Antimalware virus
Le PC de ma fille est infecté par ce virus.
Peux tu m'aider sur le sujet.Ci-joint les liens des 2 fichiers que tu demandes :
http://www.cijoint.fr/cjlink.php?file=cj201008/cijKSQEOg1.txt
http://www.cijoint.fr/cjlink.php?file=cj201008/cijBbvm8ag.txt
J'ai essayé de te poster un message en privé mais je ne sais pas si cela a fonctionné.
Merci par avance
Gilles
35 réponses
Une infection virale touche le PC d'un utilisateur, avec des fichiers joints fournis pour diagnostic et des échanges visant à obtenir de l'aide. Plusieurs conseils préconisent d'utiliser List_Kill'em et un script pour inspecter et nettoyer les entrées de démarrage et les clés Run, avec des procédures distinctes pour XP d'une part et Vista/7 d'une part. D'autres préconisent de désactiver l'UAC, relancer l'outil et examiner les rapports, tandis que plusieurs témoignent de plantages de l'explorateur et discutent du choix d'un antivirus et des mises à jour Windows. Une nuance utile: la discussion évoque des enjeux de stabilité et de sécurité après infection, sans consensus sur l'efficacité durable des mesures.
-
ok bonne suite :)
-
dans l'espace "Parcourir"
-
Fais analyser le(s) fichier(s) suivants sur Virustotal :
Virus Total
* * Colle directement le chemin des fichiers , un par un , dans l'espace "Parcourir" apres chaque analyse :
C:\Windows\System32\Drivers\dump_dumpfve.sys
* Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
* Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
* Lorsque l'analyse est terminée colle le lien de(s)( la) page(s) dans ta prochaine réponse.
¤¤¤¤¤¤?G3?-?@¢??@?(TM)©®?¤¤¤¤¤¤-
-
-
salut ,
explique moi tes ????????? , j'ai fait la manip avec l'url C:\Windows\System32\Drivers\dump_dumpfve.sys et le lien c'est l'url que je t'ai envoyé.Quand je fais parcourir je ne trouve pas le fichier dump_dumpfve.sys , j'ai donc utilisé la recherche par l'url que j'ai copié , celui que tu m'as donné plus haut.
ci joint une capture d'écran quand j'ai fait la manip :
http://www.cijoint.fr/cjlink.php?file=cj201009/cijsqPkahl.png
??????????!!!!!!!!!!!!!!!!!!!
A+
gilles
-
-
Télécharge MBRCheck sur ton Bureau.
* Désactive tes programmes de sécurité avant de lancer le scan. (antispyware/antivirus)
* Double clique sur le fichier pour lancer le programme. (Note: Si tu utilises Vista/7, fais un clic droit sur le fichier puis choisir Exécuter en tant qu'administrateur).
* Une fenêtre va s'ouvrir sur ton Bureau: Patiente une dizaine de secondes pour permettre à l'outil de compléter l'analyse.
* Si un code de démarrage inconnu est détecté, des options s'afficheront
* Si c'est le cas, appuie alors sur la touche N puis [Entrée] deux fois.
* Si rien de particulier n'est détecté, presse juste sur la touche [Entrée]
* Un fichier texte nommé MBRCheck_mois/jour/année/_heure.minutes.secondes devrait apparaitre sur ton Bureau.
* Poste stp son contenu dans ton prochain message.-
salut gen ,
Ci joint le lien pour deux fichiers , un avant que l'explorer plante et un pendant.J'ai la même remarque que mon message d'avant.Dés que l'explorer plante des mises à jour sont demandées pour telechargement.Sinon il n'a pas detecté de code inconnu (je n'ai pas fait N et 2 fois entreé)
http://www.cijoint.fr/cjlink.php?file=cj201009/cijhHNQbVZ.txt
http://www.cijoint.fr/cjlink.php?file=cj201009/cijXg1SE9e.txt
A+
Gilles
-
-
Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.
▶ Télécharge ici :
Malwarebytes
ou :
Malwarebytes
▶ Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .
(NB : Si tu as un message d'erreur t'indiquant qu'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX
▶ Potasses le Tuto pour te familiariser avec le prg :
( cela dit, il est très simple d'utilisation ).
relance malwarebytes en suivant scrupuleusement ces consignes :
! Déconnecte toi et ferme toutes applications en cours !
▶ Lance Malwarebyte's .
Fais un examen dit "Complet" .
▶ Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
▶ à la fin tu cliques sur "résultat" .
▶ Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .
▶ Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !
▶ Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)
-
salut gen,
Ci joint le rapport :
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Version de la base de donnÈes: 4678
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
24/09/2010 05:58:06
mbam-log-2010-09-24 (05-58-06).txt
Type d'examen: Examen complet (C:\|)
ElÈment(s) analysÈ(s): 275438
Temps ÈcoulÈ: 1 heure(s), 22 minute(s), 10 seconde(s)
Processus mÈmoire infectÈ(s): 0
Module(s) mÈmoire infectÈ(s): 0
ClÈ(s) du Registre infectÈe(s): 8
Valeur(s) du Registre infectÈe(s): 0
ElÈment(s) de donnÈes du Registre infectÈ(s): 0
Dossier(s) infectÈ(s): 0
Fichier(s) infectÈ(s): 12
Processus mÈmoire infectÈ(s):
(Aucun ÈlÈment nuisible dÈtectÈ)
Module(s) mÈmoire infectÈ(s):
(Aucun ÈlÈment nuisible dÈtectÈ)
ClÈ(s) du Registre infectÈe(s):
HKEY_CLASSES_ROOT\chkaqpyxhst.chkaqpyxhst (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\chkaqpyxhst.chkaqpyxhst.1.0 (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{ca6704fb-6b46-4058-a797-befd9d378576} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\wnxmal (Rogue.SecuritySuite) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0bf254f0-88de-41af-a295-d68aa4aafd99} (Adware.Adrotator) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{0bf254f0-88de-41af-a295-d68aa4aafd99} (Adware.Adrotator) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d05a288c-bb97-44bc-b0f0-facbfa3d799d} (Adware.AdRotator) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{d05a288c-bb97-44bc-b0f0-facbfa3d799d} (Adware.AdRotator) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectÈe(s):
(Aucun ÈlÈment nuisible dÈtectÈ)
ElÈment(s) de donnÈes du Registre infectÈ(s):
(Aucun ÈlÈment nuisible dÈtectÈ)
Dossier(s) infectÈ(s):
(Aucun ÈlÈment nuisible dÈtectÈ)
Fichier(s) infectÈ(s):
C:\Kill'em\Quarantine\st_la819_1930.exe.Kill'em (Adware.AdRotator) -> Quarantined and deleted successfully.
C:\Kill'em\Quarantine\xmrnoecasw.exe.Kill'em (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\Kill'em\Quarantine\$NtUninstallMTF1011$.Kill'em\mmduch.dll (Trojan.BHO) -> Quarantined and deleted successfully.
C:\Users\Pauline\AppData\Roaming\0C9B6682699498EA9A9CB03923BF9E2F\upd_debug.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\Users\Pauline\DoctorWeb\Quarantine\explore0.exe (Trojan.Crypt) -> Quarantined and deleted successfully.
C:\Users\Pauline\DoctorWeb\Quarantine\mkcxhunr.exe.Kill'em (Rogue.SecuritySuite) -> Quarantined and deleted successfully.
C:\Users\Pauline\DoctorWeb\Quarantine\mmx.dll (Trojan.BHO) -> Quarantined and deleted successfully.
C:\Users\Pauline\DoctorWeb\Quarantine\tvqcexdshd0.exe (Rogue.SecuritySuite) -> Quarantined and deleted successfully.
C:\Users\Pauline\DoctorWeb\Quarantine\wtpvaae.exe.Kill'em (Adware.AdRotator) -> Quarantined and deleted successfully.
C:\Users\Pauline\Downloads\VLCSetup.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\_OTL\MovedFiles\09122010_095244\C_Users\Pauline\AppData\Local\Temp\sT6RIwBG.exe.part (Adware.Agent) -> Quarantined and deleted successfully.
C:\Users\Pauline\Local Settings\Application Data\Windows Server\admin.txt (Malware.Trace) -> Quarantined and deleted successfully.
Le problème est toujours présent explorer plante et redemarre.J'ai toujours remarqué ce point suivant :
tant que l'explorer ne plante pas , il n'y a pas de mises à jour à installer.Dés qu'il plante , l'icône dans le menu demarrer apparait en jaune.Et souvent la première fois qu'il plante ,c'est après les première alerte mcafee.
A+ gilles
-
-
on va essayer comme ca :
desactive l'UAC
https://www.zebulon.fr/astuces/pratique/220-desactiver-l-uac-dans-vista.html
une fois ton pc redemarré :
si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."
▶ Relance List&Kill'em,avec le raccourci sur ton bureau.
mais cette fois-ci :
▶ choisis l'option Script
une fenêtre noire va s'ouvrir brievement , et List_Kill'em va se fermer
observe ton bureau une icône "Script" s'est rajouté sur ton bureau
▶ crée un nouveau document texte sur ton bureau et copie/colle ce en gras si dessous :
REST:c:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe_c:\windows\explorer.exe
▶ enregistre le document texte avec l'onglet fichier (enregistrer) de ce dernier , puis ferme-le
▶ effectue un glisser/deposer de ce fichier sur l'icone "Script"
laisse travailler l'outil
▶ poste le resultat qui sera sur ton bureau (Script_(4 chiffres).txt)
▶ Ferme List_Kill'em
¤¤¤¤¤¤?G3?-?@¢??@?(TM)©®?¤¤¤¤¤¤-
salut gen ,
Ci joint le résultat.
§§§§§§§§§§ Script of List_Kill'em by gen-hackman §§§§§§§§§§
User : Pauline (Administrateurs)
Update on 28/08/2010 by g3n-h@ckm@n ::::: 17.00
Start at: 00:08:14 | 30/08/2010
Pentium(R) Dual-Core CPU T4300 @ 2.10GHz
Microsoft Windows+7 ...dition Familiale Premium (6.1.7600 64-bit) #
Internet Explorer 8.0.7600.16385
Windows Firewall Status : Enabled
C:\ -> Disque fixe local | 288,62 Go (192,17 Go free) | NTFS
D:\ -> Disque amovible
E:\ -> Disque amovible
F:\ -> Disque CD-ROM | 3,09 Go (0 Mo free) [AL8PC] | UDF
G:\ -> Disque amovible | 7,47 Go (7,4 Go free) [SANS TITRE] | NTFS
Switch : C:\Users\Pauline\Desktop\popo.txt
§§§§§§§§§§ File | Folder
Deleted !! : C:\Users\Pauline\AppData\Roaming\0C9B6682699498EA9A9CB03923BF9E2F
Deleted !! : C:\Users\Pauline\AppData\Local\ylteodtei
§§§§§§§§§§ Keys
Deleted : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "newsecureapp70700.exe"
Deleted : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "kitplffr"
Deleted : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "bipro
§§§§§§§§§§ Script of List_Kill'em by gen-hackman §§§§§§§§§§
User : Pauline (Administrateurs)
Update on 28/08/2010 by g3n-h@ckm@n ::::: 17.00
Start at: 21:23:14 | 22/09/2010
Pentium(R) Dual-Core CPU T4300 @ 2.10GHz
Microsoft Windows+7 ...dition Familiale Premium (6.1.7600 64-bit) #
Internet Explorer 8.0.7600.16385
Windows Firewall Status : Enabled
C:\ -> Disque fixe local | 288,62 Go (193,96 Go free) | NTFS
D:\ -> Disque amovible
E:\ -> Disque amovible
F:\ -> Disque CD-ROM
G:\ -> Disque amovible | 7,47 Go (7,34 Go free) [SANS TITRE] | NTFS
Switch : C:\Users\Pauline\Desktop\gillou.txt
§§§§§§§§§§ File | Folder
§§§§§§§§§§ Keys
A+
Gilles
-
-
salut absent deux jours , désolé
ben tu as une reference ou une valeur ou...............de cette mise a jour ??-
-
-
Contributeur sécuritébonjour, si on me permets cette intrusion , mais quand tu as l'écusson jaune de mise à jour en bas si tu cliques dessus as tu la possibilité de faire personnalisé comme cela tu devrais avoir ce qu'il veux t'installer , sinon tu vas sur windows update http://www.update.microsoft.com/windowsupdate/v6/default.aspx tu fais rapide ! et tu vois ce qu'il te propose
-
-
Salut à tous ,
pour répondre à jacques.gache , comme tu l'as dit il faut que je sois le speedy gonzales de la souris pour regarder ce que tu demandes.J'ai essayé en mode sans echec mais j'ai pas trouvé .
Dis mois si en mode sans echec je peux trouver quelque chose.Ce qui m'a encore surpris , c'est que il y a des mises à jour quasiement à chaque fois.La dernière fois il y avait 7 étapes !!!
Je ne sais plus quoi faire ... si je négocie avec ma fille de tout perdre , le formatage n'est pas l'ultime solution ?Je ne sais plus quoi faire !!!
Merci à vous , je suis preneur de toute proposition!
A+
Gilles
-
-
salut il faudrait voir si ce n'est pas toujours la meme qui n arrrive pas à s'installer
et si elle n'a pas de rapport avec ton probleme -
ok tape :
cd \
cd windows
cd system32
cd restore
rstrui.exe
entrée entre chaque ligne
et choisis un point inferieur à tes problemes-
-
-
Je viens de faire la restauration et cela a fonctionné .Les résultats :
- explorer plante et redemarre toujours
- pour la 2ème fois ,sans rien faire de particulier , 2 fenetres de power cleaner sont arrivées au démarrage.
Rappel : Le système n'a plus rebooté , erreur explorer classe non enregistrée , lors de la manip. que j'ai faite un peu plus haut :
Rappel de la manip :
:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe
:Files
C:\Windows\Explorer.exe | C:\Explorer.exe /Replace
:commands
[emptytemp]
[start explorer]
[reboot]
Voila nous en sommes au même point , et merci pour ton aide pour la suite.
A+
Gilles -
-
-
et plus aucun mode ne fonctionne ?
-
tu l'as installé ce logiciel ?
-
salut gen ,
Non j'ai rien installé et c'est bien pour cela que je te le signale.Je comprends pas pourquoi ces 2 fenetres arrivent (et que cela !) , le système ne boote pas .La première fenetre comme je te l'ai dit , c'est une fenetre (petite) en indiquant 'explorer (sur la bande de la fenetre) , et dans le texte ' classe non enregistrée '.
Voila
A+
Gilles
-
-
salut j'ai rentré la commande à l'envers désolé
retelecharge le explorer , remetes le dans C:\ en remplacant celui qui est present ,
puis refais le meme qu'au dessus avec OTL mais avec ceci dedans :
si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."
sur OTL.exe pour le lancer.
?Copie la liste qui se trouve en gras ci-dessous,
? colle-la dans la zone sous "Personnalisation" :
:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe
:Files
C:\Windows\Explorer.exe | C:\Explorer.exe /Replace
:commands
[emptytemp]
[start explorer]
[reboot]
? Clique sur "Correction" pour lancer la suppression.
? Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.-
bonsoir gen ,
J'ai fait la manip et lors du reboot (et à chaque redemarrage , j'ai pas encore essayé le mode sans echec) , une fenetre s'affiche explorer classe non enregistrée et après le système ne boote plus .
Lors du deuxième reboot j'ai 2 fenetres qui s'ouvrent (et que cela) ''registry power cleaner''
Merci pour ton aide
A+
Gilles
-
-
ok
le "explorer.exe" que je t ai fait telecharger tu le mets dans C:\
ensuite :
Télécharge ici :OTL
▶ enregistre le sur ton Bureau.
si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."
sur OTL.exe pour le lancer.
▶Copie la liste qui se trouve en gras ci-dessous,
▶ colle-la dans la zone sous "Personnalisation" :
:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe
:Files
%Temp%\*.*
C:\Explorer.exe | C:\Windows\Explorer.exe /Replace
:commands
[emptytemp]
[start explorer]
[reboot]
▶ Clique sur "Correction" pour lancer la suppression.
▶ Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.
-
salut gen ,
ci joint le rapport :
Le problème est toujours présent !
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
No active process named firefox.exe was found!
No active process named msnmsgr.exe was found!
No active process named Teatimer.exe was found!
========== FILES ==========
C:\Users\Pauline\AppData\Local\Temp\.Sony_PMBrowser3000_BrowserDiskCache moved successfully.
C:\Users\Pauline\AppData\Local\Temp\.Sony_PMBrowser3000_BrowserDiskCache.idx moved successfully.
C:\Users\Pauline\AppData\Local\Temp\10116_8042.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\10126_7519.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\10301_7143.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\10304_17892.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\10491_7959.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\10553_29728.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\10693_19000.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\11456_28890.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\1162_21903.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\11647_4749.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\11653_26245.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\11780_11639.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\11780_28316.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\11861_18205.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\11902_13317.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\11908_2045.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\11923_25816.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\11938.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\11951_19334.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\12022_28399.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\12032_27877.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\120_1937.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\12150_10995.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\12208_18466.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\12209_16490.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\12411_19721.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\12414_7488.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\12421_19198.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\12482_12695.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\12672_26804.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\12718_13442.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\12859_25503.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\12905_12141.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\12989_31432.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13123_13364.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13126_13505.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13182_32388.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13228_27657.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13235_16386.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13237_29110.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13315_24928.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13316_22952.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13360_6087.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13433_18655.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13492_24508.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13502_23986.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13557_22326.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13678_14575.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13727_2971.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\1372_16503.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13779_20096.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\13861_26662.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\14220_17031.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\14455_29018.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\14687_26265.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\14707_12912.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\15031_4017.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\15116_21331.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\15131_13488.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\15194_17149.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\15260_2741.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\15345_16065.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\15378_25245.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\15430_4602.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\15488_1466.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\15652_14598.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\15655_25346.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\15686_17935.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\15955_10890.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\16251_9633.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\16445_17519.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\16488_13678.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\16749_1313.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\16770_14694.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\16924_621.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17193_1790.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17195_2963.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17196_12539.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17196_13360.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\1728_30823.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17415_11786.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17433_23683.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17439_12412.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17477_20219.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17511_19501.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17561_27136.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17579_15841.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17648_12182.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17653_9988.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17681_31611.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17735_4916.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17748_26780.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17780_4012.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\177_25038.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17800_2967.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17811_25314.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17841_1227.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17849_32300.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\17921_6621.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\18022_12142.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\18094_19231.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\18094_20051.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\18184_23619.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\18239_24331.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\18272_10993.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\18398_3024.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\18476_31610.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\18525_19565.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\18548_5931.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\18643_11085.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\18649_11452.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\18664_31841.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\188_8381.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\18905_8023.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\19083_31966.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\19165_30363.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\19499_22290.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\1952_1577.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\19557_17621.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\19601_17431.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\19627_5472.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\19638_10072.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\19735.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\19784_29875.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\19828_25002.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\19870_19545.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\19948_15363.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\20034_14024.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\20059_20360.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\2011_22765.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\20125_3033.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\20213_1248.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\20232_27490.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\20239_3046.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\20513_7061.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\20696_19148.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\20884_20323.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\20891_9052.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\20960_2829.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\20968_28062.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\20997_9102.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\2103_28808.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\210_1450.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\2139_15968.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\21594_25839.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\21606_7837.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\21686_31883.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\21932_11586.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\21944_29039.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\21964_9340.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\22162_22806.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\22238_27470.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\22351_9864.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\22352_29102.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\22501_12771.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\22628_8769.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\22740_30210.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\22920_31548.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\22948_17716.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\23155_19002.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\23273_12728.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\23517_20163.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\23596_28245.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\23647_24115.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\23667_9543.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\23736_31674.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\23837_24931.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\23890_12561.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\23909_4773.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\23913_15522.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\24046_13147.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\24438_9311.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\24579_12741.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\24664_30055.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\24745_3853.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\24935_4669.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\25373_13098.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\25489_10609.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\25549_3688.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\25595_23094.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\25895_28907.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\25898_6888.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\26121_16883.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\26362_14513.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\26525_29031.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\26613_31384.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\26620_20113.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\26783_477.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\26865_15003.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\26982_26480.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\26992_25957.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\27032_6116.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\27331_4014.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\27445_19760.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\27505_24539.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\27506_4268.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\27534_6567.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\27556_24758.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\27680_7213.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\27685.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\27707_5419.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\27869_8029.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\27964_24820.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28076_7573.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28091_18024.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28173_24590.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28255_31157.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28356_3909.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28472_13728.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28558_14950.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28633_20.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28671_11460.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28675_24769.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28709_17857.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28802_664.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28805_28722.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28809_22161.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28870_17906.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28931_27853.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28965_1930.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\28995_29537.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\29024_10660.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\29032_605.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\29057_4381.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\29289_29313.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\29553_15198.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\29680_23150.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\29779_3174.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\29864_9481.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\29867_31237.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\30043_6368.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\30053_5845.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\30161_8138.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\30255_32345.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\30295_14795.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\30422_7999.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\30517_7482.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\30592_25319.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\30677_2451.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\30722_29271.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\30773_25898.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\30820_24044.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\3082_10368.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\30866_3266.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\31046_4604.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\31396_2950.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\31403_24446.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\31490_21003.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\31532_7900.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\31601_4241.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\31782_26582.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\31823_14236.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\31838_18576.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\31867_6716.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\31874_28213.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\32468_28635.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\32521_26477.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\3253_32414.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\32635_19747.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\32746_24745.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\3334_18795.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\3347_29021.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\361_20675.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\3670_11769.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\3698391322293511.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\3698391322293885.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\39098.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\39201.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\39308.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\39339.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\3942_10075.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\3mU0S4MY1E35XTrPBAsexI4mPZw=.wma moved successfully.
C:\Users\Pauline\AppData\Local\Temp\415303181916696412.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\41530318192293511.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\415303181931189498.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\41530318197383558.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\43380.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\43381.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\45278.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\4545_31275.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\4643_26047.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\47527.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\47659.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\47954.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\5132_9574.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\59920.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\60689.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\60718.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\60926.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\61621.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\64338.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\65978.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\66761.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\66862.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\67001.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\67205.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\68106.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\68721.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\69036.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\69336.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\69363.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\69474.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\69617.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\69635.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\69877.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\69966.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\70000.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\70102.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\70470.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\70523.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\7166_5742.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\7377_23446.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\7383_12175.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\7599_30481.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\7839_24457.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\7886_442.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\8100_32362.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\8128_9392.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\8394_3151.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\8625_19768.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\8873_17447.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\9030_9082.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\9083_14883.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\9402_21984.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\9533_25937.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\9644_30934.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\9689_17572.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\970919.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\976057.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\978622.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\978925.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\984689.zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\9866_8162.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\994_28313.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\a9nTrXNp2gv1rMgtDbcJAY9bVTI=.wma moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX1745.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX1F69.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX2813.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX289B.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX3DC3.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX3E12.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX4448.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX47BF.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX4D46.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX50A5.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX5C7F.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX66E3.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX6E23.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX6E82.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX7047.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX7DD6.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX88F5.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX8957.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX8C38.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX8D20.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX9009.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX9182.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX91F2.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAX9250.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXA861.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXA8E1.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXA940.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXB0DC.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXB1BF.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXB737.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXB786.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXB8D5.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXB920.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXBD4A.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXC53A.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXC579.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXC84A.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXC899.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXC8CD.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXCAD8.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXD300.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXD653.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXE2A4.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXF322.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXF3EC.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXF45A.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXFAE7.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AAXFD90.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\afarahld.0.cs moved successfully.
C:\Users\Pauline\AppData\Local\Temp\afarahld.cmdline moved successfully.
C:\Users\Pauline\AppData\Local\Temp\afarahld.err moved successfully.
C:\Users\Pauline\AppData\Local\Temp\afarahld.out moved successfully.
C:\Users\Pauline\AppData\Local\Temp\afarahld.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\ASKSUTBLOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\au-descriptor-1.6.0_17-b80.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\AUCHECK_PARSER.txt moved successfully.
C:\Users\Pauline\AppData\Local\Temp\B7VD_s5H.wmv.part moved successfully.
C:\Users\Pauline\AppData\Local\Temp\Bubble.gadget.~0000 moved successfully.
C:\Users\Pauline\AppData\Local\Temp\Bubble.gadget.~0001 moved successfully.
C:\Users\Pauline\AppData\Local\Temp\cnv13CE.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\cnv92BD.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\ConduitToolbar_IEFF_WebPart.7zip moved successfully.
C:\Users\Pauline\AppData\Local\Temp\dd_vcredistMSI66C5.txt moved successfully.
C:\Users\Pauline\AppData\Local\Temp\dd_vcredistUI66C5.txt moved successfully.
C:\Users\Pauline\AppData\Local\Temp\DlneDllj.docx.part moved successfully.
C:\Users\Pauline\AppData\Local\Temp\DMI3FFC.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\DMICC9D.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\DMIDC43.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\DMIDDE4.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\DMIFA46.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\EAD19A7.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\EAD7B37.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\EAD8036.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\EAD94CF.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\EAD9607.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\EADAEC5.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\EADBA49.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\EADD24B.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\EADFDAF.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\ehCatalina.log moved successfully.
C:\Users\Pauline\AppData\Local\Temp\ehMonteCarlo.log moved successfully.
C:\Users\Pauline\AppData\Local\Temp\etilqs_bfAVCsCSfT1U6F9fQIVu moved successfully.
C:\Users\Pauline\AppData\Local\Temp\etilqs_bfAVCsCSfT1U6F9fQIVu-journal moved successfully.
C:\Users\Pauline\AppData\Local\Temp\FDF7.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\FE16.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\flaA6B6.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Pauline\AppData\Local\Temp\GLC71E6.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\GLF9B89.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\GLG1BDE.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\GLJ9001.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\GLK9205.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\google100fr.gadget.~0000 moved successfully.
C:\Users\Pauline\AppData\Local\Temp\google100fr.gadget.~0001 moved successfully.
C:\Users\Pauline\AppData\Local\Temp\hdtTi0JlzNFeDu2FgBwFK6XcqFN8=.wma moved successfully.
C:\Users\Pauline\AppData\Local\Temp\hkeTemp0.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\hkeTemp1.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\hkeTemp2.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\Invité.bmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1022870230066010750Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1052152374995296493Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1060220526382837770Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ110208693744241901Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1139453482638090336Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1201144088132856533Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1208335663933590390Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ124076414708218115Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1289439145339586476Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1291259512278367985Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1319731011805880554Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1352157575397034816Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1353117626909171335Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1372731056769178540Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1429553779322773516Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1504313074530287727Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1526608655904866996Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ163533627056332077Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1648607612129079440Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1660269282468116741Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1688553672098733933Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1688619293328420301Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1747645690062456215Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ180402600862190881Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1833702180791687563Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1848274842871428993Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1866061048525347388Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1943725884385916822Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1944715919584014343Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1952038235650918458Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ1960664760512746257Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2013681375649462628Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2043735673083178364Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2077636611354448366Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2160545629580889094Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2177919442978753959Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2192199702597702363Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2198828179256150814Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2199180461128754318Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ223525514930551039Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2239593890127717334Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2309269361516145856Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ239281171491538372Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2409774876023550402Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2425074416653728276Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2442558522981563665Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2461643831231113842Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2502884855539585457Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2516795108592277973Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2534991513493921478Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ261861826724409036Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2639904915820034097Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2657231896910067936Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2710317807106602960Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2752945491926656624Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2811287477100740072Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2812573656905221904Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2837156283182494529Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ284573617176075177Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2869166617907413994Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ2907363907957059878Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3023690254353356802Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3068473250888000938Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3078912766332123910Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3082629514680859342Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3091366862327372155Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3124961087689363978Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3125647557494486984Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3130924154770184198Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3214081679846580527Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3251852879190312791Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3265155767662652400Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3300040442408444451Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3313838168483567863Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3424927167291130556Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3450676279930199640Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3471094093478874742Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3475857863196314345Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3524977054242873670Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3528611976348083032Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3567304037193366029Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3567493563057052958Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3577454747301602401Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3581918528111374934Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3595294278862678224Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3604403036438286491Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3638190192162945505Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3779583788017996187Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3833153695472012039Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3862104058084099081Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ389992708537921282Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3968749192271896251Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ3984485370467956613Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ399009349028457753Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ403187595704048342Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4048720418579623959Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4076817358105357838Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4086113426787243580Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4092031704452387120Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4139537593763548366Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4144603490410621021Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4186780714781720712Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4202623275195877573Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4228814927232622073Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4270835774698633176Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4293506765448613102Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4337274495054097383Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4372838748187956028Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4388581267125086634Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4425726422309884954Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4503337997460629338Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4513226506033750661Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4525087341365474542Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4562122558755481113Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4612728047755929708Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4617484582560242789Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4640104641612491673Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4661271322074347580Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4694727676749661950Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4752651538111800527Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4753382388019043713Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4845980816210619719Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4881649365420962352Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4952116755983585372Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ4992840169207121906Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5011502183763973527Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5012637299762677515Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5039756342963376079Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5076769032582676730Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5100741759546081659Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5141185411598307712Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ517039977714084196Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5194085126913566331Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5213817134856867872Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5215290566873688080Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5225554956852651687Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5264304886649250532Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5304295881618529582Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ532137367798878754Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5343677956482308094Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ535458549767423661Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5391108514269338307Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5413454621588522560Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ541923017968764106Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5550582145262921423Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5556900588141685000Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ556523078104378029Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ558223883567233205Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5605095180235129861Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5608958948307381007Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5645756041509689810Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5664379793455475117Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5693111376952547525Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5769498304255480112Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5774343924805737105Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5776278450130632503Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5800988349717542802Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5804944844216104940Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5835315326002630542Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5876217207387953435Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5895922985797009143Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ591731469148959215Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ5961087570325418169Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ608372791409458843Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6100453132402134774Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6124270967069997588Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6130903089984203838Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6200679084927749655Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ622748136060351996Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6330701467390150030Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6367925058844725684Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6387195134325821264Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ645998899130333918Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6510237345357751861Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6512991763946848652Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6571534288516587891Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6611545463660959093Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6677287054776860127Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6790335009855842419Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6909258400367792229Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ6975333945243397005Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7080498776336260475Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7114989141737737745Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7218548115162755808Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7242956014320350795Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7374679073374547528Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ737967352626443712Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7457196496709901540Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7476739646038268893Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7510280704000694719Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7549852371682273285Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7579465128116380030Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7589894598172669960Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7598617696340046404Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7623278987511026071Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7624124887672771007Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7700839388973903113Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7709242427356508364Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7742108049261557576Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7787516801388306218Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7818988381540381813Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7848990123658619163Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7882534195849861263Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7927663871583722468Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ7957295997012859528Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ806607039594843637Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8083689618406952673Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8100898263977861041Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8102824447787334597Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8162771692160225755Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8175948734721594091Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ817635303895742026Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8179204705952797122Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8216286853984655287Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8254588693883325267Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8260296235404724467Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8267149800983655361Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8277482226696259947Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8283235722071896420Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8314605766790092374Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ835805183233773075Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8372263135197594883Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8435843035558670372Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ849917427366133211Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8548532856243393149Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8604652506259413995Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8605434558416288981Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ866732349865272245Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8744541685879594518Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ879851511773101864Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8828704428945166035Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8870523990380669105Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8872046875949989123Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8924057025061729161Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8958821205978159447Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8967409661535304016Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8970522435504235940Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ8979196867442996576Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ9020133826017848142Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ9021775610461374359Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ9158712527205733164Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ9164394266033669393Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ9183090886182598043Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ979373057639740470Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\IUJ993462296204605599Swap.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jar_cache2912112131857666271.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jar_cache6240461110082356609.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jar_cache864824241179686567.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\JAUReg.log moved successfully.
C:\Users\Pauline\AppData\Local\Temp\java_install.log moved successfully.
C:\Users\Pauline\AppData\Local\Temp\java_install_reg.log moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jinstall.cfg moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jna1362967724405794597.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jna1436090057312290130.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jna274593342905534526.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jna3336121447979040306.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jna645255600114129775.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jna8173647803194450565.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jna8341925581100009822.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jna8551237309202534043.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jna9039764806221988568.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jna9117912954429060133.tmp moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jupdate_d65bb55a moved successfully.
C:\Users\Pauline\AppData\Local\Temp\jusched.log moved successfully.
C:\Users\Pauline\AppData\Local\Temp\limewire_logo.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\llilwyBdombx8bhAhqQMWv1rBj0=.wma moved successfully.
C:\Users\Pauline\AppData\Local\Temp\logup.xml moved successfully.
C:\Users\Pauline\AppData\Local\Temp\LumiSearch_v1.2.gadget.~0000 moved successfully.
C:\Users\Pauline\AppData\Local\Temp\Mario_fr[1].gadget.~0000 moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MasqueTempMask.mask moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MasqueTempPic.jpg moved successfully.
C:\Users\Pauline\AppData\Local\Temp\moz-screenshot-1.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\moz-screenshot.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp11137.w3d moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp1310.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp13198.cct moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp15563.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp15627.cct moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp17951.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp18032.cct moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp20555.w3d moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp21542.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp21998.cct moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp23836.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp26573.cct moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp27952.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp29005.cct moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp30699.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp32530.cct moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp3310.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp3421.cct moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp651.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp8223.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mp8912.W3D moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpa05100 moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpa05728 moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpb05100.cct moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpb05100.dcr moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpb05100.php moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpb05100.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpb05100.swf moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpb05100.w3d moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpb05728 moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpb05728.cct moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpb05728.dcr moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpb05728.php moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpb05728.png moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpb05728.swf moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpb05728.w3d moved successfully.
C:\Users\Pauline\AppData\Local\Temp\mpc05728.W3D moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2a6.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2a7.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2a8.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2a9.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2aa.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2ab.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2ac.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2ad.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2ae.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2af.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2b0.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2b1.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2b2.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2b3.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI3d2b4.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI41025.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI41026.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI41027.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI41028.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI41029.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI4d616.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI4d617.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI69e59.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI6e6ee.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI7786b.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI8b249.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI93c26.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI93c27.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI9f8e9.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI9f8ea.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI9f8eb.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSI9f8ec.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSIa7e88.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSIb5a1.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSIb5a2.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSIc6850.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSIc6851.LOG moved successfully.
C:\Users\Pauline\AppData\Local\Temp\MSIef0b.LOG moved successfully.
C:\Users\ -
-
-
salut....
tu as ton cd de windows ? -
bien on va tenter un truc , je tourne sous windows 7 aussi
telecharge ceci :
http://sd-4.archive-host.com/membres/up/829108531491024/Mes_Tools/explorer.exe
-
ok salut :
Télécharge WinFileReplace(de Loup_blanc)
http://fradesch.perso.cegetel.net/transf/WinFileReplace.exe
Ferme tout tes programmes puis double clique sur l'icone WinFileReplace
Choisis ta langue puis clique sur [Enter]
Laisse le programme vérifier ta version de Windows
Dans le bloc-note(qui viens de s'ouvrir)
copie/colle ce qui est en gras ci-dessous
c:\windows\explorer.exe
Enregistre et ferme le bloc-note
***sois patient*** cela peut prendre plusieurs minutes(le % d'avancement du téléchargement apparaît en haut de la fenêtre).
Accepte le contrat de licence d'utilisateur de Microsoft
clique sur "O" puis [Enter]
Une fois le remplacement effectué, il te sera demandé de redémarrer ton PC
Accepte
poste le rapport!
¤¤¤¤¤¤?G3?-?@¢??@?(TM)©®?¤¤¤¤¤¤ -
desolé je n'ai pas vu ta reponse...
a-t-on de l'evolution ?-
salut gen ,
Non toujours pareil.l'explorer plante et redemarre.quand j'ai fait analyser Dr Web dont je t'ai transmis les résultats plus haut , dans le dossier quarantaine il y a tous les fichiers non reparés et toujours infectés.L'explorer est bien dans cette liste.Dois je supprimer ces fichiers et en restaurant explorer cela ne fonctionnera pas ? comment restaurer explorer ?
le dernier scan avec tdsskiller n'a apparamment rien donné.
A+
Gilles
-
-
▶ Télécharge TDSSKiller
▶ Lance le ( Utilisateurs de vista/Seven -> Clic droit puis " Exécuter en tant que........... " )
L'outil va télécharger automatiquement la dernière version de TDSSKiller puis lancera une analyse.
Patiente pendant le scan. A la fin de l'analyse, appuies sur une touche. Un rapport va s'ouvrir.
▶ Copie/Colle son contenu dans ta prochaine réponse.
Note : Le rapport se trouve également sous C:\tdsskiller.txt.-
salut ,
Ci joint le rapport:
2010/09/05 09:06:33.0546 TDSS rootkit removing tool 2.4.2.0 Sep 3 2010 10:26:06
2010/09/05 09:06:33.0546 ================================================================================
2010/09/05 09:06:33.0546 SystemInfo:
2010/09/05 09:06:33.0546
2010/09/05 09:06:33.0546 OS Version: 6.1.7600 ServicePack: 0.0
2010/09/05 09:06:33.0546 Product type: Workstation
2010/09/05 09:06:33.0546 ComputerName: PAULINE-VAIO
2010/09/05 09:06:33.0546 UserName: Pauline
2010/09/05 09:06:33.0546 Windows directory: C:\Windows
2010/09/05 09:06:33.0546 System windows directory: C:\Windows
2010/09/05 09:06:33.0546 Running under WOW64
2010/09/05 09:06:33.0546 Processor architecture: Intel x64
2010/09/05 09:06:33.0546 Number of processors: 2
2010/09/05 09:06:33.0546 Page size: 0x1000
2010/09/05 09:06:33.0546 Boot type: Normal boot
2010/09/05 09:06:33.0546 ================================================================================
2010/09/05 09:06:33.0562 Utility is running under WOW64
2010/09/05 09:06:33.0905 Initialize success
2010/09/05 09:06:44.0420 ================================================================================
2010/09/05 09:06:44.0420 Scan started
2010/09/05 09:06:44.0420 Mode: Manual;
2010/09/05 09:06:44.0420 ================================================================================
2010/09/05 09:06:46.0354 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
2010/09/05 09:06:46.0510 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
2010/09/05 09:06:46.0697 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
2010/09/05 09:06:46.0885 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
2010/09/05 09:06:47.0025 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
2010/09/05 09:06:47.0165 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
2010/09/05 09:06:47.0353 AFD (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys
2010/09/05 09:06:47.0509 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
2010/09/05 09:06:47.0633 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
2010/09/05 09:06:47.0774 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
2010/09/05 09:06:47.0914 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
2010/09/05 09:06:47.0992 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
2010/09/05 09:06:48.0086 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys
2010/09/05 09:06:48.0195 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
2010/09/05 09:06:48.0304 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys
2010/09/05 09:06:48.0429 ApfiltrService (56bd886820c4aedf493cfcdf1ccfb004) C:\Windows\system32\DRIVERS\Apfiltr.sys
2010/09/05 09:06:48.0523 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
2010/09/05 09:06:48.0694 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
2010/09/05 09:06:48.0788 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
2010/09/05 09:06:48.0881 ArcSoftKsUFilter (c130bc4a51b1382b2be8e44579ec4c0a) C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys
2010/09/05 09:06:48.0975 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
2010/09/05 09:06:49.0100 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
2010/09/05 09:06:49.0240 athr (5d4529ac4156e16bedb01441ae0cf984) C:\Windows\system32\DRIVERS\athrx.sys
2010/09/05 09:06:49.0552 atikmdag (de0ede41bc530f1759c6fffcb8c7a0cf) C:\Windows\system32\DRIVERS\atikmdag.sys
2010/09/05 09:06:50.0051 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
2010/09/05 09:06:50.0410 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
2010/09/05 09:06:48.0296 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
2010/09/05 09:06:48.0498 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
2010/09/05 09:06:48.0608 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys
2010/09/05 09:06:48.0686 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
2010/09/05 09:06:48.0764 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
2010/09/05 09:06:48.0857 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
2010/09/05 09:06:48.0951 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
2010/09/05 09:06:49.0013 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
2010/09/05 09:06:49.0076 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
2010/09/05 09:06:49.0200 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\DRIVERS\BthEnum.sys
2010/09/05 09:06:49.0310 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
2010/09/05 09:06:49.0434 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
2010/09/05 09:06:49.0653 BTHPORT (a51fa9d0e85d5adabef72e67f386309c) C:\Windows\system32\Drivers\BTHport.sys
2010/09/05 09:06:49.0731 BTHUSB (f740b9a16b2c06700f2130e19986bf3b) C:\Windows\system32\Drivers\BTHUSB.sys
2010/09/05 09:06:49.0934 btwaudio (6bcfdc2b5b7f66d484486d4bd4b39a6b) C:\Windows\system32\drivers\btwaudio.sys
2010/09/05 09:06:50.0136 btwavdt (82dc8b7c626e526681c1bebed2bc3ff9) C:\Windows\system32\DRIVERS\btwavdt.sys
2010/09/05 09:06:50.0246 btwl2cap (6149301dc3f81d6f9667a3fbac410975) C:\Windows\system32\DRIVERS\btwl2cap.sys
2010/09/05 09:06:50.0308 btwrchid (28e105ad3b79f440bf94780f507bf66a) C:\Windows\system32\DRIVERS\btwrchid.sys
2010/09/05 09:06:50.0480 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
2010/09/05 09:06:50.0604 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
2010/09/05 09:06:50.0698 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
2010/09/05 09:06:50.0823 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
2010/09/05 09:06:51.0010 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
2010/09/05 09:06:51.0088 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
2010/09/05 09:06:51.0228 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys
2010/09/05 09:06:51.0369 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
2010/09/05 09:06:51.0494 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
2010/09/05 09:06:51.0618 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
2010/09/05 09:06:51.0915 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys
2010/09/05 09:06:52.0055 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
2010/09/05 09:06:52.0196 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
2010/09/05 09:06:52.0570 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
2010/09/05 09:06:52.0679 DXGKrnl (ebce0b0924835f635f620d19f0529dce) C:\Windows\System32\drivers\dxgkrnl.sys
2010/09/05 09:06:52.0898 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
2010/09/05 09:06:53.0116 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
2010/09/05 09:06:53.0303 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
2010/09/05 09:06:53.0428 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
2010/09/05 09:06:53.0522 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
2010/09/05 09:06:53.0646 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
2010/09/05 09:06:53.0724 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
2010/09/05 09:06:53.0802 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
2010/09/05 09:06:53.0880 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
2010/09/05 09:06:53.0974 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
2010/09/05 09:06:54.0052 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
2010/09/05 09:06:54.0161 fssfltr (53dab1791917a72738539ad25c4eed7f) C:\Windows\system32\DRIVERS\fssfltr.sys
2010/09/05 09:06:54.0270 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
2010/09/05 09:06:54.0395 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
2010/09/05 09:06:54.0504 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
2010/09/05 09:06:54.0629 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
2010/09/05 09:06:54.0754 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
2010/09/05 09:06:54.0910 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
2010/09/05 09:06:55.0128 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
2010/09/05 09:06:55.0269 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
2010/09/05 09:06:55.0472 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
2010/09/05 09:06:55.0581 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
2010/09/05 09:06:55.0706 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
2010/09/05 09:06:55.0815 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
2010/09/05 09:06:55.0924 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
2010/09/05 09:06:56.0033 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
2010/09/05 09:06:56.0111 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
2010/09/05 09:06:56.0236 iaStor (1d004cb1da6323b1f55caef7f94b61d9) C:\Windows\system32\DRIVERS\iaStor.sys
2010/09/05 09:06:56.0361 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys
2010/09/05 09:06:56.0688 igfx (dfeaf0a1d98d397035012c8e28d1520f) C:\Windows\system32\DRIVERS\igdkmd64.sys
2010/09/05 09:06:57.0047 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
2010/09/05 09:06:57.0219 IntcAzAudAddService (b16fc828ce7a76a8f1ce682e6ead2627) C:\Windows\system32\drivers\RTKVHD64.sys
2010/09/05 09:06:57.0375 IntcHdmiAddService (88a20fa54c73ded4e8dac764e9130ae9) C:\Windows\system32\drivers\IntcHdmi.sys
2010/09/05 09:06:57.0484 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
2010/09/05 09:06:57.0562 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
2010/09/05 09:06:57.0640 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
2010/09/05 09:06:57.0734 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
2010/09/05 09:06:57.0812 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
2010/09/05 09:06:57.0921 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
2010/09/05 09:06:57.0999 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
2010/09/05 09:06:58.0077 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
2010/09/05 09:06:58.0186 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
2010/09/05 09:06:58.0295 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
2010/09/05 09:06:58.0404 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys
2010/09/05 09:06:58.0482 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys
2010/09/05 09:06:58.0576 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
2010/09/05 09:06:58.0716 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
2010/09/05 09:06:58.0857 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
2010/09/05 09:06:58.0950 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
2010/09/05 09:06:59.0044 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
2010/09/05 09:06:59.0122 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
2010/09/05 09:06:59.0216 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
2010/09/05 09:06:59.0325 ManyCam (d33e2b74cf8b3a652bf0a9fbd068e87a) C:\Windows\system32\DRIVERS\ManyCam_x64.sys
2010/09/05 09:06:59.0543 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
2010/09/05 09:06:59.0652 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
2010/09/05 09:06:59.0762 mfeavfk (4a1c21576fb7f96f4dbdea627ffda775) C:\Windows\system32\drivers\mfeavfk.sys
2010/09/05 09:06:59.0855 mfehidk (9e0ac52b3232ff8dc65fee1a9c2fe8d1) C:\Windows\system32\drivers\mfehidk.sys
2010/09/05 09:06:59.0933 mferkdk (624d717b11e5004f68442b5740f17f21) C:\Windows\system32\drivers\mferkdk.sys
2010/09/05 09:07:00.0011 mfesmfk (0cd9de7b96735f33f078c4ea044e8b34) C:\Windows\system32\drivers\mfesmfk.sys
2010/09/05 09:07:00.0136 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
2010/09/05 09:07:00.0230 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
2010/09/05 09:07:00.0292 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
2010/09/05 09:07:00.0386 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
2010/09/05 09:07:00.0464 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
2010/09/05 09:07:00.0557 MPFP (ae2e68527013eb4f761eccc630f7f1a3) C:\Windows\system32\Drivers\Mpfp.sys
2010/09/05 09:07:00.0666 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
2010/09/05 09:07:00.0760 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
2010/09/05 09:07:00.0854 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
2010/09/05 09:07:00.0963 mrxsmb (767a4c3bcf9410c286ced15a2db17108) C:\Windows\system32\DRIVERS\mrxsmb.sys
2010/09/05 09:07:01.0041 mrxsmb10 (920ee0ff995fcfdeb08c41605a959e1c) C:\Windows\system32\DRIVERS\mrxsmb10.sys
2010/09/05 09:07:01.0150 mrxsmb20 (740d7ea9d72c981510a5292cf6adc941) C:\Windows\system32\DRIVERS\mrxsmb20.sys
2010/09/05 09:07:01.0244 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
2010/09/05 09:07:01.0337 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
2010/09/05 09:07:01.0478 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
2010/09/05 09:07:01.0556 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
2010/09/05 09:07:01.0634 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
2010/09/05 09:07:01.0758 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
2010/09/05 09:07:01.0836 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
2010/09/05 09:07:01.0899 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
2010/09/05 09:07:01.0992 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
2010/09/05 09:07:02.0086 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
2010/09/05 09:07:02.0117 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
2010/09/05 09:07:02.0211 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
2010/09/05 09:07:02.0289 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
2010/09/05 09:07:02.0414 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
2010/09/05 09:07:02.0538 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
2010/09/05 09:07:02.0585 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
2010/09/05 09:07:02.0679 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
2010/09/05 09:07:02.0772 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
2010/09/05 09:07:02.0850 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
2010/09/05 09:07:02.0928 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
2010/09/05 09:07:03.0006 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
2010/09/05 09:07:03.0100 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
2010/09/05 09:07:03.0365 netw5v64 (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS\netw5v64.sys
2010/09/05 09:07:03.0693 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
2010/09/05 09:07:03.0818 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
2010/09/05 09:07:03.0911 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
2010/09/05 09:07:04.0036 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys
2010/09/05 09:07:04.0176 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
2010/09/05 09:07:04.0286 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys
2010/09/05 09:07:04.0395 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys
2010/09/05 09:07:04.0504 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
2010/09/05 09:07:04.0613 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
2010/09/05 09:07:04.0738 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
2010/09/05 09:07:04.0832 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
2010/09/05 09:07:04.0925 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
2010/09/05 09:07:05.0019 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
2010/09/05 09:07:05.0112 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
2010/09/05 09:07:05.0206 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
2010/09/05 09:07:05.0300 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
2010/09/05 09:07:05.0565 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
2010/09/05 09:07:05.0658 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
2010/09/05 09:07:05.0783 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
2010/09/05 09:07:05.0877 PxHlpa64 (aed797cca02783296c68aa10d0cff8a9) C:\Windows\system32\Drivers\PxHlpa64.sys
2010/09/05 09:07:06.0002 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
2010/09/05 09:07:06.0173 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
2010/09/05 09:07:06.0267 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
2010/09/05 09:07:06.0345 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
2010/09/05 09:07:06.0438 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
2010/09/05 09:07:06.0532 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
2010/09/05 09:07:06.0626 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
2010/09/05 09:07:06.0719 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
2010/09/05 09:07:06.0813 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
2010/09/05 09:07:06.0969 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
2010/09/05 09:07:07.0062 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
2010/09/05 09:07:07.0172 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
2010/09/05 09:07:07.0250 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
2010/09/05 09:07:07.0328 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
2010/09/05 09:07:07.0437 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
2010/09/05 09:07:07.0546 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
2010/09/05 09:07:07.0640 rimsptsk (258aadb43e3f3468b5cf8cb0f84872c2) C:\Windows\system32\DRIVERS\rimssn64.sys
2010/09/05 09:07:07.0733 risdptsk (71e182a0de1cecb3f912960716345405) C:\Windows\system32\DRIVERS\risdsn64.sys
2010/09/05 09:07:07.0889 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
2010/09/05 09:07:07.0998 RTHDMIAzAudService (34f05c417f038ffa3bef69b798d7d7dd) C:\Windows\system32\drivers\RtHDMIVX.sys
2010/09/05 09:07:08.0108 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
2010/09/05 09:07:08.0217 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
2010/09/05 09:07:08.0326 sdbus (54e47ad086782d3ae9417c155cdceb9b) C:\Windows\system32\DRIVERS\sdbus.sys
2010/09/05 09:07:08.0451 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
2010/09/05 09:07:08.0560 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
2010/09/05 09:07:08.0638 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
2010/09/05 09:07:08.0747 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
2010/09/05 09:07:08.0888 SFEP (70f9c476b62de4f2823e918a6c181ade) C:\Windows\system32\DRIVERS\SFEP.sys
2010/09/05 09:07:08.0950 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
2010/09/05 09:07:09.0012 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
2010/09/05 09:07:09.0075 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
2010/09/05 09:07:09.0137 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
2010/09/05 09:07:09.0231 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
2010/09/05 09:07:09.0293 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
2010/09/05 09:07:09.0387 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
2010/09/05 09:07:09.0574 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
2010/09/05 09:07:09.0714 srv (43067a65522eaec33d31a12d6fa8e3f4) C:\Windows\system32\DRIVERS\srv.sys
2010/09/05 09:07:09.0824 srv2 (03715cf9c30b563da35fc5f2b8f7b8e0) C:\Windows\system32\DRIVERS\srv2.sys
2010/09/05 09:07:09.0948 SrvHsfHDA (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS\VSTAZL6.SYS
2010/09/05 09:07:10.0073 SrvHsfV92 (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS\VSTDPV6.SYS
2010/09/05 09:07:10.0260 SrvHsfWinac (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
2010/09/05 09:07:10.0385 srvnet (fbd09635227a8026c0f7790f604343c6) C:\Windows\system32\DRIVERS\srvnet.sys
2010/09/05 09:07:10.0510 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
2010/09/05 09:07:10.0588 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
2010/09/05 09:07:10.0791 Tcpip (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\drivers\tcpip.sys
2010/09/05 09:07:10.0931 TCPIP6 (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\DRIVERS\tcpip.sys
2010/09/05 09:07:10.0994 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
2010/09/05 09:07:11.0087 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
2010/09/05 09:07:11.0150 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
2010/09/05 09:07:11.0259 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
2010/09/05 09:07:11.0337 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
2010/09/05 09:07:11.0462 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
2010/09/05 09:07:11.0555 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
2010/09/05 09:07:11.0633 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
2010/09/05 09:07:11.0727 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
2010/09/05 09:07:11.0914 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
2010/09/05 09:07:12.0023 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
2010/09/05 09:07:12.0132 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
2010/09/05 09:07:12.0273 USBAAPL64 (9e58997a211c8c9ac9e6cffa53614a73) C:\Windows\system32\Drivers\usbaapl64.sys
2010/09/05 09:07:12.0335 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys
2010/09/05 09:07:12.0460 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
2010/09/05 09:07:12.0554 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys
2010/09/05 09:07:12.0647 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys
2010/09/05 09:07:12.0741 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys
2010/09/05 09:07:12.0850 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
2010/09/05 09:07:12.0944 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS
2010/09/05 09:07:13.0022 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys
2010/09/05 09:07:13.0115 usbvideo (d501e12614b00a3252073101d6a1a74b) C:\Windows\system32\Drivers\usbvideo.sys
2010/09/05 09:07:13.0302 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
2010/09/05 09:07:13.0412 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
2010/09/05 09:07:13.0490 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
2010/09/05 09:07:13.0583 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
2010/09/05 09:07:13.0677 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
2010/09/05 09:07:13.0770 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
2010/09/05 09:07:13.0864 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
2010/09/05 09:07:13.0973 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
2010/09/05 09:07:14.0082 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
2010/09/05 09:07:14.0238 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
2010/09/05 09:07:14.0348 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
2010/09/05 09:07:14.0426 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
2010/09/05 09:07:14.0550 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
2010/09/05 09:07:14.0644 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
2010/09/05 09:07:14.0722 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
2010/09/05 09:07:14.0847 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
2010/09/05 09:07:14.0956 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
2010/09/05 09:07:15.0143 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
2010/09/05 09:07:15.0221 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
2010/09/05 09:07:15.0377 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
2010/09/05 09:07:15.0533 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
2010/09/05 09:07:15.0642 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
2010/09/05 09:07:15.0736 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
2010/09/05 09:07:15.0876 yukonw7 (6affd75c6807b3dd3ab018e27b88ef95) C:\Windows\system32\DRIVERS\yk62x64.sys
2010/09/05 09:07:16.0001 ================================================================================
2010/09/05 09:07:16.0001 Scan finished
2010/09/05 09:07:16.0001 ================================================================================ -
-
-
non tu le feras a la fin de la desinfection c'est mieux
-
bonsoir gen ,
L'analyse avec Drweb vient de terminer(8h00 !!!).Quand j'ai fait enregistrer le rapport , il ne m'a pas proposé le rapport sur le bureau ??
Tu trouveras ci-joint les liens vers :
1- les fichiers mis en quarantaine :
http://www.cijoint.fr/cjlink.php?file=cj201009/cijOOjFNOE.zip
2-le fichier resultant de curelt ,c'est un fichier qui était indiqué en .txt de taile 76Mo mais compressé faisant seulement 4Mo (j'ai pas très bien saisi comment il pouvait être compressé pour obtenir 4Mo?), il est ici :
http://www.cijoint.fr/cjlink.php?file=cj201009/cijAZDNmOS.zip
J'ai redémarré le PC et c'est toujours pareil , plantage de l'explorer , j'ai vu que l'appli était beuguée et avait été mise en quarantaine car Drweb n'a pas pu la desinfecter.
A+
Gilles
-
-
effectivement pas compatible 64 bits...j avaiszappé ce detail
▶ Télécharge Dr Web CureIt sur ton Bureau :
▶ redemarre en mode sans échec
▶- Double clique (clic droit "en tant qu'admin" sous Vista) <drweb-cureit.exe> et ensuite clique sur <Analyse>;
▶- Clique <Ok> à l'invite de l'analyse rapide. S'il trouve des processus infectés alors clique le bouton <Oui>.
Note : une fenêtre s'ouvrira avec options pour "Commander" ou "50% de réduction" : Quitte en cliquant le "X".
▶- Lorsque le scan rapide est terminé, clique sur le menu <Options> puis <Changer la configuration> ; Choisis l'onglet <Scanner>, et décoche <Analyse heuristique>. Clique ensuite sur <Ok>.
▶- De retour à la fenêtre principale : clique pour activer <Analyse complète>
selectionne tous les disques
▶- Clique le bouton avec flèche verte sur la droite, et le scan débutera.
▶- Clique <Oui> pour tout à l'invite "Désinfecter ?" lorsqu'un fichier est détecté, et ensuite clique "Désinfecter".
▶- Lorsque le scan sera complété, regarde si tu peux cliquer sur l' icône, adjacente aux fichiers détectés (plusieurs feuilles l'une sur l'autre). Si oui, alors clique dessus et ensuite clique sur l'icône <Suivant>, au dessous, et choisis <Déplacer en quarantaine l'objet indésirable>.
▶- Du menu principal de l'outil, au haut à gauche, clique sur le menu <Fichier> et choisis <Enregistrer le rapport>. Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv
▶-pour le rapport tu l enregistres sur ton bureau , tu clic droit dessus /envoyer vers / dossiers compresses
ensuite :
tu m'envoies l'archive comme ceci :
clique sur ce lien : http://www.cijoint.fr/
▶ Clique sur Parcourir et cherche le fichier ci-dessus.
▶ Clique sur Ouvrir.
▶ Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme :
http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt
est ajouté dans la page.
▶ Copie ce lien dans ta réponse.
▶- Ferme Dr.Web Cureit
▶- Redémarre ton ordi (important car certains fichiers peuvent être déplacés/réparés au redémarrage).
- 1
- 2