Antinul.vbe Résolu

Question

Bonjour,

Comme beaucoup de gens en ce moment, j'ai reçu le "virus" antinul.vbe m'indiquant de travailler ...

C'est pourquoi je viens vers vous aujourd'hui, pour essayer d'en finir avec ce "virus" bien embêtant !

En attente de vous lire, cordialement,

Voronov.

Utilisateur anonyme · Answer

Salut,


Télécharge HijackThis (outils de dignostic) ici : 

->  Fais un clic droit sur un des liens et choisi enregistrer la cible sous .... le bureau
->  http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe 
->  ftp://ftp.commentcamarche.com/download/HJTInstall.exe

-> Fais un double-clic sur HJTInstall.exe afin de lancer l'installation 

-> Clique sur Install ensuite sur I Accept 

-> Clique sur Do a scan system and save log file 

-> Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse

Voronov · Answer

Merci de ta réponse rapide !

Voici le log, tout en sachant que j'ai coupé le programme du virus avec ctrl+alt+suppr.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:38:36, on 25/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\zHotkey.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Travaillez plus.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Au travail !Arrêtez de surfer!
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wscript.exe C:\WINDOWS\system32\antinul.vbe
O1 - Hosts: 88.198.6.227 l2authd.lineage2.com # m0o age
O1 - Hosts: 88.198.6.227 L2testauthd.lineage2.com #m0o age
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [ShowWnd] ShowWnd.exe
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [EPSON Stylus C48 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I091.EXE /P33 "EPSON Stylus C48 Series (Copie 1)" /O6 "USB001" /M "Stylus C48"
O4 - HKLM\..\Run: [EPSON Stylus C48 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I091.EXE /P23 "EPSON Stylus C48 Series" /O6 "USB001" /M "Stylus C48"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [CHotkey] zHotkey.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Researcher\EROProj.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) - http://gamingzone.ubisoft.com/dev/packages/GSManager.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\WINDOWS\System32\appdrvrem01.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

Utilisateur anonyme · Answer

Telecharge UsbFix sur ton bureau

--> Lance l installation avec les parametres par default

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

--> Double clic sur le raccourci UsbFix sur ton bureau

-->choisi l option 1 (nettoyage)

--> Le pc va redémarer

-->Apres redémarrage post le rapport UsbFix.txt 

Note : le rapport UsbFix.txt est sauvegardé a la racine du disque

Voronov · Answer

Désolé pour le temps d'attente, la suppression fut longue ...

voici le log UsbFix :

-------------- UsbFix V2.413.1 ---------------

* User : Voronov - ORDI_BENJAMIN
* Outils mis a jours le 24/11/2008 par Chiquitine29 et Chimay8
* Recherche effectuée à 10:53:34 le 25/11/2008
* Windows Xp - Internet Explorer 7.0.5730.13

--------------- [ Processus actifs ] ----------------

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LogonUI.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\system32\wscript.exe
C:\DOCUME~1\Voronov\LOCALS~1\Temp\1.tmp\b2e.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\zHotkey.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\a-squared Free\a2service.exe
C:\WINDOWS\System32\appdrvrem01.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\ati2sgag.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe

--------------- [ Informations lecteurs ] ----------------

C: - Lecteur fixe

I: - Lecteur amovible

+- Contenu de l'autorun : I:\autorun.inf

[autorun]
open=wscript.exe antinul.vbe
shell\open=Open
shell\open\Command=wscript.exe antinul.vbe

--------------- [ Lecteur C ] ----------------

C: - Lecteur fixe

+- Listing des fichiers présents :

[17/04/2007 16:44][--a------] C:\AUTOEXEC.BAT
[05/08/2004 13:00][-rahs----] C:\NTDETECT.COM
[22/11/2008 20:58][---hs----] C:\boot.ini
[16/06/2008 17:08][--a------] C:\rapport.txt
[16/06/2008 17:08][--a------] C:\UsbFix.txt
[17/04/2007 16:44][--a------] C:\CONFIG.SYS
[17/04/2007 16:44][--a------] C:\IO.SYS
[17/04/2007 16:44][--a------] C:\MSDOS.SYS
[17/04/2007 16:44][--a------] C:\pagefile.sys

--------------- [ Lecteur I ] ----------------

I: - Lecteur amovible

+- Listing des fichiers présents :

[19/11/2008 15:53][-rahs----] I:\autorun.inf
[19/11/2008 15:53][-rahs----] I:\antinul.vbe

--------------- [ Registre / Startup ] ----------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]

ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\AdobeUpdater=
<NO NAME>=

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]

avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
SunJavaUpdateSched="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
ShowWnd=ShowWnd.exe
Raccourci vers la page des propriétés de High Definition Audio=HDAudPropShortcut.exe
EPSON Stylus C48 Series (Copie 1)=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I091.EXE /P33 "EPSON Stylus C48 Series (Copie 1)" /O6 "USB001" /M "Stylus C48"
EPSON Stylus C48 Series=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I091.EXE /P23 "EPSON Stylus C48 Series" /O6 "USB001" /M "Stylus C48"
Cmaudio=RunDll32 cmicnfg.cpl,CMICtrlWnd
CHotkey=zHotkey.exe
BluetoothAuthenticationAgent=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
NoChange=1
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1
<NO NAME>=

--------------- [ Registre / Mountpoint2 ] ----------------

-> Recherche négative.

--------------- [ Nettoyage des disques ] ----------------

Supprimé ! - [22/11/2008 17:35][-rahs----] C:\WINDOWS\system32\antinul.vbe
Supprimé ! - [11/05/2008 15:46][--a--c---] C:\WINDOWS\system32\tmp.reg
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3748
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher504
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\CAPS
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\CAPS\adobe_caps.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\ar_AE
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\bg_BG
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\cs_CZ
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\da_DK
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\de_DE
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\el_GR
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\en_US
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\es_ES
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\et_EE
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\fi_FI
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\fr_FR
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\ar_AE\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\bg_BG\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\cs_CZ\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\da_DK\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\de_DE\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\el_GR\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\en_US\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\es_ES\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\et_EE\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\fi_FI\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3372\PBSLocalizedStrings\PBSLocalization\fr_FR\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\BackUp
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\CAPS
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\config.xml
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\InstallerResults.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\manifest.xml
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\RollbackManifest.xml
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\RTPatch
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\ZippedStagingArea
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\CAPS\adobe_caps.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalizedStrings.zip
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\ar_AE
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\bg_BG
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\cs_CZ
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\da_DK
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\de_DE
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\el_GR
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\en_US
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\es_ES
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\et_EE
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\fi_FI
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\fr_FR
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\he_IL
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\hr_HR
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\hu_HU
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\it_IT
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\ja_JP
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\ko_KR
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\lt_LT
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\lv_LV
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\nb_NO
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\nl_NL
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\pl_PL
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\pt_BR
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\ro_RO
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\ru_RU
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\sk_SK
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\sl_SI
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\sv_SE
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\tr_TR
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\uk_UA
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\zh_CN
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\zh_TW
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\ar_AE\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\bg_BG\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\cs_CZ\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\da_DK\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\de_DE\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\el_GR\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\en_US\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\es_ES\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\et_EE\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\fi_FI\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\fr_FR\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\he_IL\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\hr_HR\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\hu_HU\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\it_IT\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\ja_JP\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\ko_KR\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\lt_LT\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\lv_LV\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\nb_NO\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\nl_NL\PBS.ZDCT
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\pl_PL\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\pt_BR\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\ro_RO\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\ru_RU\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\sk_SK\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\sl_SI\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\sv_SE\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\tr_TR\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\uk_UA\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\zh_CN\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\PBSLocalizedStrings\PBSLocalization\zh_TW\PBS.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\RTPatch\patch.exe
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\RTPatch\patchw32.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1136
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1136.apl
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1213
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1213.mox
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\12196
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\12196.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1245
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1245.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1246
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1246.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1247
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1247.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1248
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1248.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1249
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1249.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1252
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1252.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1253
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1253.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1254
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1254.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1255
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1255.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1256
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1256.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1257
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1257.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1258
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1258.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1261
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1261.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1262
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1262.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1264
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1264.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1265
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1265.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1266
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1266.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1267
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1267.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1268
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1268.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1269
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1269.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1282
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1282.jsx
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1284
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1284.8BI
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1288
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1288.8BX
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1292
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1292.8BX
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1296
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1296.8BX
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1301
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1301.8bi
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1303
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1303.8BI
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1309
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1309.ini
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1310
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1310.lng
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1313
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1313.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1315
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1315.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1317
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1317.zip
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1318
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1318.zip
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1322
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1322.ini
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1323
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1323.ini
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1325
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1325.ini
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1327
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1327.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1328
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1328.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1330
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1330.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1331
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1331.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1332
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1332.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1333
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1333.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1339
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1339.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1342
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1342.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1343
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1343.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1352
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1352.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1353
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1353.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1364
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1364.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1374
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1374.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1375
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1375.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1378
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1378.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1379
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1379.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1383
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1383.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1384
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1384.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1393
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1393.exe
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1396
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1396.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1404
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1404.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1410
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1410.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1411
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1411.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1423
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1423.exe
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1431
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1431.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1432
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1432.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1433
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1433.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1434
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1434.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1435
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1435.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1436
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1436.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1437
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1437.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1438
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1438.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1439
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1439.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1440
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1440.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1441
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1441.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1449
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1449.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1450
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1450.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1451
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1451.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1489
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1489.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1490
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1490.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1496
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1496.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1504
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1504.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1507
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1507.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1510
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1510.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1516
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1516.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1525
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1525.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1532
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1532.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1533
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1533.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1538
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1538.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1544
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1544.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1555
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1555.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1556
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1556.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1557
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1557.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1558
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1558.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1559
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1559.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1560
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1560.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1561
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1561.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1564
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1564.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1567
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1567.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1573
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1573.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1582
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1582.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1589
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1589.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1590
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1590.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1595
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1595.exv
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1600
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1600.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1601
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1601.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1658
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1658.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1659
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1659.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1660
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1660.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1661
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1661.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1667
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1667.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1668
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1668.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1676
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1676.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1685
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1685.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1686
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1686.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1687
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1687.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1688
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1688.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1689
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1689.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1690
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1690.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1691
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1691.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1693
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1693.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1694
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1694.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1696
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1696.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1697
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1697.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1698
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1698.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1699
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1699.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1700
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1700.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1701
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1701.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1702
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1702.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1703
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1703.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1706
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1706.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1708
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1708.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1709
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1709.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1710
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1710.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1713
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1713.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1714
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1714.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1720
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1720.js
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1722
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1722.js
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1724
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1724.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1725
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1725.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1726
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1726.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1730
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1730.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1732
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1732.exe
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1733
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1733.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1745
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1745.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1746
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1746.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1747
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1747.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1759
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1759.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1761
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1761.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1762
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1762.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1763
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1763.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1767
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1767.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1768
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1768.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1769
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1769.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1771
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1771.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1772
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1772.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1773
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1773.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1774
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1774.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1775
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1775.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1783
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1783.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1785
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1785.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1788
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1788.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1791
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1791.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1797
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1797.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1798
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1798.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1799
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1799.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1805
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1805.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1807
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1807.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1808
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1808.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1809
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1809.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1810
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1810.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1812
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1812.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1813
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1813.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1814
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1814.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1815
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1815.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1823
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1823.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1824
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1824.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1825
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1825.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1839
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1839.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1840
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1840.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1890
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1890.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1892
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1892.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1893
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1893.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1894
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1894.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1903
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1903.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1907
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1907.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1908
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1908.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1909
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1909.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1912
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1912.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1916
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1916.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1924
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1924.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1925
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1925.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1926
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1926.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1931
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1931.js
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1933
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1933.js
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1941
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1941.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1942
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1942.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1943
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1943.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1944
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1944.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1945
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1945.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1946
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1946.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1959
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1959.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1962
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1962.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1963
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1963.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1966
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1966.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1971
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1971.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1972
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1972.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1973
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1973.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1974
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1974.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1977
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1977.zdct
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1982
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1982.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1983
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1983.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1985
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1985.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1987
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1987.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1988
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1988.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1992
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1992.js
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1993
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1993.js
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1994
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1994.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1995
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1995.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1996
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1996.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1997
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1997.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1999
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\1999.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2016
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2016.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2018
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2018.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2032
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2032.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2033
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2033.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2034
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2034.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2035
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2035.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2036
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2036.html
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2053
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2053.dll
Supprimé ! - C:\DOCUME~1\Voronov\LOCALS~1\Temp\Patcher\Patcher3536\StagingArea\2054
Supprimé !

Utilisateur anonyme · Answer

ok

refais un scan hijackthis et post le rapport stp

Voronov · Answer

Voici :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:07:27, on 25/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\DOCUME~1\Voronov\LOCALS~1\Temp\1.tmp\b2e.exe
C:\WINDOWS\system32\cmd.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\zHotkey.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32
otepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wscript.exe C:\WINDOWS\system32\antinul.vbe
O1 - Hosts: 88.198.6.227 l2authd.lineage2.com # m0o age
O1 - Hosts: 88.198.6.227 L2testauthd.lineage2.com #m0o age
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [ShowWnd] ShowWnd.exe
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [EPSON Stylus C48 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I091.EXE /P33 "EPSON Stylus C48 Series (Copie 1)" /O6 "USB001" /M "Stylus C48"
O4 - HKLM\..\Run: [EPSON Stylus C48 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I091.EXE /P23 "EPSON Stylus C48 Series" /O6 "USB001" /M "Stylus C48"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [CHotkey] zHotkey.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Researcher\EROProj.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) - http://gamingzone.ubisoft.com/dev/packages/GSManager.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\WINDOWS\System32\appdrvrem01.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

Utilisateur anonyme · Answer

réouvre hijackthis
fais scan only
coches ces lignes :


F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system3­2\wscript.exe C:\WINDOWS\system32\antinul.vbe 

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') 
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') 
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') 

O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab 
O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) - http://gamingzone.ubisoft.com/dev/packages/GSManager.cab 
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab 
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/default.aspx 
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/default.aspx 
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab 
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab 
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab 


tu les coches et tu clic sur fix checked 


ensuite désinstal java car pas a jours et telecharge et install cette version :


https://www.java.com/fr/download/manual.jsp


ensuite : 

Rends toi sur ce site : 

https://www.virustotal.com/gui/ 

Clique sur parcourir et cherche ce fichier : C:\WINDOWS\system32\ShowWnd.exe  


Clique sur Send File. 

Un rapport va s'élaborer ligne à ligne. 

Attends la fin. Il doit comprendre la taille du fichier envoyé. 

Sauvegarde le rapport avec le bloc-note. 

Copie le dans ta réponse.

Voronov · Answer

Le fichier se trouvait dans windows, aucune trace dans le dossier system32.

voici le rapport :

 Fichier ShowWnd.exe reçu le 2008.06.03 22:22:27 (CET)
Situation actuelle: terminé
Résultat: 1/32 (3.12%)
Formaté Formaté
Impression des résultats Impression des résultats
Antivirus 	Version 	Dernière mise à jour 	Résultat
AhnLab-V3 	- 	- 	-
AntiVir 	- 	- 	-
Authentium 	- 	- 	-
Avast 	- 	- 	-
AVG 	- 	- 	-
BitDefender 	- 	- 	-
CAT-QuickHeal 	- 	- 	-
ClamAV 	- 	- 	-
DrWeb 	- 	- 	-
eSafe 	- 	- 	-
eTrust-Vet 	- 	- 	-
Ewido 	- 	- 	-
F-Prot 	- 	- 	-
F-Secure 	- 	- 	-
Fortinet 	- 	- 	-
GData 	- 	- 	-
Ikarus 	- 	- 	-
Kaspersky 	- 	- 	-
McAfee 	- 	- 	-
Microsoft 	- 	- 	-
NOD32v2 	- 	- 	-
Norman 	- 	- 	-
Panda 	- 	- 	-
Prevx1 	- 	- 	-
Rising 	- 	- 	-
Sophos 	- 	- 	-
Sunbelt 	- 	- 	-
Symantec 	- 	- 	-
TheHacker 	- 	- 	-
VBA32 	- 	- 	-
VirusBuster 	- 	- 	-
Webwasher-Gateway 	- 	- 	BlockReason.0
Information additionnelle
MD5: b8e7353996d0757e2b8f47be702074be
SHA1: c62ed71d43c26960adad6b01416b84b3bcf64655
SHA256: daacafb56d9cb31163c07c34a76220cb3576bd987a34bb727857be2ca76af060
SHA512: cd34a5ce58486ae265823638aa2a38347490ea60e6d0a3a713da4a658291b9be55a139ca99ea70f1de1d3d19544c3a500bbf53a701cbe41b0db2db2c1b59c114

Utilisateur anonyme · Answer

ok bien joué et ras

désinstal adobe redear et instal la version 9

https://get2.adobe.com/reader/otherversions/

et dis moi si t as encore des soucis

Voronov · Answer

Merci pour les MAJ des programmes.

Pour antinul, en effet je n'ai plus de souci merci !! :D

Seul hic, je n'ai plus options des dossiers dans outils ... J'ai à la place : Connecter un lecteur réseau, déconnecter un lecteur réseau, et synchroniser.

Utilisateur anonyme · Answer

je n'ai plus options des dossiers dans outils 

options des dossiers est dans panneau de configuration 


* pour supprimer les outils/fix utilisés : 

Télécharge ToolsCleaner sur ton bureau. 
--> 
http://pc-system.fr/ 
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner

# Clique sur Recherche et laisse le scan agir ... 
# Clique sur Suppression pour finaliser. 
# Tu peux, si tu le souhaites, te servir des Options facultatives. 
# Clique sur Quitter pour obtenir le rapport. 
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). 


Désactive et réactive ta restauration system :

(1) Désactiver la Restauration du système 

cliques sur Démarrer 
Cliques droit sur Poste de travail 
cliques sur Propriétés 
Cliques sur l'onglet Restauration du système 
Coches Désactiver la Restauration du système sur tous les lecteurs 
Cliques sur Appliquer, Lorsque le message de confirmation apparaît, 
cliques sur Oui. 
Cliques sur OK. 


(2) Activer la Restauration du système 


cliques sur Démarrer 
Cliques droit sur Poste de travail 
cliques sur Propriétés 
Cliques sur l'onglet Restauration du système 
Décoches Désactiver la Restauration du système sur tous les lecteurs 
Cliques sur Appliquer, Lorsque le message de confirmation apparaît, 
cliques sur Oui. 
Cliques sur OK. 


Tuto xp : http://service1.symantec.com/support/inter/tsgeninfointl.Nsf/fr_docid/20020830101856924

Voronov · Answer

options des dossiers est dans panneau de configuration 

Dans le panneau de configuration ok, mais je ne trouve pas où aller ensuite :-(

Pour TC 2 voici le rapport :

[ Rapport ToolsCleaner version 2.2.6 (par A.Rothstein & dj QUIOU) ]

-->- Recherche: 

C:\UsbFix.txt: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\Voronov\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\Voronov\Bureau\UsbFix.lnk: trouvé !
C:\Documents and Settings\Voronov\Menu Démarrer\Programmes\UsbFix: trouvé !
C:\Documents and Settings\Voronov\Menu Démarrer\Programmes\UsbFix\UsbFix.lnk: trouvé !
C:\Documents and Settings\Voronov\Mes documents\HJTInstall.exe: trouvé !
C:\Documents and Settings\Voronov\Mes documents\UsbFix.exe: trouvé !
C:\Program Files\UsbFix: trouvé !
C:\Program Files\Mozilla Firefox\SmitFraudfix: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
C:\Program Files\UsbFix\UsbFix.exe: trouvé !
C:\WINDOWS\msnfix.txt: trouvé !

Utilisateur anonyme · Answer

tu as supprimé ce qu a touvé toolcleaner ???

pour afficher les fichiers caches :


Clique sur démarrer/panneau de configuration/option des dossiers/affichage 

Cocher afficher les dossiers cacher 

Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)" 

Décocher masquer les extensions dont le type est connu 

Puis fais «appliquer» pour valider les changements. 

Et OK

Voronov · Answer

Oui, excuse moi, j'avais oublié de te donner la suite du rapport.

-->- Suppression: 

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\Voronov\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\Voronov\Mes documents\HJTInstall.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\UsbFix.txt: supprimé !
C:\Documents and Settings\Voronov\Bureau\UsbFix.lnk: supprimé !
C:\Documents and Settings\Voronov\Menu Démarrer\Programmes\UsbFix\UsbFix.lnk: supprimé !
C:\Documents and Settings\Voronov\Mes documents\UsbFix.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Program Files\UsbFix\UsbFix.exe: supprimé !
C:\WINDOWS\msnfix.txt: supprimé !
C:\WINDOWS\system32\*.msnfix: ERREUR DE SUPPRESSION !!
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\Voronov\Menu Démarrer\Programmes\UsbFix: supprimé !
C:\Program Files\UsbFix: supprimé !
C:\Program Files\Mozilla Firefox\SmitFraudfix: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !


Pour ce qui est des options de dossiers, chez moi ca donne ca : http://uplofile.free.fr/rep2/403761fond.png

Je n'ai pas de dossier : Options des dossiers.

Utilisateur anonyme · Answer

bizarre c est pourtant sa place

si tu clic sur basculer vers l affichage des catégorie ça donne quoi ?

Voronov · Answer

Rien non plus ...

J'ai suivi un autre topic parlant de ca et j'ai eu un fichier modifiant la base de registre directement.

Tout est rentré dans l'ordre.

UN GRAND MERCI A TOI POUR L'AIDE FOURNIE !

Cordialement,

Voronov.

Utilisateur anonyme · Answer

ok parfait

@++

nesrionata · Answer

a chaque redemarrage, j'ai un message d'erreur qui m'indique: win..\system32\antinul.vbe introuvable!!

je ne sais pas de quoi il s'agit exactement, mais j'avais avant le virus Au travail !! 

il a été remplacé par ce message d'erreur, j'ai fait un scan avec hijackthis et j'ai obtenu ceci..

Merci bien de m'aider.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:16:55, on 26/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\sm56hlpr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\AstSrv.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Documents and Settings
esrine\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wscript.exe C:\WINDOWS\system32\antinul.vbe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Netlog 24] "C:\Program Files\Netlog 24\Notifier\Netlog24Notifier.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings
esrine\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{84367346-B5EE-4206-8220-80C5E14428B6}: NameServer = 192.168.0.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: c:\progra~1\bandoo\bndhook.dll 
O23 - Service: AST Service (astcc) -  Advanced Software Technologies - C:\WINDOWS\system32\AstSrv.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

wardane · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:24:22, on 27/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe
C:\Addon\Fujitsu\Application Panel\QuickTouch.exe
C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
C:\addon\Fujitsu\PSUtility\TrayManager.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Travaillez plus.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Au travail !Arrêtez de surfer!
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wscript.exe C:\WINDOWS\system32\antinul.vbe
O1 - Hosts: 132.186.35.141 tntun001w2k001-.tntun001.siemens.net
O1 - Hosts: 132.186.35.140 tntun001w2k002-.tntun001.siemens.net
O1 - Hosts: 132.186.35.139 tn13230c.tntun001.siemens.net
O1 - Hosts: 132.186.35.138 tun1004.tntun001.siemens.net
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [IndicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
O4 - HKLM\..\Run: [SSUtility] C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe
O4 - HKLM\..\Run: [LoadFUJ02E3] C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe
O4 - HKLM\..\Run: [LoadFujitsuQuickTouch] C:\Addon\Fujitsu\Application Panel\QuickTouch.exe
O4 - HKLM\..\Run: [LoadBtnHnd] C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
O4 - HKLM\..\Run: [PSUtility] C:\addon\Fujitsu\PSUtility\TrayManager.exe
O4 - HKLM\..\Run: [TvOutSwitch] C:\addon\Fujitsu\DispSwitch\DispSwitchLauncher.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - Winlogon Notify: PSUTY - C:\WINDOWS\SYSTEM32\PSUWNP.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe

Utilisateur anonyme · Answer

vous savez pas lire ????????

ça fait 5000 fois que nous apportons la solution

@++

chouby · Answer

ComboFix 10-01-29.04 - hanquez 29/01/2010  21:37:46.1.1 - x86
Microsoft Windows XP Édition familiale  5.1.2600.2.1252.33.1036.18.895.384 [GMT 1:00]
Lancé depuis: c:\documents and settings\hanquez\Bureau\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
PEV Error: ProgramsFolder

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\hanquez\Application Data\wiaserva.log
c:\documents and settings\hanquez\oashdihasidhasuidhiasdhiashdiuasdhasd
c:\program files\BrowserCtl
c:\program files\webserver
c:\program files\WinPCap
c:\program files\WinPCappcapd.exe
c:ecycler\S-1-5-21-2500222187-2461189271-1743740785-1003
c:ecycler\S-1-5-21-515967899-776561741-725345543-1003
c:\windows\010112010146120114.xe
c:\windows\0101120101464949.xe
c:\windows\0101120101464950.xe
c:\windows\0101120101464954.xe
c:\windows\0101120101465753.xe
c:\windows\fdgg34353edfgdfdf
c:\windows\Fonts\MyriadPro-Regular.otf
c:\windows\mmsmark2.dat
c:\windows\prxid93ps.dat
c:\windows\system32\drivers
pf.sys
c:\windows\system32\Packet.dll
c:\windows\system32\pthreadVC.dll
c:\windows\system32	wain_32.dll
c:\windows\system32\WanPacket.dll
c:\windows\system32\wpcap.dll
D:\qkm.exe

.
(((((((((((((((((((((((((((((((((((((((   Pilotes/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_BROWSERCTL
-------\Legacy_BROWSERCTLDRV
-------\Legacy_NPF
-------\Service_NPF
-------\Service_SfX


(((((((((((((((((((((((((((((   Fichiers créés du 2009-12-28 au 2010-01-29  ))))))))))))))))))))))))))))))))))))
.

2010-01-24 11:19 . 2010-01-19 11:42	19024	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys
2010-01-24 11:19 . 2010-01-19 13:13	162640	----a-w-	c:\windows\system32\drivers\aswSP.sys
2010-01-24 11:19 . 2010-01-19 11:43	23248	----a-w-	c:\windows\system32\drivers\aswRdr.sys
2010-01-24 11:19 . 2010-01-19 11:46	46544	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2010-01-24 11:19 . 2010-01-19 11:43	100304	----a-w-	c:\windows\system32\drivers\aswmon2.sys
2010-01-24 11:19 . 2010-01-19 11:43	94672	----a-w-	c:\windows\system32\drivers\aswmon.sys
2010-01-24 11:19 . 2010-01-19 11:42	28240	----a-w-	c:\windows\system32\drivers\aavmker4.sys
2010-01-24 11:19 . 2010-01-19 11:57	38848	----a-w-	c:\windows\system32\avastSS.scr
2010-01-24 11:19 . 2010-01-19 11:57	152672	----a-w-	c:\windows\system32\aswBoot.exe
2010-01-24 11:19 . 2010-01-24 11:19	--------	d-----w-	c:\program files\Alwil Software
2010-01-24 11:19 . 2010-01-24 11:19	--------	d-----w-	c:\documents and settings\All Users\Application Data\Alwil Software
2010-01-23 10:44 . 2010-01-23 10:44	826856	----a-w-	c:\documents and settings\hanquez\Application Data\MSNInstaller\msnauins.exe
2010-01-23 10:44 . 2010-01-23 10:44	--------	d-----w-	c:\documents and settings\hanquez\Application Data\MSNInstaller
2010-01-14 09:40 . 2001-08-23 16:47	5632	----a-w-	c:\windows\system32\ptpusb.dll
2010-01-14 09:40 . 2004-08-03 23:54	159232	----a-w-	c:\windows\system32\ptpusd.dll
2010-01-12 10:25 . 2010-01-23 10:51	--------	d-----w-	c:\documents and settings\hanquez\Tracing

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-28 20:10 . 2009-03-03 16:09	--------	d-----w-	c:\documents and settings\All Users\Application Data\Google Updater
2010-01-24 11:10 . 2009-09-19 16:35	--------	d-----w-	c:\program files\Microsoft Silverlight
2010-01-24 11:07 . 2007-07-24 20:45	--------	d-----w-	c:\documents and settings\All Users\Application Data\BitDefender
2010-01-24 11:06 . 2007-07-24 20:50	81984	----a-w-	c:\windows\system32\bdod.bin
2010-01-17 22:32 . 2009-07-16 15:49	--------	d-----w-	c:\documents and settings\hanquez\Application Data\vlc
2010-01-17 21:47 . 2009-03-27 22:21	--------	d-----w-	c:\documents and settings\hanquez\Application Data\dvdcss
2010-01-11 19:38 . 2007-07-23 11:59	1056	--sha-w-	c:\windows\system32\KGyGaAvL.sys
2009-12-22 20:11 . 2007-10-04 17:00	--------	d-----w-	c:\program files\Google
2009-12-22 05:35 . 2006-08-10 19:29	672768	----a-w-	c:\windows\system32\wininet.dll
2009-12-22 05:35 . 2006-08-10 19:28	81920	----a-w-	c:\windows\system32\ieencode.dll
2009-12-13 16:52 . 2006-08-10 19:29	85312	----a-w-	c:\windows\system32\perfc00C.dat
2009-12-13 16:52 . 2006-08-10 19:29	511312	----a-w-	c:\windows\system32\perfh00C.dat
2009-12-04 15:11 . 2007-07-23 10:44	215760	----a-w-	c:\documents and settings\hanquez\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-11-21 16:42 . 2006-08-10 19:28	470528	----a-w-	c:\windows\AppPatch\aclayers.dll
2008-12-21 21:33 . 2007-09-10 18:50	67688	----a-w-	c:\program files\mozilla firefox\components\jar50.dll
2008-12-21 21:33 . 2007-09-10 18:50	54368	----a-w-	c:\program files\mozilla firefox\components\jsd3250.dll
2008-12-21 21:33 . 2007-09-10 18:50	34944	----a-w-	c:\program files\mozilla firefox\components\myspell.dll
2008-12-21 21:33 . 2007-09-10 18:50	46712	----a-w-	c:\program files\mozilla firefox\components\spellchk.dll
2008-12-21 21:33 . 2007-09-10 18:50	172136	----a-w-	c:\program files\mozilla firefox\components\xpinstal.dll
.

(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-06-01 94208]
"Picasa Media Detector"="c:\program files\Picasa2\PicasaMediaDetector.exe" [2008-08-21 443968]
"VeohPlugin"="c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" [2009-08-20 2000120]
"Veoh"="c:\program files\Veoh Networks\Veoh\VeohClient.exe" [2008-03-24 3587120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 45056]
"RTHDCPL"="RTHDCPL.EXE" [2005-12-09 15691264]
"AGRSMMSG"="AGRSMMSG.exe" [2005-08-24 88203]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2006-03-28 94208]
"KTPWare"="c:\program files\Elantech\ktp3.exe" [2004-11-17 258048]
"AntivirusRegistration"="c:\program files\CA\Etrust Antivirus\Register.exe" [2005-01-31 458752]
"MGSysCtrl"="c:\program files\System Control Manager\MGSysCtrl.exe" [2006-07-17 173056]
"NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"PCMService"="c:\program files\CyberLink\PowerCinema\PCMService.exe" [2006-06-20 147456]
"QuickFinder Scheduler"="c:\program files\WordPerfect Office X3\Programs\QFSCHD130.EXE" [2005-11-30 77892]
"ISUSPM Startup"="c:\program files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" [2005-08-11 249856]
"ISUSScheduler"="c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2005-08-11 81920]
"AOLDialer"="c:\program files\Fichiers communs\AOL\ACS\AOLDial.exe" [2004-04-08 496752]
"Corel Photo Downloader"="c:\program files\Corel\Corel Photo Album 6\MediaDetect.exe" [2005-11-16 106496]
"InstantOn"="c:\program files\CyberLink\PowerCinema Linux\ion_install.exe" [2005-03-25 93640]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2007-05-14 35328]
"emMON"="emMON.exe" [2006-05-30 61440]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-11-04 413696]
"EEventManager"="c:\progra~1\EPSONS~1\EVENTM~1\EEventManager.exe" [2008-12-04 665424]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-01-19 2743104]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
AOL 9.0 Ic“ne AOL.lnk - c:\program files\AOL 9.0\aoltray.exe [2006-8-21 156784]
AOL Compagnon.lnk - c:\program files\AOL Compagnon\companion.exe [2006-8-21 255088]
BlueSoleil.lnk - c:\program files\IVT Corporation\BlueSoleil\BlueSoleil.exe [2005-6-15 1208320]
Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Acrobat 7.0\Readereader_sl.exe [2005-9-23 29696]
SetPoint.lnk - c:\program files\SetPoint\SetPoint.exe [2006-8-21 573440]
WlanUtility.lnk - c:\program files\MicroStar\WLANUtility\WlanUtility.exe [2005-10-14 173056]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0aswBoot.exe /M:a6db4cb89

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"c:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"=
"c:\Program Files\Cyberlink\PowerCinema\PowerCinema.exe"=
"c:\Program Files\Cyberlink\PowerCinema\PCMService.exe"=
"c:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe"=
"c:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe"=
"c:\Program Files\AOL 9.0\waol.exe"=
"c:\Program Files\Messenger\msmsgs.exe"=
"c:\Program Files\LimeWire\LimeWire.exe"=
"c:\Program Files\Veoh Networks\Veoh\VeohClient.exe"=
"c:\Program Files\Bonjour\mDNSResponder.exe"=
"c:\Program Files\iTunes\iTunes.exe"=
"c:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"=
"c:\Program Files\Windows Live\Messenger\wlcsdk.exe"=
"c:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"c:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"=
"c:\Program Files\Epson Software\Event Manager\EEventManager.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"53:TCP"= 53:TCP:webserver

R0 O2MDRDR;O2MDRDR;c:\windows\system32\drivers\o2media.sys [14/11/2005 12:28 34176]
R0 O2SDRDR;O2SDRDR;c:\windows\system32\drivers\o2sd.sys [31/10/2005 14:49 28800]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [24/01/2010 12:19 162640]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [24/01/2010 12:19 19024]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [19/09/2009 17:34 54752]
R2 NishService;SCM Driver Daemon;c:\program files\System Control Manager\edd.exe [21/08/2006 16:15 40960]
R3 AGR1310_51;Agere Systems ET-131x PCI-E Gigabit Ethernet Adapter XP Driver;c:\windows\system32\drivers\AGR1310_51.sys [11/08/2006 13:01 70144]
R3 Ktp3;Elantech TouchPad(KTP3);c:\windows\system32\drivers\Ktp3.sys [21/08/2006 15:55 24704]
R3 MGHwCtrl;MGHwCtrl;c:\windows\system32\drivers\MGHwCtrl.sys [21/08/2006 16:15 9088]
S2 gupdate1c99c1aef950b98;Service Google Update (gupdate1c99c1aef950b98);c:\program files\Google\Update\GoogleUpdate.exe [03/03/2009 17:13 133104]
S3 fsssvc;Service Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [05/08/2009 21:48 704864]
.
Contenu du dossier 'Tâches planifiées'

2010-01-13 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2010-01-29 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-10-04 06:38]

2010-01-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-03 16:12]

2010-01-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-03 16:12]
.
.
------- Examen supplémentaire -------
.
uStart Page = Travaillez plus.com
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Recherche AOL Toolbar - c:\program files\AOL Toolbar	oolbar.dll/SEARCH.HTML
IE: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
IE: Ouvrir dans un nouvel onglet d'arrière-plan - c:\program files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?3720b005a71245e0a6a113469e2bfe99
IE: Ouvrir dans un nouvel onglet de premier plan - c:\program files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?3720b005a71245e0a6a113469e2bfe99
IE: Ouvrir dans WordPerfect - c:\program files\WordPerfect Office X3\Programs\WPLauncher.hta
FF - ProfilePath - c:\documents and settings\hanquez\Application Data\Mozilla\Firefox\Profiles\10ciwamk.default\
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
FF - component: c:\program files\Mozilla Firefox\extensions	alkback@mozilla.org\components\qfaservices.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-NWEReboot - (no file)
HKLM-Run-OEM-Reset - (no file)
AddRemove-WinZip - c:\program files\WinZip\WINZIP32.EXE



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-29 21:48
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(832)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(3828)
c:\program files\SetPoint\lgscroll.dll
c:\program files\Fichiers communs\Ahead\Lib\NeroSearchBar.dll
c:\program files\Fichiers communs\Ahead\Lib\NeroSearchTrayHook.dll
c:\program files\Fichiers communs\Ahead\Lib\MFC71U.DLL
c:\program files\Fichiers communs\Ahead\Lib\BCGCBPRO800u.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\windows\RTHDCPL.EXE
c:\windows\AGRSMMSG.exe
c:\windows\emMON.exe
c:\program files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
c:\program files\Fichiers communs\AOL\ACS\AOLacsd.exe
c:\program files\Fichiers communs\Logitech\KhalShared\KHALMNPR.EXE
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\IVT Corporation\BlueSoleil\BTNtService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
c:\program files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
c:\windows\system32\o2flash.exe
c:\program files\Cyberlink\Shared files\RichVideo.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\system32\wdfmgr.exe
c:\program files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
c:\program files\MicroStar\WLANUtility\WLAN_Service.exe
.
**************************************************************************
.
Heure de fin: 2010-01-29  21:54:14 - La machine a redémarré
ComboFix-quarantined-files.txt  2010-01-29 20:54

Avant-CF: 51 642 130 432 octets libres
Après-CF: 56 387 239 936 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=alwaysoff /fastdetect

- - End Of File - - 88B9B15A2B9C0A26BDF4634A29AE8669

Antinul.vbe

21 réponses

Votre réponse

Newsletters