrag
[2007-08-20|12:04] C:\Program Files\CAPCOM
[2007-07-31|15:12] C:\Program Files\CCleaner
[2007-08-24|22:08] C:\Program Files\CEDP Stealer 6.0 for Messenger
[2008-08-30|00:14] C:\Program Files\Cheat Engine
[2007-12-28|16:00] C:\Program Files\Circle Developement
[2007-12-21|16:04] C:\Program Files\Comodo
[2005-08-19|17:09] C:\Program Files\ComPlus Applications
[2007-10-05|23:01] C:\Program Files\Cucusoft
[2008-02-19|23:23] C:\Program Files\CyberLink
[2007-08-01|17:26] C:\Program Files\DAEMON Tools
[2008-09-13|14:39] C:\Program Files\Dealio
[2008-07-23|13:37] C:\Program Files\Diablo II
[2007-07-10|03:05] C:\Program Files\Digital Media Reader
[2008-02-19|14:16] C:\Program Files\Digital Photo Navigator 1.5
[2007-08-19|21:40] C:\Program Files\DivX
[2007-12-24|14:33] C:\Program Files\Doblon
[2008-02-22|22:21] C:\Program Files\DomPlayer
[2008-05-03|20:50] C:\Program Files\Download Manager
[2008-01-03|00:20] C:\Program Files\downloadantihide
[2007-08-27|14:48] C:\Program Files\DVD Decrypter
[2007-08-27|14:27] C:\Program Files\DVD Shrink
[2007-08-27|14:07] C:\Program Files\DvdinfoPro
[2008-05-08|17:03] C:\Program Files\DVDVideoSoft
[2007-12-10|19:29] C:\Program Files\EA GAMES
[2007-08-04|11:52] C:\Program Files\EA SPORTS
[2007-10-04|16:44] C:\Program Files\eMule
[2008-07-17|02:53] C:\Program Files\EssNetTools
[2008-09-15|02:06] C:\Program Files\ExpressZIP
[2007-08-20|17:51] C:\Program Files\ffdshow
[2008-09-22|23:16] C:\Program Files\Fichiers communs
[2008-07-17|17:27] C:\Program Files\FlashGet
[2008-05-09|17:26] C:\Program Files\Free Audio Pack
[2008-09-13|14:38] C:\Program Files\Frets on Fire
[2008-09-23|20:13] C:\Program Files\FrostWire
[2008-02-17|12:56] C:\Program Files\Fx MPEG Writer
[2008-03-21|19:05] C:\Program Files\GameSpy Arcade
[2007-10-07|14:23] C:\Program Files\GetData
[2007-09-28|23:16] C:\Program Files\Google
[2007-09-02|00:38] C:\Program Files\Grisoft
[2007-07-10|03:14] C:\Program Files\gtw_logo
[2008-09-17|23:50] C:\Program Files\Guitar Pro 5
[2008-03-16|16:14] C:\Program Files\Guitar Zero
[2008-07-20|22:38] C:\Program Files\HTV
[2007-08-01|13:35] C:\Program Files\IconTweaker
[2008-06-14|12:03] C:\Program Files\ImgBurn
[2008-09-09|19:46] C:\Program Files\inKline Global
[2008-09-13|19:37] C:\Program Files\InstallShield Installation Information
[2008-09-20|01:20] C:\Program Files\Internet Explorer
[2008-08-01|23:22] C:\Program Files\iPod
[2007-08-20|17:46] C:\Program Files\Ipod Video Converter
[2007-09-16|12:54] C:\Program Files\iPod(2)
[2008-08-01|23:22] C:\Program Files\iTunes
[2008-09-14|23:45] C:\Program Files\Java
[2007-08-02|22:15] C:\Program Files\KONAMI
[2008-05-19|21:14] C:\Program Files\Kristanix
[2007-09-02|10:28] C:\Program Files\Lavasoft
[2008-05-06|21:01] C:\Program Files\LimeWire
[2007-10-07|16:33] C:\Program Files\Lionhead Studios
[2007-10-26|19:34] C:\Program Files\Logitech
[2007-09-03|15:40] C:\Program Files\MagicISO
[2008-09-13|14:47] C:\Program Files\Malwarebytes' Anti-Malware
[2008-04-26|11:32] C:\Program Files\Master of Defense
[2007-07-10|03:16] C:\Program Files\McAfee
[2007-09-16|13:00] C:\Program Files\MceFreeTV
[2007-09-16|13:00] C:\Program Files\MediaCine
[2007-11-10|01:31] C:\Program Files\MediaInfo
[2007-09-16|12:57] C:\Program Files\Memorex exPressit Label Design Studio
[2008-09-20|03:06] C:\Program Files\Messenger
[2008-04-25|15:46] C:\Program Files\Messenger Plus! Live
[2008-09-17|22:03] C:\Program Files\Microsoft
[2007-10-28|19:36] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2007-07-10|03:10] C:\Program Files\Microsoft Digital Image 2006
[2005-08-19|17:16] C:\Program Files\microsoft frontpage
[2008-03-01|14:36] C:\Program Files\Microsoft Games
[2007-07-10|03:14] C:\Program Files\Microsoft Money 2006
[2007-09-29|09:18] C:\Program Files\Microsoft Office
[2008-08-04|12:47] C:\Program Files\Microsoft SQL Server Compact Edition
[2007-09-29|09:17] C:\Program Files\Microsoft Visual Studio
[2007-09-29|09:14] C:\Program Files\Microsoft Visual Studio 8
[2007-09-29|09:19] C:\Program Files\Microsoft Works
[2007-08-18|12:59] C:\Program Files\Microsoft Xbox 360 Accessories
[2007-09-29|09:16] C:\Program Files\Microsoft.NET
[2008-09-09|20:15] C:\Program Files\Minimath
[2008-09-19|19:36] C:\Program Files\mIRC
[2008-09-20|03:02] C:\Program Files\Movie Maker
[2008-09-24|09:05] C:\Program Files\Mozilla Firefox
[2007-08-22|20:17] C:\Program Files\MP3 WAV Converter
[2008-09-13|18:08] C:\Program Files\MSA
[2007-09-29|09:18] C:\Program Files\MSBuild
[2007-09-16|12:58] C:\Program Files\MSBuild(2)
[2007-09-13|19:05] C:\Program Files\MSECACHE
[2005-08-19|17:07] C:\Program Files\MSN
[2007-07-10|03:12] C:\Program Files\MSN Encarta Plus
[2005-08-19|17:08] C:\Program Files\MSN Gaming Zone
[2008-09-17|21:52] C:\Program Files\MSN Messenger
[2007-07-10|14:28] C:\Program Files\MSXML 4.0
[2007-09-14|12:19] C:\Program Files\MSXML 6.0
[2008-05-11|17:57] C:\Program Files\Navilog1
[2007-08-30|16:48] C:\Program Files\Nero
[2008-09-20|03:02] C:\Program Files\NetMeeting
[2008-06-11|16:29] C:\Program Files\OneStopSoft.com
[2005-08-19|17:09] C:\Program Files\Online Services
[2007-12-15|02:18] C:\Program Files\OO Software
[2008-09-20|03:02] C:\Program Files\Outlook Express
[2008-09-23|19:48] C:\Program Files\Panda Security
[2007-09-03|15:40] C:\Program Files\Pcsx2
[2008-07-20|22:50] C:\Program Files\PDM
[2008-09-17|21:22] C:\Program Files\Power IE
[2007-09-23|00:13] C:\Program Files\PowerISO
[2008-09-14|23:19] C:\Program Files\PremierOpinion
[2007-09-03|15:38] C:\Program Files\Project64 1.6
[2008-07-25|11:35] C:\Program Files\QuickTime
[2007-09-06|21:59] C:\Program Files\Rapidown
[2007-07-10|03:11] C:\Program Files\Realtek AC97
[2007-07-10|03:11] C:\Program Files\Realtek Sound Manager
[2007-09-13|20:35] C:\Program Files\Reference Assemblies
[2008-04-26|11:31] C:\Program Files\ReflexiveArcade
[2007-08-14|17:10] C:\Program Files\RegCleaner
[2008-09-11|01:20] C:\Program Files\Registry Mechanic
[2008-09-11|00:18] C:\Program Files\Rundll Errors Fix Wizard
[2008-07-25|11:30] C:\Program Files\Safari
[2008-07-30|12:05] C:\Program Files\Search Settings
[2005-08-19|17:12] C:\Program Files\Services en ligne
[2007-09-11|19:16] C:\Program Files\Siber Systems
[2007-08-21|12:04] C:\Program Files\Sierra
[2007-10-04|16:42] C:\Program Files\Silkroad
[2007-08-30|16:03] C:\Program Files\SlySoft
[2007-08-27|14:02] C:\Program Files\Smart Projects
[2007-08-05|19:49] C:\Program Files\Sports Interactive
[2007-09-02|00:41] C:\Program Files\Spybot - Search & Destroy
[2008-09-20|13:02] C:\Program Files\Spyware Terminator
[2008-09-07|22:03] C:\Program Files\SpywareBlaster
[2008-07-04|13:58] C:\Program Files\Starcraft
[2008-05-18|16:20] C:\Program Files\Startup Faster
[2008-04-04|18:38] C:\Program Files\StealthBot
[2008-03-28|21:19] C:\Program Files\Steam
[2008-09-14|23:45] C:\Program Files\Sun
[2008-04-06|12:21] C:\Program Files\Super Internet TV
[2007-07-31|18:38] C:\Program Files\TGTSoft
[2007-08-01|15:33] C:\Program Files\The Weather Channel FW
[2007-10-12|15:57] C:\Program Files\Total Uninstall 4
[2007-10-25|15:37] C:\Program Files\Transcode360
[2008-09-13|14:27] C:\Program Files\Trend Micro
[2008-09-08|22:31] C:\Program Files\TuneUp Utilities 2008
[2008-05-18|16:37] C:\Program Files\TweakRAM
[2007-08-01|13:55] C:\Program Files\UberIcon
[2005-08-19|17:22] C:\Program Files\Uninstall Information
[2007-11-10|16:47] C:\Program Files\UseNeXT
[2008-01-07|19:36] C:\Program Files\uTorrent
[2007-08-01|08:10] C:\Program Files\UxTheme Multipatcher Fr
[2008-03-01|01:28] C:\Program Files\Ventrilo
[2008-03-01|01:25] C:\Program Files\VentSrv
[2007-07-31|15:10] C:\Program Files\VideoLAN
[2007-09-12|21:02] C:\Program Files\VSO
[2008-07-18|19:29] C:\Program Files\Warcraft III
[2007-08-01|15:16] C:\Program Files\Weather Exchange Installer
[2007-09-16|13:01] C:\Program Files\Windows Defender
[2007-09-13|18:59] C:\Program Files\Windows Installer Clean Up
[2008-09-17|22:06] C:\Program Files\Windows Live
[2007-09-13|19:32] C:\Program Files\Windows Media Components
[2007-08-17|22:32] C:\Program Files\Windows Media Connect 2
[2008-03-12|17:33] C:\Program Files\Windows Media Player
[2008-09-20|03:02] C:\Program Files\Windows NT
[2005-08-19|17:08] C:\Program Files\Windows Plus
[2008-09-16|19:20] C:\Program Files\Windows Resource Kits
[2005-08-19|17:12] C:\Program Files\WindowsUpdate
[2007-07-31|15:00] C:\Program Files\WinRAR
[2008-06-02|18:48] C:\Program Files\Witcobber
[2007-12-03|18:05] C:\Program Files\World of Warcraft
[2007-08-01|15:20] C:\Program Files\WxEx
[2007-08-18|13:05] C:\Program Files\XBCD 360
[2007-08-18|12:26] C:\Program Files\XBox 360 Controller for Windows Software
[2007-09-08|23:54] C:\Program Files\Xbox Backup Creator
[2005-08-19|17:16] C:\Program Files\xerox
[2008-06-11|16:32] C:\Program Files\Xi
[2007-11-03|22:51] C:\Program Files\Yahoo!
[2008-07-28|11:25] C:\Program Files\YouTUBE (TM) movie downloader

--------------------\ Listing des dossiers dans C:\Program Files\Fichiers communs

[2008-07-16|17:36] C:\Program Files\Fichiers communs\Adobe
[2007-08-30|16:50] C:\Program Files\Fichiers communs\Ahead
[2007-08-08|23:58] C:\Program Files\Fichiers communs\Apple
[2007-08-21|09:10] C:\Program Files\Fichiers communs\AVSMedia
[2007-08-02|11:59] C:\Program Files\Fichiers communs\Blizzard Entertainment
[2007-09-29|09:17] C:\Program Files\Fichiers communs\DESIGNER
[2008-05-19|05:52] C:\Program Files\Fichiers communs\DVDVIDEOSOFT
[2007-08-05|19:48] C:\Program Files\Fichiers communs\InstallShield
[2007-07-10|03:09] C:\Program Files\Fichiers communs\Java
[2007-10-26|19:34] C:\Program Files\Fichiers communs\Logitech
[2008-07-16|17:28] C:\Program Files\Fichiers communs\Macrovision Shared
[2008-09-17|22:03] C:\Program Files\Fichiers communs\Microsoft Shared
[2005-08-19|17:11] C:\Program Files\Fichiers communs\MSSoap
[2007-07-10|02:52] C:\Program Files\Fichiers communs\New Boundary
[2005-08-19|10:01] C:\Program Files\Fichiers communs\ODBC
[2005-08-19|17:12] C:\Program Files\Fichiers communs\Services
[2005-08-19|10:01] C:\Program Files\Fichiers communs\SpeechEngines
[2007-09-01|14:22] C:\Program Files\Fichiers communs\SureThing Shared
[2008-09-20|03:01] C:\Program Files\Fichiers communs\System
[2008-09-17|21:58] C:\Program Files\Fichiers communs\Windows Live
[2008-06-18|20:25] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[2008-09-08|22:30] C:\Program Files\Fichiers communs\Wise Installation Wizard

--------------------\ Process

( 46 Processes )

... OK !

--------------------\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Joy coal mpeg heck
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Joy coal mpeg heck\Bone Comp.exe
C:\Program Files\Circle Developement
C:\Program Files\DomPlayer

--------------------\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-24 09:07:15
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 34

--------------------\ Recherche d'autres infections

--------------------\ Cracks & Keygens ..

C:\DOCUME~1\OWNER~1.OLI\Application Data\uTorrent\FIFA 2007 Crack.torrent
C:\DOCUME~1\OWNER~1.OLI\Application Data\uTorrent\Football Manager 2007 Crack.zip.torrent
C:\DOCUME~1\OWNER~1.OLI\Application Data\uTorrent\Kaspersky.Anti-Virus.7.0.Keygen.torrent
C:\DOCUME~1\OWNER~1.OLI\Application Data\uTorrent\Registry.Mechanic.v8.0.0.900.keygened.rar.torrent
C:\DOCUME~1\OWNER~1.OLI\Application Data\uTorrent\Starcraft no-cd crack.rar.1.torrent
C:\DOCUME~1\OWNER~1.OLI\Application Data\uTorrent\Starcraft no-cd crack.rar.torrent
C:\DOCUME~1\OWNER~1.OLI\Application Data\uTorrent\XBox 360 Controller Drivers + Wifi Crack.rar.torrent
C:\DOCUME~1\OWNER~1.OLI\Bureau\AUTRES\ImgConverter\RighClickImageConverter\Crack
C:\DOCUME~1\OWNER~1.OLI\Bureau\AUTRES\ImgConverter\RighClickImageConverter\Crack\RCIC.exe
C:\DOCUME~1\OWNER~1.OLI\Bureau\Guitar Pro\Guitar Pro 5 Tabs\F\Faith No More - Crack Hitler.gp3
C:\DOCUME~1\OWNER~1.OLI\Bureau\Guitar Pro\Guitar Pro 5 Tabs\L\Limp Bizkit - Crack Addict.gp4
C:\DOCUME~1\OWNER~1.OLI\Bureau\Guitar Pro\Guitar Pro 5 Tabs\P\Pixies - Crackity Jones.gp3
C:\DOCUME~1\OWNER~1.OLI\Bureau\Guitar Pro\GuitarPro_Tabs\Faith No More - Crack Hitler.gp3
C:\DOCUME~1\OWNER~1.OLI\Bureau\Guitar Pro\GuitarPro_Tabs\Limp Bizkit - Crack Addict.gp4
C:\DOCUME~1\OWNER~1.OLI\Bureau\Guitar Pro\GuitarPro_Tabs\Pixies - Crackity Jones.gp3
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\(ES) swat4 FR\crack 1.1
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\(ES) swat4 FR\crack 1.1\Engine.dll
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\(ES) swat4 FR\crack 1.1\Swat4.exe
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\(ES) swat4 FR\crack 1.1\Swat4.rar
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\(ES) swat4 FR\crack 1.1\vitality.nfo
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\(ES) swat4 FR\crack 1.1\vitality2.nfo
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\(ES) swat4 FR\S.W.A.T.4.The.Stetchkov.Syndicate-RELOADED\rld-sw4x\crack
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\(ES) swat4 FR\S.W.A.T.4.The.Stetchkov.Syndicate-RELOADED\rld-sw4x\crack\Content
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\(ES) swat4 FR\S.W.A.T.4.The.Stetchkov.Syndicate-RELOADED\rld-sw4x\crack\ContentExpansion
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\(ES) swat4 FR\S.W.A.T.4.The.Stetchkov.Syndicate-RELOADED\rld-sw4x\crack\Content\System
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\(ES) swat4 FR\S.W.A.T.4.The.Stetchkov.Syndicate-RELOADED\rld-sw4x\crack\Content\System\Swat4.exe
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\(ES) swat4 FR\S.W.A.T.4.The.Stetchkov.Syndicate-RELOADED\rld-sw4x\crack\ContentExpansion\System
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\(ES) swat4 FR\S.W.A.T.4.The.Stetchkov.Syndicate-RELOADED\rld-sw4x\crack\ContentExpansion\System\Swat4X.exe
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\AddOns.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\camera-settings.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\chat-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\layout-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\macros-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\macros-local.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Atlas.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Atlas.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\AtlasLoot.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\AtlasLoot.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Bagnon.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Bagnon.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Blizzard_RaidUI.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Blizzard_RaidUI.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Blizzard_TimeManager.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Blizzard_TimeManager.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\HealBot.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Omen.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Omen.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\QuestHelper.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\QuestHelper.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\AddOns.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\camera-settings.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\chat-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\layout-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables\Atlas.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables\Atlas.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables\AtlasLoot.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables\AtlasLoot.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables\Bagnon.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables\Bagnon.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables\Blizzard_RaidUI.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables\Blizzard_RaidUI.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables\Blizzard_TimeManager.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables\Blizzard_TimeManager.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables\QuestHelper.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Dodgerz\SavedVariables\QuestHelper.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\AddOns.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\camera-settings.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\chat-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\layout-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables\Atlas.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables\Atlas.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables\AtlasLoot.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables\AtlasLoot.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables\Bagnon.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables\Bagnon.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables\Blizzard_RaidUI.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables\Blizzard_TimeManager.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables\Blizzard_TimeManager.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables\QuestHelper.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables\QuestHelper.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\AddOns.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\camera-settings.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\chat-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\layout-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\SavedVariables
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\SavedVariables.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\SavedVariables.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\SavedVariables\Atlas.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\SavedVariables\Atlas.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\SavedVariables\AtlasLoot.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\SavedVariables\AtlasLoot.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\SavedVariables\Bagnon.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\SavedVariables\Bagnon.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\SavedVariables\Blizzard_TimeManager.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\SavedVariables\Blizzard_TimeManager.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wicken\SavedVariables\QuestHelper.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\AddOns.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\camera-settings.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\chat-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\layout-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\SavedVariables
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\SavedVariables.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\SavedVariables.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\SavedVariables\Atlas.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\SavedVariables\Atlas.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\SavedVariables\AtlasLoot.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\SavedVariables\AtlasLoot.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\SavedVariables\Bagnon.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\SavedVariables\Bagnon.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\SavedVariables\Blizzard_RaidUI.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\SavedVariables\Blizzard_TimeManager.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\SavedVariables\Blizzard_TimeManager.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\SavedVariables\QuestHelper.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Wickenz\SavedVariables\QuestHelper.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger\AddOns.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger\camera-settings.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger\chat-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger\layout-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Atlas.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Atlas.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Bagnon.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Bagnon.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Blizzard_TimeManager.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\Blizzard_TimeManager.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Dodger\SavedVariables\QuestHelper.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\AddOns.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\camera-settings.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\chat-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\layout-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\SavedVariables
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\SavedVariables.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\SavedVariables.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\SavedVariables\Atlas.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\SavedVariables\Atlas.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\SavedVariables\AtlasLoot.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\SavedVariables\AtlasLoot.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\SavedVariables\Bagnon.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\SavedVariables\Bagnon.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\SavedVariables\Blizzard_TimeManager.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\SavedVariables\Blizzard_TimeManager.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Hshookons\SavedVariables\Omen.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\AddOns.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\camera-settings.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\chat-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\layout-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\macros-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\macros-local.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\Atlas.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\Atlas.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\AtlasLoot.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\AtlasLoot.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\Bagnon.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\Bagnon.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\Blizzard_RaidUI.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\Blizzard_RaidUI.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\Blizzard_TimeManager.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\Blizzard_TimeManager.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\HealBot.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\Omen.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\Omen.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\QuestHelper.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookone\SavedVariables\QuestHelper.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\AddOns.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\camera-settings.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\chat-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\layout-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\macros-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\macros-local.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\Atlas.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\Atlas.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\AtlasLoot.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\AtlasLoot.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\Bagnon.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\Bagnon.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\Blizzard_RaidUI.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\Blizzard_RaidUI.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\Blizzard_TimeManager.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\Blizzard_TimeManager.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\Carbonite.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\HealBot.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\HealBot.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\Omen.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\Omen.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\QuestHelper.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookons\SavedVariables\QuestHelper.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\AddOns.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\camera-settings.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\chat-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\layout-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\Atlas.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\Atlas.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\AtlasLoot.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\AtlasLoot.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\Bagnon.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\Bagnon.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\Blizzard_RaidUI.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\Blizzard_TimeManager.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\Blizzard_TimeManager.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\HealBot.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\HealBot.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\Omen.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\Omen.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\QuestHelper.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF\Account\WASLUK\WoWcrack (Blizz High-Rate)\Shookonz\SavedVariables\QuestHelper.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF.20080115-182420\Account\WASLUCK\WoWcrack (Blizz High-Rate)
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF.20080115-182420\Account\WASLUCK\WoWcrack Blizz High-Rate
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF.20080115-182420\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF.20080115-182420\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\camera-settings.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF.20080115-182420\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\chat-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF.20080115-182420\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\layout-cache.txt
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF.20080115-182420\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF.20080115-182420\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF.20080115-182420\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF.20080115-182420\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables\BaudBag.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF.20080115-182420\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables\BaudBag.lua.bak
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF.20080115-182420\Account\WASLUCK\WoWcrack (Blizz High-Rate)\Shookon\SavedVariables\ChatBar.lua
C:\DOCUME~1\OWNER~1.OLI\Mes documents\Autres\Jeux\World Of Wacraft 2.3.3\WTF.2008

Destrio5 · Answer

Pour résumer, il te reste le problème de MSN et c'est tout ?

olivier_123 · Answer

Oui et celui d'internet explorer

Destrio5 · Answer

Tu devrais tenter une réparation de Windows.

olivier_123 · Answer

Comment on fait pour faire une réparation de Windows si je n'ai pas le CD de Windows Xp? J'ai juste le DVD De Restauration

Ordi rempli de virus

107 réponses

Discussions similaires