Suspicion virus Fermé

Question

Bonjour,

Je suspecte mon ordinateur d'être infecté... Tous les jours, l'analyse AVG me prévient qu'il y a une centaine de warnings, mais je sais pas exactement ce que c'est. Mon ordinateur est assez lent par moments.

J'ai tenté plusieurs fois d'installer Zone Alarm mais ça me plante l'ordi à chaque fois... Avec Vista c'est pas évident de trouver quelque chose de compatible... J'ai donc fait une analyse Hijackthis alors voilà la copie :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:52:36, on 21.11.2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\ico.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
C:\Program Files\Lenovo\AwayTask\AwaySch.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Lenovo\LenovoCare\LPMGR.EXE
C:\Program Files\Lenovo\Productivity Keyboard\Skdaemon.exe
C:\Program Files\BLUEWIN\WLAN Assistant\McciTrayApp.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\system32\conime.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe
C:\Program Files\HP\Smart Web Printing\hpswp_clipbook.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ch/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [LenovoOobeOffers] c:\swtools\LenovoWelcome\LenovoOobeOffers.exe /filePath="c:\swshare\firstrun.txt"
O4 - HKLM\..\Run: [LenovoRegistration] C:\SWTOOLS\LenovoWelcome\LenovoRegistration.exe /inif="C:\SWSHARE\leadertech.ini"
O4 - HKLM\..\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
O4 - HKLM\..\Run: [AwaySch] C:\Program Files\Lenovo\AwayTask\AwaySch.EXE
O4 - HKLM\..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\Lenovo\LENOVO~1\LPMGR.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [SKDaemon.exe] C:\Program Files\Lenovo\Productivity Keyboard\SKDaemon.exe
O4 - HKLM\..\Run: [BLUEWIN_McciTrayApp] C:\Program Files\BLUEWIN\WLAN Assistant\McciTrayApp.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JR1916~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JR1916~1.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O13 - Gopher Prefix: 
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de base IPS (IPSSVC) - Lenovo Group Limited - C:\Windows\system32\IPSSVC.EXE
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - C:\Program Files\Lenovo\System Update\SUService.exe
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo	vt_reg_monitor_svc.exe
O23 - Service: TVT Backup Protection Service - Unknown owner - C:\Program Files\Lenovo\Rescue and Recoveryrpservice.exe
O23 - Service: TVT Backup Service - Lenovo Group Limited - C:\Program Files\Lenovo\Rescue and Recoveryrservice.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - c:\Program Files\Common Files\Lenovo\Scheduler	vtsched.exe

gen-hackman · Answer

bonsoir 

 une centaine de warnings.......!!!!!!

tu exageres un peu non ???????,

sinon ................;tu connais ca ? :

LenovoCare\ ??????

gen-hackman · Answer

tu peux donner quelques precisions sur les warnings ?
(noms......trojans.....chemins.....etc.....,)merci

Stéf · Answer

C'est tous des cookies mais j'arrive pas à copier les détails (c'est écrit "Found Tracking cookie", sauf le dernier qui a pas l'air d'être un cookie, avec un nom hyper long et son "detection name" c'est "Found Adware.Gator, le type : registry key).... C'est du chinois quoi...

gen-hackman · Answer

ok :


Télécharges MalwareByte's : 
ici ftp://ftp.commentcamarche.com/download/mbam-setup.exe 
ou ici : http://www.malwarebytes.org/mbam.php 

* Installes le ( choisis bien "francais" ; ne modifies pas les paramètres d'installe ) et mets le à jour . 

(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharges le ici : https://www.malekal.com/tutorial-aboutbuster/ ) 

* Potasses le tuto pour te familiariser avec le prg : 
https://forum.pcastuces.com/sujet.asp?f=31&s=3 
( cela dis, il est très simple d'utilisation ). 

! Déconnectes toi et fermes toutes applications en cours ! 

* Lances Malwarebyte's . 

Fais un examen dit "complet" ( sélectionnes bien tous tes disks avant le scan ! ). 

--> Laisses le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ). 
--> à la fin tu cliques sur "résultat" . 
--> Vérifies que tous les objets infectés soient validés, puis cliques sur " suppression " . 

Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le ! 

Postes le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date) 
accompagné d'un nouveau rapport hijackthis pour analyse ...

Stéf · Answer

Apparament y a pas d'infection :


Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1416
Windows 6.0.6001 Service Pack 1

22.11.2008 22:33:32
mbam-log-2008-11-22 (22-33-32).txt

Type de recherche: Examen complet (C:\|E:\|F:\|G:\|H:\|I:\|K:\|)
Eléments examinés: 168544
Temps écoulé: 2 hour(s), 1 minute(s), 29 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Stéf · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:35:45, on 22.11.2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\ico.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
C:\Program Files\Lenovo\AwayTask\AwaySch.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Lenovo\LenovoCare\LPMGR.EXE
C:\Program Files\Lenovo\Productivity Keyboard\Skdaemon.exe
C:\Program Files\BLUEWIN\WLAN Assistant\McciTrayApp.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
c:\program files\logitech\quickcam\lu\lulnchr.exe
C:\program files\logitech\quickcam\lu\LogitechUpdate.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\conime.exe
C:\Program Files\Azureus\Azureus.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HP\Smart Web Printing\hpswp_clipbook.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ch/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [LenovoOobeOffers] c:\swtools\LenovoWelcome\LenovoOobeOffers.exe /filePath="c:\swshare\firstrun.txt"
O4 - HKLM\..\Run: [LenovoRegistration] C:\SWTOOLS\LenovoWelcome\LenovoRegistration.exe /inif="C:\SWSHARE\leadertech.ini"
O4 - HKLM\..\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
O4 - HKLM\..\Run: [AwaySch] C:\Program Files\Lenovo\AwayTask\AwaySch.EXE
O4 - HKLM\..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\Lenovo\LENOVO~1\LPMGR.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [SKDaemon.exe] C:\Program Files\Lenovo\Productivity Keyboard\SKDaemon.exe
O4 - HKLM\..\Run: [BLUEWIN_McciTrayApp] C:\Program Files\BLUEWIN\WLAN Assistant\McciTrayApp.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JR1916~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JR1916~1.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O13 - Gopher Prefix: 
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de base IPS (IPSSVC) - Lenovo Group Limited - C:\Windows\system32\IPSSVC.EXE
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - C:\Program Files\Lenovo\System Update\SUService.exe
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo	vt_reg_monitor_svc.exe
O23 - Service: TVT Backup Protection Service - Unknown owner - C:\Program Files\Lenovo\Rescue and Recoveryrpservice.exe
O23 - Service: TVT Backup Service - Lenovo Group Limited - C:\Program Files\Lenovo\Rescue and Recoveryrservice.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - c:\Program Files\Common Files\Lenovo\Scheduler	vtsched.exe

gen-hackman · Answer

ok fais ceci :


Telecharge maintenant FindyKill sur ton bureau : 

http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe 

--> Lance l installation avec les parametres par default 

--> Fais un clic droit sur le raccourci FindyKill sur ton bureau 

--> Choisi executer en tant qu administrateur 

--> Au menu principal,choisi l option 1 (Recherche) 

--> Post le rapport FindyKill.txt 

Note : le rapport FindyKill.txt est sauvegardé a la racine du disque

Stéf · Answer

----------------- FindyKill V4.705 ------------------

* User : St‚fanie - PCSTF
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 17/11/08 par Chiquitine29
* Recherche effectuée à 20:39:10 le 24.11.2008
* Windows Vista - Internet Explorer 7.0.6001.18000

((((((((((((((((( *** Recherche *** ))))))))))))))))))

--------------- [ Processus actifs ] ----------------

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\ico.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
C:\Program Files\Lenovo\AwayTask\AwaySch.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Lenovo\LenovoCare\LPMGR.EXE
C:\Program Files\Lenovo\Productivity Keyboard\Skdaemon.exe
C:\Program Files\BLUEWIN\WLAN Assistant\McciTrayApp.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\IPSSVC.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Lenovo\System Update\SUService.exe
C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe
C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe
c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
C:\Windows\System32\svchost.exe
C:\Program Files\Common Files\Lenovo\Logger\logmon.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\taskeng.exe

--------------- [ Fichiers/Dossiers infectieux ] ----------------

»»»» Presence des fichiers dans C:

»»»» Presence des fichiers dans C:\Windows

»»»» Presence des fichiers dans C:\Windows\Prefetch

»»»» Presence des fichiers dans C:\Windows\system32

»»»» Presence des fichiers dans C:\Windows\system32\drivers

»»»» Presence des fichiers dans C:\Users\St‚fanie\AppData\Roaming

»»»» Presence des fichiers dans C:\Users\STFANI~1\AppData\Local\Temp

»»»» Presence des fichiers dans C:\Users\St‚fanie\Local Settings\Temporary Internet Files\Content.IE5

Found ! [18.05.2007 12:14] - C:\ProgramData\Skype\Plugins\Local Cache\7B5560BB781B40259A06350E9B643B6E_more.jpg
Found ! [17.12.2007 17:58] - C:\ProgramData\Skype\Plugins\Local Cache\D3987B641C134048B815DB578D607F42_more.jpg
Found ! [18.05.2007 12:14] - C:\Users\All Users\Skype\Plugins\Local Cache\7B5560BB781B40259A06350E9B643B6E_more.jpg
Found ! [17.12.2007 17:58] - C:\Users\All Users\Skype\Plugins\Local Cache\D3987B641C134048B815DB578D607F42_more.jpg
Found ! [23.11.2008 00:22] - C:\Users\St‚fanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XQ28QG12\6002223736189_1_b646250b[1].jpg
Found ! [10.08.2007 01:59] - C:\Users\St‚fanie\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\{08FD705E-94DC-465E-AF64-F2B6423E40F4}-CIMG4003.JPG
Found ! [18.05.2007 12:14] - C:\Users\St‚fanie\AppData\Local\VirtualStore\ProgramData\Skype\Plugins\Local Cache\7B5560BB781B40259A06350E9B643B6E_more.jpg
Found ! [10.06.2007 11:50] - C:\Users\St‚fanie\Music\AlbumArt_{9863CB64-AE2A-4D74-BCF0-BF8C5FE241D2}_Large.jpg
Found ! [10.06.2007 11:49] - C:\Users\St‚fanie\Music\AlbumArt_{9863CB64-AE2A-4D74-BCF0-BF8C5FE241D2}_Small.jpg

--------------- [ Registre / Startup ] ----------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]

Mouse Suite 98 Daemon=ICO.EXE
LenovoOobeOffers=c:\swtools\LenovoWelcome\LenovoOobeOffers.exe /filePath="c:\swshare\firstrun.txt"
LenovoRegistration=C:\SWTOOLS\LenovoWelcome\LenovoRegistration.exe /inif="C:\SWSHARE\leadertech.ini"
TVT Scheduler Proxy=C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
AwaySch=C:\Program Files\Lenovo\AwayTask\AwaySch.EXE
AMSG=C:\Program Files\ThinkVantage\AMSG\Amsg.exe /startup
SunJavaUpdateSched="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
LPManager=C:\PROGRA~1\Lenovo\LENOVO~1\LPMGR.exe
DiskeeperSystray="C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
SKDaemon.exe=C:\Program Files\Lenovo\Productivity Keyboard\SKDaemon.exe
BLUEWIN_McciTrayApp=C:\Program Files\BLUEWIN\WLAN Assistant\McciTrayApp.exe
PCSuiteTrayApplication=C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
IgfxTray=C:\Windows\system32\igfxtray.exe
HotKeysCmds=C:\Windows\system32\hkcmd.exe
Persistence=C:\Windows\system32\igfxpers.exe
AVG8_TRAY=C:\PROGRA~1\AVG\AVG8\avgtray.exe
LogitechCommunicationsManager="C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
LogitechQuickCamRibbon="C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
NoChange=1
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1
<NO NAME>=

--------------- [ Registre / Clés infectieuses ] ----------------

--------------- [ Etat / Services ] ----------------

+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

Ndisuio - Type de démarrage = 3

EapHost - Type de démarrage = 3

Wlansvc - Type de démarrage = 2

SharedAccess - Type de démarrage = 2

wuauserv - Type de démarrage = 2

wscsvc - Type de démarrage = 2

WinDefend - Type de démarrage = 2

--------------- [ Recherche dans supports amovibles] ----------------

+- Informations :

C: - Lecteur fixe
K: - Lecteur fixe

+- Contenu de l'autorun : K:\autorun.inf

[autorun]
ICON=AUTORUN\WDLOGO.ICO

+- presence des fichiers :

Found ! [17.10.2002 09:56][-rah-----] - K:\autorun.inf

--------------- [ Registre / Mountpoint2 ] ----------------

-> Not found !

------------------- ! Fin du rapport ! --------------------

gen-hackman · Answer

et bien je pense que maintenant c est clair :


Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir 


--> Fais clic droit sur le raccourci FindyKill sur ton bureau 

--> Choisi executer en tant qu administrateur 

--> Au menu principal,choisi l option 2 (Suppression) 


/!\ il y aura 2 redémarrage, laisse travailler l outils jusqu a l apparition du message "nettoyage effectué" 

/!\ Ne te sert pas du pc durant la suppression , ton bureau ne sera pas accessible c est normal ! 

-------> ensuite post le rapport FindyKill.txt 

Note : le rapport FindyKill.txt est sauvegardé a la racine du disque

gen-hackman · Answer

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau. 
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2 

* Lance l'installation du programme en exécutant le fichier téléchargé. 
* Double-clique maintenant sur le raccourci de Toolbar-S&D. 
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée. 
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche. 
* Poste le rapport généré. (C:\TB.txt)

gen-hackman · Answer

il y a des infections qu on ne connait pas encore (pas toutes) de par le fait on en utilise certains comme recheche, et sans les utiliser comme outils

Stéf · Answer

-----------\  ToolBar S&D 1.2.5   XP/Vista

   Microsoft® Windows Vista™ Professionnel  ( v6.0.6001 ) Service Pack 1
   X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
   BIOS : IBM BIOS Ver 2OKT44.0
   USER : Stéfanie ( Not Administrator ! )
   BOOT : Normal boot
   Antivirus : AVG Anti-Virus Free 8.0 (Activated)
   C:\ (Local Disk) - NTFS - Total:143 Go (Free:64 Go)
   E:\ (USB)
   F:\ (USB)
   G:\ (USB)
   H:\ (USB)
   I:\ (CD or DVD)
   K:\ (Local Disk) - FAT32 - Total:931 Go (Free:755 Go)

   "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
   Option : [1] ( 29.11.2008|20:55 )

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\Windows\system32\blank.htm"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Start Page"="https://www.google.ch/?gws_rd=ssl"
   "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
   "Url"="http://www.microsoft.com/atwork/community/rss.xml"
   "Url"="http://www.microsoft.com/athome/community/rss.xml"
   "Url"="https://www.msn.com/fr-fr/actualite/"
   "Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\Users\STFANI~1\Music\Musique Alexia\Marijuana, cocaina, eroina, crack, ....mp3



   1 - "C:\ToolBar SD\TB_1.txt" - 29.11.2008|20:55 - Option : [1]

   -----------\  Fin du rapport a 20:55:56.72

gen-hackman · Answer

desinstalle findykill (cause = incompatibilité) et :


Télécharges UsbFix ( de Chiquitine29 et Chimay8 ) sur ton bureau : 

http://sd-1.archive-host.com/membres/up/116615172019703188/UsbFix.exe 

! Déconnectes toi d'internet et fermes toutes applications en cours ! 

--> Double-cliques sur l' .exe pour lancer l'installation de l'outil ( ne touches pas aux paramètres d'installe ) . 

Impératif : 
Branches toutes tes unités externes à ton PC (clé USB, DD externe, flash disk, lecteur MP3, etc...) succeptibles d'avoir été infectés, ainsi que les CD et DVD rom dont tu te serts éventuellement le plus souvent ( mais sans les ouvrir ! ) . 


--> Double-cliques sur le raccourci "UsbFix" qui est sur ton bureau pour lancer l'outil : 

* Tapes sur 1 ( option " nettoyage " ) puis sur [entrée] et suis les instructions ... 

--> Le pc va redémarrer ... laisses travailler l'outil et ne touches à rien ... 
( Note : pour les unités externes non utlisées, cliques sur "continuer" lors du message d'avertissement ) 


--> Une fois de retour à ton bureau , attends le message de fin du nettoyage , 
puis appuies sur une touche pour que le rapport "UsbFix.txt" s'affiche . 

Fais un copier/coller de son contenu dans ta prochaine réponse pour analyse et attends la suite .... 

( Note : le rapport UsbFix.txt est sauvegardé a la racine du disque dur > C:\UsbFix.txt ) 


PS : Si le Bureau ne réapparait pas, presses Ctrl + Alt + Suppr , Onglet "Fichier"-> "Nouvelle tâche": 
tapes explorer.exe et valides .

gen-hackman · Answer

relances hijackthis

Stéf · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:59:38, on 01.12.2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\system32\conime.exe
C:\Windows\explorer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HP\Smart Web Printing\hpswp_clipbook.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ch/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [LenovoOobeOffers] c:\swtools\LenovoWelcome\LenovoOobeOffers.exe /filePath="c:\swshare\firstrun.txt"
O4 - HKLM\..\Run: [LenovoRegistration] C:\SWTOOLS\LenovoWelcome\LenovoRegistration.exe /inif="C:\SWSHARE\leadertech.ini"
O4 - HKLM\..\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
O4 - HKLM\..\Run: [AwaySch] C:\Program Files\Lenovo\AwayTask\AwaySch.EXE
O4 - HKLM\..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\Lenovo\LENOVO~1\LPMGR.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [SKDaemon.exe] C:\Program Files\Lenovo\Productivity Keyboard\SKDaemon.exe
O4 - HKLM\..\Run: [BLUEWIN_McciTrayApp] C:\Program Files\BLUEWIN\WLAN Assistant\McciTrayApp.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JR1916~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JR1916~1.0_0\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O13 - Gopher Prefix: 
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de base IPS (IPSSVC) - Lenovo Group Limited - C:\Windows\system32\IPSSVC.EXE
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - C:\Program Files\Lenovo\System Update\SUService.exe
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo	vt_reg_monitor_svc.exe
O23 - Service: TVT Backup Protection Service - Unknown owner - C:\Program Files\Lenovo\Rescue and Recoveryrpservice.exe
O23 - Service: TVT Backup Service - Lenovo Group Limited - C:\Program Files\Lenovo\Rescue and Recoveryrservice.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - c:\Program Files\Common Files\Lenovo\Scheduler	vtsched.exe

gen-hackman · Answer

c est bon y a rien..................

tiens fais du propre :

C'est peut etre un peu long mais ......ton pc.......ira 100 fois mieux(version marseillaise) :

1)Telecharge :
-------------

https://www.clubic.com/telecharger-fiche262022-purera.html

coche tout a droite , et "clean"

ensuite :
-----------

http://www.commentcamarche.net/telecharger/cleanafterme 34056612 avis opinions.php3

meme chose tu coches tout et "clean selected items"

source = Gen-Hackman..........et puis a faire aussi :

2)

---> Télécharge ToolsCleaner2 sur ton Bureau.
* Double-clique sur ToolsCleaner2.exe pour le lancer.
* Clique sur Recherche et laisse le scan agir.
* Clique sur Suppression pour finaliser.
* Tu peux, si tu le souhaites, te servir des Options Facultatives.
* Clique sur Quitter pour obtenir le rapport.
* Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

3/

---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :

http://www.commentcamarche.net/telecharger/telecharger 168 ccleaner

* Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
* Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
* Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs tant de fois qu il en trouve a l analyse(Sauvegarde la base de registre).
* Veille a ce que dans les options le reglage soit au demarrage de windows et réglé sur "effacement securisé" 35 passes (guttman)
* Décoche la case plus vieux que 48 h

4/
stp poste tous les rapports delivrés....merci.....

si tu as deja Ccleaner ne tiens pas compte du N°3.....mais fais ce qu il est demande avec
(desole le canned est pour tout le monde....lol)

Attention : ne pas toucher au PC pendant qu'il travaille !

B-Nettoyage et Défragmentation de tes Disques
*Nettoyage :
Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Général"
Cliques sur le bouton "nettoyage de disque", OK
tu le fais pour chacun de tes disques

*Vérifications des erreurs :
Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Outil"
"Vérifier maintenant", une boîte s'ouvre, cocher les cases :
-réparer automatiquement les erreurs...
-rechercher et tenter une récupération...
--->Démarrer, ok
Note : s'il te dis de redémarrer ton Pc pour le faire , tu redémarres et tu laisses faire, cela prend un peu de temps c'est normal
tu le fais pour chacun de tes disques

ensuite toujours dans le même onglet tu choisis :
*Défragmentation :
"défragmenter maintenant", OK
une boîte s'ouvre, tu sélectionnes le disque à défragmenter, et tu cliques sur "analyser", puis après l'analyse, "défragmenter" . OK
tu le fais pour chacun de tes disques

Note : si tu as un utilitaire pour défragmenter , utilises le à la place ...

pour ce faire je te conseille ceci :

https://www.clubic.com/telecharger-fiche44314-defraggler.html

C-Crées un point de restauration de ton PC :

Aller dans le Menu Démarrer puis dans Programmes,
- Ensuite dans Accessoires et enfin dans Outils système,
- Choisir "Restauration du système",
- Sélectionner "Créer un point de restauration",
- Cliquer sur "Suivant",
- Entrer un nom pour le point de restauration (ce nom doit être assez évocateur), exemple :
<< Point restauration sain >> .

--> Cliquer sur "Créer" et le point de restauration se créé automatiquement.

> Peux-tu vérifier ta console JAVA ici ? : https://www.java.com/fr/download/uninstalltool.jsp et installer la nouvelle version si besoin est (dans ce cas désinstalle avant l'ancienne version).
Pour info. ou en cas de problème : http://assiste.com.free.fr/p/abc/c/anti_java.html

> Mets à jour Acrobat si ce n'est pas le cas (désinstalle avant la version antérieure) : https://get2.adobe.com/reader/otherversions/

> Télécharge et installe Update Checker : https://filehippo.com/windows/tuning-utilities/
- Lance le programme. Une page web de ce type va s'ouvrir.
- Fais les mises à jour de tous les logiciels proposés pour Update. Je ne te conseille pas de faire celles pour les versions béta (elles peuvent être instables).
- Fais un copier/coller de la liste de éléments "Updates". Puis poste la sur le forum.
- Une fois les mises à jour effectuées, relance ton PC.
Tuto si problèmes : https://www.commentcamarche.net/list 9908 update checker vos logiciels sont ils a jour

> Télécharge et installe Easy Cleaner : https://www.01net.com/telecharger/windows/Utilitaire/registre/fiches/8351.html
(lien miroir : https://www.clubic.com/telecharger-fiche11170-easycleaner.html )
- Lance le programme puis clique sur <Registre> puis sur <Trouver>.
- A la fin du scan clique sur <Supprime tout> puis confirme par <Oui> puis quitte le programme.
Si besoin tuto ici : https://www.pcparadise.fr
et http://www.6ma.fr/tuto/easycleaner-nettoyer-windows-des-elements-obsoletes/

> Tu peux aussi vider ta corbeille......quoi que Ccleaner le fasse tout seul.......

> Si nous avons utilisé MalwaresByte's Anti-Malware : vide sa quarantaine.
- Lance le programme puis clique sur <Quarantaine>.
- Sélectionne tous les éléments puis clique sur <supprime>.
- Quitte la programme.

> Idem pour ton antivirus : vide sa quarantaine si ce n'est pas déjà fait...

> Désactive et réactive la restauration de système, pour cela : suis les instructions de ce lien :

liens XP:

http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20020830101856924

liens Vista :

http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/4f60eedf1156c8068525695b005ca288/c066b2e9a50cc948802572870032b170?OpenDocument
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Quelques conseils et recommandations pour l'avenir :

> Passe un coup d'AGV et/ou de MalwareByte's Anti-Malware et de Ccleaner de temps en temps (1 fois par semaine à 1 fois par mois, suivant l'utilisation que tu fais de ton PC. Tu peux aussi décocher la casse dans l’onglet "Options" puis clique sur "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures").
- Utilise aussi tes autres logiciels de protection (scannes antivirus, antispywares...). N'oublie pas de faire les mises à jour avant de les utiliser.
- Pense aussi à faire une défragmentation de tes disques durs de temps en temps (garde suffisamment d'espace sur C:\ (1/3 de libre pour être à l'aise))

> Pour bien protéger ton PC :
[1 seul Antivirus] + [1 seul Pare feu (/!\ les routeurs et box en possèdent un)] + [Quelques Antispywares] + [Mises à Jour récentes Windows et Logiciels de Protection] + [Utilisation de Firefox -ou autres- (Internet Explorer présente des failles de sécurité qui mettent longtemps avant d'être corrigées mais il faut absolument le conserver pour les mises à jour Windows)] + [Utilisation du PC en mode Invité (= limité). Lors d'une infection en mode administrateur le PC est beaucoup plus vulnérable. Voir ICI]
PS : En fait la meilleure des protections c'est toi même : ce que tu fais avec ton PC : où tu surfes, télécharges...ect....
Les virus utilisent les failles de ton PC pour infecter un système. Info : http://assiste.com.free.fr/p/abc/a/zombies_et_botnets.html

> Quelques liens utiles :
- https://www.commentcamarche.net/list 2432 securite proteger un ordinateur contre les malwares d internet
- https://sebsauvage.net/safehex.html
- https://www.zebulon.fr/telechargements/securite/protection-donnees-personnelles/spywareblaster.html (= petit logiciel qui bloque l'installation d'activ-X nuisibles au PC. Fonctionne en arrière plan)

et au final dernier petite chose :

http://www.commentcamarche.net/faq/sujet 11365 mettre son poste en probleme resolu

Voila,
Bonne lecture....

source : DllD..............;-)

Gen-hackman.......................

Stéf · Answer

PureRa v1.1 from RaProducts
Log created at 17:06 on 02/12/2008
===================================

C:\sqmdata00.sqm << Deleted.
C:\sqmdata01.sqm << Deleted.
C:\sqmdata02.sqm << Deleted.
C:\sqmdata03.sqm << Deleted.
C:\sqmdata04.sqm << Deleted.
C:\sqmdata05.sqm << Deleted.
C:\sqmdata06.sqm << Deleted.
C:\sqmdata07.sqm << Deleted.
C:\sqmnoopt00.sqm << Deleted.
C:\sqmnoopt01.sqm << Deleted.
C:\sqmnoopt02.sqm << Deleted.
C:\sqmnoopt03.sqm << Deleted.
C:\sqmnoopt04.sqm << Deleted.
C:\sqmnoopt05.sqm << Deleted.
C:\sqmnoopt06.sqm << Deleted.
C:\sqmnoopt07.sqm << Deleted.
C:\$Recycle.Bin\S-1-5-21-2352288461-954959840-994521942-500\desktop.ini << Deleted.
C:\$Recycle.Bin\S-1-5-21-2434041781-3930315339-2785766887-1000\desktop.ini << Deleted.
C:\$Recycle.Bin\S-1-5-21-2434041781-3930315339-2785766887-1001\desktop.ini << Deleted.
C:\$Recycle.Bin\S-1-5-21-2434041781-3930315339-2785766887-1002\desktop.ini << Deleted.
C:\$Recycle.Bin\S-1-5-21-2434041781-3930315339-2785766887-500\desktop.ini << Deleted.
C:\$Recycle.Bin\S-1-5-21-918056312-2952985149-2686913973-500\desktop.ini << Deleted.
C:\Program Files\desktop.ini << Deleted.
C:\Program Files\Common Files\microsoft shared\ink\TabletLinks\desktop.ini << Deleted.
C:\Program Files\Common Files\microsoft shared\Stationery\Desktop.ini << Deleted.
C:\Program Files\Common Files\microsoft shared\Web Server Extensions\50\bin\DESKTOP.INI << Deleted.
C:\Program Files\HP\Digital Imaging\Skins\oov1	j\Thumbs.db << Deleted.
C:\Program Files\Microsoft Games\Chess\desktop.ini << Deleted.
C:\Program Files\Microsoft Games\FreeCell\desktop.ini << Deleted.
C:\Program Files\Microsoft Games\Hearts\desktop.ini << Deleted.
C:\Program Files\Microsoft Games\Mahjong\desktop.ini << Deleted.
C:\Program Files\Microsoft Games\Purble Place\desktop.ini << Deleted.
C:\Program Files\Microsoft Games\Solitaire\desktop.ini << Deleted.
C:\Program Files\Microsoft Games\SpiderSolitaire\desktop.ini << Deleted.
C:\Program Files\Microsoft Office\Office10\1036\DataServices\DESKTOP.INI << Unable to Delete.
C:\Program Files\PCDR5\Images\img32_32\Thumbs.db << Deleted.
C:\Program Files\Windows Live\Mail\Stationery\Desktop.ini << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\ar-SA\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\cs-CZ\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\da-DK\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\de-DE\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\el-GR\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\en-US\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\es-ES\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\fi-FL\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\fr-FR\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\he-IL\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\hu-HU\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\it-IT\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\ja-JP\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\ko-KR\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget
b-NO\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget
l-NL\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\pl-PL\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\pt-BR\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\pt-PT\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadgetu-RU\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\sl-SL\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\sv-SE\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget	r-TR\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\zh-CN\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\zh-HK\images\Thumbs.db << Deleted.
C:\Program Files\Windows Sidebar\Gadgets\LenovoDeals.Gadget\zh-TW\images\Thumbs.db << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{00D8862B-6453-4957-A821-3D98D74C76BE}\PlayTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{00D8862B-6453-4957-A821-3D98D74C76BE}\SupportTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{00D8862B-6453-4957-A821-3D98D74C76BE}\SupportTasks\1\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{00D8862B-6453-4957-A821-3D98D74C76BE}\SupportTasks\2\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{205286E5-F5F2-4306-BDB1-864245E33227}\PlayTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{205286E5-F5F2-4306-BDB1-864245E33227}\SupportTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{205286E5-F5F2-4306-BDB1-864245E33227}\SupportTasks\1\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{205286E5-F5F2-4306-BDB1-864245E33227}\SupportTasks\2\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{48DE2B25-A3A2-4121-808D-5DD991D9FEBB}\PlayTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{48DE2B25-A3A2-4121-808D-5DD991D9FEBB}\SupportTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{48DE2B25-A3A2-4121-808D-5DD991D9FEBB}\SupportTasks\1\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{6C815596-821F-40b3-8A84-643B73A8EB16}\PlayTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{6C815596-821F-40b3-8A84-643B73A8EB16}\SupportTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{6C815596-821F-40b3-8A84-643B73A8EB16}\SupportTasks\1\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{6C815596-821F-40b3-8A84-643B73A8EB16}\SupportTasks\2\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{91CA4D38-EA2B-4f3c-94DE-36C1386182FC}\PlayTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{91CA4D38-EA2B-4f3c-94DE-36C1386182FC}\SupportTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{91CA4D38-EA2B-4f3c-94DE-36C1386182FC}\SupportTasks\1\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{91CA4D38-EA2B-4f3c-94DE-36C1386182FC}\SupportTasks\2\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{AF698A5B-24D6-4f78-AE95-204B09EDC7B6}\PlayTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{AF698A5B-24D6-4f78-AE95-204B09EDC7B6}\SupportTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{AF698A5B-24D6-4f78-AE95-204B09EDC7B6}\SupportTasks\1\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{AF698A5B-24D6-4f78-AE95-204B09EDC7B6}\SupportTasks\2\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{AFA7FF39-1DDF-4f70-A2D5-23FCFFF02E5F}\PlayTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{AFA7FF39-1DDF-4f70-A2D5-23FCFFF02E5F}\SupportTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{AFA7FF39-1DDF-4f70-A2D5-23FCFFF02E5F}\SupportTasks\1\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{AFA7FF39-1DDF-4f70-A2D5-23FCFFF02E5F}\SupportTasks\2\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{D1A7F7E0-D4E9-49e8-BF2C-CEAA01D2E670}\PlayTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{D1A7F7E0-D4E9-49e8-BF2C-CEAA01D2E670}\SupportTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{D1A7F7E0-D4E9-49e8-BF2C-CEAA01D2E670}\SupportTasks\1\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{D1A7F7E0-D4E9-49e8-BF2C-CEAA01D2E670}\SupportTasks\2\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{E91579C0-4EA9-4a2a-A9B2-04BEF1D6DC29}\PlayTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{E91579C0-4EA9-4a2a-A9B2-04BEF1D6DC29}\SupportTasks\0\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{E91579C0-4EA9-4a2a-A9B2-04BEF1D6DC29}\SupportTasks\1\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\GameExplorer\{E91579C0-4EA9-4a2a-A9B2-04BEF1D6DC29}\SupportTasks\2\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Extras and Upgrades\Desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini << Deleted.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC\Desktop.ini << Deleted.
C:\SWTOOLS\PerformanceManager\images\Thumbs.db << Deleted.
C:\SWTOOLS\VistaOOBEFirstRun\images\Thumbs.db << Deleted.
C:\SWTOOLS\VistaWel\ACDCTravelAdapter\Thumbs.db << Deleted.
C:\SWTOOLS\VistaWel\CarryingCases\Thumbs.db << Deleted.
C:\SWTOOLS\VistaWel\ComputraceLojack\Thumbs.db << Deleted.
C:\SWTOOLS\VistaWel\Corel\Thumbs.db << Deleted.
C:\SWTOOLS\VistaWel\DocksandPortReplicators\Thumbs.db << Deleted.
C:\SWTOOLS\VistaWel\FingerprintReader\Thumbs.db << Deleted.
C:\SWTOOLS\VistaWel\LaptopLocks\Thumbs.db << Deleted.
C:\SWTOOLS\VistaWel\LenovoCare\Thumbs.db << Deleted.
C:\SWTOOLS\VistaWel\LenovoRecyclingService\Thumbs.db << Deleted.
C:\SWTOOLS\VistaWel\Monitors\Thumbs.db << Deleted.
C:\SWTOOLS\VistaWel\ProductivityCenter\Thumbs.db << Deleted.
C:\SWTOOLS\VistaWel\Storage\Thumbs.db << Deleted.
C:\SWTOOLS\VistaWel\WarrantyUpgrade\Thumbs.db << Deleted.
C:\Users\desktop.ini << Deleted.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{00D8862B-6453-4957-A821-3D98D74C76BE}\PlayTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{00D8862B-6453-4957-A821-3D98D74C76BE}\SupportTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{00D8862B-6453-4957-A821-3D98D74C76BE}\SupportTasks\1\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{00D8862B-6453-4957-A821-3D98D74C76BE}\SupportTasks\2\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{205286E5-F5F2-4306-BDB1-864245E33227}\PlayTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{205286E5-F5F2-4306-BDB1-864245E33227}\SupportTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{205286E5-F5F2-4306-BDB1-864245E33227}\SupportTasks\1\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{205286E5-F5F2-4306-BDB1-864245E33227}\SupportTasks\2\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{48DE2B25-A3A2-4121-808D-5DD991D9FEBB}\PlayTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{48DE2B25-A3A2-4121-808D-5DD991D9FEBB}\SupportTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{48DE2B25-A3A2-4121-808D-5DD991D9FEBB}\SupportTasks\1\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{6C815596-821F-40b3-8A84-643B73A8EB16}\PlayTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{6C815596-821F-40b3-8A84-643B73A8EB16}\SupportTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{6C815596-821F-40b3-8A84-643B73A8EB16}\SupportTasks\1\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{6C815596-821F-40b3-8A84-643B73A8EB16}\SupportTasks\2\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{91CA4D38-EA2B-4f3c-94DE-36C1386182FC}\PlayTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{91CA4D38-EA2B-4f3c-94DE-36C1386182FC}\SupportTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{91CA4D38-EA2B-4f3c-94DE-36C1386182FC}\SupportTasks\1\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{91CA4D38-EA2B-4f3c-94DE-36C1386182FC}\SupportTasks\2\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{AF698A5B-24D6-4f78-AE95-204B09EDC7B6}\PlayTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{AF698A5B-24D6-4f78-AE95-204B09EDC7B6}\SupportTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{AF698A5B-24D6-4f78-AE95-204B09EDC7B6}\SupportTasks\1\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{AF698A5B-24D6-4f78-AE95-204B09EDC7B6}\SupportTasks\2\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{AFA7FF39-1DDF-4f70-A2D5-23FCFFF02E5F}\PlayTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{AFA7FF39-1DDF-4f70-A2D5-23FCFFF02E5F}\SupportTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{AFA7FF39-1DDF-4f70-A2D5-23FCFFF02E5F}\SupportTasks\1\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{AFA7FF39-1DDF-4f70-A2D5-23FCFFF02E5F}\SupportTasks\2\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{D1A7F7E0-D4E9-49e8-BF2C-CEAA01D2E670}\PlayTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{D1A7F7E0-D4E9-49e8-BF2C-CEAA01D2E670}\SupportTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{D1A7F7E0-D4E9-49e8-BF2C-CEAA01D2E670}\SupportTasks\1\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{D1A7F7E0-D4E9-49e8-BF2C-CEAA01D2E670}\SupportTasks\2\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{E91579C0-4EA9-4a2a-A9B2-04BEF1D6DC29}\PlayTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{E91579C0-4EA9-4a2a-A9B2-04BEF1D6DC29}\SupportTasks\0\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{E91579C0-4EA9-4a2a-A9B2-04BEF1D6DC29}\SupportTasks\1\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\GameExplorer\{E91579C0-4EA9-4a2a-A9B2-04BEF1D6DC29}\SupportTasks\2\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\Start Menu\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Extras and Upgrades\Desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Games\Desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini << Unable to Delete.
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Tablet PC\Desktop.ini << Unable to Delete.
C:\Users\Default\AppData\Local\IconCache.db << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\desktop.ini << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\HP6341V6\desktop.ini << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\N64LYOAF\desktop.ini << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\PV0ZF4UU\desktop.ini << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Feeds Cache\ZCIFO6ES\desktop.ini << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Windows\History\desktop.ini << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DN896E64\desktop.ini << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TGW3IW96\desktop.ini << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V4OM9PVQ\desktop.ini << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WFTWBPYO\desktop.ini << Deleted.
C:\Users\Default\AppData\Local\Microsoft\Windows Mail\Stationery\Desktop.ini << Deleted.
C:\Users\Default\AppData\LocalLow\desktop.ini << Deleted.
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini << Deleted.
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini << Deleted.
C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini << Deleted.
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini << Deleted.
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini << Deleted.
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini << Deleted.
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini << Deleted.
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini << Deleted.
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini << Deleted.
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini << Deleted.
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini << Deleted.
C:\Users\Default\Contacts\desktop.ini << Deleted.
C:\Users\Default\Desktop\desktop.ini << Deleted.
C:\Users\Default\Documents\desktop.ini << Deleted.
C:\Users\Default\Downloads\desktop.ini << Deleted.
C:\Users\Default\Favorites\desktop.ini << Deleted.
C:\Users\Default\Links\desktop.ini << Deleted.
C:\Users\Default\Music\desktop.ini << Deleted.
C:\Users\Default\Pictures\desktop.ini << Deleted.
C:\Users\Default\Saved Games\desktop.ini << Deleted.
C:\Users\Default\Searches\desktop.ini << Deleted.
C:\Users\Default\Videos\desktop.ini << Deleted.
C:\Users\Public\desktop.ini << Deleted.
C:\Users\Public\Desktop\desktop.ini << Deleted.
C:\Users\Public\Documents\desktop.ini << Deleted.
C:\Users\Public\Downloads\desktop.ini << Deleted.
C:\Users\Public\Music\desktop.ini << Deleted.
C:\Users\Public\Music\Sample Music\desktop.ini << Deleted.
C:\Users\Public\Pictures\desktop.ini << Deleted.
C:\Users\Public\Pictures\Sample Pictures\desktop.ini << Deleted.
C:\Users\Public\Videos\desktop.ini << Deleted.
C:\Users\Public\Videos\Sample Videos\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\IconCache.db << Deleted.
C:\Users\Stéfanie\AppData\Local\Google\Picasa2\db2	humbs.db << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Feeds Cache\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Feeds Cache\4DZHSJ7D\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Feeds Cache\GWW9X7SH\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Feeds Cache\J95IZMXH\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Feeds Cache\TZBNB3UA\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Portable Devices\wpdlog00.sqm << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Portable Devices\wpdlog01.sqm << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Portable Devices\wpdlog02.sqm << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Portable Devices\wpdlog03.sqm << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Portable Devices\wpdlog04.sqm << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Portable Devices\wpdlog05.sqm << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\History\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\History\Low\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\History\Low\History.IE5\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1ZWNJAKB\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DPU849EJ\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ILY6S6CQ\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J4IV9AKR\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NXTYC0G1\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RKTS3ZGI\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XQ28QG12\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XYF079Y7\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7GDH7C9E\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\J5YV4S8N\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\QDQO3SS4\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZTOTRA3R\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows Live Contacts\Desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows Mail\Stationery\Desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft\Windows Photo Gallery\Original Images\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Local\Microsoft Games\Solitaire\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\LocalLow\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1014184678\sqmnoopt00.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1014184678\sqmnoopt01.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1014184678\sqmnoopt02.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1014184678\sqmnoopt03.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1469559587\sqmnoopt00.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1469559587\sqmnoopt01.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1469559587\sqmnoopt02.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1469559587\sqmnoopt03.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1469559587\sqmnoopt04.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1469559587\sqmnoopt05.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1469559587\sqmnoopt06.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1469559587\sqmnoopt07.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1469559587\sqmnoopt08.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1469559587\sqmnoopt09.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\1469559587\sqmnoopt10.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\2549735425\sqmnoopt00.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\2583314834\sqmnoopt00.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\2583314834\sqmnoopt01.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\2583314834\sqmnoopt02.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\2583314834\sqmnoopt03.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\2583314834\sqmnoopt04.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\2583314834\sqmnoopt05.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\2583314834\sqmnoopt06.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\2583314834\sqmnoopt07.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\264368428\sqmnoopt00.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\264368428\sqmnoopt01.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\264368428\sqmnoopt02.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\264368428\sqmnoopt03.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\264368428\sqmnoopt04.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt00.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt01.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt02.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt03.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt04.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt05.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt06.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt07.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt08.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt09.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt10.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt11.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt12.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt13.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt14.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt15.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt16.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt17.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt18.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\MSN Messenger\3965520759\sqmnoopt19.sqm << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Mes sites Web sur MSN\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini << Deleted.
C:\Users\Stéfanie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini << Deleted.
C:\Users\Stéfanie\Contacts\desktop.ini << Deleted.
C:\Users\Stéfanie\Desktop\desktop.ini << Deleted.
C:\Users\Stéfanie\Desktop\%USERPROFILE%\AppData\Local\Microsoft\Feeds Cache\desktop.ini << Deleted.
C:\Users\Stéfanie\Desktop\%USERPROFILE%\AppData\Local\Microsoft\Feeds Cache\34SHC828\desktop.ini << Deleted.
C:\Users\Stéfanie\Desktop\%USERPROFILE%\AppData\Local\Microsoft\Feeds Cache\C27A0H4X\desktop.ini << Deleted.
C:\Users\Stéfanie\Desktop\%USERPROFILE%\AppData\Local\Microsoft\Feeds Cache\U4GSISWQ\desktop.ini << Deleted.
C:\Users\Stéfanie\Desktop\%USERPROFILE%\AppData\Local\Microsoft\Feeds Cache\VII18TL8\desktop.ini << Deleted.
C:\Users\Stéfanie\Desktop\Documents\desktop.ini << Deleted.
C:\Users\Stéfanie\Desktop\Documents\Downloads\desktop.ini << Deleted.
C:\Users\Stéfanie\Desktop\Documents\Fax\Drafts\desktop.ini << Deleted.
C:\Users\Stéfanie\Desktop\Documents\Fax\Inbox\desktop.ini << Deleted.
C:\Users\Stéfanie\Desktop\Documents\Scanned Documents\desktop.ini << Deleted.
C:\Users\Stéfanie\Documents Stéfanie\Emploi, Formation\Certificats Stéf\Thumbs.db << Deleted.
C:\Users\Stéfanie\Favorites\desktop.ini << Deleted.
C:\Users\Stéfanie\Favorites\Links\desktop.ini << Deleted.
C:\Users\Stéfanie\Links\desktop.ini << Deleted.
C:\Users\Stéfanie\Music\desktop.ini << Deleted.
C:\Users\Stéfanie\Music\Backstreet Boys\desktop.ini << Deleted.
C:\Users\Stéfanie\Music\CD A Faire\desktop.ini << Deleted.
C:\Users\Stéfanie\Music\CD A Faire\CD Papa\desktop.ini << Deleted.
C:\Users\Stéfanie\Music\Génériques Dessins Animés\desktop.ini << Deleted.
C:\Users\Stéfanie\Music\Musique Alexia\desktop.ini << Deleted.
C:\Users\Stéfanie\Music\Nous C Nous\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\desktop.ini << Deleted.
C:\Users\Stéfanie\Pictures\2006\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\2006\Anniv. Cindy M. 02.12.2006\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\2006\Anniv. Maman 16.12.2006\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\2006\Anniversaire Stéf. 01.11.2006\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\2006\Marché de Noël 17.12.2006\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\2006\MPS2pA\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\2006\Nouvel-An 31.12.2006\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\2006\Pacha 06.10.2006\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\2006\Paléo 2006 Vidéos\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\2007\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\2007\Chez James 17.02.07\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\2007\Nouvelle Epoque 13.01.07\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\2007\RKC 11.03.2007\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\2007\Tiziano Ferro 25.02.07\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\2007\Vendredi 18.05.2007\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Appartement 128\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Hardcore\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Hardcore\Divers Hardcore\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Hardcore\M.O.H Dortmund Vidéos\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Images Diverses\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Images Diverses\Animaux\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Images Diverses\Bob L'Eponge + Placebo\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Images Diverses\Bob L'Eponge + Placebo\Placebo\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Images Diverses\Bouledogue Américain\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Images Diverses\Italia\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Photos Extraites des CD\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Piercings + Tattoos\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Piercings + Tattoos\Projets Tattoos\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Prison Break\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\QuickCam\Mes photos Logitech\Thumbs.db << Deleted.
C:\Users\Stéfanie\Pictures\Vacances Italia\Thumbs.db << Deleted.
C:\Users\Stéfanie\Saved Games\desktop.ini << Deleted.
C:\Users\Stéfanie\Saved Games\Microsoft Games\desktop.ini << Deleted.
C:\Users\Stéfanie\Searches\desktop.ini << Deleted.
C:\Users\Stéfanie\Videos\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Local\IconCache.db << Deleted.
C:\Users\Stéfanie_2\AppData\Local\Microsoft\Feeds Cache\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Local\Microsoft\Feeds Cache\HP6341V6\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Local\Microsoft\Feeds Cache\N64LYOAF\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Local\Microsoft\Feeds Cache\PV0ZF4UU\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Local\Microsoft\Feeds Cache\ZCIFO6ES\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Local\Microsoft\Windows\History\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Local\Microsoft\Windows Mail\Stationery\Desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\LocalLow\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini << Deleted.
C:\Users\Stéfanie_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini << Deleted.
C:\Users\Stéfanie_2\Contacts\desktop.ini << Deleted.
C:\Users\Stéfanie_2\Desktop\desktop.ini << Deleted.
C:\Users\Stéfanie_2\Documents\desktop.ini << Deleted.
C:\Users\Stéfanie_2\Downloads\desktop.ini << Deleted.
C:\Users\Stéfanie_2\Favorites\desktop.ini << Deleted.
C:\Users\Stéfanie_2\Favorites\Links\desktop.ini << Deleted.
C:\Users\Stéfanie_2\Links\desktop.ini << Deleted.
C:\Users\Stéfanie_2\Music\desktop.ini << Deleted.
C:\Users\Stéfanie_2\Pictures\desktop.ini << Deleted.
C:\Users\Stéfanie_2\Saved Games\desktop.ini << Deleted.
C:\Users\Stéfanie_2\Searches\desktop.ini << Deleted.
C:\Users\Stéfanie_2\Videos\desktop.ini << Deleted.
C:\Windows\assembly\Desktop.ini << Unable to Delete.
C:\Windows\Downloaded Program Files\desktop.ini << Unable to Delete.
C:\Windows\Fonts\desktop.ini << Deleted.
C:\Windows\Media\Desktop.ini << Deleted.
C:\Windows\Offline Web Pages\desktop.ini << Unable to Delete.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\desktop.ini << Deleted.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini << Deleted.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini << Deleted.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R8X5STIK\desktop.ini << Deleted.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XBQNY6Z0\desktop.ini << Deleted.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YO1HVPX1\desktop.ini << Deleted.
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZSCEDYOZ\desktop.ini << Deleted.
C:\Windows\ServiceProfiles\LocalService\AppData\LocalLow\desktop.ini << Deleted.
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini << Deleted.
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini << Deleted.
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini << Deleted.
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini << Deleted.
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini << Deleted.
C:\Windows\ServiceProfiles\NetworkService\AppData\LocalLow\desktop.ini << Deleted.
C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\SendTo\Desktop.ini << Deleted.
C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Desktop.ini << Deleted.
C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Desktop.ini << Deleted.
C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Desktop.ini << Deleted.
C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini << Deleted.
C:\Windows\System32\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Feeds Cache\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Feeds Cache\K24PM0G5\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Feeds Cache\NINYUGY0\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Feeds Cache\S1DYCZ0C\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Feeds Cache\WY9UF93K\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog00.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog01.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog02.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog03.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog04.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog05.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog06.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog07.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog08.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog09.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog10.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog11.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog12.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog13.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog14.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog15.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog16.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog17.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog18.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog19.sqm << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0LLEBCMP\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5P2W8M72\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UX0RNG9N\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X7N86XO5\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\LocalLow\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\Contacts\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\Favorites\desktop.ini << Deleted.
C:\Windows\System32\config\systemprofile\Music\desktop.ini << Deleted.
C:\Windows\System32\oobe\info\Thumbs.db << Deleted.
C:\Windows\winsxs\x86_microsoft-windows-fontext_31bf3856ad364e35_6.0.6000.16386_none_9c4ed686f6b23a4a\desktop.ini << Deleted.
C:\Windows\winsxs\x86_microsoft-windows-fontext_31bf3856ad364e35_6.0.6001.18000_none_9e859882f39d4b1e\desktop.ini << Deleted.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16386_none_3fc98d12c451f0a7\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16444_none_3ff2ce14c4334b5c\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16485_none_3fc88eaec452d477\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16633_none_3ffca182c42c1062\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16651_none_3fe50116c43e1596\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16721_none_400572c0c425beea\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.20543_none_407b6a95dd51d1cf\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.20597_none_40495c21dd76c2e0\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.20762_none_4064ce3fdd62eaa8\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.20788_none_40553023dd6dba94\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.20885_none_4052312bdd706bb6\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18000_none_42004f0ec13d017b\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18032_none_41e1dfdec15387fc\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18112_none_41f7819cc1434d41\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22132_none_426b7ca9da7127c6\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22233_none_426c7ed9da703e44\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.16386_none_34efa630173804dd\desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.18000_none_3726682c142315b1\desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-ie-offlinefavorites_31bf3856ad364e35_6.0.6000.16386_none_5ef520fc54ce7fc1\desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-ie-offlinefavorites_31bf3856ad364e35_6.0.6001.18000_none_612be2f851b99095\desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6000.16386_none_ef216b8c52ca2227\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6000.16480_none_ef1b6bb652cf8744\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6000.20590_none_ef9a38956bf542ff\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6001.18000_none_f1582d884fb532fb\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-musicsamples_31bf3856ad364e35_6.0.6000.16386_none_a81d9e66b53cd1c0\desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-photosamples_31bf3856ad364e35_6.0.6000.16386_none_95425ac284e42b43\desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-s..i-accessibilityuser_31bf3856ad364e35_6.0.6000.16386_none_610db8060bd1ef87\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-s..i-extrasandupgrades_31bf3856ad364e35_6.0.6000.16386_none_adc50b6db3b3e7f7\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-s..ini-accessoriesuser_31bf3856ad364e35_6.0.6000.16386_none_21cd6bba173aaff5\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-s..ini-maintenanceuser_31bf3856ad364e35_6.0.6000.16386_none_03d0de1058f4040c\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-s..ini-systemtoolsuser_31bf3856ad364e35_6.0.6000.16386_none_1e74ebc2e69c66dd\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-s..ktopini-accessories_31bf3856ad364e35_6.0.6000.16386_none_e9e059e8bc7eccc4\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-s..ktopini-maintenance_31bf3856ad364e35_6.0.6000.16386_none_5c637200a03c02ed\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-s..ktopini-systemtools_31bf3856ad364e35_6.0.6000.16386_none_7c367e9d8ab8dbdc\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-s..opini-accessibility_31bf3856ad364e35_6.0.6000.16386_none_d8349b05805d9202\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-s..sktopini-sendtouser_31bf3856ad364e35_6.0.6000.16386_none_060dcf85972dae22\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-shell-sounds_31bf3856ad364e35_6.0.6000.16386_none_14dbba36b89e8653\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.0.6000.16386_none_157ac655a7ad2511\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.0.6001.18000_none_17b18851a49835e5\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-stickynotes_31bf3856ad364e35_6.0.6000.16386_none_10acea2c3777be62\Desktop.ini << Unable to Delete.
C:\Windows\winsxs\x86_microsoft-windows-videosamples_31bf3856ad364e35_6.0.6000.16386_none_f3766b6019679882\desktop.ini << Unable to Delete.

===================================
-EOF-

Stéf · Answer

Avec EasyCleaner, il a pu supprimer quelques entrées, et le reste ça me met "Echec d'easy cleaner à la suppression de 318 entrées"..... C'est mon ordi qui fait tout planter, ou c'est Vista?

Suspicion virus

18 réponses

Discussions similaires