Antimalware virus

Bonjour,
Le PC de ma fille est infecté par ce virus.
Peux tu m'aider sur le sujet.Ci-joint les liens des 2 fichiers que tu demandes :
http://www.cijoint.fr/cjlink.php?file=cj201008/cijKSQEOg1.txt
http://www.cijoint.fr/cjlink.php?file=cj201008/cijBbvm8ag.txt
J'ai essayé de te poster un message en privé mais je ne sais pas si cela a fonctionné.

Merci par avance
Gilles

35 réponses

Résumé de la discussion

Une infection virale touche le PC d'un utilisateur, avec des fichiers joints fournis pour diagnostic et des échanges visant à obtenir de l'aide. Plusieurs conseils préconisent d'utiliser List_Kill'em et un script pour inspecter et nettoyer les entrées de démarrage et les clés Run, avec des procédures distinctes pour XP d'une part et Vista/7 d'une part. D'autres préconisent de désactiver l'UAC, relancer l'outil et examiner les rapports, tandis que plusieurs témoignent de plantages de l'explorateur et discutent du choix d'un antivirus et des mises à jour Windows. Une nuance utile: la discussion évoque des enjeux de stabilité et de sécurité après infection, sans consensus sur l'efficacité durable des mesures.

Bobot (l’IA à votre service)
  1. dans l'espace "Parcourir"
    1. salut gen ,

      je n'arrive pas à solder le problème , dans parcourir je ne trouve pas le fichier C:\Windows\System32\Drivers\dump_dumpfve.sys.
      J'ai recuperé un DVD de Windows 7 , je vais tout reinstaller , je ne vois plus d'autres solutions.
      Merci pour l'aide jusqu'à maintenant.

      Cordialement

      Gilles
  2. Fais analyser le(s) fichier(s) suivants sur Virustotal :

    Virus Total

    * * Colle directement le chemin des fichiers , un par un , dans l'espace "Parcourir" apres chaque analyse :

    C:\Windows\System32\Drivers\dump_dumpfve.sys

    * Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
    * Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
    * Lorsque l'analyse est terminée colle le lien de(s)( la) page(s) dans ta prochaine réponse.
    ¤¤¤¤¤¤?G3?-?@¢??@?(TM)©®?¤¤¤¤¤¤
    1. salut,
      Ci joint le lien :
      http://www.virustotal.com/url-scan/report.html?id=a9f4fe57529272ab94376d61d94a501e-1285360301
      Je ne sais pas si la manip a marché .
      A+
    2. ????????
    3. salut ,
      explique moi tes ????????? , j'ai fait la manip avec l'url C:\Windows\System32\Drivers\dump_dumpfve.sys et le lien c'est l'url que je t'ai envoyé.Quand je fais parcourir je ne trouve pas le fichier dump_dumpfve.sys , j'ai donc utilisé la recherche par l'url que j'ai copié , celui que tu m'as donné plus haut.
      ci joint une capture d'écran quand j'ai fait la manip :
      http://www.cijoint.fr/cjlink.php?file=cj201009/cijsqPkahl.png
      ??????????!!!!!!!!!!!!!!!!!!!
      A+
      gilles
  3. Télécharge MBRCheck sur ton Bureau.

    * Désactive tes programmes de sécurité avant de lancer le scan. (antispyware/antivirus)
    * Double clique sur le fichier pour lancer le programme. (Note: Si tu utilises Vista/7, fais un clic droit sur le fichier puis choisir Exécuter en tant qu'administrateur).
    * Une fenêtre va s'ouvrir sur ton Bureau: Patiente une dizaine de secondes pour permettre à l'outil de compléter l'analyse.
    * Si un code de démarrage inconnu est détecté, des options s'afficheront
    * Si c'est le cas, appuie alors sur la touche N puis [Entrée] deux fois.
    * Si rien de particulier n'est détecté, presse juste sur la touche [Entrée]
    * Un fichier texte nommé MBRCheck_mois/jour/année/_heure.minutes.secondes devrait apparaitre sur ton Bureau.
    * Poste stp son contenu dans ton prochain message.
    1. salut gen ,
      Ci joint le lien pour deux fichiers , un avant que l'explorer plante et un pendant.J'ai la même remarque que mon message d'avant.Dés que l'explorer plante des mises à jour sont demandées pour telechargement.Sinon il n'a pas detecté de code inconnu (je n'ai pas fait N et 2 fois entreé)
      http://www.cijoint.fr/cjlink.php?file=cj201009/cijhHNQbVZ.txt
      http://www.cijoint.fr/cjlink.php?file=cj201009/cijXg1SE9e.txt
      A+
      Gilles
  4. Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

    ▶ Télécharge ici :

    Malwarebytes

    ou :

    Malwarebytes

    ▶ Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

    (NB : Si tu as un message d'erreur t'indiquant qu'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX

    ▶ Potasses le Tuto pour te familiariser avec le prg :

    ( cela dit, il est très simple d'utilisation ).

    relance malwarebytes en suivant scrupuleusement ces consignes :

    ! Déconnecte toi et ferme toutes applications en cours !

    ▶ Lance Malwarebyte's .

    Fais un examen dit "Complet" .

    ▶ Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
    ▶ à la fin tu cliques sur "résultat" .
    ▶ Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

    ▶ Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

    ▶ Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)

    1. salut gen,
      Ci joint le rapport :
      Malwarebytes' Anti-Malware 1.46
      www.malwarebytes.org

      Version de la base de donnÈes: 4678

      Windows 6.1.7600
      Internet Explorer 8.0.7600.16385

      24/09/2010 05:58:06
      mbam-log-2010-09-24 (05-58-06).txt

      Type d'examen: Examen complet (C:\|)
      ElÈment(s) analysÈ(s): 275438
      Temps ÈcoulÈ: 1 heure(s), 22 minute(s), 10 seconde(s)

      Processus mÈmoire infectÈ(s): 0
      Module(s) mÈmoire infectÈ(s): 0
      ClÈ(s) du Registre infectÈe(s): 8
      Valeur(s) du Registre infectÈe(s): 0
      ElÈment(s) de donnÈes du Registre infectÈ(s): 0
      Dossier(s) infectÈ(s): 0
      Fichier(s) infectÈ(s): 12

      Processus mÈmoire infectÈ(s):
      (Aucun ÈlÈment nuisible dÈtectÈ)

      Module(s) mÈmoire infectÈ(s):
      (Aucun ÈlÈment nuisible dÈtectÈ)

      ClÈ(s) du Registre infectÈe(s):
      HKEY_CLASSES_ROOT\chkaqpyxhst.chkaqpyxhst (Trojan.BHO) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\chkaqpyxhst.chkaqpyxhst.1.0 (Trojan.BHO) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{ca6704fb-6b46-4058-a797-befd9d378576} (Trojan.BHO) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\wnxmal (Rogue.SecuritySuite) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0bf254f0-88de-41af-a295-d68aa4aafd99} (Adware.Adrotator) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{0bf254f0-88de-41af-a295-d68aa4aafd99} (Adware.Adrotator) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d05a288c-bb97-44bc-b0f0-facbfa3d799d} (Adware.AdRotator) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{d05a288c-bb97-44bc-b0f0-facbfa3d799d} (Adware.AdRotator) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectÈe(s):
      (Aucun ÈlÈment nuisible dÈtectÈ)

      ElÈment(s) de donnÈes du Registre infectÈ(s):
      (Aucun ÈlÈment nuisible dÈtectÈ)

      Dossier(s) infectÈ(s):
      (Aucun ÈlÈment nuisible dÈtectÈ)

      Fichier(s) infectÈ(s):
      C:\Kill'em\Quarantine\st_la819_1930.exe.Kill'em (Adware.AdRotator) -> Quarantined and deleted successfully.
      C:\Kill'em\Quarantine\xmrnoecasw.exe.Kill'em (Malware.Packer.Gen) -> Quarantined and deleted successfully.
      C:\Kill'em\Quarantine\$NtUninstallMTF1011$.Kill'em\mmduch.dll (Trojan.BHO) -> Quarantined and deleted successfully.
      C:\Users\Pauline\AppData\Roaming\0C9B6682699498EA9A9CB03923BF9E2F\upd_debug.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
      C:\Users\Pauline\DoctorWeb\Quarantine\explore0.exe (Trojan.Crypt) -> Quarantined and deleted successfully.
      C:\Users\Pauline\DoctorWeb\Quarantine\mkcxhunr.exe.Kill'em (Rogue.SecuritySuite) -> Quarantined and deleted successfully.
      C:\Users\Pauline\DoctorWeb\Quarantine\mmx.dll (Trojan.BHO) -> Quarantined and deleted successfully.
      C:\Users\Pauline\DoctorWeb\Quarantine\tvqcexdshd0.exe (Rogue.SecuritySuite) -> Quarantined and deleted successfully.
      C:\Users\Pauline\DoctorWeb\Quarantine\wtpvaae.exe.Kill'em (Adware.AdRotator) -> Quarantined and deleted successfully.
      C:\Users\Pauline\Downloads\VLCSetup.exe (Adware.Agent) -> Quarantined and deleted successfully.
      C:\_OTL\MovedFiles\09122010_095244\C_Users\Pauline\AppData\Local\Temp\sT6RIwBG.exe.part (Adware.Agent) -> Quarantined and deleted successfully.
      C:\Users\Pauline\Local Settings\Application Data\Windows Server\admin.txt (Malware.Trace) -> Quarantined and deleted successfully.

      Le problème est toujours présent explorer plante et redemarre.J'ai toujours remarqué ce point suivant :
      tant que l'explorer ne plante pas , il n'y a pas de mises à jour à installer.Dés qu'il plante , l'icône dans le menu demarrer apparait en jaune.Et souvent la première fois qu'il plante ,c'est après les première alerte mcafee.
      A+ gilles
  5. on va essayer comme ca :

    desactive l'UAC

    https://www.zebulon.fr/astuces/pratique/220-desactiver-l-uac-dans-vista.html

    une fois ton pc redemarré :

    si tu as XP => double clique
    si tu as Vista ou windows 7 => clic droit "executer en tant que...."


    ▶ Relance List&Kill'em,avec le raccourci sur ton bureau.

    mais cette fois-ci :

    ▶ choisis l'option Script

    une fenêtre noire va s'ouvrir brievement , et List_Kill'em va se fermer

    observe ton bureau une icône "Script" s'est rajouté sur ton bureau

    ▶ crée un nouveau document texte sur ton bureau et copie/colle ce en gras si dessous :


    REST:c:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe_c:\windows\explorer.exe


    ▶ enregistre le document texte avec l'onglet fichier (enregistrer) de ce dernier , puis ferme-le

    ▶ effectue un glisser/deposer de ce fichier sur l'icone "Script"

    laisse travailler l'outil

    ▶ poste le resultat qui sera sur ton bureau (Script_(4 chiffres).txt)

    ▶ Ferme List_Kill'em

    ¤¤¤¤¤¤?G3?-?@¢??@?(TM)©®?¤¤¤¤¤¤
    1. salut gen ,
      Ci joint le résultat.
      §§§§§§§§§§ Script of List_Kill'em by gen-hackman §§§§§§§§§§

      User : Pauline (Administrateurs)
      Update on 28/08/2010 by g3n-h@ckm@n ::::: 17.00
      Start at: 00:08:14 | 30/08/2010

      Pentium(R) Dual-Core CPU T4300 @ 2.10GHz
      Microsoft Windows+7 ...dition Familiale Premium (6.1.7600 64-bit) #
      Internet Explorer 8.0.7600.16385
      Windows Firewall Status : Enabled

      C:\ -> Disque fixe local | 288,62 Go (192,17 Go free) | NTFS
      D:\ -> Disque amovible
      E:\ -> Disque amovible
      F:\ -> Disque CD-ROM | 3,09 Go (0 Mo free) [AL8PC] | UDF
      G:\ -> Disque amovible | 7,47 Go (7,4 Go free) [SANS TITRE] | NTFS

      Switch : C:\Users\Pauline\Desktop\popo.txt

      §§§§§§§§§§ File | Folder

      Deleted !! : C:\Users\Pauline\AppData\Roaming\0C9B6682699498EA9A9CB03923BF9E2F
      Deleted !! : C:\Users\Pauline\AppData\Local\ylteodtei

      §§§§§§§§§§ Keys

      Deleted : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "newsecureapp70700.exe"
      Deleted : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "kitplffr"
      Deleted : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "bipro
      §§§§§§§§§§ Script of List_Kill'em by gen-hackman §§§§§§§§§§

      User : Pauline (Administrateurs)
      Update on 28/08/2010 by g3n-h@ckm@n ::::: 17.00
      Start at: 21:23:14 | 22/09/2010

      Pentium(R) Dual-Core CPU T4300 @ 2.10GHz
      Microsoft Windows+7 ...dition Familiale Premium (6.1.7600 64-bit) #
      Internet Explorer 8.0.7600.16385
      Windows Firewall Status : Enabled

      C:\ -> Disque fixe local | 288,62 Go (193,96 Go free) | NTFS
      D:\ -> Disque amovible
      E:\ -> Disque amovible
      F:\ -> Disque CD-ROM
      G:\ -> Disque amovible | 7,47 Go (7,34 Go free) [SANS TITRE] | NTFS

      Switch : C:\Users\Pauline\Desktop\gillou.txt

      §§§§§§§§§§ File | Folder

      §§§§§§§§§§ Keys

      A+
      Gilles
  6. salut absent deux jours , désolé

    ben tu as une reference ou une valeur ou...............de cette mise a jour ??
    1. salut gen ,
      Non cela indique mise à jour étape 1 2 et 3 et puis c'est tout .Dis où chercher cette info.je ne sais où sont les packages prévus d'être installés.
      A+
      Gilles
    2. salut gen ,
      aurais-tu du neuf ?
      Cordialement
      Gilles
    3. Contributeur sécurité
      bonjour, si on me permets cette intrusion , mais quand tu as l'écusson jaune de mise à jour en bas si tu cliques dessus as tu la possibilité de faire personnalisé comme cela tu devrais avoir ce qu'il veux t'installer , sinon tu vas sur windows update http://www.update.microsoft.com/windowsupdate/v6/default.aspx tu fais rapide ! et tu vois ce qu'il te propose
    4. merci jacques j'ai beaucoup de "boulot" en ce moment........
    5. Salut à tous ,
      pour répondre à jacques.gache , comme tu l'as dit il faut que je sois le speedy gonzales de la souris pour regarder ce que tu demandes.J'ai essayé en mode sans echec mais j'ai pas trouvé .
      Dis mois si en mode sans echec je peux trouver quelque chose.Ce qui m'a encore surpris , c'est que il y a des mises à jour quasiement à chaque fois.La dernière fois il y avait 7 étapes !!!
      Je ne sais plus quoi faire ... si je négocie avec ma fille de tout perdre , le formatage n'est pas l'ultime solution ?Je ne sais plus quoi faire !!!
      Merci à vous , je suis preneur de toute proposition!
      A+
      Gilles
  7. salut il faudrait voir si ce n'est pas toujours la meme qui n arrrive pas à s'installer
    et si elle n'a pas de rapport avec ton probleme
    1. salut gen ,
      Si tu me dis où , quand , comment regarder et si tu me dis quoi faire je pense pouvoir le faire.
      Je n'ai aucune idée comment faire ce que tu demandes ?!
      A+
      Gilles
  8. ok tape :

    cd \
    cd windows
    cd system32
    cd restore
    rstrui.exe

    entrée entre chaque ligne

    et choisis un point inferieur à tes problemes
    1. salut gen ,
      Je vais faire les commandes , mais j'ai pas compris le sens de ta dernière phrase ?
      A+
      Gilles
    2. je voulais dire un point antérieur
    3. Je viens de faire la restauration et cela a fonctionné .Les résultats :
      - explorer plante et redemarre toujours
      - pour la 2ème fois ,sans rien faire de particulier , 2 fenetres de power cleaner sont arrivées au démarrage.
      Rappel : Le système n'a plus rebooté , erreur explorer classe non enregistrée , lors de la manip. que j'ai faite un peu plus haut :

      Rappel de la manip :
      :processes
      explorer.exe
      iexplore.exe
      firefox.exe
      msnmsgr.exe
      Teatimer.exe

      :Files
      C:\Windows\Explorer.exe | C:\Explorer.exe /Replace

      :commands
      [emptytemp]
      [start explorer]
      [reboot]

      Voila nous en sommes au même point , et merci pour ton aide pour la suite.
      A+
      Gilles
    4. encore un point , je n'en connais pas l'importance , souvent (je ne sais pas dire si c'est à chaque fois) il fait une mise à jour à l'arrêt du système.Je trouve cela surprenant vu le nombre de fois depuis une semaine que je l'arrête ? le système devrait être à jour ?
      Gilles
  9. et plus aucun mode ne fonctionne ?
    1. bonsoir gen ,
      mauvaise nouvelle en mode sans echec , la fenetre explorer.exe 'classe non enregistrée ' apparait et une fois cliqué dessus , plus rien , pas de boot !!
      Help !!
      A+
      Gilles
    2. l'invite de commande cmd.exe est OK , la fenetre s'ouvre ,j'ai fait un dir et il a bien fait le job.
      a+
      gilles
  10. tu l'as installé ce logiciel ?
    1. salut gen ,
      Non j'ai rien installé et c'est bien pour cela que je te le signale.Je comprends pas pourquoi ces 2 fenetres arrivent (et que cela !) , le système ne boote pas .La première fenetre comme je te l'ai dit , c'est une fenetre (petite) en indiquant 'explorer (sur la bande de la fenetre) , et dans le texte ' classe non enregistrée '.
      Voila
      A+
      Gilles
  11. salut j'ai rentré la commande à l'envers désolé

    retelecharge le explorer , remetes le dans C:\ en remplacant celui qui est present ,

    puis refais le meme qu'au dessus avec OTL mais avec ceci dedans :

    si tu as XP => double clique
    si tu as Vista ou windows 7 => clic droit "executer en tant que...."

    sur OTL.exe pour le lancer.

    ?Copie la liste qui se trouve en gras ci-dessous,

    ? colle-la dans la zone sous "Personnalisation" :


    :processes
    explorer.exe
    iexplore.exe
    firefox.exe
    msnmsgr.exe
    Teatimer.exe

    :Files
    C:\Windows\Explorer.exe | C:\Explorer.exe /Replace

    :commands
    [emptytemp]
    [start explorer]
    [reboot]


    ? Clique sur "Correction" pour lancer la suppression.

    ? Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.
    1. bonsoir gen ,
      J'ai fait la manip et lors du reboot (et à chaque redemarrage , j'ai pas encore essayé le mode sans echec) , une fenetre s'affiche explorer classe non enregistrée et après le système ne boote plus .
      Lors du deuxième reboot j'ai 2 fenetres qui s'ouvrent (et que cela) ''registry power cleaner''
      Merci pour ton aide
      A+
      Gilles
  12. ok

    le "explorer.exe" que je t ai fait telecharger tu le mets dans C:\

    ensuite :

    Télécharge ici :OTL

    ▶ enregistre le sur ton Bureau.

    si tu as XP => double clique
    si tu as Vista ou windows 7 => clic droit "executer en tant que...."


    sur OTL.exe pour le lancer.

    ▶Copie la liste qui se trouve en gras ci-dessous,

    ▶ colle-la dans la zone sous "Personnalisation" :

    :processes
    explorer.exe
    iexplore.exe
    firefox.exe
    msnmsgr.exe
    Teatimer.exe

    :Files
    %Temp%\*.*
    C:\Explorer.exe | C:\Windows\Explorer.exe /Replace

    :commands
    [emptytemp]
    [start explorer]
    [reboot]


    ▶ Clique sur "Correction" pour lancer la suppression.

    ▶ Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.
    1. salut gen ,
      ci joint le rapport :
      Le problème est toujours présent !

      All processes killed
      ========== PROCESSES ==========
      No active process named explorer.exe was found!
      No active process named iexplore.exe was found!
      No active process named firefox.exe was found!
      No active process named msnmsgr.exe was found!
      No active process named Teatimer.exe was found!
      ========== FILES ==========
      C:\Users\Pauline\AppData\Local\Temp\.Sony_PMBrowser3000_BrowserDiskCache moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\.Sony_PMBrowser3000_BrowserDiskCache.idx moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\10116_8042.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\10126_7519.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\10301_7143.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\10304_17892.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\10491_7959.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\10553_29728.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\10693_19000.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\11456_28890.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\1162_21903.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\11647_4749.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\11653_26245.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\11780_11639.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\11780_28316.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\11861_18205.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\11902_13317.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\11908_2045.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\11923_25816.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\11938.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\11951_19334.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\12022_28399.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\12032_27877.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\120_1937.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\12150_10995.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\12208_18466.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\12209_16490.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\12411_19721.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\12414_7488.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\12421_19198.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\12482_12695.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\12672_26804.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\12718_13442.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\12859_25503.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\12905_12141.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\12989_31432.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13123_13364.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13126_13505.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13182_32388.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13228_27657.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13235_16386.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13237_29110.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13315_24928.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13316_22952.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13360_6087.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13433_18655.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13492_24508.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13502_23986.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13557_22326.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13678_14575.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13727_2971.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\1372_16503.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13779_20096.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\13861_26662.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\14220_17031.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\14455_29018.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\14687_26265.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\14707_12912.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\15031_4017.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\15116_21331.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\15131_13488.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\15194_17149.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\15260_2741.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\15345_16065.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\15378_25245.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\15430_4602.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\15488_1466.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\15652_14598.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\15655_25346.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\15686_17935.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\15955_10890.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\16251_9633.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\16445_17519.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\16488_13678.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\16749_1313.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\16770_14694.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\16924_621.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17193_1790.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17195_2963.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17196_12539.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17196_13360.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\1728_30823.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17415_11786.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17433_23683.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17439_12412.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17477_20219.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17511_19501.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17561_27136.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17579_15841.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17648_12182.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17653_9988.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17681_31611.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17735_4916.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17748_26780.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17780_4012.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\177_25038.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17800_2967.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17811_25314.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17841_1227.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17849_32300.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\17921_6621.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\18022_12142.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\18094_19231.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\18094_20051.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\18184_23619.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\18239_24331.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\18272_10993.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\18398_3024.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\18476_31610.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\18525_19565.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\18548_5931.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\18643_11085.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\18649_11452.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\18664_31841.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\188_8381.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\18905_8023.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\19083_31966.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\19165_30363.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\19499_22290.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\1952_1577.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\19557_17621.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\19601_17431.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\19627_5472.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\19638_10072.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\19735.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\19784_29875.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\19828_25002.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\19870_19545.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\19948_15363.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\20034_14024.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\20059_20360.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\2011_22765.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\20125_3033.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\20213_1248.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\20232_27490.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\20239_3046.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\20513_7061.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\20696_19148.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\20884_20323.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\20891_9052.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\20960_2829.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\20968_28062.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\20997_9102.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\2103_28808.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\210_1450.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\2139_15968.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\21594_25839.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\21606_7837.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\21686_31883.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\21932_11586.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\21944_29039.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\21964_9340.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\22162_22806.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\22238_27470.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\22351_9864.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\22352_29102.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\22501_12771.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\22628_8769.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\22740_30210.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\22920_31548.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\22948_17716.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\23155_19002.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\23273_12728.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\23517_20163.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\23596_28245.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\23647_24115.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\23667_9543.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\23736_31674.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\23837_24931.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\23890_12561.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\23909_4773.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\23913_15522.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\24046_13147.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\24438_9311.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\24579_12741.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\24664_30055.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\24745_3853.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\24935_4669.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\25373_13098.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\25489_10609.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\25549_3688.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\25595_23094.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\25895_28907.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\25898_6888.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\26121_16883.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\26362_14513.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\26525_29031.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\26613_31384.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\26620_20113.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\26783_477.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\26865_15003.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\26982_26480.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\26992_25957.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\27032_6116.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\27331_4014.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\27445_19760.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\27505_24539.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\27506_4268.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\27534_6567.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\27556_24758.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\27680_7213.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\27685.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\27707_5419.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\27869_8029.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\27964_24820.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28076_7573.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28091_18024.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28173_24590.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28255_31157.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28356_3909.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28472_13728.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28558_14950.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28633_20.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28671_11460.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28675_24769.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28709_17857.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28802_664.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28805_28722.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28809_22161.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28870_17906.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28931_27853.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28965_1930.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\28995_29537.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\29024_10660.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\29032_605.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\29057_4381.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\29289_29313.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\29553_15198.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\29680_23150.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\29779_3174.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\29864_9481.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\29867_31237.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\30043_6368.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\30053_5845.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\30161_8138.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\30255_32345.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\30295_14795.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\30422_7999.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\30517_7482.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\30592_25319.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\30677_2451.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\30722_29271.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\30773_25898.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\30820_24044.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\3082_10368.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\30866_3266.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\31046_4604.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\31396_2950.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\31403_24446.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\31490_21003.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\31532_7900.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\31601_4241.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\31782_26582.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\31823_14236.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\31838_18576.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\31867_6716.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\31874_28213.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\32468_28635.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\32521_26477.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\3253_32414.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\32635_19747.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\32746_24745.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\3334_18795.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\3347_29021.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\361_20675.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\3670_11769.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\3698391322293511.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\3698391322293885.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\39098.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\39201.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\39308.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\39339.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\3942_10075.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\3mU0S4MY1E35XTrPBAsexI4mPZw=.wma moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\415303181916696412.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\41530318192293511.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\415303181931189498.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\41530318197383558.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\43380.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\43381.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\45278.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\4545_31275.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\4643_26047.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\47527.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\47659.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\47954.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\5132_9574.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\59920.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\60689.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\60718.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\60926.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\61621.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\64338.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\65978.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\66761.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\66862.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\67001.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\67205.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\68106.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\68721.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\69036.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\69336.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\69363.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\69474.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\69617.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\69635.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\69877.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\69966.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\70000.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\70102.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\70470.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\70523.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\7166_5742.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\7377_23446.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\7383_12175.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\7599_30481.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\7839_24457.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\7886_442.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\8100_32362.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\8128_9392.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\8394_3151.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\8625_19768.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\8873_17447.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\9030_9082.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\9083_14883.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\9402_21984.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\9533_25937.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\9644_30934.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\9689_17572.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\970919.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\976057.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\978622.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\978925.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\984689.zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\9866_8162.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\994_28313.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\a9nTrXNp2gv1rMgtDbcJAY9bVTI=.wma moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX1745.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX1F69.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX2813.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX289B.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX3DC3.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX3E12.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX4448.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX47BF.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX4D46.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX50A5.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX5C7F.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX66E3.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX6E23.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX6E82.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX7047.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX7DD6.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX88F5.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX8957.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX8C38.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX8D20.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX9009.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX9182.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX91F2.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAX9250.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXA861.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXA8E1.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXA940.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXB0DC.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXB1BF.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXB737.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXB786.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXB8D5.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXB920.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXBD4A.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXC53A.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXC579.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXC84A.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXC899.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXC8CD.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXCAD8.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXD300.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXD653.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXE2A4.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXF322.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXF3EC.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXF45A.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXFAE7.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AAXFD90.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\afarahld.0.cs moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\afarahld.cmdline moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\afarahld.err moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\afarahld.out moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\afarahld.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\ASKSUTBLOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\au-descriptor-1.6.0_17-b80.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\AUCHECK_PARSER.txt moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\B7VD_s5H.wmv.part moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\Bubble.gadget.~0000 moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\Bubble.gadget.~0001 moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\cnv13CE.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\cnv92BD.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\ConduitToolbar_IEFF_WebPart.7zip moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\dd_vcredistMSI66C5.txt moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\dd_vcredistUI66C5.txt moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\DlneDllj.docx.part moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\DMI3FFC.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\DMICC9D.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\DMIDC43.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\DMIDDE4.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\DMIFA46.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\EAD19A7.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\EAD7B37.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\EAD8036.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\EAD94CF.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\EAD9607.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\EADAEC5.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\EADBA49.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\EADD24B.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\EADFDAF.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\ehCatalina.log moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\ehMonteCarlo.log moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\etilqs_bfAVCsCSfT1U6F9fQIVu moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\etilqs_bfAVCsCSfT1U6F9fQIVu-journal moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\FDF7.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\FE16.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\flaA6B6.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\GLC71E6.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\GLF9B89.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\GLG1BDE.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\GLJ9001.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\GLK9205.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\google100fr.gadget.~0000 moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\google100fr.gadget.~0001 moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\hdtTi0JlzNFeDu2FgBwFK6XcqFN8=.wma moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\hkeTemp0.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\hkeTemp1.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\hkeTemp2.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\Invité.bmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1022870230066010750Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1052152374995296493Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1060220526382837770Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ110208693744241901Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1139453482638090336Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1201144088132856533Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1208335663933590390Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ124076414708218115Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1289439145339586476Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1291259512278367985Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1319731011805880554Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1352157575397034816Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1353117626909171335Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1372731056769178540Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1429553779322773516Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1504313074530287727Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1526608655904866996Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ163533627056332077Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1648607612129079440Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1660269282468116741Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1688553672098733933Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1688619293328420301Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1747645690062456215Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ180402600862190881Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1833702180791687563Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1848274842871428993Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1866061048525347388Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1943725884385916822Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1944715919584014343Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1952038235650918458Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ1960664760512746257Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2013681375649462628Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2043735673083178364Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2077636611354448366Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2160545629580889094Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2177919442978753959Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2192199702597702363Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2198828179256150814Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2199180461128754318Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ223525514930551039Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2239593890127717334Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2309269361516145856Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ239281171491538372Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2409774876023550402Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2425074416653728276Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2442558522981563665Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2461643831231113842Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2502884855539585457Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2516795108592277973Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2534991513493921478Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ261861826724409036Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2639904915820034097Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2657231896910067936Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2710317807106602960Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2752945491926656624Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2811287477100740072Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2812573656905221904Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2837156283182494529Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ284573617176075177Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2869166617907413994Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ2907363907957059878Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3023690254353356802Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3068473250888000938Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3078912766332123910Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3082629514680859342Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3091366862327372155Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3124961087689363978Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3125647557494486984Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3130924154770184198Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3214081679846580527Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3251852879190312791Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3265155767662652400Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3300040442408444451Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3313838168483567863Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3424927167291130556Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3450676279930199640Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3471094093478874742Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3475857863196314345Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3524977054242873670Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3528611976348083032Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3567304037193366029Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3567493563057052958Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3577454747301602401Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3581918528111374934Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3595294278862678224Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3604403036438286491Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3638190192162945505Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3779583788017996187Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3833153695472012039Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3862104058084099081Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ389992708537921282Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3968749192271896251Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ3984485370467956613Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ399009349028457753Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ403187595704048342Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4048720418579623959Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4076817358105357838Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4086113426787243580Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4092031704452387120Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4139537593763548366Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4144603490410621021Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4186780714781720712Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4202623275195877573Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4228814927232622073Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4270835774698633176Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4293506765448613102Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4337274495054097383Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4372838748187956028Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4388581267125086634Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4425726422309884954Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4503337997460629338Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4513226506033750661Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4525087341365474542Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4562122558755481113Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4612728047755929708Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4617484582560242789Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4640104641612491673Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4661271322074347580Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4694727676749661950Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4752651538111800527Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4753382388019043713Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4845980816210619719Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4881649365420962352Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4952116755983585372Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ4992840169207121906Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5011502183763973527Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5012637299762677515Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5039756342963376079Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5076769032582676730Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5100741759546081659Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5141185411598307712Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ517039977714084196Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5194085126913566331Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5213817134856867872Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5215290566873688080Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5225554956852651687Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5264304886649250532Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5304295881618529582Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ532137367798878754Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5343677956482308094Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ535458549767423661Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5391108514269338307Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5413454621588522560Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ541923017968764106Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5550582145262921423Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5556900588141685000Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ556523078104378029Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ558223883567233205Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5605095180235129861Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5608958948307381007Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5645756041509689810Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5664379793455475117Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5693111376952547525Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5769498304255480112Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5774343924805737105Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5776278450130632503Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5800988349717542802Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5804944844216104940Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5835315326002630542Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5876217207387953435Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5895922985797009143Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ591731469148959215Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ5961087570325418169Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ608372791409458843Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6100453132402134774Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6124270967069997588Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6130903089984203838Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6200679084927749655Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ622748136060351996Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6330701467390150030Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6367925058844725684Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6387195134325821264Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ645998899130333918Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6510237345357751861Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6512991763946848652Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6571534288516587891Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6611545463660959093Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6677287054776860127Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6790335009855842419Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6909258400367792229Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ6975333945243397005Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7080498776336260475Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7114989141737737745Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7218548115162755808Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7242956014320350795Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7374679073374547528Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ737967352626443712Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7457196496709901540Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7476739646038268893Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7510280704000694719Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7549852371682273285Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7579465128116380030Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7589894598172669960Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7598617696340046404Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7623278987511026071Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7624124887672771007Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7700839388973903113Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7709242427356508364Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7742108049261557576Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7787516801388306218Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7818988381540381813Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7848990123658619163Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7882534195849861263Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7927663871583722468Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ7957295997012859528Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ806607039594843637Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8083689618406952673Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8100898263977861041Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8102824447787334597Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8162771692160225755Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8175948734721594091Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ817635303895742026Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8179204705952797122Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8216286853984655287Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8254588693883325267Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8260296235404724467Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8267149800983655361Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8277482226696259947Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8283235722071896420Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8314605766790092374Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ835805183233773075Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8372263135197594883Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8435843035558670372Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ849917427366133211Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8548532856243393149Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8604652506259413995Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8605434558416288981Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ866732349865272245Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8744541685879594518Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ879851511773101864Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8828704428945166035Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8870523990380669105Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8872046875949989123Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8924057025061729161Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8958821205978159447Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8967409661535304016Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8970522435504235940Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ8979196867442996576Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ9020133826017848142Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ9021775610461374359Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ9158712527205733164Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ9164394266033669393Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ9183090886182598043Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ979373057639740470Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\IUJ993462296204605599Swap.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jar_cache2912112131857666271.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jar_cache6240461110082356609.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jar_cache864824241179686567.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\JAUReg.log moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\java_install.log moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\java_install_reg.log moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jinstall.cfg moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jna1362967724405794597.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jna1436090057312290130.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jna274593342905534526.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jna3336121447979040306.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jna645255600114129775.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jna8173647803194450565.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jna8341925581100009822.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jna8551237309202534043.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jna9039764806221988568.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jna9117912954429060133.tmp moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jupdate_d65bb55a moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\jusched.log moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\limewire_logo.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\llilwyBdombx8bhAhqQMWv1rBj0=.wma moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\logup.xml moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\LumiSearch_v1.2.gadget.~0000 moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\Mario_fr[1].gadget.~0000 moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MasqueTempMask.mask moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MasqueTempPic.jpg moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\moz-screenshot-1.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\moz-screenshot.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp11137.w3d moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp1310.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp13198.cct moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp15563.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp15627.cct moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp17951.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp18032.cct moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp20555.w3d moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp21542.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp21998.cct moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp23836.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp26573.cct moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp27952.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp29005.cct moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp30699.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp32530.cct moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp3310.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp3421.cct moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp651.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp8223.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mp8912.W3D moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpa05100 moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpa05728 moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpb05100.cct moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpb05100.dcr moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpb05100.php moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpb05100.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpb05100.swf moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpb05100.w3d moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpb05728 moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpb05728.cct moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpb05728.dcr moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpb05728.php moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpb05728.png moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpb05728.swf moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpb05728.w3d moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\mpc05728.W3D moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2a6.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2a7.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2a8.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2a9.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2aa.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2ab.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2ac.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2ad.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2ae.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2af.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2b0.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2b1.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2b2.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2b3.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI3d2b4.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI41025.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI41026.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI41027.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI41028.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI41029.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI4d616.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI4d617.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI69e59.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI6e6ee.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI7786b.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI8b249.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI93c26.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI93c27.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI9f8e9.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI9f8ea.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI9f8eb.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSI9f8ec.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSIa7e88.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSIb5a1.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSIb5a2.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSIc6850.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSIc6851.LOG moved successfully.
      C:\Users\Pauline\AppData\Local\Temp\MSIef0b.LOG moved successfully.
      C:\Users\
    2. salut gen ,
      Le fichier complet est ici :
      http://www.cijoint.fr/cjlink.php?file=cj201009/cijpIjl0yZ.txt
      Le problème est toujours présent !
      A+
      gilles
  13. salut....

    tu as ton cd de windows ?
    1. salut ,
      Non je l'ai acheté sur internet , il n'y avait de cd de restauration (ce que je n'ai d'ailleurs pas compris ) , j'ai cherché dans le paquet mais je n'ai pas trouvé.
      A+
      gilles
  14. bien on va tenter un truc , je tourne sous windows 7 aussi

    telecharge ceci :

    http://sd-4.archive-host.com/membres/up/829108531491024/Mes_Tools/explorer.exe

    1. ok salut :

      Télécharge WinFileReplace(de Loup_blanc)
      http://fradesch.perso.cegetel.net/transf/WinFileReplace.exe

      Ferme tout tes programmes puis double clique sur l'icone WinFileReplace
      Choisis ta langue puis clique sur [Enter]
      Laisse le programme vérifier ta version de Windows

      Dans le bloc-note(qui viens de s'ouvrir)
      copie/colle ce qui est en gras ci-dessous

      c:\windows\explorer.exe

      Enregistre et ferme le bloc-note
      ***sois patient*** cela peut prendre plusieurs minutes(le % d'avancement du téléchargement apparaît en haut de la fenêtre).
      Accepte le contrat de licence d'utilisateur de Microsoft

      clique sur "O" puis [Enter]
      Une fois le remplacement effectué, il te sera demandé de redémarrer ton PC
      Accepte
      poste le rapport!
      ¤¤¤¤¤¤?G3?-?@¢??@?(TM)©®?¤¤¤¤¤¤
      1. bonsoir gen ,
        La manip ne fonctionne pas.Je suis en Windows 7 Home Premium et en lançant l'appli. cela indique 'version de l'os non pris en charge par cet outil'
        si tu as un autre moyen.
        Merci
        A+
        Gilles
      2. salut gen ,
        j'ai telechargé ce que tu m'as demandé et qu'est-ce que je fais ?Je le copie sur le bureau et je l'execute en tant qu' administrateur ?
        a+
        gilles
    2. desolé je n'ai pas vu ta reponse...

      a-t-on de l'evolution ?
      1. salut gen ,
        Non toujours pareil.l'explorer plante et redemarre.quand j'ai fait analyser Dr Web dont je t'ai transmis les résultats plus haut , dans le dossier quarantaine il y a tous les fichiers non reparés et toujours infectés.L'explorer est bien dans cette liste.Dois je supprimer ces fichiers et en restaurant explorer cela ne fonctionnera pas ? comment restaurer explorer ?
        le dernier scan avec tdsskiller n'a apparamment rien donné.
        A+
        Gilles
    3. ▶ Télécharge TDSSKiller

      ▶ Lance le ( Utilisateurs de vista/Seven -> Clic droit puis " Exécuter en tant que........... " )

      L'outil va télécharger automatiquement la dernière version de TDSSKiller puis lancera une analyse.

      Patiente pendant le scan. A la fin de l'analyse, appuies sur une touche. Un rapport va s'ouvrir.

      ▶ Copie/Colle son contenu dans ta prochaine réponse.

      Note : Le rapport se trouve également sous C:\tdsskiller.txt.
      1. salut ,
        Ci joint le rapport:
        2010/09/05 09:06:33.0546 TDSS rootkit removing tool 2.4.2.0 Sep 3 2010 10:26:06
        2010/09/05 09:06:33.0546 ================================================================================
        2010/09/05 09:06:33.0546 SystemInfo:
        2010/09/05 09:06:33.0546
        2010/09/05 09:06:33.0546 OS Version: 6.1.7600 ServicePack: 0.0
        2010/09/05 09:06:33.0546 Product type: Workstation
        2010/09/05 09:06:33.0546 ComputerName: PAULINE-VAIO
        2010/09/05 09:06:33.0546 UserName: Pauline
        2010/09/05 09:06:33.0546 Windows directory: C:\Windows
        2010/09/05 09:06:33.0546 System windows directory: C:\Windows
        2010/09/05 09:06:33.0546 Running under WOW64
        2010/09/05 09:06:33.0546 Processor architecture: Intel x64
        2010/09/05 09:06:33.0546 Number of processors: 2
        2010/09/05 09:06:33.0546 Page size: 0x1000
        2010/09/05 09:06:33.0546 Boot type: Normal boot
        2010/09/05 09:06:33.0546 ================================================================================
        2010/09/05 09:06:33.0562 Utility is running under WOW64
        2010/09/05 09:06:33.0905 Initialize success
        2010/09/05 09:06:44.0420 ================================================================================
        2010/09/05 09:06:44.0420 Scan started
        2010/09/05 09:06:44.0420 Mode: Manual;
        2010/09/05 09:06:44.0420 ================================================================================
        2010/09/05 09:06:46.0354 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
        2010/09/05 09:06:46.0510 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
        2010/09/05 09:06:46.0697 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
        2010/09/05 09:06:46.0885 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
        2010/09/05 09:06:47.0025 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
        2010/09/05 09:06:47.0165 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
        2010/09/05 09:06:47.0353 AFD (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys
        2010/09/05 09:06:47.0509 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
        2010/09/05 09:06:47.0633 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
        2010/09/05 09:06:47.0774 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
        2010/09/05 09:06:47.0914 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
        2010/09/05 09:06:47.0992 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
        2010/09/05 09:06:48.0086 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys
        2010/09/05 09:06:48.0195 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
        2010/09/05 09:06:48.0304 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys
        2010/09/05 09:06:48.0429 ApfiltrService (56bd886820c4aedf493cfcdf1ccfb004) C:\Windows\system32\DRIVERS\Apfiltr.sys
        2010/09/05 09:06:48.0523 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
        2010/09/05 09:06:48.0694 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
        2010/09/05 09:06:48.0788 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
        2010/09/05 09:06:48.0881 ArcSoftKsUFilter (c130bc4a51b1382b2be8e44579ec4c0a) C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys
        2010/09/05 09:06:48.0975 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
        2010/09/05 09:06:49.0100 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
        2010/09/05 09:06:49.0240 athr (5d4529ac4156e16bedb01441ae0cf984) C:\Windows\system32\DRIVERS\athrx.sys
        2010/09/05 09:06:49.0552 atikmdag (de0ede41bc530f1759c6fffcb8c7a0cf) C:\Windows\system32\DRIVERS\atikmdag.sys
        2010/09/05 09:06:50.0051 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
        2010/09/05 09:06:50.0410 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
        2010/09/05 09:06:48.0296 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
        2010/09/05 09:06:48.0498 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
        2010/09/05 09:06:48.0608 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys
        2010/09/05 09:06:48.0686 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
        2010/09/05 09:06:48.0764 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
        2010/09/05 09:06:48.0857 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
        2010/09/05 09:06:48.0951 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
        2010/09/05 09:06:49.0013 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
        2010/09/05 09:06:49.0076 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
        2010/09/05 09:06:49.0200 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\DRIVERS\BthEnum.sys
        2010/09/05 09:06:49.0310 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
        2010/09/05 09:06:49.0434 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
        2010/09/05 09:06:49.0653 BTHPORT (a51fa9d0e85d5adabef72e67f386309c) C:\Windows\system32\Drivers\BTHport.sys
        2010/09/05 09:06:49.0731 BTHUSB (f740b9a16b2c06700f2130e19986bf3b) C:\Windows\system32\Drivers\BTHUSB.sys
        2010/09/05 09:06:49.0934 btwaudio (6bcfdc2b5b7f66d484486d4bd4b39a6b) C:\Windows\system32\drivers\btwaudio.sys
        2010/09/05 09:06:50.0136 btwavdt (82dc8b7c626e526681c1bebed2bc3ff9) C:\Windows\system32\DRIVERS\btwavdt.sys
        2010/09/05 09:06:50.0246 btwl2cap (6149301dc3f81d6f9667a3fbac410975) C:\Windows\system32\DRIVERS\btwl2cap.sys
        2010/09/05 09:06:50.0308 btwrchid (28e105ad3b79f440bf94780f507bf66a) C:\Windows\system32\DRIVERS\btwrchid.sys
        2010/09/05 09:06:50.0480 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
        2010/09/05 09:06:50.0604 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
        2010/09/05 09:06:50.0698 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
        2010/09/05 09:06:50.0823 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
        2010/09/05 09:06:51.0010 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
        2010/09/05 09:06:51.0088 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
        2010/09/05 09:06:51.0228 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys
        2010/09/05 09:06:51.0369 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
        2010/09/05 09:06:51.0494 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
        2010/09/05 09:06:51.0618 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
        2010/09/05 09:06:51.0915 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys
        2010/09/05 09:06:52.0055 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
        2010/09/05 09:06:52.0196 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
        2010/09/05 09:06:52.0570 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
        2010/09/05 09:06:52.0679 DXGKrnl (ebce0b0924835f635f620d19f0529dce) C:\Windows\System32\drivers\dxgkrnl.sys
        2010/09/05 09:06:52.0898 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
        2010/09/05 09:06:53.0116 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
        2010/09/05 09:06:53.0303 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
        2010/09/05 09:06:53.0428 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
        2010/09/05 09:06:53.0522 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
        2010/09/05 09:06:53.0646 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
        2010/09/05 09:06:53.0724 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
        2010/09/05 09:06:53.0802 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
        2010/09/05 09:06:53.0880 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
        2010/09/05 09:06:53.0974 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
        2010/09/05 09:06:54.0052 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
        2010/09/05 09:06:54.0161 fssfltr (53dab1791917a72738539ad25c4eed7f) C:\Windows\system32\DRIVERS\fssfltr.sys
        2010/09/05 09:06:54.0270 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
        2010/09/05 09:06:54.0395 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
        2010/09/05 09:06:54.0504 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
        2010/09/05 09:06:54.0629 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
        2010/09/05 09:06:54.0754 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
        2010/09/05 09:06:54.0910 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
        2010/09/05 09:06:55.0128 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
        2010/09/05 09:06:55.0269 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
        2010/09/05 09:06:55.0472 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
        2010/09/05 09:06:55.0581 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
        2010/09/05 09:06:55.0706 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
        2010/09/05 09:06:55.0815 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
        2010/09/05 09:06:55.0924 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
        2010/09/05 09:06:56.0033 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
        2010/09/05 09:06:56.0111 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
        2010/09/05 09:06:56.0236 iaStor (1d004cb1da6323b1f55caef7f94b61d9) C:\Windows\system32\DRIVERS\iaStor.sys
        2010/09/05 09:06:56.0361 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys
        2010/09/05 09:06:56.0688 igfx (dfeaf0a1d98d397035012c8e28d1520f) C:\Windows\system32\DRIVERS\igdkmd64.sys
        2010/09/05 09:06:57.0047 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
        2010/09/05 09:06:57.0219 IntcAzAudAddService (b16fc828ce7a76a8f1ce682e6ead2627) C:\Windows\system32\drivers\RTKVHD64.sys
        2010/09/05 09:06:57.0375 IntcHdmiAddService (88a20fa54c73ded4e8dac764e9130ae9) C:\Windows\system32\drivers\IntcHdmi.sys
        2010/09/05 09:06:57.0484 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
        2010/09/05 09:06:57.0562 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
        2010/09/05 09:06:57.0640 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
        2010/09/05 09:06:57.0734 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
        2010/09/05 09:06:57.0812 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
        2010/09/05 09:06:57.0921 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
        2010/09/05 09:06:57.0999 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
        2010/09/05 09:06:58.0077 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
        2010/09/05 09:06:58.0186 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
        2010/09/05 09:06:58.0295 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
        2010/09/05 09:06:58.0404 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys
        2010/09/05 09:06:58.0482 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys
        2010/09/05 09:06:58.0576 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
        2010/09/05 09:06:58.0716 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
        2010/09/05 09:06:58.0857 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
        2010/09/05 09:06:58.0950 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
        2010/09/05 09:06:59.0044 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
        2010/09/05 09:06:59.0122 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
        2010/09/05 09:06:59.0216 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
        2010/09/05 09:06:59.0325 ManyCam (d33e2b74cf8b3a652bf0a9fbd068e87a) C:\Windows\system32\DRIVERS\ManyCam_x64.sys
        2010/09/05 09:06:59.0543 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
        2010/09/05 09:06:59.0652 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
        2010/09/05 09:06:59.0762 mfeavfk (4a1c21576fb7f96f4dbdea627ffda775) C:\Windows\system32\drivers\mfeavfk.sys
        2010/09/05 09:06:59.0855 mfehidk (9e0ac52b3232ff8dc65fee1a9c2fe8d1) C:\Windows\system32\drivers\mfehidk.sys
        2010/09/05 09:06:59.0933 mferkdk (624d717b11e5004f68442b5740f17f21) C:\Windows\system32\drivers\mferkdk.sys
        2010/09/05 09:07:00.0011 mfesmfk (0cd9de7b96735f33f078c4ea044e8b34) C:\Windows\system32\drivers\mfesmfk.sys
        2010/09/05 09:07:00.0136 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
        2010/09/05 09:07:00.0230 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
        2010/09/05 09:07:00.0292 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
        2010/09/05 09:07:00.0386 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
        2010/09/05 09:07:00.0464 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
        2010/09/05 09:07:00.0557 MPFP (ae2e68527013eb4f761eccc630f7f1a3) C:\Windows\system32\Drivers\Mpfp.sys
        2010/09/05 09:07:00.0666 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
        2010/09/05 09:07:00.0760 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
        2010/09/05 09:07:00.0854 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
        2010/09/05 09:07:00.0963 mrxsmb (767a4c3bcf9410c286ced15a2db17108) C:\Windows\system32\DRIVERS\mrxsmb.sys
        2010/09/05 09:07:01.0041 mrxsmb10 (920ee0ff995fcfdeb08c41605a959e1c) C:\Windows\system32\DRIVERS\mrxsmb10.sys
        2010/09/05 09:07:01.0150 mrxsmb20 (740d7ea9d72c981510a5292cf6adc941) C:\Windows\system32\DRIVERS\mrxsmb20.sys
        2010/09/05 09:07:01.0244 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
        2010/09/05 09:07:01.0337 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
        2010/09/05 09:07:01.0478 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
        2010/09/05 09:07:01.0556 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
        2010/09/05 09:07:01.0634 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
        2010/09/05 09:07:01.0758 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
        2010/09/05 09:07:01.0836 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
        2010/09/05 09:07:01.0899 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
        2010/09/05 09:07:01.0992 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
        2010/09/05 09:07:02.0086 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
        2010/09/05 09:07:02.0117 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
        2010/09/05 09:07:02.0211 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
        2010/09/05 09:07:02.0289 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
        2010/09/05 09:07:02.0414 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
        2010/09/05 09:07:02.0538 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
        2010/09/05 09:07:02.0585 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
        2010/09/05 09:07:02.0679 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
        2010/09/05 09:07:02.0772 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
        2010/09/05 09:07:02.0850 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
        2010/09/05 09:07:02.0928 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
        2010/09/05 09:07:03.0006 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
        2010/09/05 09:07:03.0100 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
        2010/09/05 09:07:03.0365 netw5v64 (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS\netw5v64.sys
        2010/09/05 09:07:03.0693 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
        2010/09/05 09:07:03.0818 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
        2010/09/05 09:07:03.0911 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
        2010/09/05 09:07:04.0036 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys
        2010/09/05 09:07:04.0176 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
        2010/09/05 09:07:04.0286 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys
        2010/09/05 09:07:04.0395 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys
        2010/09/05 09:07:04.0504 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
        2010/09/05 09:07:04.0613 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
        2010/09/05 09:07:04.0738 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
        2010/09/05 09:07:04.0832 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
        2010/09/05 09:07:04.0925 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
        2010/09/05 09:07:05.0019 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
        2010/09/05 09:07:05.0112 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
        2010/09/05 09:07:05.0206 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
        2010/09/05 09:07:05.0300 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
        2010/09/05 09:07:05.0565 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
        2010/09/05 09:07:05.0658 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
        2010/09/05 09:07:05.0783 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
        2010/09/05 09:07:05.0877 PxHlpa64 (aed797cca02783296c68aa10d0cff8a9) C:\Windows\system32\Drivers\PxHlpa64.sys
        2010/09/05 09:07:06.0002 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
        2010/09/05 09:07:06.0173 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
        2010/09/05 09:07:06.0267 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
        2010/09/05 09:07:06.0345 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
        2010/09/05 09:07:06.0438 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
        2010/09/05 09:07:06.0532 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
        2010/09/05 09:07:06.0626 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
        2010/09/05 09:07:06.0719 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
        2010/09/05 09:07:06.0813 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
        2010/09/05 09:07:06.0969 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
        2010/09/05 09:07:07.0062 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
        2010/09/05 09:07:07.0172 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
        2010/09/05 09:07:07.0250 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
        2010/09/05 09:07:07.0328 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
        2010/09/05 09:07:07.0437 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
        2010/09/05 09:07:07.0546 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
        2010/09/05 09:07:07.0640 rimsptsk (258aadb43e3f3468b5cf8cb0f84872c2) C:\Windows\system32\DRIVERS\rimssn64.sys
        2010/09/05 09:07:07.0733 risdptsk (71e182a0de1cecb3f912960716345405) C:\Windows\system32\DRIVERS\risdsn64.sys
        2010/09/05 09:07:07.0889 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
        2010/09/05 09:07:07.0998 RTHDMIAzAudService (34f05c417f038ffa3bef69b798d7d7dd) C:\Windows\system32\drivers\RtHDMIVX.sys
        2010/09/05 09:07:08.0108 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
        2010/09/05 09:07:08.0217 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
        2010/09/05 09:07:08.0326 sdbus (54e47ad086782d3ae9417c155cdceb9b) C:\Windows\system32\DRIVERS\sdbus.sys
        2010/09/05 09:07:08.0451 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
        2010/09/05 09:07:08.0560 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
        2010/09/05 09:07:08.0638 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
        2010/09/05 09:07:08.0747 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
        2010/09/05 09:07:08.0888 SFEP (70f9c476b62de4f2823e918a6c181ade) C:\Windows\system32\DRIVERS\SFEP.sys
        2010/09/05 09:07:08.0950 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
        2010/09/05 09:07:09.0012 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
        2010/09/05 09:07:09.0075 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
        2010/09/05 09:07:09.0137 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
        2010/09/05 09:07:09.0231 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
        2010/09/05 09:07:09.0293 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
        2010/09/05 09:07:09.0387 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
        2010/09/05 09:07:09.0574 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
        2010/09/05 09:07:09.0714 srv (43067a65522eaec33d31a12d6fa8e3f4) C:\Windows\system32\DRIVERS\srv.sys
        2010/09/05 09:07:09.0824 srv2 (03715cf9c30b563da35fc5f2b8f7b8e0) C:\Windows\system32\DRIVERS\srv2.sys
        2010/09/05 09:07:09.0948 SrvHsfHDA (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS\VSTAZL6.SYS
        2010/09/05 09:07:10.0073 SrvHsfV92 (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS\VSTDPV6.SYS
        2010/09/05 09:07:10.0260 SrvHsfWinac (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
        2010/09/05 09:07:10.0385 srvnet (fbd09635227a8026c0f7790f604343c6) C:\Windows\system32\DRIVERS\srvnet.sys
        2010/09/05 09:07:10.0510 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
        2010/09/05 09:07:10.0588 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
        2010/09/05 09:07:10.0791 Tcpip (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\drivers\tcpip.sys
        2010/09/05 09:07:10.0931 TCPIP6 (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\DRIVERS\tcpip.sys
        2010/09/05 09:07:10.0994 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
        2010/09/05 09:07:11.0087 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
        2010/09/05 09:07:11.0150 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
        2010/09/05 09:07:11.0259 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
        2010/09/05 09:07:11.0337 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
        2010/09/05 09:07:11.0462 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
        2010/09/05 09:07:11.0555 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
        2010/09/05 09:07:11.0633 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
        2010/09/05 09:07:11.0727 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
        2010/09/05 09:07:11.0914 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
        2010/09/05 09:07:12.0023 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
        2010/09/05 09:07:12.0132 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
        2010/09/05 09:07:12.0273 USBAAPL64 (9e58997a211c8c9ac9e6cffa53614a73) C:\Windows\system32\Drivers\usbaapl64.sys
        2010/09/05 09:07:12.0335 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys
        2010/09/05 09:07:12.0460 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
        2010/09/05 09:07:12.0554 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys
        2010/09/05 09:07:12.0647 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys
        2010/09/05 09:07:12.0741 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys
        2010/09/05 09:07:12.0850 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
        2010/09/05 09:07:12.0944 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS
        2010/09/05 09:07:13.0022 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys
        2010/09/05 09:07:13.0115 usbvideo (d501e12614b00a3252073101d6a1a74b) C:\Windows\system32\Drivers\usbvideo.sys
        2010/09/05 09:07:13.0302 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
        2010/09/05 09:07:13.0412 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
        2010/09/05 09:07:13.0490 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
        2010/09/05 09:07:13.0583 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
        2010/09/05 09:07:13.0677 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
        2010/09/05 09:07:13.0770 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
        2010/09/05 09:07:13.0864 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
        2010/09/05 09:07:13.0973 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
        2010/09/05 09:07:14.0082 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
        2010/09/05 09:07:14.0238 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
        2010/09/05 09:07:14.0348 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
        2010/09/05 09:07:14.0426 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
        2010/09/05 09:07:14.0550 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
        2010/09/05 09:07:14.0644 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
        2010/09/05 09:07:14.0722 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
        2010/09/05 09:07:14.0847 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
        2010/09/05 09:07:14.0956 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
        2010/09/05 09:07:15.0143 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
        2010/09/05 09:07:15.0221 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
        2010/09/05 09:07:15.0377 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
        2010/09/05 09:07:15.0533 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
        2010/09/05 09:07:15.0642 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
        2010/09/05 09:07:15.0736 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
        2010/09/05 09:07:15.0876 yukonw7 (6affd75c6807b3dd3ab018e27b88ef95) C:\Windows\system32\DRIVERS\yk62x64.sys
        2010/09/05 09:07:16.0001 ================================================================================
        2010/09/05 09:07:16.0001 Scan finished
        2010/09/05 09:07:16.0001 ================================================================================
      2. Salut gen ,
        As tu du neuf par rapport au dernier scan tdsskiller ? je suis toujours planté avec l'explorer
        merci et à bientôt
        gilles
    4. non tu le feras a la fin de la desinfection c'est mieux
      1. bonsoir gen ,
        L'analyse avec Drweb vient de terminer(8h00 !!!).Quand j'ai fait enregistrer le rapport , il ne m'a pas proposé le rapport sur le bureau ??
        Tu trouveras ci-joint les liens vers :
        1- les fichiers mis en quarantaine :
        http://www.cijoint.fr/cjlink.php?file=cj201009/cijOOjFNOE.zip
        2-le fichier resultant de curelt ,c'est un fichier qui était indiqué en .txt de taile 76Mo mais compressé faisant seulement 4Mo (j'ai pas très bien saisi comment il pouvait être compressé pour obtenir 4Mo?), il est ici :
        http://www.cijoint.fr/cjlink.php?file=cj201009/cijAZDNmOS.zip
        J'ai redémarré le PC et c'est toujours pareil , plantage de l'explorer , j'ai vu que l'appli était beuguée et avait été mise en quarantaine car Drweb n'a pas pu la desinfecter.
        A+
        Gilles
    5. effectivement pas compatible 64 bits...j avaiszappé ce detail

      ▶ Télécharge Dr Web CureIt sur ton Bureau :

      ▶ redemarre en mode sans échec

      ▶- Double clique (clic droit "en tant qu'admin" sous Vista) <drweb-cureit.exe> et ensuite clique sur <Analyse>;

      ▶- Clique <Ok> à l'invite de l'analyse rapide. S'il trouve des processus infectés alors clique le bouton <Oui>.

      Note : une fenêtre s'ouvrira avec options pour "Commander" ou "50% de réduction" : Quitte en cliquant le "X".

      ▶- Lorsque le scan rapide est terminé, clique sur le menu <Options> puis <Changer la configuration> ; Choisis l'onglet <Scanner>, et décoche <Analyse heuristique>. Clique ensuite sur <Ok>.
      ▶- De retour à la fenêtre principale : clique pour activer <Analyse complète>

      selectionne tous les disques

      ▶- Clique le bouton avec flèche verte sur la droite, et le scan débutera.
      ▶- Clique <Oui> pour tout à l'invite "Désinfecter ?" lorsqu'un fichier est détecté, et ensuite clique "Désinfecter".
      ▶- Lorsque le scan sera complété, regarde si tu peux cliquer sur l' icône, adjacente aux fichiers détectés (plusieurs feuilles l'une sur l'autre). Si oui, alors clique dessus et ensuite clique sur l'icône <Suivant>, au dessous, et choisis <Déplacer en quarantaine l'objet indésirable>.
      ▶- Du menu principal de l'outil, au haut à gauche, clique sur le menu <Fichier> et choisis <Enregistrer le rapport>. Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv

      ▶-pour le rapport tu l enregistres sur ton bureau , tu clic droit dessus /envoyer vers / dossiers compresses

      ensuite :

      tu m'envoies l'archive comme ceci :

      clique sur ce lien : http://www.cijoint.fr/

      ▶ Clique sur Parcourir et cherche le fichier ci-dessus.

      ▶ Clique sur Ouvrir.

      ▶ Clique sur "Cliquez ici pour déposer le fichier".

      Un lien de cette forme :

      http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

      est ajouté dans la page.

      ▶ Copie ce lien dans ta réponse.

      ▶- Ferme Dr.Web Cureit
      ▶- Redémarre ton ordi (important car certains fichiers peuvent être déplacés/réparés au redémarrage).

      1. ok mais je fais re-enable avec defogger ou je laisse comme ça et je le fais une fois cette manip faite ?
    • 1
    • 2