Mon hijackthis

Question

Bonjour,

J'ai une toolbar nommé Zapu Share-accerelator sur IE7 et je n'arrive pas à l'enlever. J'ai vu qu'il fallait faire un scan avec Hijackthis.
Voila:
Logfile of HijackThis v1.99.1
Scan saved at 14:29:28, on 07/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdiserv.exe
C:\WINDOWS\system32\lxdicoms.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\vsnpstd3.exe
C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe
C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32	bctray.exe
C:\Program Files\Internet Explorer\Servicesun_mldonkey.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\Services\mlnet.exe
C:\WINDOWS\9129837.exe
C:\PROGRA~1\FICHIE~1\SYMANT~1\SECURI~1\NSCSRVCE.EXE
C:\Program Files\Sun\StarOffice 8\program\soffice.exe
C:\Program Files\Sun\StarOffice 8\program\soffice.BIN
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.broadcom.com/support/security-center
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?p=us
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.broadcom.com/support/security-center
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar	oolband.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5E9755A1-314A-4ae6-99E1-B9F7DC7C7CF0} - C:\WINDOWS\system32\135.tmp
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {89AD4D75-2429-462e-BD4E-443F233F6033} - C:\DOCUME~1\FAYDIT~1\LOCALS~1\Temp\vista.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: CSObj Class - {CD209A08-98B5-4669-AF9F-447AC5253356} - C:\WINDOWS\System32\CSapp.dll
O3 - Toolbar: (no name) - {BBC3016E-B009-A975-6E2F-2E1990B324F7} - (no file)
O3 - Toolbar: (no name) - {BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8} - (no file)
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar	oolband.dll
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [NAV CfgWiz] "C:\Program Files\Norton AntiVirus\CfgWiz.exe" /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [lxdimon.exe] "C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe"
O4 - HKLM\..\Run: [lxdiamon] "C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NetService] Rundll32.exe C:\WINDOWS\system32\ppnst.dll,Startup
O4 - HKLM\..\Run: [34f05907] rundll32.exe "C:\WINDOWS\qopnon.dll",b
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [TraySantaCruz] C:\WINDOWS\system32	bctray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ttool] C:\WINDOWS\9129837.exe
O4 - HKCU\..\Run: [german.exe] C:\WINDOWS\system32\wintems.exe
O4 - Startup: StarOffice 8.lnk = C:\Program Files\Sun\StarOffice 8\program\quickstart.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.03\AMVConverter\grab.html
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.03\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: MP3Chansons - {EF6D6AE3-2625-40D6-A5AB-920DFD2DAF8C} - C:\Documents and Settings\Faydit Didier\Application Data\MP3Chansons.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/importer/MypixUploader.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {45E83043-1F6F-4D22-A5E7-0138EA171B49} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fr/filesharingctrl.cab
O16 - DPF: {68C1822F-F5C7-4404-A73F-03C10E0E94DA} (telechargement-photoweb) - http://www3.photoweb.fr/telechargement/Photoweb_uploader.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypixmania.com/importer/MypixUploader.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {928626A3-6B98-11CF-90B4-00AA00A4011F} (SurroundVideoCtrl Object) - http://fr.ca.encarta.msn.com/encnet/external/MSSurVid.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/SSC/SharedContent/common/bin/cabsa.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/4h/player.virtools.com/downloads/player/Install2.5/Installer.exe
O16 - DPF: {E7DBFB6C-113A-47CF-B278-F5C6AF4DE1BD} - http://download.abacast.com/download/files/abasetup144.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Toolbar avec bloqueur de fenêtres pop-up) - http://us.dl1.yimg.com/download.companion.yahoo.com/dl/toolbar/yiebio5_1_6_0.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: 135 - C:\WINDOWS\system32\135.tmp
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: lxdiCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdiserv.exe
O23 - Service: lxdi_device -   - C:\WINDOWS\system32\lxdicoms.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

Pouvez-vous me dire que dois-je faire?
Merci d'avance.

chrifleur · Answer

bonjour 
Télécharge combofix.exe (par sUBs) sur ton Bureau
  http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Double clique combofix.exe.
Tape sur la touche Y (Yes) pour démarrer le scan.
Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse
NOTE : Le rapport se trouve également ici : C:\Combofix.txt

UrbainS · Answer

Voila: ComboFix 07-11-07.4 - Faydit Didier 2007-11-07 17:23:55.1 - NTFSx86 Running from: C:\Documents and Settings\Faydit Didier\Bureau\ComboFix.exe . Incapable d'obtenir les privilèges Système (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\Fichiers communs\uninstall information C:\Program Files\video ax object C:\Program Files\video ax object\ot.ico C:\Program Files\video ax object s.ico C:\WINDOWS\9129837.exe C:\WINDOWS\cookies.ini C:\WINDOWS\exefld C:\WINDOWS\exefld\14766078.exe C:\WINDOWS\exefld\14808890.exe C:\WINDOWS\exefld\14974312.exe C:\WINDOWS\exefld\15029187.exe C:\WINDOWS\exefld\16604250.exe C:\WINDOWS\exefld\17197109.exe C:\WINDOWS\exefld\17216406.exe C:\WINDOWS\exefld\194111187.exe C:\WINDOWS\exefld\196232031.exe C:\WINDOWS\exefld\29258265.exe C:\WINDOWS\exefld\295402265.exe C:\WINDOWS\exefld\29601156.exe C:\WINDOWS\exefld\30245187.exe C:\WINDOWS\exefld\304625.exe C:\WINDOWS\exefld\316828.exe C:\WINDOWS\exefld\326109.exe C:\WINDOWS\exefld\32676906.exe C:\WINDOWS\exefld\337187.exe C:\WINDOWS\exefld\358296.exe C:\WINDOWS\exefld\4317125.exe C:\WINDOWS\exefld\44539093.exe C:\WINDOWS\exefld\46561359.exe C:\WINDOWS\exefld\465828.exe C:\WINDOWS\exefld\47168781.exe C:\WINDOWS\exefld\478796.exe C:\WINDOWS\exefld\48809531.exe C:\WINDOWS\exefld\48886437.exe C:\WINDOWS\exefld\506015.exe C:\WINDOWS\exefld\51351500.exe C:\WINDOWS\exefld\524968.exe C:\WINDOWS\exefld\60147453.exe C:\WINDOWS\exefld\61002250.exe C:\WINDOWS\exefld\74599625.exe C:\WINDOWS\exefld\75433734.exe C:\WINDOWS\exefld\76731625.exe C:\WINDOWS\exefld\89047734.exe C:\WINDOWS\exefld\91185015.exe C:\WINDOWS\Fonts\acrsecI.fon C:\WINDOWS\install.exe C:\WINDOWS\pack.epk C:\WINDOWS\system\msn.dat C:\WINDOWS\system32\_000005_.tmp.dll C:\WINDOWS\system32\_000006_.tmp.dll C:\WINDOWS\system32\135.tmp C:\WINDOWS\system32 vs2.inf C:\WINDOWS\system32\vista.dll C:\WINDOWS\system32\vksejahw.dat C:\WINDOWS\system32\vksejahw_nav.dat C:\WINDOWS\system32\vksejahw_navps.dat C:\WINDOWS\system32\wintems.exe . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . ------- ew_drv ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-10-07 to 2007-11-07 )))))))))))))))))))))))))))))))))))) . 2007-11-07 17:17 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-11-07 14:46 d-------- C:\Program Files\Share_Accelerator_MM 2007-11-07 14:28 d-------- C:\Program Files\Hijackthis Version Fran‡aise 2007-11-07 14:06 2,560 --a------ C:\WINDOWS\_MSRSTRT.EXE 2007-11-07 09:18 31,912 --a------ C:\symlcsv1.exe 2007-11-06 17:32 95,232 --a------ C:\WINDOWS\qopnon.dll 2007-11-06 12:21 95,232 --a------ C:\WINDOWS\efddax.dll 2007-11-05 22:32 d-------- C:\Program Files\Macromedia 2007-11-05 22:32 d-------- C:\Program Files\Fichiers communs\Macromedia 2007-10-29 16:23 95,232 --a------ C:\WINDOWS\qonkki.dll 2007-10-28 22:10 d-------- C:\Program Files\CDBurnerXP 2007-10-28 21:08 d-------- C:\WINDOWS\SYSTEM32\hdined32.nls.{00021401-0000-0000-C000-000000000046} 2007-10-13 22:48 d-------- C:\Program Files\Blender Foundation 2007-10-13 22:34 d-------- C:\Program Files\ArtOfIllusion 2007-10-10 21:31 d-------- C:\Documents and Settings\Faydit Didier\Application Data\KompoZer 2007-10-10 12:59 60,928 --a------ C:\WINDOWS\SYSTEM32\ppnst.dll 2007-10-09 18:44 d-------- C:\Documents and Settings\Faydit Didier\amsn_received 2007-10-09 18:00 d-------- C:\Documents and Settings\Faydit Didier\amsn 2007-10-09 17:16 d-------- C:\Documents and Settings\Faydit Didier\.cornice 2007-10-08 15:15 d-------- C:\Downloads 2007-10-08 15:15 d-------- C:\Documents and Settings\Faydit Didier\Application Data\GetRightToGo 2007-10-08 14:39 d-------- C:\Documents and Settings\Faydit Didier\Application Data\DivX 2007-10-08 13:25 d-------- C:\Program Files\VirtualDJ 2007-10-08 13:25 d-------- C:\Program Files\Virtual DJ 2007-10-08 13:17 d-------- C:\Program Files\Zapu 2007-10-08 13:17 434,252 --a------ C:\WINDOWS\SYSTEM32\Msvcrtd.dll 2007-10-08 13:17 15,340 --a------ C:\WINDOWS\SYSTEM32\DRIVERS disrd.sys 2007-10-08 10:04 d-------- C:\OtsLabs 2007-10-08 10:01 d-------- C:\Program Files\AtomixMP3 2007-10-07 11:41 129,784 --------- C:\WINDOWS\SYSTEM32\pxafs.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-07 13:37 --------- d-----w C:\Program Files\Hijackthis Version Française 2007-11-07 13:14 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared 2007-11-07 13:13 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\StarOffice8 2007-11-07 13:09 --------- d-----w C:\Program Files\YourSiteBar 2007-11-07 13:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\River Past G4 2007-11-07 13:00 --------- d-----w C:\Program Files\Yahoo! 2007-11-07 12:59 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-07 12:52 --------- d-----w C:\Program Files\TI Education 2007-11-07 12:52 --------- d-----w C:\Program Files\Fichiers communs\TI Shared 2007-11-07 12:48 --------- d-----w C:\Program Files\MSN Messenger 2007-11-06 21:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater 2007-11-06 20:22 805 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF 2007-11-06 20:22 123,952 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS 2007-11-06 20:22 10,740 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT 2007-11-06 20:22 --------- d-----w C:\Program Files\Symantec 2007-11-06 14:11 --------- d-----w C:\Program Files\FileZilla 2007-11-05 11:47 --------- d-----w C:\Program Files\InterActual 2007-11-05 11:44 --------- d-----w C:\Program Files\FotoStation Easy 2007-11-05 11:26 --------- d-----w C:\Program Files\Fichiers communs\Adaptec Shared 2007-11-05 11:23 --------- d-----w C:\Program Files\BoontyGames 2007-11-05 11:20 --------- d-----w C:\Program Files\Azureus 2007-11-05 11:01 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2007-10-27 20:40 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\gtk-2.0 2007-10-12 15:13 --------- d-----w C:\Program Files\Creative 2007-10-08 11:15 --------- d-----w C:\Program Files\Java 2007-10-07 10:44 --------- d-----w C:\Program Files\DivX 2007-10-03 19:45 --------- d-----w C:\Program Files\MSBuild 2007-10-03 19:12 --------- d-----w C:\Program Files\Reference Assemblies 2007-10-03 16:37 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\Notepad++ 2007-10-02 18:10 --------- d--h--w C:\Documents and Settings\Faydit Didier\Application Data\m 2007-10-02 17:33 --------- d-----w C:\Documents and Settings\All Users\Application Data\NCH Software 2007-10-02 17:32 --------- d-----w C:\Program Files\NCH Swift Sound 2007-10-02 17:32 --------- d-----w C:\Program Files\NCH Software 2007-10-01 13:49 98,184 ----a-w C:\WINDOWS\system32\drivers\symfw.sys 2007-10-01 13:49 31,624 ----a-w C:\WINDOWS\system32\drivers\symids.sys 2007-10-01 13:49 28,040 ----a-w C:\WINDOWS\system32\drivers\symndis.sys 2007-10-01 13:49 23,944 ----a-w C:\WINDOWS\system32\drivers\symredrv.sys 2007-10-01 13:49 189,320 ----a-w C:\WINDOWS\system32\drivers\symtdi.sys 2007-10-01 13:48 12,680 ----a-w C:\WINDOWS\system32\drivers\symdns.sys 2007-09-29 19:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\NCH Swift Sound 2007-09-29 19:03 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\NCH Swift Sound 2007-09-29 17:39 --------- d-----w C:\Program Files\Adesign 2007-09-29 17:38 --------- d-----w C:\Program Files\Boonty 2007-09-28 16:07 43,528 ------w C:\WINDOWS\system32\drivers\pxhelp20.sys 2007-09-28 15:53 --------- d-----w C:\Program Files\Microsoft FrontPage Express 2007-09-27 19:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller 2007-09-23 15:47 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\MeetSkipJoy 2007-09-23 10:05 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\FaxCtr 2007-09-22 20:07 --------- d-----w C:\Program Files\eMule 2007-09-21 19:42 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\Nvu 2007-09-13 13:36 --------- d-----w C:\Program Files\Fichiers communs\xing shared 2007-09-13 13:36 --------- d-----w C:\Program Files\Fichiers communs\Real 2007-09-12 12:12 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype 2007-09-10 18:48 --------- d-----w C:\Program Files\Fichiers communs\SpellEx 2007-09-10 17:48 --------- d-----w C:\Program Files\Lexmark Toolbar 2007-09-09 15:10 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\Lexmark Productivity Studio 2007-09-09 15:01 --------- d-----w C:\Program Files\Lexmark 3500-4500 Series 2007-09-09 15:00 --------- d-----w C:\Program Files\Lexmark Fax Solutions 2007-09-09 14:58 --------- d-----w C:\Documents and Settings\All Users\Application Data\FaxCtr 2007-09-09 14:57 --------- d-----w C:\Program Files\Abbyy FineReader 6.0 Sprint 2007-09-06 14:51 68,928 ----a-w C:\Documents and Settings\Faydit Didier\Application Data\GDIPFONTCACHEV1.DAT 2006-05-10 18:56 613 -c-ha-w C:\Documents and Settings\Faydit Didier\hpothb07.dat 2005-11-11 17:27 278,528 -c--a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe 2004-11-28 16:39 36 -c--a-w C:\Documents and Settings\Faydit Didier\Application Data vmcwrd.dll 2004-11-14 19:40 230,237 -c--a-w C:\Documents and Settings\Faydit Didier\Application Data vmknwrd.dll 2003-05-04 09:18 306,207 -c--a-w C:\Program Files\grokstersetup.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{CD209A08-98B5-4669-AF9F-447AC5253356}] 2004-01-20 05:39 77824 --a------ C:\WINDOWS\System32\CSapp.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DVDSentry"="C:\WINDOWS\System32\DSentry.exe" [2002-08-14 19:22] "ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2007-02-22 11:08] "Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe" [2006-04-18 21:51] "NAV CfgWiz"="C:\Program Files\Norton AntiVirus\CfgWiz.exe" [2006-02-01 21:10] "snpstd3"="C:\WINDOWS\vsnpstd3.exe" [2006-09-19 08:07] "Symantec PIF AlertEng"="C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 09:22] "NeroCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 02:06] "Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2007-08-21 11:44] "lxdimon.exe"="C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe" [2007-05-07 19:07] "lxdiamon"="C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe" [2007-03-05 13:40] "FaxCenterServer"="C:\Program Files\Lexmark Fax Solutions\fm3032.exe" [2007-05-07 19:10] "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe" [2007-09-13 14:35] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11] "NetService"="C:\WINDOWS\system32\ppnst.dll" [2007-10-10 12:59] "34f05907"="C:\WINDOWS\qopnon.dll" [2007-11-06 17:32] "TraySantaCruz"="C:\WINDOWS\system32 bctray.exe" [2002-04-03 16:47] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 00:09] "german.exe"="C:\WINDOWS\system32\wintems.exe" [] [HKEY_USERS\.default\software\microsoft\windows\currentversion un] "msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" /background [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "AllowLegacyWebView"=1 (0x1) "AllowUnhashedWebView"=1 (0x1) [color=red]SafeBoot registry key needs repairs. This machine cannot enter Safe Mode.[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system] @="Driver Group" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys] @="Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}] @="DiskDrive" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}] @="Hdc" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}] @="Keyboard" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}] @="Mouse" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}] @="System" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] @="Volume" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Faydit Didier^Menu Démarrer^Programmes^Démarrage^Personal Player.lnk] path=C:\Documents and Settings\Faydit Didier\Menu Démarrer\Programmes\Démarrage\Personal Player.lnk backup=C:\WINDOWS\pss\Personal Player.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Faydit Didier^Menu Démarrer^Programmes^Démarrage^Zapu Acceleration Engine.lnk] path=C:\Documents and Settings\Faydit Didier\Menu Démarrer\Programmes\Démarrage\Zapu Acceleration Engine.lnk backup=C:\WINDOWS\pss\Zapu Acceleration Engine.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Faydit Didier^Menu Démarrer^Programmes^Démarrage^Zapu.lnk] path=C:\Documents and Settings\Faydit Didier\Menu Démarrer\Programmes\Démarrage\Zapu.lnk backup=C:\WINDOWS\pss\Zapu.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\junk body] C:\DOCUME~1\FAYDIT~1\APPLIC~1\MEETSK~1\open chic.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mule_st_key] C:\Documents and Settings\Faydit Didier\Application Data\m\flec006.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector] C:\Documents and Settings\Faydit Didier\Bureau\clement\PROGRAMMES FILES [CLEMENT]\Picassa\Picasa2\PicasaMediaDetector.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 (0x3) "usnjsvc"=3 (0x3) "sdCoreService"=3 (0x3) "sdAuxService"=3 (0x3) "NMSAccessU"=2 (0x2) "KodakCCS"=3 (0x3) "Boonty Games"=3 (0x3) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion un-] "Skype"="C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized "Shareaza"="C:\Program Files\Shareaza\Shareaza.exe" -tray "Steam"="C:\Program Files\Steam\Steam.exe" -silent [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un-] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime "live knob loud bold"=C:\Documents and Settings\All Users\Application Data\Surf tick live knob\Boob draw.exe "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" "NvCplDaemon"=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup "e-TF1"=C:\Program Files\TF1Vision\TF1vision.exe "Picasa Media Detector"=C:\Program Files\Picasa2\PicasaMediaDetector.exe R0 ndisrd;ndisrd;C:\WINDOWS\system32\drivers disrd.sys R2 TICalc;TICalc;C:\WINDOWS\system32\drivers\TICalc.sys R2 Vcs;Vcs support;\??\C:\WINDOWS\system32\Drivers\Vcs.sys R3 tbcspud;Santa Cruz Driver;C:\WINDOWS\system32\drivers bcspud.sys R3 tbcwdm;Santa Cruz WDM Driver;C:\WINDOWS\system32\drivers bcwdm.sys S3 KMW_KBD;Kensington Input Devices Class filter driver;C:\WINDOWS\system32\DRIVERS\KMW_KBD.sys S3 KMW_USB;Kensington MouseWorks USB filter driver;C:\WINDOWS\system32\DRIVERS\KMW_USB.sys S3 NMSCFG;NIC Management Service Configuration Driver;\??\C:\WINDOWS\System32\drivers\NMSCFG.SYS S3 TIEHDUSB;TIEHDUSB;C:\WINDOWS\system32\drivers iehdusb.sys S3 USBModem000;LGE Mobile USB Modem TC;C:\WINDOWS\system32\DRIVERS\usbser.sys S3 vtdg46xx;vtdg46xx;\??\C:\PROGRA~1\TURTLE~1\SANTAC~1\CONTRO~1\vtdg46xx.sys S4 hpt3xx;hpt3xx;C:\WINDOWS\system32\DRIVERS\hpt3xx.sys S4 Modrtpdkcmpr;Modrtpdkcmpr;C:\WINDOWS\System32\drivers\atapi.sys [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E4066320-E4AE-11CF-B1B0-00AA00BBAD66}] rundll32.exe advpack.dll,LaunchINFSection %SystemRoot%\INF\fpxpress.inf,PerUserstub . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2007-10-27 15:33:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2007-11-07 16:00:01 C:\WINDOWS\Tasks\B1AF10B29394843E.job" - c:\docume~1\faydit~1\applic~1\meetsk~1\uploadgreyrect.exe "2007-10-27 21:18:00 C:\WINDOWS\Tasks\defragmentation 1#.job" - C:\Documents and Settings\Faydit Didier\Bureau\clement\Defrag\planification_defrag1#.cmd "2007-10-26 15:15:00 C:\WINDOWS\Tasks\Maintenance en 1 clic.job" - C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe "2007-10-26 18:00:00 C:\WINDOWS\Tasks\Norton AntiVirus - Effectuer une analyse complète du système - Faydit Didier.job" . ************************************************************************** catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-07 17:46:10 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... ************************************************************************** . Completion time: 2007-11-07 17:53:23 - machine was rebooted . --- E O F ---

chrifleur · Answer

un nouveau rapport hijack this stp 
et tu feras aussi ceci
Télécharge LopXPMH sur ton Bureau. 
http://www.alt-shift-return.org/Info/Fichiers/lopxpMH2.zip

 Dézippe-le et double clique sur le fichier lopxpMH.bat. 
 Poste le contenu du rapport qui va s'ouvrir.

UrbainS · Answer

Juste une petite précision... :p Je fait le rapport hijack this avant celui de lopxpMH.bat?

UrbainS · Answer

Voila pour l'hijackthis:

Logfile of HijackThis v1.99.1
Scan saved at 18:40:17, on 07/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdiserv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\lxdicoms.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\vsnpstd3.exe
C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe
C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32	bctray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\Servicesun_mldonkey.exe
C:\Program Files\Internet Explorer\Services\mlnet.exe
C:\Program Files\Sun\StarOffice 8\program\soffice.exe
C:\Program Files\Sun\StarOffice 8\program\soffice.BIN
C:\PROGRA~1\FICHIE~1\SYMANT~1\SECURI~1\NSCSRVCE.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.netvibes.com/en
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/?p=us
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.broadcom.com/support/security-center
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM	bShar.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar	oolband.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM	bShar.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: CSObj Class - {CD209A08-98B5-4669-AF9F-447AC5253356} - C:\WINDOWS\System32\CSapp.dll
O3 - Toolbar: (no name) - {BBC3016E-B009-A975-6E2F-2E1990B324F7} - (no file)
O3 - Toolbar: (no name) - {BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8} - (no file)
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar	oolband.dll
O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM	bShar.dll
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [NAV CfgWiz] "C:\Program Files\Norton AntiVirus\CfgWiz.exe" /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [lxdimon.exe] "C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe"
O4 - HKLM\..\Run: [lxdiamon] "C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NetService] Rundll32.exe C:\WINDOWS\system32\ppnst.dll,Startup
O4 - HKLM\..\Run: [34f05907] rundll32.exe "C:\WINDOWS\qopnon.dll",b
O4 - HKLM\..\Run: [TraySantaCruz] C:\WINDOWS\system32	bctray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [german.exe] C:\WINDOWS\system32\wintems.exe
O4 - Startup: StarOffice 8.lnk = C:\Program Files\Sun\StarOffice 8\program\quickstart.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.03\AMVConverter\grab.html
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.03\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: MP3Chansons - {EF6D6AE3-2625-40D6-A5AB-920DFD2DAF8C} - C:\Documents and Settings\Faydit Didier\Application Data\MP3Chansons.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/importer/MypixUploader.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {45E83043-1F6F-4D22-A5E7-0138EA171B49} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fr/filesharingctrl.cab
O16 - DPF: {68C1822F-F5C7-4404-A73F-03C10E0E94DA} (telechargement-photoweb) - http://www3.photoweb.fr/telechargement/Photoweb_uploader.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypixmania.com/importer/MypixUploader.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {928626A3-6B98-11CF-90B4-00AA00A4011F} (SurroundVideoCtrl Object) - http://fr.ca.encarta.msn.com/encnet/external/MSSurVid.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/SSC/SharedContent/common/bin/cabsa.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/4h/player.virtools.com/downloads/player/Install2.5/Installer.exe
O16 - DPF: {E7DBFB6C-113A-47CF-B278-F5C6AF4DE1BD} - http://download.abacast.com/download/files/abasetup144.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Toolbar avec bloqueur de fenêtres pop-up) - http://us.dl1.yimg.com/download.companion.yahoo.com/dl/toolbar/yiebio5_1_6_0.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: lxdiCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdiserv.exe
O23 - Service: lxdi_device -   - C:\WINDOWS\system32\lxdicoms.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

UrbainS · Answer

Voilà pour le rapport lopxpMH2: Rapport lopxpMH2 version 2.0 fait à 18:43:41,23 le 07/11/2007 C:\Documents and Settings\Faydit Didier\Bureau\Nettoyage\lopxpMH2 ****************************************** ## Répertoires Application Data Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 34F0-59A8 Répertoire de C:\Documents and Settings\All Users\Application Data 25/11/2002 10:03 . 25/11/2002 10:03 .. 23/05/2007 09:19 Adobe 29/09/2006 20:49 Apple Computer 10/10/2004 14:40 ArmyJoyTeamHeck 23/03/2007 20:55 BOONTY 16/12/2005 19:45 Emjysoft 09/09/2007 15:58 FaxCtr 05/06/2006 18:28 Google 21/08/2007 11:42 Google Updater 14/02/2006 22:33 Kodak 05/11/2007 22:37 Macromedia 02/02/2003 15:56 Macrovision 02/07/2007 10:53 MAGIX 06/10/2006 22:22 Messenger Plus! 25/11/2002 10:03 Microsoft 07/05/2003 18:53 MSN6 23/03/2007 21:01 MumboJumbo 29/09/2007 20:03 NCH Software 29/09/2007 20:03 NCH Swift Sound 04/11/2006 20:11 nView_Profiles 14/05/2006 09:35 OD2 12/02/2003 22:46 QuickTime 29/09/2006 20:28 River Past G4 25/11/2002 09:23 SBSI 24/07/2006 15:07 Skype 28/11/2004 17:19 Spybot - Search & Destroy 21/03/2007 17:49 Surf tick live knob 25/11/2002 09:25 Symantec 28/05/2005 12:30 Trymedia 10/06/2007 10:15 TuneUp Software 03/09/2006 08:54 Windows Genuine Advantage 05/02/2007 21:23 Windows Live Toolbar 04/07/2007 20:52 WindowsLiveInstaller 04/07/2007 20:48 WLInstaller 05/07/2007 18:26 yahoo! 19/09/2001 07:19 62 DESKTOP.INI 01/01/2007 18:18 1 751 QTSBandwidthCache 2 fichier(s) 1 813 octets 36 Rép(s) 14 715 801 600 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 34F0-59A8 Répertoire de C:\Documents and Settings\Default User\Application Data 25/11/2002 10:03 . 25/11/2002 10:03 .. 14/12/2002 19:18 Identities 25/11/2002 10:03 Microsoft 14/12/2002 19:18 Symantec 19/09/2001 07:19 62 DESKTOP.INI 1 fichier(s) 62 octets 5 Rép(s) 14 715 801 600 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 34F0-59A8 Répertoire de C:\Documents and Settings\Default User\Local Settings\Application Data 25/11/2002 10:03 . 25/11/2002 10:03 .. 14/12/2002 19:18 Microsoft 0 fichier(s) 0 octets 3 Rép(s) 14 715 801 600 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 34F0-59A8 Répertoire de C:\Documents and Settings\Faydit Didier\Application Data 14/12/2002 19:20 . 14/12/2002 19:20 .. 27/02/2003 22:31 Adobe 23/05/2007 09:22 AdobeUM 29/09/2006 20:59 Apple Computer 30/06/2007 12:12 Azureus 14/12/2002 21:08 CyberLink 08/10/2007 14:39 DivX 24/10/2004 08:25 Dossier de téléchargement Share-to-Web 21/05/2003 17:06 Dossier de téléchargement Share-to-Web 11/11/2005 18:54 eConf 27/09/2005 09:51 EoRezo 18/03/2007 21:12 EssentialPIM Pro 10/09/2007 06:23 FaxCtr 08/10/2007 15:15 GetRightToGo 06/09/2005 20:37 Google 28/09/2007 21:16 gtk-2.0 05/01/2003 17:14 Help 02/02/2004 19:55 ICQ 08/02/2004 17:00 ICQLite 14/12/2002 19:20 Identities 12/02/2006 15:35 Interactive Agents 27/02/2003 22:31 InterTrust 02/01/2007 20:52 Kensington 10/10/2007 21:31 KompoZer 29/06/2007 12:21 Leadertech 09/09/2007 16:10 Lexmark Productivity Studio 02/10/2007 15:29 m 06/02/2003 13:05 Macromedia 23/03/2006 18:46 MeetSkipJoy 14/12/2002 19:20 Microsoft 21/03/2007 22:22 Mozilla 07/05/2003 18:53 MSN6 29/09/2007 20:03 NCH Swift Sound 04/04/2004 16:14 Nikon 02/10/2007 20:31 Notepad++ 21/09/2007 20:42 Nvu 14/05/2006 15:15 OD2 24/09/2006 11:24 OpenOffice.org2 12/02/2003 23:16 Real 29/09/2006 20:28 River Past G4 21/03/2007 17:50 Screenshot Sender 24/07/2006 15:07 Skype 28/09/2007 17:05 StarOffice8 02/04/2007 17:26 Sun 14/12/2002 19:20 Symantec 21/03/2007 22:35 Talkback 14/01/2003 23:16 Template 10/06/2007 10:17 TuneUp Software 24/07/2006 14:54 uTorrent 14/12/2002 19:20 62 DESKTOP.INI 08/02/2005 13:57 68 928 GDIPFONTCACHEV1.DAT 09/07/2005 11:58 766 MP3Chansons.ico 29/06/2007 10:36 169 TokiShot.ini 28/11/2004 17:36 36 tvmcwrd.dll 12/10/2004 10:04 230 237 tvmknwrd.dll 6 fichier(s) 300 198 octets 50 Rép(s) 14 715 797 504 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 34F0-59A8 Répertoire de C:\Documents and Settings\Faydit Didier\Local Settings\Application Data 14/12/2002 19:20 . 14/12/2002 19:20 .. 23/05/2007 09:09 Adobe 29/09/2006 20:59 Apple Computer 08/03/2005 21:08 ApplicationHistory 24/07/2006 14:56 Ares 28/10/2007 22:13 CDBurnerXP_Soft 14/01/2003 23:08 Dell 02/12/2006 22:36 Google 05/01/2003 17:14 Help 05/01/2003 16:34 Identities 13/12/2003 09:40 IM 14/12/2002 19:20 Microsoft 21/03/2007 22:22 Mozilla 01/06/2006 17:32 PCHealth 07/11/2007 14:48 Share_Accelerator_MM 10/06/2007 09:08 Shareaza 15/06/2007 21:00 TF1 Vision 13/01/2005 23:01 WMTools Downloaded Files 21/01/2006 19:25 774 bp15.exe 18/01/2003 16:59 233 472 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 08/03/2005 21:08 136 fusioncache.dat 14/01/2003 23:15 8 224 GDIPFONTCACHEV1.DAT 4 fichier(s) 242 606 octets 19 Rép(s) 14 715 797 504 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 34F0-59A8 Répertoire de C:\Documents and Settings\LocalService\Application Data 25/11/2002 10:03 . 25/11/2002 10:03 .. 14/01/2003 23:54 Help 25/11/2002 10:03 Microsoft 09/11/2006 19:33 Symantec 0 fichier(s) 0 octets 5 Rép(s) 14 715 797 504 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 34F0-59A8 Répertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data 25/11/2002 10:03 . 25/11/2002 10:03 .. 14/01/2003 23:54 Help 25/11/2002 10:03 Microsoft 03/10/2007 20:44 156 280 FontCache3.0.0.0.dat 1 fichier(s) 156 280 octets 4 Rép(s) 14 715 793 408 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 34F0-59A8 Répertoire de C:\Documents and Settings\NetworkService\Application Data 25/11/2002 10:03 . 25/11/2002 10:03 .. 25/11/2002 10:03 Microsoft 09/03/2005 10:21 Symantec 0 fichier(s) 0 octets 4 Rép(s) 14 715 793 408 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 34F0-59A8 Répertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data 25/11/2002 10:03 . 25/11/2002 10:03 .. 25/11/2002 10:03 Microsoft 0 fichier(s) 0 octets 3 Rép(s) 14 715 793 408 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 34F0-59A8 Répertoire de C:\Documents and Settings\Nouveau dossier Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 34F0-59A8 Répertoire de C:\Documents and Settings\Propriétaire\Application Data 03/11/2003 22:35 . 03/11/2003 22:35 .. 03/11/2003 22:35 Symantec 0 fichier(s) 0 octets 3 Rép(s) 14 715 793 408 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 34F0-59A8 Répertoire de C:\WINDOWS\system32\config\systemprofile\Application Data 25/11/2002 10:01 . 25/11/2002 10:01 .. 14/12/2002 19:18 Identities 25/11/2002 10:01 Microsoft 13/09/2007 14:34 Real 14/12/2002 19:18 Symantec 19/09/2001 07:19 62 DESKTOP.INI 1 fichier(s) 62 octets 6 Rép(s) 14 715 793 408 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 34F0-59A8 Répertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data 25/11/2002 10:04 . 25/11/2002 10:04 .. 13/09/2007 14:35 Google 14/12/2002 19:18 Microsoft 27/09/2007 20:42 WindowsLiveInstaller 0 fichier(s) 0 octets 5 Rép(s) 14 715 793 408 octets libres ****************************************** Recherche des taches planifiées dans C:\WINDOWS asks C:\WINDOWS\Tasks\AppleSoftwareUpdate.job s ˆ! : C : \ P r o g r a m F i l e s \ A p p l e S o f t w a r e U p d a t e \ S o f t w a r e U p d a t e . e x e - T a s k S Y S T E M € 0 × ! @ C:\WINDOWS\Tasks\B1AF10B29394843E.job ï¡î¡>îC…ìOqcˆÆF ì < s "ˆ! : c : \ d o c u m e ~ 1 \ f a y d i t ~ 1 \ a p p l i c ~ 1 \ m e e t s k ~ 1 \ u p l o a d g r e y r e c t . e x e F a y d i t D i d i e r € 0 Î < C:\WINDOWS\Tasks\defragmentation defragmentation inexploitable C:\WINDOWS\Tasks\Maintenance Maintenance inexploitable C:\WINDOWS\Tasks\Norton Norton inexploitable ****************************************** ## Répertoires de C:\Program Files Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 34F0-59A8 Répertoire de C:\Program Files 07/11/2007 17:47 . 07/11/2007 17:47 .. 13/12/2005 18:53 Abacast 09/09/2007 15:57 Abbyy FineReader 6.0 Sprint 29/09/2007 18:39 Adesign 27/11/2003 20:11 adidas_running_2003 05/11/2007 12:02 Adobe 15/12/2006 22:48 ahead 17/10/2004 17:24 altnet(2) 20/04/2007 12:26 Apple Software Update 13/10/2007 22:34 ArtOfIllusion 12/10/2007 16:10 AtomixMP3 16/12/2005 20:01 AVSMedia 05/11/2007 12:20 Azureus 13/10/2007 22:48 Blender Foundation 29/09/2007 18:38 Boonty 05/11/2007 12:23 BoontyGames 28/08/2005 12:52 cam2pc 28/10/2007 22:10 CDBurnerXP 30/06/2005 13:17 Codemasters 01/04/2006 19:37 Common Files 08/02/2007 22:09 Compil Games 25/11/2002 10:03 ComPlus Applications 12/10/2007 16:13 Creative 25/11/2002 09:24 CyberLink 25/11/2002 09:23 Dell 26/05/2006 18:24 DIFX 15/06/2004 21:11 directx 07/10/2007 11:44 DivX 06/03/2004 15:06 EA GAMES 18/05/2004 14:45 Ediser 22/09/2007 21:07 eMule 02/02/2005 16:22 EZFace 03/03/2006 22:50 Fake Webcam 07/11/2007 17:47 Fichiers communs 06/11/2007 15:11 FileZilla 15/06/2004 21:11 FlowGoBar 05/11/2007 12:44 FotoStation Easy 26/09/2006 20:44 GameSpy Arcade 01/01/2007 16:55 GlobFX Technologies 21/08/2007 11:43 Google 02/06/2005 20:03 Grokster 04/05/2003 10:18 306 207 grokstersetup.exe 21/11/2006 18:25 Guitar Pro 5 01/01/2007 16:58 Hewlett-Packard 16/04/2004 12:41 HighMAT CD Writing Wizard 07/11/2007 18:39 Hijackthis Version Française 04/03/2004 11:01 ICQLite 13/12/2003 10:26 IncrediMail 27/11/2003 18:41 index 25/11/2002 09:24 intel 05/11/2007 12:47 InterActual 10/10/2007 12:59 Internet Explorer 31/05/2007 17:23 iPod 31/05/2007 17:24 iTunes 08/10/2007 12:15 Java 05/01/2003 16:25 JavaSoft 02/01/2007 20:39 Kensington 21/08/2007 07:02 Kodak 13/05/2004 22:39 Lavasoft 09/09/2007 16:01 Lexmark 3500-4500 Series 09/09/2007 16:00 Lexmark Fax Solutions 10/09/2007 18:48 Lexmark Toolbar 05/12/2004 16:42 LucasArts 05/11/2007 22:35 Macromedia 14/09/2003 19:30 Maxis 21/03/2007 17:49 MeetSkipJoy 20/10/2004 11:02 memo delete help 23/03/2007 20:53 Mes Jeux Téléchargés 11/11/2005 18:37 Messager Wanadoo 11/02/2005 07:01 Messenger 12/10/2004 09:40 Messenger Plus! 2 07/06/2007 20:21 Messenger Plus! Live 08/12/2005 21:41 MessengerPlus! 3 10/05/2007 02:10 Microsoft CAPICOM 2.1.0.2 25/11/2002 10:03 microsoft frontpage 28/09/2007 16:53 Microsoft FrontPage Express 20/05/2004 19:02 Microsoft Games 27/12/2003 14:40 Microsoft Office 07/11/2003 20:03 Microsoft Picture It! PhotoPub 25/11/2002 09:25 Microsoft Works 22/10/2004 20:00 Mindscape 02/09/2007 14:12 Movie Maker 07/11/2007 18:12 Mozilla Firefox 20/12/2006 19:54 MP3 Player Utilities 4.03 13/12/2005 18:50 Mp3 Tek' 03/10/2007 20:45 MSBuild 25/11/2002 10:03 MSN Gaming Zone 07/11/2007 13:48 MSN Messenger 18/11/2006 00:08 MSXML 4.0 14/05/2006 09:35 Music Manager 03/02/2004 18:05 MyWay 02/10/2007 18:32 NCH Software 02/10/2007 18:32 NCH Swift Sound 18/09/2004 12:30 NetMeeting 31/01/2007 17:14 Neuf 04/04/2004 16:10 Nikon 03/11/2003 22:38 Norton AntiSpam 14/06/2007 02:15 Norton AntiVirus 24/07/2006 17:12 Nvu 02/10/2006 19:30 OpenOffice.org 2.0 20/08/2007 12:00 Outlook Express 20/08/2007 23:12 Picasa2 31/05/2007 17:18 QuickTime 12/02/2003 23:16 Real 03/10/2007 20:12 Reference Assemblies 07/11/2004 17:25 RegCleaner 15/06/2004 21:11 ScreenSavers 08/02/2007 22:20 Seagrand 25/11/2002 10:03 Services en ligne 10/06/2007 09:08 SHARE 1.0 EX2 07/11/2007 14:46 Share_Accelerator_MM 30/09/2006 08:05 SHOUTcast 27/12/2004 14:09 Sierra On-Line 22/08/2007 13:44 Skype 28/11/2004 17:22 Spybot - Search & Destroy 06/06/2007 15:27 Stardock 10/06/2007 10:37 Steam 21/08/2007 12:36 Sun 20/02/2006 18:51 Super logiciels 06/11/2007 21:22 Symantec 31/08/2004 07:13 SymNetDrv 20/08/2007 10:26 TF1Vision 07/11/2007 13:52 TI Education 29/06/2007 10:25 TOKI Shot 24/07/2006 17:09 TPlayer 01/06/2005 12:34 Triumph Studios 25/11/2002 09:24 Turtle Beach 07/11/2007 15:07 Unlocker 15/06/2004 21:11 vcom 27/07/2006 17:53 V-Gear BEE 04/05/2006 18:47 Virtools Web Player 2.5 08/10/2007 13:25 Virtual DJ 08/10/2007 15:45 VirtualDJ 01/07/2007 10:44 VirtualDub 17/02/2007 14:06 Wanadoo 04/01/2005 16:51 Wanadoo Edition 22/10/2005 11:36 websearch 30/09/2006 08:06 Winamp 04/07/2007 20:51 Windows Live 05/02/2007 21:24 Windows Live Favorites 05/02/2007 21:24 Windows Live Toolbar 02/03/2007 22:16 Windows Media Connect 2 03/03/2007 07:30 Windows Media Player 18/09/2004 12:29 Windows NT 19/12/2006 21:48 WinRAR 25/11/2002 10:03 XEROX 30/05/2007 14:43 Xi 07/11/2007 14:00 Yahoo! 07/11/2007 14:09 YourSiteBar 08/10/2007 13:17 Zapu 1 fichier(s) 306 207 octets 150 Rép(s) 14 715 781 120 octets libres ****************************************** ## Popups autorisées * Internet Explorer ! REG.EXE VERSION 3.0 HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow PopupMgr REG_SZ yes * Mozilla Firefox (1 autorisé 2 interdit) ---------- C:\DOCUMENTS AND SETTINGS\FAYDIT DIDIER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\BBT9KMTO.DEFAULT\HOSTPERM.1 host popup 1 www.gothicpoint.com host popup 1 webmessenger.msn.com host popup 1 www.sk8.net host popup 1 www.infos-du-net.com host popup 1 mail.google.com host popup 1 www.tf1vision.com host popup 1 www.paris-skate-culture.org host popup 1 www.plexskateboard.com host popup 1 www.911tabs.com ****************************************** ## Registre [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\junk body] command REG_SZ C:\DOCUME~1\FAYDIT~1\APPLIC~1\MEETSK~1\open chic.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\mule_st_key] command REG_SZ C:\Documents and Settings\Faydit Didier\Application Data\m\flec006.exe ****************************************** ## Zones de sécurité * HKCU Domains (4) * P3P History (5) ****************************************** ## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif" *************** Fin du rapport ****************

UrbainS · Answer

Help!!!

chrifleur · Answer

1/ Télécharge : - CCleaner
https://www.pcastuces.com/logitheque/ccleaner.htm
("Download Latest Version", sur la droite).
 Ce logiciel va permettre de supprimer tous les fichiers temporaires. Avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires". Ensuite, Clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Par la suite, laisse-le avec ses réglages par défaut. C'est tout. 

2/ Crée un nouveau document texte : 
clic droit de souris sur le bureau, "Nouveau"> "Document Texte". 
Ouvre-le et copie-colle dedans de ce qui est ci-dessous, (copie tout d'un trait) : 
REGEDIT4

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\junk body] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\mule_st_key]

Puis "fichier"/"enregistrer sous" : 
dans : sur le bureau 
Nom du fichier : reglop.reg 
Type de fichier : "tous les fichiers" 
clique sur "enregistrer" 

Antivirus puissant à utiliser en "mode sans échec" sur les cas difficiles où il est souvent d'une grande efficacité; 
Étape 1: 
Télécharge eScan Antivirus Toolkit ici. Sauvegarde-le sur ton Bureau. 

http://www.spywareinfo.dk/download/mwav.exe

Avant de lancer le programme, il faut le mettre à jour tel qu'indiqué à l'étape 2. 

Étape 2: 
Voici comment mettre l'outil à jour : 

1.) Double-clique le fichier mwav.exe qui se trouve sur le Bureau ; dézippe les fichiers dans le nouveau dossier suggéré (C:\Kaspersky). Le programme va se lancer, et tu dois le quitter (clique sur "Exit" puis "Exit"). 

2.) Double-clique sur le Poste de travail, puis double-clique sur le lecteur principal (habituellement C:\), double-clique sur le dossier Kaspersky ; ensuite, double-clique sur le fichier kavupd.exe. Tu verras maintenant une fenêtre DOS apparaître, et la mise à jour se complètera en quelques minutes. 

3.) Lorsque la mise à jour sera complétée, tu verras "Press any key to continue" ; tape sur une clé pour continuer. Deux nouveaux répertoires (dossiers) ont été créés lors de la mise à jour (C:\Bases et C:\Downloads). 

4.) Sélectionne/copie tous les fichiers présents dans le dossier C:\Downloads, puis colle-les dans le dossier C:\Kaspersky. Accepte à l'invite de remplacer les fichiers existants. 

Ne pas lancer le scan tout de suite ! 


*****Copie ce qui suit dans un fichier texte et redémarre en mode sans échec (choisis ta session habituelle, pas le compte "Administrateur" ou autre)
Comment aller en Mode sans échec lettre C 
https://forum.pcastuces.com/sujet.asp?f=25&s=3902 
1) Redémarre ton ordi 
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" 
3) Tu verras un écran avec options de démarrage apparaître 
4) Choisi la première option : Sans Échec, et valide avec "Entrée" 
5) Choisi ton compte régulier, et non Administrateur *****

 désinstalle via "Ajout/Suppression de programmes", si tu trouves : 
(si l'un de ces programmes ne figure pas dans la liste ajout/suppression de programmes, recherche un fichier "uninstall..." dans un répertoire du même nom, dans C:\Program Files et exécute-le)

MeetSkipJoy
FlowGoBar
altnet
websearch
YourSiteBar 

4/ Assure toi d'avoir accès aux dossiers/fichiers cachés : 
Ouvrir un dossier, n'importe lequel. Aller dans : 
Outils/Options des dossiers/Affichage et 
- cocher "afficher les dossiers et fichiers cachés", 
- décocher "masquer les extensions des fichiers dont le type est connu". 
- décocher masquer les fichiers protégés du système d'exploitation (recommandé)" 
"appliquer" et "ok" 

recherche et supprime ces dossiers ou fichiers en gras, si tu les trouves :
C:\Documents and Settings\All Users\Application Data\ArmyJoyTeamHeck 
C:\Documents and Settings\All Users\Application Data \Surf tick live knob
C:\Documents and Settings\Faydit Didier\Application Data \MeetSkipJoy
C:\Program Files\MeetSkipJoy
C:\Program Files\FlowGoBar
C:\Program Files\altnet(2)  
C:\Program Files\websearch 
C:\Program Files\YourSiteBar 

recache tes dossiers et fichiers en effectuant la manoeuvre inverse 


5/ démarrer/exécuter, tape cmd et valide par entrée. Colle la ligne suivante dans la fenêtre noire qui s'ouvre : 
del /a C:\WINDOWS\Tasks\B1AF10B29394843E.job 


valide par entrée, puis ferme la fenêtre de commande. 

6/ double clique sur reglop.reg => tu dois obligatoirement avoir un message "voulez-vous vraiment ajouter les informations contenues dans ce fichier .reg au registre ?" 
Si c'est bien le cas, clique sur "oui" 

7/ Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout. 

Du mode Sans Échec, voici comment utiliser le programme ESCAN

1.) Pour lancer "eScan Antivirus Toolkit", trouve le fichier mwavscan.com situé dans le dossier C:\Kaspersky 

2.) Double-clique sur mwavscan.com ; l'interface d'eScan va apparaître à l'écran. 

3.) Il est très important de bien cocher ces boîtes sous Scan Option : Memory, Registry, Startup Folders, System Folders, Services. 

4.) Coche la boîte Drive, ce qui donne accès à une nouvelle boîte Drive (bouton rond) juste dessous ; coche ce bouton "Drive" (très important..), et tu verras une nouvelle boîte de navigation apparaître à la droite. Clique sur la petite flèche de cette boîte and choisi la lettre de ton disque dur, habituellement C:\. 

5.) Juste au-dessous, assure-toi que Scan All Files est coché, et non Program Files. 

6.) Clique sur Scan Clean et laisse le tool vérifier tout le disque dur (ça peut être long..). Lorsque terminé, tu verras Scan Completed. Ne pas quitter tout de suite ! 

7.) Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" >> "Programmes" >>"Accessoires" >> "Bloc notes"), puis copie/colle tout le contenu de la fenêtre Virus Log Information (la deuxième, au bas) dans le fichier texte, et sauvegarde le. eScan génère également un rapport complet dans le dossier C:\Kaspersky (nommé mwav.log), mais il est trop lourd pour poster sur le forum. 

Ferme le programme. Redémarre ton PC en mode Normal. Poste (copie/colle) le rapport que tu as sauvegardé dans ta prochaine réponse. 

poste un nouveau rapport HijackThis, toutes fenêtres et applications fermées. Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.
à demain pour la suite

eddy · Answer

Bonjour, 
J'ai Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:12:27, on 07/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.estvideo.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\VTTray.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: s3contrl (32-bit) - Unknown owner - C:\WINDOWS\VTTray.exe (file missing)

UrbainS · Answer

Mais je n'ai qu'une sessions et ellle est administrateur?!

chrifleur · Answer

en mode sans échec en principe, il y a une session administrateur et une autre qui est celle que tu utilises habituellement
par ex, sur mon PC ma session c'est celle où il y a mon prénom...

UrbainS · Answer

j'ai un probleme le mode sans echec ne marche pas quand je le selectione et que j'appui sur entré un ecran bleu apparait où il est ecrit 
"un probleme a été détecté et windows a été arrêté afin de prévenir tout dommage sur votre ordinateur."

Si vous voyez cet écran d'erreur d'arret pour la premiere fois, redémarrez votre ordinateur. Si cet écran apparait encore, suivez ces étapes:

Recherchez tout virus sur votre ordinateur. Supprimez tout disque dur ou controleur de disque dur nouvellement installé. Verifiez votre disque dur afin de vous assurer qu'il est correctment configuré et terminé.
Exécutez CHKDSK /F pour verifier la presence d'un dommage sur votre disque dur puis redemarrez votre ordinateur.

Information techniques:

***STOP: 0x0000007B (0xF967B528, 0xC0000034, 0x00000000, 0x00000000

Aidez moi!

chrifleur · Answer

n'insiste pas avec le mode sans échec
on va faire autrement
je te prépare une nouvelle manip

chrifleur · Answer

commence par faire ceci
Rends toi sur ce site : 
http://www.zonavirus.com/datos/descargas/95/elibagla.asp 
tout en bas de cette page tu trouveras un outil à télécharger,
clique sur "escargar Elibagla" (le numéro de version change au fur et à mesure des mises à jour) 
installe ce fichier sur le bureau. 
ensuite double-clic sur Elibagla.exe 
>laisse la case "eliminar ficheros automaticamente" coché 
>clique sur"explorar" 
>laisse-le travailler 
>poste le rapport final qui sera dans c:\infosat.txt 

Si, dans le rapport, tu vois un texte semblable à celui-ci 

Por favor, envienos una muestra del fichero 
C:\Muestras\HLDRRR.EXE.Muestra EliBagle v10.24 
a "virus@satinfo.es". Gracias; 

envoie ce(s) fichier(s) (dans l'exemple C:\Muestras\HLDRRR.EXE.Muestra EliBagle v10.24 ) à l'adresse e-mail indiquée (virus@satinfo.es). 

L'outil a rencontré un fichier qu'il reconnait mais ne sait pas encore éradiquer. Dans 24 heures environ, sur le site, la version de déchargement (v10.24 dans l'exemple) aura changé par rapport à celle actuelle. Tu retéléchargeras l'outil, tu le relanceras et tu posteras le rapport.

dis moi si tu arrives ensuite à aller en mode sans échec

mais tu ne fais rien en mode sans échec, tu me dis c'est tout!

chrifleur · Answer

POUR CETTE MANIP, TU ATTENDS MON FEU VERT!!!! TU NE LE FAIS QUE LORSQUE JE TE LE DIRAIS!!!!
IL ME FAUT LE RÉSULTAT DU SCAN PRÉCÉDENT AVANT DE PEUT ÊTRE MODIFIER CELLE CI!!

Copie (Ctrl+C) le texte ci-dessous :

File::

C:\WINDOWS\qopnon.dll 
C:\WINDOWS\efddax.dll
C:\WINDOWS\qonkki.dll
C:\WINDOWS\SYSTEM32\DRIVERS
disrd.sys
C:\Documents and Settings\All Users\Application Data\ArmyJoyTeamHeck
C:\Documents and Settings\All Users\Application Data\Surf tick live knob
C:\Documents and Settings\Faydit Didier\Application Data\MeetSkipJoy 
C:\WINDOWS\Tasks\B1AF10B29394843E.job
C:\Documents and Settings\Faydit Didier\Menu Démarrer\Programmes\Démarrage\Zapu Acceleration Engine.lnk
C:\WINDOWS\pss\Zapu Acceleration Engine.lnkStartup 
C:\Documents and Settings\Faydit Didier\Menu Démarrer\Programmes\Démarrage\Zapu.lnk
C:\WINDOWS\pss\Zapu.lnkStartup
 
Folder::

C:\Program Files\Zapu
C:\Program Files\MeetSkipJoy
C:\Program Files\FlowGoBar
C:\Program Files\altnet(2)
C:\Program Files\websearch
C:\Program Files\YourSiteBar 
C:\Program Files\BoontyGames 
C:\Program Files\Boonty

Registry::

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\junk body] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\mule_st_key]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
"34f05907"="-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"german.exe"="-
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun-]
"live knob loud bold"="-
Ouvre le Bloc-Notes puis colle (Ctrl+V) le texte précedemment copié.

Sauvegarde ce fichier sous le nom de CFScript.txt

http://img.photobucket.com/albums/v666/sUBs/CFScript.gif

Comme l'image le montre, fait glisser CFScript.txt sur Combofix.exe

Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

Ne touche à rien tant que le scan n'est pas terminé.

Une fois le scan achevé, un rapport va s'afficher: poste son contenu.

Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

UrbainS · Answer

Jai reussi a aller en mode sans echec je fais quoi apre?

chrifleur · Answer

as tu fait ceci
Rends toi sur ce site :
http://www.zonavirus.com/datos/descargas/95/elibagla.asp
tout en bas de cette page tu trouveras un outil à télécharger,
clique sur "escargar Elibagla" (le numéro de version change au fur et à mesure des mises à jour)
installe ce fichier sur le bureau.
ensuite double-clic sur Elibagla.exe
>laisse la case "eliminar ficheros automaticamente" coché
>clique sur"explorar"
>laisse-le travailler
>poste le rapport final qui sera dans c:\infosat.txt

Si, dans le rapport, tu vois un texte semblable à celui-ci

Por favor, envienos una muestra del fichero
C:\Muestras\HLDRRR.EXE.Muestra EliBagle v10.24
a "virus@satinfo.es". Gracias;

envoie ce(s) fichier(s) (dans l'exemple C:\Muestras\HLDRRR.EXE.Muestra EliBagle v10.24 ) à l'adresse e-mail indiquée (virus@satinfo.es).

L'outil a rencontré un fichier qu'il reconnait mais ne sait pas encore éradiquer. Dans 24 heures environ, sur le site, la version de déchargement (v10.24 dans l'exemple) aura changé par rapport à celle actuelle. Tu retéléchargeras l'outil, tu le relanceras et tu posteras le rapport.

UrbainS · Answer

Je le refais une deuxieme fois, en me remetant en mode normale?

chrifleur · Answer

non 
si tu l'as fait tu me postes le rapport obtenu que je vois ce qui a été supprimé ou pas!

UrbainS · Answer

ok voila le rapport( le document texte nommée infosat)

________________________________________________________________________________________________

Thu Nov 08 15:09:15 2007
EliBagle v10.67  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\BAN_LIST.TXT --> Eliminado Bagle
Por favor, envienos una muestra del fichero
C:\Muestras\FLEC006.EXE.Muestra EliBagle v10.67
 a "virus@satinfo.es".  Gracias.
C:\DOCUMENTS AND SETTINGS\FAYDIT DIDIER\APPLICATION DATA\M\FLEC006.EXE --> Eliminado Bagle
C:\DOCUMENTS AND SETTINGS\FAYDIT DIDIER\APPLICATION DATA\M\LIST.OCT --> Eliminado Bagle
Restaurada Clave: "SafeBoot\Minimal y Network"

      Thu Nov 08 15:09:27 2007
EliBagle v10.67  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

chrifleur · Answer

c'est bon
veux tu envoyer le fichier demandé par elibagla à l'adresse indiquée, ceci afin d'aider à la lutte anti malware...
Por favor, envienos una muestra del fichero
C:\Muestras\FLEC006.EXE.Muestra EliBagle v10.67
a "virus@satinfo.es". Gracias. 

maintenant tu fais 

Copie (Ctrl+C) le texte ci-dessous :

File::

C:\WINDOWS\qopnon.dll 
C:\WINDOWS\efddax.dll
C:\WINDOWS\qonkki.dll
C:\WINDOWS\SYSTEM32\DRIVERS
disrd.sys
C:\Documents and Settings\All Users\Application Data\ArmyJoyTeamHeck
C:\Documents and Settings\All Users\Application Data\Surf tick live knob
C:\Documents and Settings\Faydit Didier\Application Data\MeetSkipJoy 
C:\WINDOWS\Tasks\B1AF10B29394843E.job
C:\Documents and Settings\Faydit Didier\Menu Démarrer\Programmes\Démarrage\Zapu Acceleration Engine.lnk
C:\WINDOWS\pss\Zapu Acceleration Engine.lnkStartup 
C:\Documents and Settings\Faydit Didier\Menu Démarrer\Programmes\Démarrage\Zapu.lnk
C:\WINDOWS\pss\Zapu.lnkStartup
 
Folder::

C:\Program Files\Zapu
C:\Program Files\MeetSkipJoy
C:\Program Files\FlowGoBar
C:\Program Files\altnet(2)
C:\Program Files\websearch
C:\Program Files\YourSiteBar 
C:\Program Files\BoontyGames 
C:\Program Files\Boonty

Registry::

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\junk body] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\mule_st_key]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
"34f05907"="-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"german.exe"="-
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun-]
"live knob loud bold"="-


Ouvre le Bloc-Notes puis colle (Ctrl+V) le texte précedemment copié.

Sauvegarde ce fichier sous le nom de CFScript.txt

http://img.photobucket.com/albums/v666/sUBs/CFScript.gif

Comme l'image le montre, fait glisser CFScript.txt sur Combofix.exe

Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

Ne touche à rien tant que le scan n'est pas terminé.

Une fois le scan achevé, un rapport va s'afficher: poste son contenu.

Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

UrbainS · Answer

Voila le rapport comboFix ComboFix 07-11-08.1 - Faydit Didier 2007-11-08 17:20:29.2 - NTFSx86 Running from: C:\Documents and Settings\Faydit Didier\Bureau\ComboFix.exe Command switches used :: C:\Documents and Settings\Faydit Didier\Bureau\CFScript.txt * Created a new restore point FILE C:\Documents and Settings\All Users\Application Data\ArmyJoyTeamHeck C:\Documents and Settings\All Users\Application Data\Surf tick live knob C:\Documents and Settings\Faydit Didier\Application Data\MeetSkipJoy C:\Documents and Settings\Faydit Didier\Menu Démarrer\Programmes\Démarrage\Zapu Acceleration Engine.lnk C:\Documents and Settings\Faydit Didier\Menu Démarrer\Programmes\Démarrage\Zapu.lnk C:\WINDOWS\efddax.dll C:\WINDOWS\pss\Zapu Acceleration Engine.lnkStartup C:\WINDOWS\pss\Zapu.lnkStartup C:\WINDOWS\qonkki.dll C:\WINDOWS\qopnon.dll C:\WINDOWS\SYSTEM32\DRIVERS\ndisrd.sys C:\WINDOWS\Tasks\B1AF10B29394843E.job . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\altnet(2) C:\Program Files\altnet(2)\DBBackup(2)\Sigfiles.db C:\Program Files\altnet(2)\Points Manager(2)\Settings.cab C:\Program Files\Boonty C:\Program Files\Boonty\Components\BoontyBox_Neuf_Telecom_setup.exe C:\Program Files\BoontyGames C:\Program Files\BoontyGames\Components\bureau.url C:\Program Files\BoontyGames\Components\Joystick.ico C:\Program Files\BoontyGames\Components\start.url C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\acclaim.com.url C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ABBike01.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimDirt\AcclaimD.ZSD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimDirt\BSP._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimDirt\Mat._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimDirt\Prop._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimDirt\PropDef._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimDirt\Scene._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimDirt\Tag._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimStreet\AcclaimS.ZSD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimStreet\BSP._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimStreet\Mat._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimStreet\Prop._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimStreet\PropDef._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimStreet\Scene._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimStreet\Tag._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimVert\AcclaimV.ZSD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimVert\BSP._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimVert\Mat._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimVert\Prop._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimVert\PropDef._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimVert\Scene._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AcclaimVert\Tag._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\Amishbike01.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AmishBoy1.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AmishBoy2.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AmishBoy3.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AmishBoy4.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\AmishBoy5.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\bike.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\bike_hires.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\bike_shadow.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ChadKagy1.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ChadKagy2.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ChadKagy3.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ChadKagy4.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ChadKagy5.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\CKbike01.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\CKbike02.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\CKbike03.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\CKbike04.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\DaveMirra.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\DaveMirra_shadow.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\DaveMirra1.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\DaveMirra2.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\DaveMirra3.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\DaveMirra4.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\DaveMirra5.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\DMbike01.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\DMbike02.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\DMbike03.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\DMbike04.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleDirt\BSP._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleDirt\GrenDirt.ZSD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleDirt\Mat._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleDirt\Prop._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleDirt\PropDef._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleDirt\Scene._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleDirt\Tag._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleDirt\temp.dff C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleStreet\BSP._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleStreet\GrenStr.ZSD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleStreet\Mat._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleStreet\Prop._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleStreet\PropDef._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleStreet\Scene._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleStreet\Tag._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleStreet\temp.dff C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleVert\BSP._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleVert\GrenVert.ZSD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleVert\Mat._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleVert\Prop._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleVert\PropDef._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleVert\Scene._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\GreenvilleVert\Tag._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\Intwrap.zal C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\JGbike01.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\JGbike02.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\JGbike03.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\JGbike04.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\JoeyGarcia1.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\JoeyGarcia2.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\JoeyGarcia3.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\JoeyGarcia4.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\JoeyGarcia5.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\KenanHarkin1.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\KenanHarkin2.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\KenanHarkin3.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\KenanHarkin4.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\KenanHarkin5.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\KHbike01.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\KHbike02.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\KHbike03.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\KHbike04.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\LeighRamsdell1.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\LeighRamsdell2.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\LeighRamsdell3.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\LeighRamsdell4.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\LeighRamsdell5.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\LRbike01.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\LRbike02.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\LRbike03.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\LRbike04.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\material.zal C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\MikeLaird1.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\MikeLaird2.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\MikeLaird3.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\MikeLaird4.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\MikeLaird5.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\miscdata.zal C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\MLbike01.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\MLbike02.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\MLbike03.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\MLbike04.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\motion.zal C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourDirt\BSP._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourDirt\Mat._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourDirt\Prop._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourDirt\PropDef._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourDirt\ProTourD.ZSD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourDirt\Scene._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourDirt\Tag._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourDirt\temp.dff C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourStreet\BSP._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourStreet\Mat._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourStreet\Prop._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourStreet\PropDef._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourStreet\ProTourS.ZSD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourStreet\Scene._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourStreet\Tag._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourStreet\temp.dff C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourVert\BSP._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourVert\Mat._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourVert\Prop._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourVert\PropDef._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourVert\ProTourV.ZSD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourVert\Scene._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourVert\Tag._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ProTourVert\temp.dff C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\replay.zal C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\rider_shadow.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\RNbike01.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\RNbike02.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\RNbike03.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\RNbike04.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\RyanNyquist1.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\RyanNyquist2.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\RyanNyquist3.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\RyanNyquist4.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\RyanNyquist5.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\SBbike01.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\SBbike02.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\SBbike03.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\SBbike04.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\Scene.Txt C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\secretbike01.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\sfx.zmd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\shadowmap._mp C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\shadowmap.bmp C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\shadowmap2._mp C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ShadowVolume.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ShaunButler1.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ShaunButler2.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ShaunButler3.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ShaunButler4.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\ShaunButler5.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\SJbike01.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\SlimJimGuy1.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\SlimJimGuy2.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\SlimJimGuy3.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\SlimJimGuy4.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\SlimJimGuy5.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\tables.zal C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TimMirra1.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TimMirra2.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TimMirra3.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TimMirra4.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TimMirra5.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TMbike02.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TMcbike01.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TMcbike02.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TMcbike03.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TMcbike04.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TMibike01.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TMibike02.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TMibike03.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TMibike04.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TroyMcMurray1.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TroyMcMurray1v1.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TroyMcMurray1v2.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TroyMcMurray1v3.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TroyMcMurray2.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TroyMcMurray3.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TroyMcMurray4.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\TroyMcMurray5.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardDirt\BSP._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardDirt\Mat._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardDirt\Prop._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardDirt\PropDef._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardDirt\Scene._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardDirt\Tag._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardDirt\temp.dff C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardDirt\WoodDirt.ZSD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardStreet\BSP._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardStreet\Mat._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardStreet\Prop._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardStreet\PropDef._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardStreet\Scene._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardStreet\Tag._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardStreet\temp.dff C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardStreet\WoodStreet.ZSD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardVert\BSP._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardVert\Mat._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardVert\Prop._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardVert\PropDef._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardVert\Scene._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardVert\Tag._sd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardVert\temp.dff C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\WoodwardVert\WoodVert.ZSD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\assets\XXBike01.ZMD C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\music.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxchr00.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxchr01.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxcom.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxgame.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxgame2.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxlev00.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxlev01.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxlev02.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxlev03.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxlev04.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxlev05.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxlev06.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxlev07.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxlev08.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxlev09.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxlev10.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxlev11.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxlev12.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxmen00.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\sfxmen01.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\audio\speech.zsd C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\bin\movie\Thumbs.db C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\Buy.url C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\manual.pdf C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\readme.txt C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\save\SAVE.DAT C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\Scene.Txt C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\unins000.dat C:\Program Files\BoontyGames\Dave Mirra Freestyle BMX\website.url C:\Program Files\FlowGoBar C:\Program Files\MeetSkipJoy C:\Program Files\websearch C:\Program Files\Zapu C:\Program Files\Zapu\Divi@Home\UNWISE.EXE C:\Program Files\Zapu\Zapu\cgi.dll C:\Program Files\Zapu\Zapu\cgi.ini C:\Program Files\Zapu\Zapu\connection_manager.ini C:\Program Files\Zapu\Zapu\dvobsub.ico C:\Program Files\Zapu\Zapu\F15.wav C:\Program Files\Zapu\Zapu\files\images\bg_1px.jpg C:\Program Files\Zapu\Zapu\files\images\bg_2px.JPG C:\Program Files\Zapu\Zapu\files\images\btn_clear.JPG C:\Program Files\Zapu\Zapu\files\images\btn_stat.bmp C:\Program Files\Zapu\Zapu\files\images\btn_support.bmp C:\Program Files\Zapu\Zapu\files\images\btn_zapu.bmp C:\Program Files\Zapu\Zapu\files\images\handshake.jpg C:\Program Files\Zapu\Zapu\files\images\logo.jpg C:\Program Files\Zapu\Zapu\files\images\tri.gif C:\Program Files\Zapu\Zapu\files\index.htm C:\Program Files\Zapu\Zapu\files\js\graph.js C:\Program Files\Zapu\Zapu\files\js\ly3.css C:\Program Files\Zapu\Zapu\files\js\menu_com.js C:\Program Files\Zapu\Zapu\files\js\mingroupmenu_var.js C:\Program Files\Zapu\Zapu\files\js\wz_jsgraphics.js C:\Program Files\Zapu\Zapu\files\pf\_service_info.htm C:\Program Files\Zapu\Zapu\files\pf\active_connections.htm C:\Program Files\Zapu\Zapu\files\pf\active_connections_intern.htm C:\Program Files\Zapu\Zapu\files\pf\redirect_to_login.htm C:\Program Files\Zapu\Zapu\files\pf\service_info.htm C:\Program Files\Zapu\Zapu\files\pf\summary.htm C:\Program Files\Zapu\Zapu\files\pf\summary_template.htm C:\Program Files\Zapu\Zapu\files\wait.htm C:\Program Files\Zapu\Zapu\files\Webhelp\[u]0[/u]0001-DVN-09-@Home-Instructions -(Ver0.5)-client.css C:\Program Files\Zapu\Zapu\files\Webhelp\[u]0[/u]0001-DVN-09-@Home-Instructions-(Ver0.5)-client_files\image002.jpg C:\Program Files\Zapu\Zapu\files\Webhelp\[u]0[/u]0001-DVN-09-@Home-Instructions -(Ver0.5)-client_files\image003.gif C:\Program Files\Zapu\Zapu\files\Webhelp\[u]0[/u]0001-DVN-09-@Home-Instructions-(Ver0.5)-client_files\image004.gif C:\Program Files\Zapu\Zapu\files\Webhelp\[u]0[/u]0001-DVN-09-@Home-Instructions -(Ver0.5)-client_files\image006.gif C:\Program Files\Zapu\Zapu\files\Webhelp\[u]0[/u]0001-DVN-09-@Home-Instructions-(Ver0.5)-client_files\image008.jpg C:\Program Files\Zapu\Zapu\files\Webhelp\[u]0[/u]0001-DVN-09-@Home-Instructions -(Ver0.5)-client_files\image010.jpg C:\Program Files\Zapu\Zapu\files\Webhelp\[u]0[/u]0001-DVN-09-@Home-Instructions-(Ver0.5)-client_files\image012.gif C:\Program Files\Zapu\Zapu\files\Webhelp\[u]0[/u]0001-DVN-09-@Home-Instructions -(Ver0.5)-client_files\image014.jpg C:\Program Files\Zapu\Zapu\files\Webhelp\[u]0[/u]0001-DVN-09-@Home-Instructions-(Ver0_5)-client_ns.css C:\Program Files\Zapu\Zapu\files\Webhelp\1_1_How_it_Works.htm C:\Program Files\Zapu\Zapu\files\Webhelp\1_2_The_Result.htm C:\Program Files\Zapu\Zapu\files\Webhelp\1_Introduction.htm C:\Program Files\Zapu\Zapu\files\Webhelp\2_1_1_Modifying_Maximum_Upload_Rate.htm C:\Program Files\Zapu\Zapu\files\Webhelp\2_1_Service_Information_Screen.htm C:\Program Files\Zapu\Zapu\files\Webhelp\2_2_Summary_Screen.htm C:\Program Files\Zapu\Zapu\files\Webhelp\2_3_Active_Connections_Screen.htm C:\Program Files\Zapu\Zapu\files\Webhelp\2_4_Contact_Us_Screen.htm C:\Program Files\Zapu\Zapu\files\Webhelp\2_Using_Divi_home.htm C:\Program Files\Zapu\Zapu\files\Webhelp\3._Viewing_Data.htm C:\Program Files\Zapu\Zapu\files\Webhelp\3.1_Information_Bubble.htm C:\Program Files\Zapu\Zapu\files\Webhelp\3.2_Live_Statistics.htm C:\Program Files\Zapu\Zapu\files\Webhelp\3.3_Tray_Icon.htm C:\Program Files\Zapu\Zapu\files\Webhelp\3.4_Right-click_Shortcut_Menu.htm C:\Program Files\Zapu\Zapu\files\Webhelp\3_About_Divi_home.htm C:\Program Files\Zapu\Zapu\files\Webhelp\bkg.gif C:\Program Files\Zapu\Zapu\files\Webhelp\cb_close.gif C:\Program Files\Zapu\Zapu\files\Webhelp\cb_next_off.gif C:\Program Files\Zapu\Zapu\files\Webhelp\cb_next_on.gif C:\Program Files\Zapu\Zapu\files\Webhelp\cb_previous_off.gif C:\Program Files\Zapu\Zapu\files\Webhelp\cb_previous_on.gif C:\Program Files\Zapu\Zapu\files\Webhelp\cb_sync.gif C:\Program Files\Zapu\Zapu\files\Webhelp\clip_image002.jpeg C:\Program Files\Zapu\Zapu\files\Webhelp\clip_image002.jpg C:\Program Files\Zapu\Zapu\files\Webhelp\clip_image002_.jpg C:\Program Files\Zapu\Zapu\files\Webhelp\close.gif C:\Program Files\Zapu\Zapu\files\Webhelp\contents.gif C:\Program Files\Zapu\Zapu\files\Webhelp\contents_on.gif C:\Program Files\Zapu\Zapu\files\Webhelp\cshdat_robohelp.htm C:\Program Files\Zapu\Zapu\files\Webhelp\cshdat_webhelp.htm C:\Program Files\Zapu\Zapu\files\Webhelp\default.css C:\Program Files\Zapu\Zapu\files\Webhelp\default_ns.css C:\Program Files\Zapu\Zapu\files\Webhelp\eHelp.xml C:\Program Files\Zapu\Zapu\files\Webhelp\ehlpdhtm.js C:\Program Files\Zapu\Zapu\files\Webhelp\glossary.gif C:\Program Files\Zapu\Zapu\files\Webhelp\glossary_on.gif C:\Program Files\Zapu\Zapu\files\Webhelp\go_3.gif C:\Program Files\Zapu\Zapu\files\Webhelp\image1.gif C:\Program Files\Zapu\Zapu\files\Webhelp\image10.gif C:\Program Files\Zapu\Zapu\files\Webhelp\image13.gif C:\Program Files\Zapu\Zapu\files\Webhelp\image14.gif C:\Program Files\Zapu\Zapu\files\Webhelp\image16.gif C:\Program Files\Zapu\Zapu\files\Webhelp\image17.gif C:\Program Files\Zapu\Zapu\files\Webhelp\image18.gif C:\Program Files\Zapu\Zapu\files\Webhelp\image19.gif C:\Program Files\Zapu\Zapu\files\Webhelp\image2.gif C:\Program Files\Zapu\Zapu\files\Webhelp\image20.gif C:\Program Files\Zapu\Zapu\files\Webhelp\image21.gif C:\Program Files\Zapu\Zapu\files\Webhelp\image4.gif C:\Program Files\Zapu\Zapu\files\Webhelp\image8.gif C:\Program Files\Zapu\Zapu\files\Webhelp\image9.gif C:\Program Files\Zapu\Zapu\files\Webhelp\index.gif C:\Program Files\Zapu\Zapu\files\Webhelp\index_on.gif C:\Program Files\Zapu\Zapu\files\Webhelp\RoboHHRE.lng C:\Program Files\Zapu\Zapu\files\Webhelp\search.gif C:\Program Files\Zapu\Zapu\files\Webhelp\search_on.gif C:\Program Files\Zapu\Zapu\files\Webhelp\sync_toc.gif C:\Program Files\Zapu\Zapu\files\Webhelp\webhelp.cab C:\Program Files\Zapu\Zapu\files\Webhelp\webhelp.jar C:\Program Files\Zapu\Zapu\files\Webhelp\websearch_on2.gif C:\Program Files\Zapu\Zapu\files\Webhelp\websearch2.gif C:\Program Files\Zapu\Zapu\files\Webhelp\whcsh_home.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whcshdata.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whftdata.js C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whftdata0.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whfts.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whfts.js C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whfwdata.js C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whfwdata0.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whgdata.js C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whglo.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whglo.js C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whidata.js C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whidata0.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whidx.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whidx.js C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whtdata.js C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whtdata0.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whtoc.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whdata\whtoc.js C:\Program Files\Zapu\Zapu\files\Webhelp\whestart.ico C:\Program Files\Zapu\Zapu\files\Webhelp\whfbody.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whfdhtml.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whfform.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whfhost.js C:\Program Files\Zapu\Zapu\files\Webhelp\whform.js C:\Program Files\Zapu\Zapu\files\Webhelp\whframes.js C:\Program Files\Zapu\Zapu\files\Webhelp\whgbody.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whexpbar.gif C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstf0.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstf1.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstf2.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl0.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl1.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl10.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl11.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl12.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl13.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl14.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl15.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl16.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl17.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl18.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl19.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl2.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl20.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl3.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl4.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl5.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl6.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl7.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl8.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstfl9.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstg0.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlsti0.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whlstt0.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvf30.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvf31.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvf32.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvf33.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvl31.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvl32.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvl33.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvp30.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvp31.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvp32.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvp33.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvt30.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvt31.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvt32.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdata\whnvt33.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdef.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whgdhtml.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whghost.js C:\Program Files\Zapu\Zapu\files\Webhelp\whhost.js C:\Program Files\Zapu\Zapu\files\Webhelp\whibody.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whidhtml.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whiform.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whihost.js C:\Program Files\Zapu\Zapu\files\Webhelp\white_book_closed.gif C:\Program Files\Zapu\Zapu\files\Webhelp\white_book_open.gif C:\Program Files\Zapu\Zapu\files\Webhelp\white_page.gif C:\Program Files\Zapu\Zapu\files\Webhelp\whlang.js C:\Program Files\Zapu\Zapu\files\Webhelp\whmozemu.js C:\Program Files\Zapu\Zapu\files\Webhelp\whmsg.js C:\Program Files\Zapu\Zapu\files\Webhelp\whnjs.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whphost.js C:\Program Files\Zapu\Zapu\files\Webhelp\whproj.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whproj.js C:\Program Files\Zapu\Zapu\files\Webhelp\whproj.xml C:\Program Files\Zapu\Zapu\files\Webhelp\whproxy.js C:\Program Files\Zapu\Zapu\files\Webhelp\whres.xml C:\Program Files\Zapu\Zapu\files\Webhelp\whrstart.ico C:\Program Files\Zapu\Zapu\files\Webhelp\whskin_banner.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whskin_blank.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whskin_frmset01.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whskin_frmset010.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whskin_homepage.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whskin_info.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whskin_mbars.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whskin_papplet.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whskin_pdhtml.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whskin_pickup.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whskin_plist.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whskin_tbars.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whskin_tw.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whst_topics.xml C:\Program Files\Zapu\Zapu\files\Webhelp\whstart.ico C:\Program Files\Zapu\Zapu\files\Webhelp\whstart.js C:\Program Files\Zapu\Zapu\files\Webhelp\whstub.js C:\Program Files\Zapu\Zapu\files\Webhelp\wht_abge.jpg C:\Program Files\Zapu\Zapu\files\Webhelp\wht_abgi.jpg C:\Program Files\Zapu\Zapu\files\Webhelp\wht_abgw.jpg C:\Program Files\Zapu\Zapu\files\Webhelp\wht_abte.jpg C:\Program Files\Zapu\Zapu\files\Webhelp\wht_abti.jpg C:\Program Files\Zapu\Zapu\files\Webhelp\wht_abtw.jpg C:\Program Files\Zapu\Zapu\files\Webhelp\wht_fts_h.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_fts_n.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_glo_h.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_glo_n.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_go.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_hide.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_idx_h.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_idx_n.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_logo1.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_logo2.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_next.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_next_g.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_prev.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_prev_g.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_spac.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_sync.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_tab0.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_tab1.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_tab2.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_tab3.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_tab4.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_tab5.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_tab6.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_tab7.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_tab8.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_toc_h.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_toc_n.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_toc4.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_ws.gif C:\Program Files\Zapu\Zapu\files\Webhelp\wht_ws_g.gif C:\Program Files\Zapu\Zapu\files\Webhelp\whtbar.js C:\Program Files\Zapu\Zapu\files\Webhelp\whtdhtml.htm C:\Program Files\Zapu\Zapu\files\Webhelp\whthost.js C:\Program Files\Zapu\Zapu\files\Webhelp\whtopic.js C:\Program Files\Zapu\Zapu\files\Webhelp\whutils.js C:\Program Files\Zapu\Zapu\files\Webhelp\whver.js C:\Program Files\Zapu\Zapu\files\Webhelp\whxdata\whftdata0.xml C:\Program Files\Zapu\Zapu\files\Webhelp\whxdata\whfts.xml C:\Program Files\Zapu\Zapu\files\Webhelp\whxdata\whfwdata0.xml C:\Program Files\Zapu\Zapu\files\Webhelp\whxdata\whglo.xml C:\Program Files\Zapu\Zapu\files\Webhelp\whxdata\whidata0.xml C:\Program Files\Zapu\Zapu\files\Webhelp\whxdata\whidx.xml C:\Program Files\Zapu\Zapu\files\Webhelp\whxdata\whtdata0.xml C:\Program Files\Zapu\Zapu\files\Webhelp\whxdata\whtoc.xml C:\Program Files\Zapu\Zapu\files\Webhelp\zapu.htm C:\Program Files\Zapu\Zapu\files\Webhelp\zapu.log C:\Program Files\Zapu\Zapu\files\Webhelp\zapu_csh.htm C:\Program Files\Zapu\Zapu\files\Webhelp\zapu_rhc.htm C:\Program Files\Zapu\Zapu\languages\english.lng C:\Program Files\Zapu\Zapu\languages\hebrew.lng C:\Program Files\Zapu\Zapu\libeay32.dll C:\Program Files\Zapu\Zapu\Link.ico C:\Program Files\Zapu\Zapu\ndisapi.dll C:\Program Files\Zapu\Zapu\net_control.ini C:\Program Files\Zapu\Zapu\Share_Accelerator_MM.exe C:\Program Files\Zapu\Zapu\socket_wrapper.dll C:\Program Files\Zapu\Zapu\ssleay32.dll C:\Program Files\Zapu\Zapu\wDivi.exe C:\Program Files\Zapu\Zapu\wincm.exe C:\Program Files\Zapu\Zapu\ZapuInstallerSigned.exe C:\WINDOWS\efddax.dll C:\WINDOWS\pss\Zapu Acceleration Engine.lnkStartup C:\WINDOWS\pss\Zapu.lnkStartup C:\WINDOWS\qonkki.dll C:\WINDOWS\qopnon.dll C:\WINDOWS\SYSTEM32\DRIVERS\ndisrd.sys C:\WINDOWS\Tasks\B1AF10B29394843E.job . ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-10-08 to 2007-11-08 )))))))))))))))))))))))))))))))))))) . 2007-11-08 15:09 d-------- C:\Muestras 2007-11-08 12:05 d-------- C:\Bases 2007-11-08 12:01 d-------- C:\Kaspersky 2007-11-08 11:53 d-------- C:\Program Files\CCleaner 2007-11-08 07:40 d-------- C:\Program Files\MSXML 6.0 2007-11-07 22:27 3,746 --a------ C:\WINDOWS\SYSTEM32\tmp.reg 2007-11-07 19:39 d-------- C:\Documents and Settings\Faydit Didier\.artofillusion 2007-11-07 17:58 582,656 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\rpcrt4.dll 2007-11-07 17:17 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-11-07 14:46 d-------- C:\Program Files\Share_Accelerator_MM 2007-11-07 14:28 d-------- C:\Program Files\Hijackthis Version Fran‡aise 2007-11-07 14:06 2,560 --a------ C:\WINDOWS\_MSRSTRT.EXE 2007-11-07 09:18 31,912 --a------ C:\symlcsv1.exe 2007-11-05 22:32 d-------- C:\Program Files\Macromedia 2007-11-05 22:32 d-------- C:\Program Files\Fichiers communs\Macromedia 2007-10-28 22:10 d-------- C:\Program Files\CDBurnerXP 2007-10-28 21:08 d-------- C:\WINDOWS\SYSTEM32\hdined32.nls.{00021401-0000-0000-C000-000000000046} 2007-10-13 22:48 d-------- C:\Program Files\Blender Foundation 2007-10-13 22:34 d-------- C:\Program Files\ArtOfIllusion 2007-10-10 21:31 d-------- C:\Documents and Settings\Faydit Didier\Application Data\KompoZer 2007-10-10 12:59 60,928 --a------ C:\WINDOWS\SYSTEM32\ppnst.dll 2007-10-09 18:44 d-------- C:\Documents and Settings\Faydit Didier\amsn_received 2007-10-09 18:00 d-------- C:\Documents and Settings\Faydit Didier\amsn 2007-10-09 17:16 d-------- C:\Documents and Settings\Faydit Didier\.cornice 2007-10-08 15:15 d-------- C:\Downloads 2007-10-08 15:15 d-------- C:\Documents and Settings\Faydit Didier\Application Data\GetRightToGo 2007-10-08 14:39 d-------- C:\Documents and Settings\Faydit Didier\Application Data\DivX 2007-10-08 13:25 d-------- C:\Program Files\VirtualDJ 2007-10-08 13:25 d-------- C:\Program Files\Virtual DJ 2007-10-08 13:17 434,252 --a------ C:\WINDOWS\SYSTEM32\Msvcrtd.dll 2007-10-08 10:04 d-------- C:\OtsLabs 2007-10-08 10:01 d-------- C:\Program Files\AtomixMP3 . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-08 15:42 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared 2007-11-08 15:39 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\StarOffice8 2007-11-08 14:09 --------- d--h--w C:\Documents and Settings\Faydit Didier\Application Data\m 2007-11-07 20:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-11-07 18:48 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-07 17:39 --------- d-----w C:\Program Files\Hijackthis Version Française 2007-11-07 13:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\River Past G4 2007-11-07 13:00 --------- d-----w C:\Program Files\Yahoo! 2007-11-07 12:52 --------- d-----w C:\Program Files\TI Education 2007-11-07 12:52 --------- d-----w C:\Program Files\Fichiers communs\TI Shared 2007-11-07 12:48 --------- d-----w C:\Program Files\MSN Messenger 2007-11-06 21:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater 2007-11-06 20:22 805 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF 2007-11-06 20:22 123,952 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS 2007-11-06 20:22 10,740 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT 2007-11-06 20:22 --------- d-----w C:\Program Files\Symantec 2007-11-06 14:11 --------- d-----w C:\Program Files\FileZilla 2007-11-05 11:47 --------- d-----w C:\Program Files\InterActual 2007-11-05 11:44 --------- d-----w C:\Program Files\FotoStation Easy 2007-11-05 11:26 --------- d-----w C:\Program Files\Fichiers communs\Adaptec Shared 2007-11-05 11:20 --------- d-----w C:\Program Files\Azureus 2007-11-05 11:01 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2007-10-27 20:40 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\gtk-2.0 2007-10-12 15:13 --------- d-----w C:\Program Files\Creative 2007-10-08 11:15 --------- d-----w C:\Program Files\Java 2007-10-07 10:44 --------- d-----w C:\Program Files\DivX 2007-10-03 19:45 --------- d-----w C:\Program Files\MSBuild 2007-10-03 19:12 --------- d-----w C:\Program Files\Reference Assemblies 2007-10-03 16:37 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\Notepad++ 2007-10-02 17:33 --------- d-----w C:\Documents and Settings\All Users\Application Data\NCH Software 2007-10-02 17:32 --------- d-----w C:\Program Files\NCH Swift Sound 2007-10-02 17:32 --------- d-----w C:\Program Files\NCH Software 2007-10-01 13:49 98,184 ----a-w C:\WINDOWS\system32\drivers\symfw.sys 2007-10-01 13:49 31,624 ----a-w C:\WINDOWS\system32\drivers\symids.sys 2007-10-01 13:49 28,040 ----a-w C:\WINDOWS\system32\drivers\symndis.sys 2007-10-01 13:49 23,944 ----a-w C:\WINDOWS\system32\drivers\symredrv.sys 2007-10-01 13:49 189,320 ----a-w C:\WINDOWS\system32\drivers\symtdi.sys 2007-10-01 13:48 12,680 ----a-w C:\WINDOWS\system32\drivers\symdns.sys 2007-09-29 19:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\NCH Swift Sound 2007-09-29 19:03 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\NCH Swift Sound 2007-09-29 17:39 --------- d-----w C:\Program Files\Adesign 2007-09-28 16:07 43,528 ------w C:\WINDOWS\system32\drivers\pxhelp20.sys 2007-09-28 15:53 --------- d-----w C:\Program Files\Microsoft FrontPage Express 2007-09-27 19:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller 2007-09-23 15:47 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\MeetSkipJoy 2007-09-23 10:05 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\FaxCtr 2007-09-22 20:07 --------- d-----w C:\Program Files\eMule 2007-09-21 19:42 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\Nvu 2007-09-13 13:36 --------- d-----w C:\Program Files\Fichiers communs\xing shared 2007-09-13 13:36 --------- d-----w C:\Program Files\Fichiers communs\Real 2007-09-12 12:12 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype 2007-09-10 18:48 --------- d-----w C:\Program Files\Fichiers communs\SpellEx 2007-09-10 17:48 --------- d-----w C:\Program Files\Lexmark Toolbar 2007-09-09 15:10 --------- d-----w C:\Documents and Settings\Faydit Didier\Application Data\Lexmark Productivity Studio 2007-09-09 15:01 --------- d-----w C:\Program Files\Lexmark 3500-4500 Series 2007-09-09 15:00 --------- d-----w C:\Program Files\Lexmark Fax Solutions 2007-09-09 14:58 --------- d-----w C:\Documents and Settings\All Users\Application Data\FaxCtr 2007-09-09 14:57 --------- d-----w C:\Program Files\Abbyy FineReader 6.0 Sprint 2007-09-06 14:51 68,928 ----a-w C:\Documents and Settings\Faydit Didier\Application Data\GDIPFONTCACHEV1.DAT 2006-05-10 18:56 613 -c-ha-w C:\Documents and Settings\Faydit Didier\hpothb07.dat 2005-11-11 17:27 278,528 -c--a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe 2004-11-28 16:39 36 -c--a-w C:\Documents and Settings\Faydit Didier\Application Data\tvmcwrd.dll 2004-11-14 19:40 230,237 -c--a-w C:\Documents and Settings\Faydit Didier\Application Data\tvmknwrd.dll 2003-05-04 09:18 306,207 -c--a-w C:\Program Files\grokstersetup.exe . ((((((((((((((((((((((((((((( snapshot@2007-11-07_17.50.14.87 ))))))))))))))))))))))))))))))))))))))))) . + 2006-10-04 14:04:06 73,216 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\magnify.exe + 2006-10-04 14:04:05 55,296 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\narrator.exe + 2006-10-04 14:04:06 216,576 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\osk.exe + 2006-10-04 14:05:36 36,864 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\umandlg.dll + 2006-10-04 14:04:05 50,176 ----a-w C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\utilman.exe + 2005-10-12 23:18:45 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB925720\spmsg.dll + 2005-10-12 23:18:45 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB925720\spuninst.exe + 2005-10-12 23:18:45 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB925720\update\spcustom.dll + 2005-10-12 23:18:46 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB925720\update\update.exe + 2005-10-12 23:18:49 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB925720\update\updspapi.dll + 2007-08-20 09:49:19 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\advpack.dll + 2007-08-20 09:49:28 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\dxtrans.dll + 2007-08-20 09:49:19 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\extmgr.dll + 2007-08-20 09:49:19 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\icardie.dll + 2007-08-17 10:13:10 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ie4uinit.exe + 2007-08-20 09:49:20 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieakeng.dll + 2007-08-20 09:49:20 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieaksie.dll + 2007-08-17 07:29:55 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieapfltr.dat + 2007-08-20 09:49:20 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieapfltr.dll + 2007-08-20 09:49:20 387,584 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iedkcs32.dll + 2007-08-20 09:49:23 6,066,176 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieframe.dll + 2007-08-20 09:49:23 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iernonce.dll + 2007-08-20 09:49:23 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iertutil.dll + 2007-08-17 10:13:10 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieudinit.exe + 2007-08-17 10:13:39 625,152 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iexplore.exe + 2007-08-20 09:49:23 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\jsproxy.dll + 2007-08-20 09:49:24 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\msfeeds.dll + 2007-08-20 09:49:24 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\msfeedsbs.dll + 2007-08-20 09:49:26 3,592,192 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\mshtml.dll + 2007-08-20 09:49:26 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\mshtmled.dll + 2007-08-20 09:49:26 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\msrating.dll + 2007-08-20 09:49:27 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\mstime.dll + 2007-08-20 09:49:27 102,400 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\occache.dll + 2007-08-20 09:49:27 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\url.dll + 2007-08-20 09:49:28 1,161,728 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\urlmon.dll + 2007-08-20 09:49:28 232,960 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\webcheck.dll + 2007-08-20 09:49:28 825,344 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\update\updspapi.dll + 2007-08-21 06:25:34 683,520 ----a-w C:\WINDOWS\$hf_mig$\KB941202\SP2QFE\inetcomm.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941202\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941202\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\updspapi.dll + 2007-06-27 13:22:39 124,928 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\advpack.dll + 2006-10-17 10:57:50 214,528 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\dxtrans.dll + 2007-06-27 13:22:40 132,608 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\extmgr.dll + 2006-10-17 10:58:20 61,952 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\icardie.dll + 2007-06-27 08:27:04 63,488 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ie4uinit.exe + 2007-06-27 13:22:40 153,088 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieakeng.dll + 2007-06-27 13:22:42 230,400 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieaksie.dll + 2007-06-27 07:00:33 161,792 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieakui.dll + 2007-06-27 13:22:45 383,488 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieapfltr.dll + 2007-06-27 13:22:48 384,512 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\iedkcs32.dll + 2007-06-27 13:23:23 6,058,496 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieframe.dll + 2007-06-27 13:23:23 44,544 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\iernonce.dll + 2007-06-27 13:23:25 267,776 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\iertutil.dll + 2007-06-27 08:27:05 13,824 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieudinit.exe + 2007-06-27 08:28:24 625,152 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\iexplore.exe + 2007-06-27 13:23:31 27,648 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\jsproxy.dll + 2007-06-27 13:23:32 459,264 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\msfeeds.dll + 2007-06-27 13:23:32 52,224 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\msfeedsbs.dll + 2007-07-19 06:58:09 3,583,488 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\mshtml.dll + 2007-06-27 13:24:06 477,696 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\mshtmled.dll + 2007-06-27 13:24:07 193,024 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\msrating.dll + 2007-06-27 13:24:09 671,232 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\mstime.dll + 2007-06-27 13:24:09 102,400 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\occache.dll + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\updspapi.dll + 2007-06-27 13:24:10 105,984 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\url.dll + 2007-06-27 13:24:14 1,152,000 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\urlmon.dll + 2007-06-27 13:24:15 232,960 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\webcheck.dll + 2007-06-27 13:24:19 823,808 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\wininet.dll - 2007-06-27 13:22:39 124,928 ----a-w C:\WINDOWS\SYSTEM32\advpack.dll + 2007-08-20 09:59:29 124,928 ----a-w C:\WINDOWS\SYSTEM32\advpack.dll - 2004-05-12 00:03:00 48,640 ----a-w C:\WINDOWS\SYSTEM32\cd_clint.dll + 2007-04-19 15:42:14 54,440 ----a-w C:\WINDOWS\SYSTEM32\cd_clint.dll - 2007-06-27 13:22:39 124,928 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\advpack.dll + 2007-08-20 09:59:29 124,928 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\advpack.dll - 2006-10-17 10:57:50 214,528 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\dxtrans.dll + 2007-08-20 09:59:29 214,528 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\dxtrans.dll - 2007-06-27 13:22:40 132,608 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\extmgr.dll + 2007-08-20 09:59:29 132,608 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\extmgr.dll - 2006-10-14 14:43:18 27,648 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\FilterPipelinePrintProc.dll + 2007-03-22 19:24:58 28,160 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\FilterPipelinePrintProc.dll + 2007-08-20 09:59:29 63,488 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\icardie.dll - 2007-06-27 08:27:04 63,488 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ie4uinit.exe + 2007-08-17 10:22:11 63,488 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ie4uinit.exe - 2007-06-27 13:22:40 153,088 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ieakeng.dll + 2007-08-20 09:59:29 153,088 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ieakeng.dll - 2007-06-27 13:22:42 230,400 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ieaksie.dll + 2007-08-20 09:59:29 230,400 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ieaksie.dll - 2007-06-27 07:00:33 161,792 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ieakui.dll + 2007-08-17 07:34:25 161,792 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ieakui.dll - 2007-06-27 13:22:45 383,488 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ieapfltr.dll + 2007-08-20 09:59:29 383,488 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ieapfltr.dll - 2007-06-27 13:22:48 384,512 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\iedkcs32.dll + 2007-08-20 09:59:29 384,512 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\iedkcs32.dll - 2007-06-27 13:23:23 6,058,496 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ieframe.dll + 2007-08-20 09:59:29 6,058,496 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ieframe.dll - 2007-06-27 13:23:23 44,544 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\iernonce.dll + 2007-08-20 09:59:29 44,544 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\iernonce.dll - 2007-06-27 13:23:25 267,776 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\iertutil.dll + 2007-08-20 09:59:30 267,776 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\iertutil.dll - 2007-06-27 08:27:05 13,824 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ieudinit.exe + 2007-08-17 10:22:11 13,824 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ieudinit.exe - 2007-06-27 08:28:24 625,152 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\iexplore.exe + 2007-08-17 10:22:32 625,152 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\iexplore.exe - 2007-05-16 15:13:53 683,520 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\inetcomm.dll + 2007-08-21 06:17:23 683,520 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\inetcomm.dll - 2007-06-27 13:23:31 27,648 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\jsproxy.dll + 2007-08-20 09:59:30 27,648 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\jsproxy.dll + 2006-10-04 13:32:58 73,216 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\magnify.exe - 2007-06-27 13:23:32 459,264 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msfeeds.dll + 2007-08-20 09:59:30 459,264 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msfeeds.dll - 2007-06-27 13:23:32 52,224 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msfeedsbs.dll + 2007-08-20 09:59:30 52,224 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msfeedsbs.dll - 2007-07-19 06:58:09 3,583,488 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\mshtml.dll + 2007-08-20 09:59:30 3,584,512 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\mshtml.dll - 2007-06-27 13:24:06 477,696 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\mshtmled.dll + 2007-08-20 09:59:30 477,696 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\mshtmled.dll - 2007-06-27 13:24:07 193,024 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msrating.dll + 2007-08-20 09:59:30 193,024 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msrating.dll - 2007-06-27 13:24:09 671,232 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\mstime.dll + 2007-08-20 09:59:30 671,232 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\mstime.dll + 2006-10-04 13:32:55 55,296 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\narrator.exe - 2007-06-27 13:24:09 102,400 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\occache.dll + 2007-08-20 09:59:31 102,400 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\occache.dll + 2006-10-04 13:32:58 216,576 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\osk.exe - 2006-10-14 14:44:44 671,744 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\PrintFilterPipelineSvc.exe + 2007-03-22 19:25:42 677,376 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\PrintFilterPipelineSvc.exe + 2006-10-04 13:38:06 36,864 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\umandlg.dll - 2007-06-27 13:24:10 105,984 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\url.dll + 2007-08-20 09:59:31 105,984 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\url.dll - 2007-06-27 13:24:14 1,152,000 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\urlmon.dll + 2007-08-20 09:59:31 1,152,000 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\urlmon.dll + 2006-10-04 13:32:57 50,176 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\utilman.exe - 2007-06-27 13:24:15 232,960 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\webcheck.dll + 2007-08-20 09:59:31 232,960 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\webcheck.dll - 2007-06-27 13:24:19 823,808 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\wininet.dll + 2007-08-20 09:59:31 824,832 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\wininet.dll - 2006-10-14 18:21:58 580,352 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\XPSSHHDR.dll + 2007-03-23 05:07:54 583,504 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\XPSSHHDR.dll - 2006-10-14 18:22:00 1,698,048 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\XpsSvcs.dll + 2007-03-23 05:07:56 1,683,280 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\XpsSvcs.dll - 2006-10-17 10:57:50 214,528 ----a-w C:\WINDOWS\SYSTEM32\dxtrans.dll + 2007-08-20 09:59:29 214,528 ----a-w C:\WINDOWS\SYSTEM32\dxtrans.dll - 2007-06-27 13:22:40 132,608 ----a-w C:\WINDOWS\SYSTEM32\extmgr.dll + 2007-08-20 09:59:29 132,608 ----a-w C:\WINDOWS\SYSTEM32\extmgr.dll - 2007-11-06 12:26:21 70,192 ----a-w C:\WINDOWS\SYSTEM32\GDIPFONTCACHEV1.DAT + 2007-11-07 19:55:24 66,720 ----a-w C:\WINDOWS\SYSTEM32\GDIPFONTCACHEV1.DAT - 2006-10-17 10:58:20 61,952 ------w C:\WINDOWS\SYSTEM32\icardie.dll + 2007-08-20 09:59:29 63,488 ----a-w C:\WINDOWS\SYSTEM32\icardie.dll - 2007-06-27 08:27:04 63,488 ----a-w C:\WINDOWS\SYSTEM32\ie4uinit.exe + 2007-08-17 10:22:11 63,488 ----a-w C:\WINDOWS\SYSTEM32\ie4uinit.exe - 2007-06-27 13:22:40 153,088 ----a-w C:\WINDOWS\SYSTEM32\ieakeng.dll + 2007-08-20 09:59:29 153,088 ----a-w C:\WINDOWS\SYSTEM32\ieakeng.dll - 2007-06-27 13:22:42 230,400 ----a-w C:\WINDOWS\SYSTEM32\ieaksie.dll + 2007-08-20 09:59:29 230,400 ----a-w C:\WINDOWS\SYSTEM32\ieaksie.dll - 2007-06-27 07:00:33 161,792 ----a-w C:\WINDOWS\SYSTEM32\ieakui.dll + 2007-08-17 07:34:25 161,792 ----a-w C:\WINDOWS\SYSTEM32\ieakui.dll - 2007-06-27 13:22:45 383,488 ----a-w C:\WINDOWS\SYSTEM32\ieapfltr.dll + 2007-08-20

chrifleur · Answer

comment se comporte le PC?

UrbainS · Answer

Mieux! Zapu a été désinstaller Msn remarche et je n'ai pu de popus au demarage de mon ordinateur. Je dois faire d'autre maneuvre au cas où?

chrifleur · Answer

bon c'est mieux
maintenant tu vas supprimer tous les outils utilisés 
ainsi que
C:\Muestras
C:\WINDOWS\SYSTEM32	mp.reg 
c:\qoobox

Antivirus puissant à utiliser en "mode sans échec" sur les cas difficiles où il est souvent d'une grande efficacité; 

Étape 1: 
Télécharge eScan Antivirus Toolkit ici. Sauvegarde-le sur ton Bureau. (si tu l'as téléchargé, supprime le premier afin d'avoir la toute dernière version)

http://www.spywareinfo.dk/download/mwav.exe

Avant de lancer le programme, il faut le mettre à jour tel qu'indiqué à l'étape 2. 

Étape 2: 
Voici comment mettre l'outil à jour : 

1.) Double-clique le fichier mwav.exe qui se trouve sur le Bureau ; dézippe les fichiers dans le nouveau dossier suggéré (C:\Kaspersky). Le programme va se lancer, et tu dois le quitter (clique sur "Exit" puis "Exit"). 

2.) Double-clique sur le Poste de travail, puis double-clique sur le lecteur principal (habituellement C:\), double-clique sur le dossier Kaspersky ; ensuite, double-clique sur le fichier kavupd.exe. Tu verras maintenant une fenêtre DOS apparaître, et la mise à jour se complètera en quelques minutes. 

3.) Lorsque la mise à jour sera complétée, tu verras "Press any key to continue" ; tape sur une clé pour continuer. Deux nouveaux répertoires (dossiers) ont été créés lors de la mise à jour (C:\Bases et C:\Downloads). 

4.) Sélectionne/copie tous les fichiers présents dans le dossier C:\Downloads, puis colle-les dans le dossier C:\Kaspersky. Accepte à l'invite de remplacer les fichiers existants. 

Ne pas lancer le scan tout de suite ! 

Étape 3: 
Redémarre en mode Sans Échec : 
1) Redémarre ton ordi 
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" 
3) Tu verras un écran avec options de démarrage apparaître 
4) Choisi la première option : Sans Échec, et valide avec "Entrée" 
5) Choisi ton compte régulier, et non Administrateur 


Étape 4: 
Du mode Sans Échec, voici comment utiliser le programme : 

1.) Pour lancer "eScan Antivirus Toolkit", trouve le fichier mwavscan.com situé dans le dossier C:\Kaspersky 

2.) Double-clique sur mwavscan.com ; l'interface d'eScan va apparaître à l'écran. 

3.) Il est très important de bien cocher ces boîtes sous Scan Option : Memory, Registry, Startup Folders, System Folders, Services. 

4.) Coche la boîte Drive, ce qui donne accès à une nouvelle boîte Drive (bouton rond) juste dessous ; coche ce bouton "Drive" (très important..), et tu verras une nouvelle boîte de navigation apparaître à la droite. Clique sur la petite flèche de cette boîte and choisi la lettre de ton disque dur, habituellement C:\. 

5.) Juste au-dessous, assure-toi que Scan All Files est coché, et non Program Files. 

6.) Clique sur Scan Clean et laisse le tool vérifier tout le disque dur (ça peut être long..). Lorsque terminé, tu verras Scan Completed. Ne pas quitter tout de suite ! 

7.) Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" >> "Programmes" >>"Accessoires" >> "Bloc notes"), puis copie/colle tout le contenu de la fenêtre Virus Log Information (la deuxième, au bas) dans le fichier texte, et sauvegarde le. eScan génère également un rapport complet dans le dossier C:\Kaspersky (nommé mwav.log), mais il est trop lourd pour poster sur le forum. 

Ferme le programme. Redémarre ton PC en mode Normal. Poste (copie/colle) le rapport que tu as sauvegardé dans ta prochaine réponse.

UrbainS · Answer

ce n'ai pas plutôt mwavscan.exe au lieu de mwavscan.com?

chrifleur · Answer

faute de frappe...lol!!!

UrbainS · Answer

Voila le resultat du eScan en "Mode sans échec".

Thu Nov 08 12:02:04 2007 => **********************************************************
Thu Nov 08 12:02:04 2007 => eScan AntiVirus Toolkit Utility.
Thu Nov 08 12:02:04 2007 => Copyright © 2003-2004,  MicroWorld Technologies Inc.
Thu Nov 08 12:02:04 2007 => **********************************************************
Thu Nov 08 12:02:04 2007 => Version 4.4.7
Thu Nov 08 12:02:04 2007 => Log File: C:\KASPER~1\mwav.log
Thu Nov 08 12:02:06 2007 => Latest Date of files inside MWAV: 04 Sep 2007  00:11:30.
Thu Nov 08 12:02:17 2007 => AV Library Loaded...
Thu Nov 08 12:02:17 2007 => Scanning File C:\KASPER~1\kavss.exe
Thu Nov 08 12:02:17 2007 => Scanning File C:\KASPER~1\Getvlist.exe
Thu Nov 08 12:02:17 2007 => Scanning File C:\KASPER~1\kavss.dll
Thu Nov 08 12:02:17 2007 => Scanning File C:\KASPER~1\kavssdi.dll
Thu Nov 08 12:02:18 2007 => Scanning File C:\KASPER~1\kavssi.dll
Thu Nov 08 12:02:18 2007 => Scanning File C:\KASPER~1\kavvlg.dll
Thu Nov 08 12:02:18 2007 => Scanning File C:\KASPER~1\msvlclnt.dll
Thu Nov 08 12:02:18 2007 => Scanning File C:\KASPER~1\ipc.dll
Thu Nov 08 12:02:18 2007 => Scanning File C:\KASPER~1\main.avi
Thu Nov 08 12:02:18 2007 => Scanning File C:\KASPER~1\virus.avi
Thu Nov 08 12:02:20 2007 => Virus Database Date: 2007/09/04
Thu Nov 08 12:02:20 2007 => Virus Database Count: 403200
Thu Nov 08 19:00:13 2007 => **********************************************************
Thu Nov 08 19:00:13 2007 => eScan AntiVirus Toolkit Utility.
Thu Nov 08 19:00:13 2007 => Copyright © 2003-2004,  MicroWorld Technologies Inc.
Thu Nov 08 19:00:13 2007 => **********************************************************
Thu Nov 08 19:00:13 2007 => Version 4.4.7
Thu Nov 08 19:00:13 2007 => Log File: C:\KASPER~1\mwav.log
Thu Nov 08 19:00:16 2007 => Latest Date of files inside MWAV: 08 Nov 2007  13:00:34.
Thu Nov 08 19:00:25 2007 => AV Library Loaded...
Thu Nov 08 19:00:25 2007 => Scanning File C:\KASPER~1\kavss.exe
Thu Nov 08 19:00:25 2007 => Scanning File C:\KASPER~1\Getvlist.exe
Thu Nov 08 19:00:25 2007 => Scanning File C:\KASPER~1\kavss.dll
Thu Nov 08 19:00:26 2007 => Scanning File C:\KASPER~1\kavssdi.dll
Thu Nov 08 19:00:26 2007 => Scanning File C:\KASPER~1\kavssi.dll
Thu Nov 08 19:00:26 2007 => Scanning File C:\KASPER~1\kavvlg.dll
Thu Nov 08 19:00:26 2007 => Scanning File C:\KASPER~1\msvlclnt.dll
Thu Nov 08 19:00:27 2007 => Scanning File C:\KASPER~1\ipc.dll
Thu Nov 08 19:00:27 2007 => Scanning File C:\KASPER~1\main.avi
Thu Nov 08 19:00:27 2007 => Scanning File C:\KASPER~1\virus.avi
Thu Nov 08 19:00:27 2007 => Virus Database Date: 2007/11/08
Thu Nov 08 19:00:27 2007 => Virus Database Count: 454665
 
Thu Nov 08 19:01:10 2007 => **********************************************************
Thu Nov 08 19:01:10 2007 => eScan AntiVirus Toolkit Utility.
Thu Nov 08 19:01:10 2007 => Copyright © 2003-2004,  MicroWorld Technologies Inc.
Thu Nov 08 19:01:10 2007 => 
Thu Nov 08 19:01:10 2007 => Support: support@mwti.net
Thu Nov 08 19:01:10 2007 => Web: https://www.escanav.com/en/index.asp
Thu Nov 08 19:01:10 2007 => **********************************************************
Thu Nov 08 19:01:10 2007 => Version 4.4.7
Thu Nov 08 19:01:10 2007 => Log File: C:\KASPER~1\mwav.log
Thu Nov 08 19:01:10 2007 => Latest Date of files inside MWAV: 08 Nov 2007  13:00:34.
 
Thu Nov 08 19:01:10 2007 => Options Selected by User:
Thu Nov 08 19:01:10 2007 => Memory Check: Enabled
Thu Nov 08 19:01:10 2007 => Registry Check: Enabled
Thu Nov 08 19:01:10 2007 => StartUp Folder Check: Enabled
Thu Nov 08 19:01:10 2007 => System Folder Check: Enabled
Thu Nov 08 19:01:10 2007 => System Area Check: Disabled
Thu Nov 08 19:01:10 2007 => Services Check: Enabled
Thu Nov 08 19:01:10 2007 => Drive Check Option Disabled
Thu Nov 08 19:01:10 2007 => Scanning Type: Scan And Clean
Thu Nov 08 19:01:10 2007 => Folder Check: Disabled
 
Thu Nov 08 19:01:10 2007 => ***** Scanning Memory Files *****
Thu Nov 08 19:01:10 2007 => Scanning File C:\WINDOWS\system32\services.exe
Thu Nov 08 19:01:10 2007 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Nov 08 19:01:10 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Nov 08 19:01:10 2007 => Scanning File C:\WINDOWS\Explorer.EXE
Thu Nov 08 19:01:10 2007 => Scanning File C:\WINDOWS\system32\NOTEPAD.EXE
Thu Nov 08 19:01:11 2007 => Scanning File C:\Kaspersky\mwavscan.com
Thu Nov 08 19:01:11 2007 => Scanning File C:\Kaspersky\kavss.exe
 
Thu Nov 08 19:01:11 2007 => ***** Scanning Registry Files *****
 
Thu Nov 08 19:01:11 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Thu Nov 08 19:01:11 2007 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
Thu Nov 08 19:01:11 2007 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
Thu Nov 08 19:01:11 2007 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
Thu Nov 08 19:01:11 2007 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
Thu Nov 08 19:01:11 2007 => Scanning File C:\WINDOWS\system32\webcheck.dll
Thu Nov 08 19:01:11 2007 => Scanning File C:\WINDOWS\System32\stobject.dll
Thu Nov 08 19:01:11 2007 => Scanning File C:\WINDOWS\system32\upnpui.dll
Thu Nov 08 19:01:11 2007 => Scanning File C:\WINDOWS\system32\WPDShServiceObj.dll
 
Thu Nov 08 19:01:11 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects
Thu Nov 08 19:01:11 2007 => {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} = C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
Thu Nov 08 19:01:11 2007 => Scanning File C:\PROGRA~1\FICHIE~1\Adobe\Acrobat\ActiveX\ACROIE~1.DLL
Thu Nov 08 19:01:11 2007 => {1017A80C-6F09-4548-A84D-EDD6AC9525F0} = C:\Program Files\Lexmark Toolbar	oolband.dll
Thu Nov 08 19:01:11 2007 => Scanning File C:\PROGRA~1\LEXMAR~3	oolband.dll
Thu Nov 08 19:01:11 2007 => {22BF413B-C6D2-4d91-82A9-A0F997BA588C} = C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
Thu Nov 08 19:01:11 2007 => Scanning File C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
Thu Nov 08 19:01:12 2007 => {4596013b-6c31-408b-a266-deae5c086dc2} = C:\Program Files\Share_Accelerator_MM	bShar.dll
Thu Nov 08 19:01:12 2007 => Scanning File C:\PROGRA~1\SHARE_~1	bShar.dll
Thu Nov 08 19:01:12 2007 => {53707962-6F74-2D53-2644-206D7942484F} = C:\PROGRA~1\SPYBOT~1\SDHelper.dll
Thu Nov 08 19:01:12 2007 => Scanning File C:\PROGRA~1\SPYBOT~1\SDHelper.dll
Thu Nov 08 19:01:12 2007 => {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} = C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
Thu Nov 08 19:01:12 2007 => Scanning File C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
Thu Nov 08 19:01:12 2007 => {7E853D72-626A-48EC-A868-BA8D5E23E045} = NULL
Thu Nov 08 19:01:12 2007 => {9030D464-4C02-4ABF-8ECC-5164760863C6} = C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
Thu Nov 08 19:01:12 2007 => Scanning File C:\PROGRA~1\FICHIE~1\MICROS~1\WINDOW~1\WINDOW~1.DLL
Thu Nov 08 19:01:13 2007 => {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} = C:\Program Files\Norton AntiVirus\NavShExt.dll
Thu Nov 08 19:01:13 2007 => Scanning File C:\PROGRA~1\NORTON~1\NavShExt.dll
Thu Nov 08 19:01:14 2007 => {AA58ED58-01DD-4d91-8333-CF10577473F7} = c:\program files\google\googletoolbar1.dll
Thu Nov 08 19:01:14 2007 => Scanning File c:\PROGRA~1\google\GOOGLE~1.DLL
Thu Nov 08 19:01:14 2007 => {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} = C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
Thu Nov 08 19:01:14 2007 => Scanning File C:\PROGRA~1\Google\GOOGLE~2\21615~1.585\swg.dll
Thu Nov 08 19:01:14 2007 => {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} = C:\Program Files\Windows Live Toolbar\msntb.dll
Thu Nov 08 19:01:15 2007 => Scanning File C:\PROGRA~1\WINDOW~4\msntb.dll
Thu Nov 08 19:01:15 2007 => NoExplorer = NULL
Thu Nov 08 19:01:15 2007 => {CD209A08-98B5-4669-AF9F-447AC5253356} = C:\WINDOWS\System32\CSapp.dll
Thu Nov 08 19:01:15 2007 => Scanning File C:\WINDOWS\System32\CSapp.dll
 
Thu Nov 08 19:01:15 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Thu Nov 08 19:01:15 2007 => Scanning File C:\WINDOWS\Explorer.exe
Thu Nov 08 19:01:15 2007 => Scanning File C:\WINDOWS\system32\userinit.exe
 
Thu Nov 08 19:01:15 2007 => Scanning HKCU\Control Panel\Desktop
 
Thu Nov 08 19:01:15 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Thu Nov 08 19:01:15 2007 => Scanning File C:\WINDOWS\System32\DSentry.exe
Thu Nov 08 19:01:15 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\ccApp.exe
Thu Nov 08 19:01:15 2007 => Scanning File C:\PROGRA~1\SYMNET~1\SNDMon.exe
Thu Nov 08 19:01:15 2007 => Scanning File C:\PROGRA~1\NORTON~1\CfgWiz.exe
Thu Nov 08 19:01:15 2007 => Scanning File C:\WINDOWS\vsnpstd3.exe
Thu Nov 08 19:01:16 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\PIF\{B8E1D~1\PIFSvc.exe
Thu Nov 08 19:01:16 2007 => Scanning File C:\WINDOWS\system32\NeroCheck.exe
Thu Nov 08 19:01:16 2007 => Scanning File C:\PROGRA~1\LEXMAR~1\lxdimon.exe
Thu Nov 08 19:01:16 2007 => Scanning File C:\PROGRA~1\LEXMAR~1\lxdiamon.exe
Thu Nov 08 19:01:16 2007 => Scanning File C:\PROGRA~1\LEXMAR~2\fm3032.exe
Thu Nov 08 19:01:16 2007 => Scanning File C:\PROGRA~1\FICHIE~1\Real\UPDATE~1\REALSC~1.EXE
Thu Nov 08 19:01:16 2007 => Scanning File C:\PROGRA~1\Java\JRE16~3.0_0\bin\jusched.exe
Thu Nov 08 19:01:17 2007 => Scanning File C:\WINDOWS\system32\Rundll32.exe
Thu Nov 08 19:01:17 2007 => Scanning File C:\WINDOWS\system32undll32.exe
Thu Nov 08 19:01:17 2007 => Scanning File C:\WINDOWS\system32	bctray.exe
 
Thu Nov 08 19:01:17 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
 
Thu Nov 08 19:01:17 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
 
Thu Nov 08 19:01:17 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
 
Thu Nov 08 19:01:17 2007 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Thu Nov 08 19:01:17 2007 => Scanning File C:\WINDOWS\system32\ctfmon.exe
Thu Nov 08 19:01:17 2007 => Scanning File C:\PROGRA~1\SPYBOT~1\TeaTimer.exe
 
Thu Nov 08 19:01:17 2007 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
 
Thu Nov 08 19:01:17 2007 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
 
Thu Nov 08 19:01:17 2007 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
 
Thu Nov 08 19:01:17 2007 => Scanning HKCR	xtfile\shell\open\command
 
Thu Nov 08 19:01:17 2007 => Scanning HKCR\comfile\shell\open\command
 
Thu Nov 08 19:01:17 2007 => Scanning HKCR\exefile\shell\open\command
 
Thu Nov 08 19:01:17 2007 => Scanning HKCR\dllfile\shell\open\command
 
Thu Nov 08 19:01:17 2007 => Scanning HKCR\batfile\shell\open\command
 
Thu Nov 08 19:01:17 2007 => Scanning HKCR\piffile\shell\open\command
 
Thu Nov 08 19:01:17 2007 => Scanning HKCR\scrfile\shell\open\command
 
Thu Nov 08 19:01:17 2007 => Scanning HKCR\scrfile\shell\config\command
 
Thu Nov 08 19:01:17 2007 => Scanning HKCRegfile\shell\open\command
 
Thu Nov 08 19:01:18 2007 => ***** Scanning StartUp Folders *****
 
Thu Nov 08 19:01:18 2007 => ***** Scanning C:\Documents and Settings\Faydit Didier\Menu Démarrer\Programmes\Démarrage Folder *****
Thu Nov 08 19:01:18 2007 => Scanning Folder: C:\Documents and Settings\Faydit Didier\Menu Démarrer\Programmes\Démarrage\*.*
Thu Nov 08 19:01:18 2007 => Scanning File C:\Documents and Settings\Faydit Didier\Menu Démarrer\Programmes\Démarrage\DESKTOP.INI
Thu Nov 08 19:01:18 2007 => Scanning File C:\Documents and Settings\Faydit Didier\Menu Démarrer\Programmes\Démarrage\StarOffice 8.lnk
 
Thu Nov 08 19:01:18 2007 => ***** Scanning C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage Folder *****
Thu Nov 08 19:01:18 2007 => Scanning Folder: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\*.*
Thu Nov 08 19:01:18 2007 => Scanning File C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\DESKTOP.INI
 
Thu Nov 08 19:01:18 2007 => ***** Scanning Service Files *****
Thu Nov 08 19:01:18 2007 => Scanning HKLM\SYSTEM\CurrentControlSet\Services
Thu Nov 08 19:01:18 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ABP480N5.SYS
Thu Nov 08 19:01:18 2007 => Scanning File C:\WINDOWS\system32\drivers\ac97intc.sys
Thu Nov 08 19:01:18 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ACPI.sys
Thu Nov 08 19:01:18 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\adpu160m.sys
Thu Nov 08 19:01:18 2007 => Scanning File C:\WINDOWS\system32\drivers\aec.sys
Thu Nov 08 19:01:18 2007 => Scanning File C:\WINDOWS\System32\drivers\afd.sys
Thu Nov 08 19:01:19 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\agp440.sys
Thu Nov 08 19:01:19 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\agpCPQ.sys
Thu Nov 08 19:01:19 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\aha154x.sys
Thu Nov 08 19:01:19 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\aic78u2.sys
Thu Nov 08 19:01:19 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\aic78xx.sys
Thu Nov 08 19:01:19 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\alcan5wn.sys
Thu Nov 08 19:01:19 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\alcaudsl.sys
Thu Nov 08 19:01:19 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:19 2007 => Scanning File C:\WINDOWS\System32\alg.exe
Thu Nov 08 19:01:19 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\aliide.sys
Thu Nov 08 19:01:19 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\alim1541.sys
Thu Nov 08 19:01:19 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\amdagp.sys
Thu Nov 08 19:01:20 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\amsint.sys
Thu Nov 08 19:01:20 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Nov 08 19:01:20 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\asc.sys
Thu Nov 08 19:01:20 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\asc3350p.sys
Thu Nov 08 19:01:20 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\asc3550.sys
Thu Nov 08 19:01:20 2007 => Scanning File C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
Thu Nov 08 19:01:20 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\asyncmac.sys
Thu Nov 08 19:01:20 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\atapi.sys
Thu Nov 08 19:01:20 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\atmarpc.sys
Thu Nov 08 19:01:20 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:20 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\audstub.sys
Thu Nov 08 19:01:20 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:20 2007 => Scanning File C:\PROGRA~1\FICHIE~1\BOONTY~1\Service\Boonty.exe
Thu Nov 08 19:01:20 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:20 2007 => Scanning File C:\WINDOWS\System32\drivers\CDAC11BA.EXE
Thu Nov 08 19:01:20 2007 => ERROR!!! Invalid Entry \??\C:\DOCUME~1\FAYDIT~1\LOCALS~1\Temp\catchme.sys in SYSTEM\CurrentControlSet\Services\catchme...
Thu Nov 08 19:01:21 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\cbidf2k.sys
Thu Nov 08 19:01:21 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
Thu Nov 08 19:01:21 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\ccEvtMgr.exe
Thu Nov 08 19:01:21 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\ccProxy.exe
Thu Nov 08 19:01:21 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\ccPwdSvc.exe
Thu Nov 08 19:01:21 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\ccSetMgr.exe
Thu Nov 08 19:01:21 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\cd20xrnt.sys
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\CDAC15BA.SYS
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\cdrom.sys
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\system32\cisvc.exe
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\system32\clipsrv.exe
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\cmdide.sys
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\System32\dllhost.exe
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\cpqarray.sys
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\dac2w2k.sys
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\dac960nt.sys
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\disk.sys
Thu Nov 08 19:01:22 2007 => Scanning File C:\WINDOWS\System32\dmadmin.exe
Thu Nov 08 19:01:23 2007 => Scanning File C:\WINDOWS\system32\drivers\dmboot.sys
Thu Nov 08 19:01:23 2007 => Scanning File C:\WINDOWS\system32\drivers\dmio.sys
Thu Nov 08 19:01:23 2007 => Scanning File C:\WINDOWS\system32\drivers\dmload.sys
Thu Nov 08 19:01:23 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:23 2007 => Scanning File C:\WINDOWS\system32\drivers\DMusic.sys
Thu Nov 08 19:01:23 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:23 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\dpti2o.sys
Thu Nov 08 19:01:23 2007 => Scanning File C:\WINDOWS\system32\drivers\drmkaud.sys
Thu Nov 08 19:01:23 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\e100b325.sys
Thu Nov 08 19:01:24 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\EENGINE\EECTRL.SYS
Thu Nov 08 19:01:24 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\el90xbc5.sys
Thu Nov 08 19:01:24 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:24 2007 => Scanning File C:\WINDOWS\system32\services.exe
Thu Nov 08 19:01:24 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:24 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:24 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\fdc.sys
Thu Nov 08 19:01:24 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\flpydisk.sys
Thu Nov 08 19:01:24 2007 => Scanning File C:\WINDOWS\system32\drivers\fltmgr.sys
Thu Nov 08 19:01:24 2007 => Scanning File C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
Thu Nov 08 19:01:24 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ftdisk.sys
Thu Nov 08 19:01:24 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\gameenum.sys
Thu Nov 08 19:01:24 2007 => Scanning File C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
Thu Nov 08 19:01:24 2007 => Scanning File C:\PROGRA~1\Google\GOOGLE~4\GOOGLE~2.EXE
Thu Nov 08 19:01:25 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\msgpc.sys
Thu Nov 08 19:01:25 2007 => Scanning File C:\PROGRA~1\Google\Common\GOOGLE~1\GOOGLE~1.EXE
Thu Nov 08 19:01:25 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:25 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:25 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\hidusb.sys
Thu Nov 08 19:01:25 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\hpn.sys
Thu Nov 08 19:01:25 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\hpt3xx.sys
Thu Nov 08 19:01:25 2007 => Scanning File C:\WINDOWS\system32\Drivers\HTTP.sys
Thu Nov 08 19:01:25 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:25 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\i2omp.sys
Thu Nov 08 19:01:25 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\i8042prt.sys
Thu Nov 08 19:01:25 2007 => Scanning File C:\WINDOWS\MICROS~1.NET\FRAMEW~1\v3.0\WINDOW~1\infocard.exe
Thu Nov 08 19:01:26 2007 => Scanning File C:\WINDOWS\System32\imapi.exe
Thu Nov 08 19:01:26 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ini910u.sys
Thu Nov 08 19:01:26 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\intelide.sys
Thu Nov 08 19:01:26 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\intelppm.sys
Thu Nov 08 19:01:26 2007 => Scanning File C:\WINDOWS\system32\drivers\ip6fw.sys
Thu Nov 08 19:01:26 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
Thu Nov 08 19:01:26 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ipinip.sys
Thu Nov 08 19:01:26 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ipnat.sys
Thu Nov 08 19:01:26 2007 => Scanning File C:\PROGRA~1\iPod\bin\IPODSE~1.EXE
Thu Nov 08 19:01:26 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ipsec.sys
Thu Nov 08 19:01:27 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\irenum.sys
Thu Nov 08 19:01:27 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\isapnp.sys
Thu Nov 08 19:01:27 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\kbdclass.sys
Thu Nov 08 19:01:27 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\kbdhid.sys
Thu Nov 08 19:01:27 2007 => Scanning File C:\WINDOWS\system32\drivers\kmixer.sys
Thu Nov 08 19:01:27 2007 => ERROR!!! Invalid Entry System32\DRIVERS\KMW_KBD.sys in SYSTEM\CurrentControlSet\Services\KMW_KBD...
Thu Nov 08 19:01:27 2007 => ERROR!!! Invalid Entry system32\DRIVERS\KMW_USB.sys in SYSTEM\CurrentControlSet\Services\KMW_USB...
Thu Nov 08 19:01:27 2007 => ERROR!!! Invalid Entry %SystemRoot%\system32\drivers\KodakCCS.exe in SYSTEM\CurrentControlSet\Services\KodakCCS...
Thu Nov 08 19:01:27 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:27 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:27 2007 => Scanning File C:\WINDOWS\system32\LEXBCES.EXE
Thu Nov 08 19:01:27 2007 => Scanning File C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
Thu Nov 08 19:01:27 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\PIF\{B8E1D~1\PIFSvc.exe
Thu Nov 08 19:01:27 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:27 2007 => Scanning File C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdiserv.exe
Thu Nov 08 19:01:27 2007 => Scanning File C:\WINDOWS\system32\lxdicoms.exe
Thu Nov 08 19:01:28 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:28 2007 => Scanning File C:\WINDOWS\System32\mnmsrvc.exe
Thu Nov 08 19:01:28 2007 => Scanning File C:\WINDOWS\System32\drivers\atapi.sys
Thu Nov 08 19:01:28 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\mouclass.sys
Thu Nov 08 19:01:28 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\mouhid.sys
Thu Nov 08 19:01:28 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\mraid35x.sys
Thu Nov 08 19:01:28 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\mrxdav.sys
Thu Nov 08 19:01:28 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
Thu Nov 08 19:01:28 2007 => Scanning File C:\WINDOWS\System32\msdtc.exe
Thu Nov 08 19:01:28 2007 => Scanning File C:\WINDOWS\system32\msiexec.exe
Thu Nov 08 19:01:28 2007 => Scanning File C:\WINDOWS\system32\drivers\MSKSSRV.sys
Thu Nov 08 19:01:28 2007 => Scanning File C:\WINDOWS\system32\drivers\MSPCLOCK.sys
Thu Nov 08 19:01:28 2007 => Scanning File C:\WINDOWS\system32\drivers\MSPQM.sys
Thu Nov 08 19:01:28 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\mssmbios.sys
Thu Nov 08 19:01:29 2007 => Scanning File C:\WINDOWS\system32\drivers\MSTEE.sys
Thu Nov 08 19:01:29 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
Thu Nov 08 19:01:29 2007 => Scanning File C:\PROGRA~1\NORTON~1
avapsvc.exe
Thu Nov 08 19:01:29 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20070922.023\NAVENG.SYS
Thu Nov 08 19:01:29 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20070922.023\NAVEX15.SYS
Thu Nov 08 19:01:29 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\NdisIP.sys
Thu Nov 08 19:01:29 2007 => Scanning File C:\WINDOWS\system32\DRIVERS
distapi.sys
Thu Nov 08 19:01:29 2007 => Scanning File C:\WINDOWS\system32\DRIVERS
disuio.sys
Thu Nov 08 19:01:29 2007 => Scanning File C:\WINDOWS\system32\DRIVERS
diswan.sys
Thu Nov 08 19:01:29 2007 => Scanning File C:\WINDOWS\system32\DRIVERS
etbios.sys
Thu Nov 08 19:01:29 2007 => Scanning File C:\WINDOWS\system32\DRIVERS
etbt.sys
Thu Nov 08 19:01:29 2007 => Scanning File C:\WINDOWS\system32
etdde.exe
Thu Nov 08 19:01:29 2007 => Scanning File C:\WINDOWS\system32
etdde.exe
Thu Nov 08 19:01:30 2007 => Scanning File C:\WINDOWS\System32\lsass.exe
Thu Nov 08 19:01:30 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:30 2007 => Scanning File C:\WINDOWS\MICROS~1.NET\FRAMEW~1\v3.0\WINDOW~1\SMSVCH~1.EXE
Thu Nov 08 19:01:30 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:30 2007 => Scanning File C:\PROGRA~1\CDBURN~1\NMSACC~1.EXE
Thu Nov 08 19:01:30 2007 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\NMSCFG.SYS
Thu Nov 08 19:01:30 2007 => Scanning File C:\WINDOWS\System32\NMSSvc.exe
Thu Nov 08 19:01:30 2007 => Scanning File C:\PROGRA~1\NORTON~1\IWP\NPFMntor.exe
Thu Nov 08 19:01:30 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\SECURI~1\NSCSRVCE.EXE
Thu Nov 08 19:01:30 2007 => Scanning File C:\WINDOWS\System32\lsass.exe
Thu Nov 08 19:01:30 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Nov 08 19:01:31 2007 => Scanning File C:\WINDOWS\system32\DRIVERS
v4_mini.sys
Thu Nov 08 19:01:31 2007 => Scanning File C:\WINDOWS\system32
vsvc32.exe
Thu Nov 08 19:01:31 2007 => Scanning File C:\WINDOWS\system32\DRIVERS
wlnkflt.sys
Thu Nov 08 19:01:31 2007 => Scanning File C:\WINDOWS\system32\DRIVERS
wlnkfwd.sys
Thu Nov 08 19:01:31 2007 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS
Thu Nov 08 19:01:31 2007 => Scanning File C:\WINDOWS\system32\Drivers\ov519vid.sys
Thu Nov 08 19:01:31 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\p3.sys
Thu Nov 08 19:01:31 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\parport.sys
Thu Nov 08 19:01:31 2007 => ERROR!!! Invalid Entry \??\C:\WINDOWS\system32\PCAMPR5.SYS in SYSTEM\CurrentControlSet\Services\PCAMPR5...
Thu Nov 08 19:01:31 2007 => Scanning File C:\WINDOWS\SYSTEM32\PCANDIS5.SYS
Thu Nov 08 19:01:31 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\pci.sys
Thu Nov 08 19:01:31 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\pciide.sys
Thu Nov 08 19:01:31 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\perc2.sys
Thu Nov 08 19:01:31 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\perc2hib.sys
Thu Nov 08 19:01:31 2007 => Scanning File C:\PROGRA~1\Symantec\LIVEUP~1\ALUSCH~1.EXE
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\system32\services.exe
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\System32\lsass.exe
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\system32\DRIVERSaspptp.sys
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\PRISMA02.sys
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\processr.sys
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\psched.sys
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ptilink.sys
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\system32\Drivers\PxHelp20.sys
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ql1080.sys
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ql10wnt.sys
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ql12160.sys
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ql1240.sys
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ql1280.sys
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\system32\DRIVERSasacd.sys
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\system32\DRIVERSasl2tp.sys
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:32 2007 => Scanning File C:\WINDOWS\system32\DRIVERSaspppoe.sys
Thu Nov 08 19:01:33 2007 => Scanning File C:\WINDOWS\system32\DRIVERSaspti.sys
Thu Nov 08 19:01:33 2007 => Scanning File C:\WINDOWS\system32\DRIVERSdbss.sys
Thu Nov 08 19:01:33 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
Thu Nov 08 19:01:33 2007 => Scanning File C:\WINDOWS\system32\DRIVERSdpdr.sys
Thu Nov 08 19:01:33 2007 => Scanning File C:\WINDOWS\system32\sessmgr.exe
Thu Nov 08 19:01:33 2007 => Scanning File C:\WINDOWS\system32\DRIVERSedbook.sys
Thu Nov 08 19:01:33 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:33 2007 => Scanning File C:\WINDOWS\System32\locator.exe
Thu Nov 08 19:01:33 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Nov 08 19:01:33 2007 => Scanning File C:\WINDOWS\System32svp.exe
Thu Nov 08 19:01:33 2007 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Nov 08 19:01:33 2007 => Scanning File C:\PROGRA~1\NORTON~1\SAVRT.SYS
Thu Nov 08 19:01:33 2007 => Scanning File C:\PROGRA~1\NORTON~1\SAVRTPEL.SYS
Thu Nov 08 19:01:33 2007 => Scanning File C:\PROGRA~1\NORTON~1\SAVScan.exe
Thu Nov 08 19:01:33 2007 => Scanning File C:\WINDOWS\System32\SCardSvr.exe
Thu Nov 08 19:01:33 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:33 2007 => Scanning File C:\WINDOWS\system32\drivers\scsiport.sys
Thu Nov 08 19:01:34 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\secdrv.sys
Thu Nov 08 19:01:34 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:34 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Nov 08 19:01:34 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\serenum.sys
Thu Nov 08 19:01:34 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\serial.sys
Thu Nov 08 19:01:34 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\sfloppy.sys
Thu Nov 08 19:01:34 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:34 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:34 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\sisagp.sys
Thu Nov 08 19:01:34 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\SLIP.sys
Thu Nov 08 19:01:34 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\SNDSrvc.exe
Thu Nov 08 19:01:34 2007 => *** File C:\WINDOWS\system32\DRIVERS\snpstd3.sys having Size Restriction ***
Thu Nov 08 19:01:34 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\snpstd3.sys [**]
Thu Nov 08 19:01:34 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\sparrow.sys
Thu Nov 08 19:01:34 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\SPBBC\SPBBCDRV.SYS
Thu Nov 08 19:01:34 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\SPBBC\SPBBCSvc.exe
Thu Nov 08 19:01:35 2007 => Scanning File C:\WINDOWS\system32\drivers\splitter.sys
Thu Nov 08 19:01:35 2007 => Scanning File C:\WINDOWS\system32\spoolsv.exe
Thu Nov 08 19:01:35 2007 => Scanning File C:\WINDOWS\system32\Drivers\Capt905c.sys
Thu Nov 08 19:01:35 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\sr.sys
Thu Nov 08 19:01:35 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:35 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\srv.sys
Thu Nov 08 19:01:35 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:35 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:35 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\StreamIP.sys
Thu Nov 08 19:01:35 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\swenum.sys
Thu Nov 08 19:01:35 2007 => Scanning File C:\WINDOWS\system32\drivers\swmidi.sys
Thu Nov 08 19:01:35 2007 => Scanning File C:\WINDOWS\System32\dllhost.exe
Thu Nov 08 19:01:35 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
Thu Nov 08 19:01:36 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\symc810.sys
Thu Nov 08 19:01:36 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\symc8xx.sys
Thu Nov 08 19:01:36 2007 => Scanning File C:\WINDOWS\System32\Drivers\SYMDNS.SYS
Thu Nov 08 19:01:36 2007 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\SYMEVENT.SYS
Thu Nov 08 19:01:36 2007 => Scanning File C:\WINDOWS\System32\Drivers\SYMFW.SYS
Thu Nov 08 19:01:36 2007 => Scanning File C:\WINDOWS\System32\Drivers\SYMIDS.SYS
Thu Nov 08 19:01:36 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\SYMCDATA\IDS-DI~1\20071106.001\SYMIDSCO.SYS
Thu Nov 08 19:01:36 2007 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\SYMLCBRD.SYS
Thu Nov 08 19:01:36 2007 => Scanning File C:\WINDOWS\System32\Drivers\SYMNDIS.SYS
Thu Nov 08 19:01:37 2007 => Scanning File C:\WINDOWS\System32\Drivers\SYMREDRV.SYS
Thu Nov 08 19:01:37 2007 => Scanning File C:\WINDOWS\System32\Drivers\SYMTDI.SYS
Thu Nov 08 19:01:37 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\sym_hi.sys
Thu Nov 08 19:01:37 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\sym_u3.sys
Thu Nov 08 19:01:37 2007 => Scanning File C:\WINDOWS\system32\drivers\sysaudio.sys
Thu Nov 08 19:01:37 2007 => Scanning File C:\WINDOWS\system32\smlogsvc.exe
Thu Nov 08 19:01:37 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:37 2007 => Scanning File C:\WINDOWS\system32\drivers	bcspud.sys
Thu Nov 08 19:01:38 2007 => Scanning File C:\WINDOWS\system32\drivers	bcwdm.sys
Thu Nov 08 19:01:38 2007 => Scanning File C:\WINDOWS\system32\DRIVERS	cpip.sys
Thu Nov 08 19:01:38 2007 => Scanning File C:\WINDOWS\system32\DRIVERS	ermdd.sys
Thu Nov 08 19:01:38 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:38 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\system32\drivers	iehdusb.sys
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\System32\DRIVERS	oside.sys
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ultra.sys
Thu Nov 08 19:01:39 2007 => Scanning File C:\PROGRA~1\UNLOCKER\UNLOCK~1.SYS
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\update.sys
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\System32\ups.exe
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\system32\drivers\usbaudio.sys
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\usbccgp.sys
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\usbehci.sys
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\usbhub.sys
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\usbser.sys
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\usbprint.sys
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\usbscan.sys
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\usbuhci.sys
Thu Nov 08 19:01:39 2007 => Scanning File C:\PROGRA~1\WI1F86~1\MESSEN~1\usnsvc.exe
Thu Nov 08 19:01:39 2007 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\VCS.SYS
Thu Nov 08 19:01:40 2007 => Scanning File C:\WINDOWS\System32\drivers\vga.sys
Thu Nov 08 19:01:40 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\viaagp.sys
Thu Nov 08 19:01:40 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\viaide.sys
Thu Nov 08 19:01:40 2007 => Scanning File C:\WINDOWS\System32\vssvc.exe
Thu Nov 08 19:01:40 2007 => Scanning File C:\PROGRA~1\TURTLE~1\SANTAC~1\CONTRO~1\VTDG46XX.SYS
Thu Nov 08 19:01:40 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Nov 08 19:01:40 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\wanarp.sys
Thu Nov 08 19:01:40 2007 => Scanning File C:\WINDOWS\system32\drivers\wdmaud.sys
Thu Nov 08 19:01:40 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:40 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Nov 08 19:01:40 2007 => Scanning File C:\PROGRA~1\WI1F86~1\INSTAL~1\WLSETU~1.EXE
Thu Nov 08 19:01:40 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:40 2007 => Scanning File C:\WINDOWS\System32\wbem\wmiapsrv.exe
Thu Nov 08 19:01:40 2007 => Scanning File C:\PROGRA~1\WINDOW~3\WMPNetwk.exe
Thu Nov 08 19:01:41 2007 => Scanning File C:\WINDOWS\System32\drivers\ws2ifsl.sys
Thu Nov 08 19:01:41 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:41 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
Thu Nov 08 19:01:41 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Nov 08 19:01:41 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\WudfPf.sys
Thu Nov 08 19:01:41 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\wudfrd.sys
Thu Nov 08 19:01:41 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Nov 08 19:01:41 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Nov 08 19:01:41 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
 
Thu Nov 08 19:01:41 2007 => ***** Scanning System32 Folders *****
Thu Nov 08 19:01:41 2007 => Scanning C:\WINDOWS Directory
Thu Nov 08 19:01:41 2007 => Scanning Folder: C:\WINDOWS\*.*
Thu Nov 08 19:01:43 2007 => Scanning File C:\WINDOWS\0.log [**]
Thu Nov 08 19:01:43 2007 => Scanning File C:\WINDOWS\ActiveSkin.INI
Thu Nov 08 19:01:43 2007 => Scanning File C:\WINDOWS\ADFUUD.SYS
Thu Nov 08 19:01:43 2007 => Scanning File C:\WINDOWS\AdfuUpdate.inf
Thu Nov 08 19:01:43 2007 => Scanning File C:\WINDOWS\AdRoar.dll
Thu Nov 08 19:01:43 2007 => Scanning File C:\WINDOWS\amcap.exe
Thu Nov 08 19:01:43 2007 => Scanning File C:\WINDOWS\Apache.Ini
Thu Nov 08 19:01:43 2007 => Scanning File C:\WINDOWS\artmmp.ini
Thu Nov 08 19:01:43 2007 => Scanning File C:\WINDOWS\astcprup_in.exe
Thu Nov 08 19:01:44 2007 => File C:\WINDOWS\astcprup_in.exe infected by "Trojan-Downloader.Win32.Adroar" Virus. Action Taken: File Deleted.

Thu Nov 08 19:01:44 2007 => Scanning File C:\WINDOWS\AuHCcup1.dll
Thu Nov 08 19:01:44 2007 => Scanning File C:\WINDOWS\AuHCcup1.ini
Thu Nov 08 19:01:44 2007 => Scanning File C:\WINDOWS\Belt.ini
Thu Nov 08 19:01:44 2007 => Scanning File C:\WINDOWS\BOOTSTAT.DAT
Thu Nov 08 19:01:44 2007 => Scanning File C:\WINDOWS\BPMNT.dll
Thu Nov 08 19:01:44 2007 => Scanning File C:\WINDOWS\BricoPack Wallpaper.bmp
Thu Nov 08 19:01:44 2007 => Scanning File C:\WINDOWS\BricoPackFoldersDelete.cmd
Thu Nov 08 19:01:44 2007 => Scanning File C:\WINDOWS\BricoPackUninst.cmd
Thu Nov 08 19:01:44 2007 => Scanning File C:\WINDOWS\BricoPackUninst.txt
Thu Nov 08 19:01:45 2007 => Scanning File C:\WINDOWS\Bulles de savon.bmp
Thu Nov 08 19:01:45 2007 => Scanning File C:\WINDOWS\catchme.exe
Thu Nov 08 19:01:45 2007 => Scanning File C:\WINDOWS\cdplayer.ini
Thu Nov 08 19:01:45 2007 => Scanning File C:\WINDOWS\CleanDev.exe
Thu Nov 08 19:01:45 2007 => Scanning File C:\WINDOWS\CLOCK.AVI
Thu Nov 08 19:01:45 2007 => Scanning File C:\WINDOWS\comsetup.log
Thu Nov 08 19:01:45 2007 => Scanning File C:\WINDOWS\CONTROL.INI [**]
Thu Nov 08 19:01:45 2007 => Scanning File C:\WINDOWS\cpruninst.exe
Thu Nov 08 19:01:46 2007 => File C:\WINDOWS\cpruninst.exe infected by "Trojan-Downloader.Win32.Adroar" Virus. Action Taken: File Deleted.

Thu Nov 08 19:01:46 2007 => Scanning File C:\WINDOWS\cpr_in.exe
Thu Nov 08 19:01:47 2007 => File C:\WINDOWS\cpr_in.exe infected by "Trojan-Downloader.Win32.Adroar" Virus. Action Taken: File Deleted.

Thu Nov 08 19:01:47 2007 => Scanning File C:\WINDOWS\Ctregrun.exe
Thu Nov 08 19:01:47 2007 => Scanning File C:\WINDOWS\d3dx.dat
Thu Nov 08 19:01:47 2007 => Scanning File C:\WINDOWS\DELL.BMP
Thu Nov 08 19:01:47 2007 => Scanning File C:\WINDOWS\DESKTOP.INI
Thu Nov 08 19:01:47 2007 => Scanning File C:\WINDOWS\dial-messenger.ini
Thu Nov 08 19:01:47 2007 => Scanning File C:\WINDOWS\dsez1888.dat
Thu Nov 08 19:01:47 2007 => Scanning File C:\WINDOWS\eReg.dat
Thu Nov 08 19:01:47 2007 => Scanning File C:\WINDOWS\explorer.exe
Thu Nov 08 19:01:47 2007 => Scanning File C:\WINDOWS\EXPLORER.SCF
Thu Nov 08 19:01:47 2007 => Scanning File C:\WINDOWS\FaxSetup.log
Thu Nov 08 19:01:47 2007 => Scanning File C:\WINDOWS\filonn.ini
Thu Nov 08 19:01:47 2007 => Scanning File C:\WINDOWS\flashax.exe
Thu Nov 08 19:01:48 2007 => Scanning File C:\WINDOWS\FotoStationDesktop.bmp
Thu Nov 08 19:01:48 2007 => Scanning File C:\WINDOWS\fpxpress.ini
Thu Nov 08 19:01:48 2007 => Scanning File C:\WINDOWS\GetServer.ini
Thu Nov 08 19:01:48 2007 => Scanning File C:\WINDOWS\GlobFXSaver.scr
Thu Nov 08 19:01:48 2007 => Scanning File C:\WINDOWS\GPInstall.exe
Thu Nov 08 19:01:48 2007 => Scanning File C:\WINDOWS\Granit vert.bmp
Thu Nov 08 19:01:48 2007 => Scanning File C:\WINDOWS\GREUninstall.exe
Thu Nov 08 19:01:48 2007 => Scanning File C:\WINDOWS\hb_uninst.exe
Thu Nov 08 19:01:48 2007 => Scanning File C:\WINDOWS\HCExtOutput.dll
Thu Nov 08 19:01:48 2007 => Scanning File C:\WINDOWS\HFREP.INI
Thu Nov 08 19:01:48 2007 => Scanning File C:\WINDOWS\hh.exe
Thu Nov 08 19:01:48 2007 => Scanning File C:\WINDOWS\ieuninst.exe
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\iis6.log
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\ikknoq.ini
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\impborl.dll
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\imsins.BAK
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\imsins.log
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\index.ini
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\Install.scr
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\iPlayer.INI [**]
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\IsUn040c.exe
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\IsUninst.exe
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\jautoexp.dat
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\Jour de pêche.bmp
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\KB925720.log
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\KB933729.log
Thu Nov 08 19:01:49 2007 => Scanning File C:\WINDOWS\KB939653-IE7.log
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\KB941202.log
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\kodakpcd.Faydit Didier.ini
Thu Nov 08 19:01:50 2007 => *** File C:\WINDOWS\LPT$VPN.891 having Size Restriction ***
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\LPT$VPN.891 [**]
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\Messager Wanadoo.ini
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\MF_C420.lfa
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\MF_C421.lfa
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\MF_C425.lfa
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\mgxoschk.ini
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\mickey32.dll
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\mozver.dat
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\Mr Horse ScreenSaver Crin d'Or N.1.scr
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\MSDFMAP.INI
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\MSDraw.ini [**]
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\msgsocm.log
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\msxml6-KB933579-enu-x86.LOG
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\muninst.exe
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\Mur de Santa Fe.bmp
Thu Nov 08 19:01:50 2007 => Scanning File C:\WINDOWS\NirCmd.exe
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS
onpoq.ini
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS
otepad.exe
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS
sreg.dat
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS
tbtlog.txt
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS
tdtcsetup.log
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS\ocgen.log
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS\ocmsn.log
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS\ODBC.INI
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS\ODBCINST.INI
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS\oeuninst.exe
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS\orun32.ini
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS\orun32.isu
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS\OTS_UI.EXE
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS\OV519.txt
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS\ov519cap.exe
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS\ov519dib.dll
Thu Nov 08 19:01:51 2007 => Scanning File C:\WINDOWS\PATCH.EXE
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWS\PCDLIB32.DLL
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWS\pcfriend.INI [**]
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWS\PlaySnd.INI
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWS\Plume.bmp
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWS\Q330994.exe
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWS\Q820223.exe
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWS\QTFont.for
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWS\QTFont.qfn
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWS\QTW.INI
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWSegedit.exe
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWS\Rhododendron.bmp
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWS\Rivière Sumida.bmp
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWS\Rosace bleue 16.bmp
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWSqtwvw.ini
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWS\SchedLgU.Txt
Thu Nov 08 19:01:52 2007 => Scanning File C:\WINDOWS\screengenie.scr
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\screengenie.xml
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\sel3110.exe
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\setdebug.exe
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\SETUP1.EXE
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\setupact.log
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\setupapi.log
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\setupapi.log.0.old
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\setupapi.log.1.old
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\setuperr.log [**]
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\shlfolder.sys
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\SIERRA.INI
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\slrundll.exe
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\smdat32m.sys
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\smscfg.ini
Thu Nov 08 19:01:53 2007 => Scanning File C:\WINDOWS\snpstd3.ini
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS\snpstd3.src
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS\ss3unstl.exe
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS\ST6UNST.EXE
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS\Sti_Trace.log [**]
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS\SYSTEM.INI
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS\TASKMAN.EXE
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS\Tasse à café.bmp
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS\TBX.ini
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS\TBX_PRO.ini
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS\Thumbs.db
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS\TMP0001.TMP
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS\TMUPDATE.DLL
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS	sc.exe
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS\TSC.ini
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS	sc.ptn
Thu Nov 08 19:01:54 2007 => Scanning File C:\WINDOWS	soc.log
Thu Nov 08 19:01:55 2007 => Scanning File C:\WINDOWS\TWAIN.DLL
Thu Nov 08 19:01:55 2007 => Scanning File C:\WINDOWS	wain_32.dll
Thu Nov 08 19:01:55 2007 => Scanning File C:\WINDOWS\TWUNK_16.EXE
Thu Nov 08 19:01:55 2007 => Scanning File C:\WINDOWS\TWUNK_32.EXE
Thu Nov 08 19:01:55 2007 => Scanning File C:\WINDOWS\UnDeploy.exe
Thu Nov 08 19:01:55 2007 => Scanning File C:\WINDOWS\uneng.exe
Thu Nov 08 19:01:55 2007 => Scanning File C:\WINDOWS\unin040c.exe
Thu Nov 08 19:01:55 2007 => Scanning File C:\WINDOWS\uninst.exe
Thu Nov 08 19:01:55 2007 => Scanning File C:\WINDOWS\unstall.exe
Thu Nov 08 19:01:55 2007 => Scanning File C:\WINDOWS\unvise32.exe
Thu Nov 08 19:01:55 2007 => Scanning File C:\WINDOWS\UNZIP.DLL
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\updspapi.log
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\usnpstd3.exe
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\uuvvyb.ini
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\VB.INI
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\VBADDIN.INI
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\Vent de prairie.bmp
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\VER.DL
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\vidcap32.exe
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\Videodeluxe.INI
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\VMMREG32.DLL
Thu Nov 08 19:01:56 2007 => *** File C:\WINDOWS\VPTNFILE.891 having Size Restriction ***
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\VPTNFILE.891 [**]
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\vsapi32.dll
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\vsnpstd3.dll
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\vsnpstd3.exe
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\WIADEBUG.LOG
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\WIASERVC.LOG
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\WIN.INI
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\WindowsShell.Manifest
Thu Nov 08 19:01:56 2007 => Scanning File C:\WINDOWS\WindowsUpdate.log
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\WINHELP.EXE
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\winhlp32.exe
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\WINNT.BMP
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\WINNT256.BMP
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\Wlink83p.ini
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\wmprfFRA.prx
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\WMSysPr8.prx
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\WMSysPr9.prx
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\WMSysPrx.prx
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\WORDPAD.INI
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\WSST_Screen_Saver.ini
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\xaddfe.ini
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\XpsEPSC.log
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\XPSEPSCLP.log
Thu Nov 08 19:01:57 2007 => Scanning File C:\WINDOWS\ybeffe.ini
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\Zapotec.bmp
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\_DEFAULT.PIF
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\_MSRSTRT.EXE
Thu Nov 08 19:01:58 2007 => Scanning C:\WINDOWS\system32 Directory
Thu Nov 08 19:01:58 2007 => Scanning Folder: C:\WINDOWS\system32\*.*
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\$NCSP$.INF
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\$WINNT$.INF
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\12520437.CPX
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\12520850.CPX
Thu Nov 08 19:01:58 2007 => *** File C:\WINDOWS\system32\12C.tmp having Size Restriction ***
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\12C.tmp [**]
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\12D.tmp
Thu Nov 08 19:01:58 2007 => File C:\WINDOWS\system32\12D.tmp infected by "Backdoor.Win32.Agent.bul" Virus. Action Taken: File Deleted.

Thu Nov 08 19:01:58 2007 => *** File C:\WINDOWS\system32\134.tmp having Size Restriction ***
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\134.tmp [**]
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\6to4svc.dll
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\a15.tbl
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\a234.tbl
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\a3d.dll
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\AAAAMON.DLL
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\AC3ACM.acm
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\access.cpl
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\ACCTRES.DLL
Thu Nov 08 19:01:58 2007 => Scanning File C:\WINDOWS\system32\accwiz.exe
Thu Nov 08 19:01:59 2007 => Scanning File C:\WINDOWS\system32\ACELPDEC.AX
Thu Nov 08 19:01:59 2007 => Scanning File C:\WINDOWS\system32\ACLEDIT.DLL
Thu Nov 08 19:01:59 2007 => Scanning File C:\WINDOWS\system32\aclui.dll
Thu Nov 08 19:01:59 2007 => Scanning File C:\WINDOWS\system32\acode.tbl
Thu Nov 08 19:01:59 2007 => Scanning File C:\WINDOWS\system32\activeds.dll
Thu Nov 08 19:01:59 2007 => Scanning File C:\WINDOWS\system32\ACTIVEDS.TLB
Thu Nov 08 19:01:59 2007 => Scanning File C:\WINDOWS\system32\ActiveSkin.ocx
Thu Nov 08 19:01:59 2007 => Scanning File C:\WINDOWS\system32\actmovie.exe
Thu Nov 08 19:01:59 2007 => Scanning File C:\WINDOWS\system32\actxprxy.dll
Thu Nov 08 19:01:59 2007 => Scanning File C:\WINDOWS\system32\admparse.dll
Thu Nov 08 19:01:59 2007 => Scanning File C:\WINDOWS\system32\ADPTIF.DLL
Thu Nov 08 19:01:59 2007 => Scanning File C:\WINDOWS\system32\adsldp.dll
Thu Nov 08 19:01:59 2007 => Scanning File C:\WINDOWS\system32\adsldpc.dll
Thu Nov 08 19:02:00 2007 => Scanning File C:\WINDOWS\system32\adsmsext.dll
Thu Nov 08 19:02:00 2007 => Scanning File C:\WINDOWS\system32\adsnt.dll
Thu Nov 08 19:02:00 2007 => Scanning File C:\WINDOWS\system32\advapi32.dll
Thu Nov 08 19:02:00 2007 => Scanning File C:\WINDOWS\system32\advpack.dll
Thu Nov 08 19:02:00 2007 => Scanning File C:\WINDOWS\system32\advpack.dll.mui
Thu Nov 08 19:02:00 2007 => Scanning File C:\WINDOWS\system32\ahui.exe
Thu Nov 08 19:02:00 2007 => Scanning File C:\WINDOWS\system32\alf2cd.acm
Thu Nov 08 19:02:00 2007 => Scanning File C:\WINDOWS\system32\alg.exe
Thu Nov 08 19:02:00 2007 => Scanning File C:\WINDOWS\system32\alrsvc.dll
Thu Nov 08 19:02:00 2007 => Scanning File C:\WINDOWS\system32\amcompat.tlb
Thu Nov 08 19:02:00 2007 => Scanning File C:\WINDOWS\system32\amstream.dll
Thu Nov 08 19:02:00 2007 => Scanning File C:\WINDOWS\system32\AMV_DecDLL.dll
Thu Nov 08 19:02:00 2007 => Scanning File C:\WINDOWS\system32\AniGIF.ocx
Thu Nov 08 19:02:00 2007 => Scanning File C:\WINDOWS\system32\ANSI.SYS
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\APCUPS.DLL
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\APPEND.EXE
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\apphelp.dll
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\appwiz.cpl
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\ARP.EXE
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\arphr.tbl
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\arptr.tbl
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\array30.tab
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\arrayhw.tab
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\asctrls.ocx
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\asferror.dll
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\asfsipc.dll
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\asycfilt.dll
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\at.exe
Thu Nov 08 19:02:01 2007 => Scanning File C:\WINDOWS\system32\ATHPRXY.DLL
Thu Nov 08 19:02:02 2007 => Scanning File C:\WINDOWS\system32\ati2cqag.dll
Thu Nov 08 19:02:02 2007 => Scanning File C:\WINDOWS\system32\ati2dvaa.dll
Thu Nov 08 19:02:02 2007 => Scanning File C:\WINDOWS\system32\ati2dvag.dll
Thu Nov 08 19:02:02 2007 => Scanning File C:\WINDOWS\system32\ati3d1ag.dll
Thu Nov 08 19:02:02 2007 => Scanning File C:\WINDOWS\system32\ati3d2ag.dll
Thu Nov 08 19:02:02 2007 => Scanning File C:\WINDOWS\system32\ati3duag.dll
Thu Nov 08 19:02:02 2007 => Scanning File C:\WINDOWS\system32\ativdaxx.ax
Thu Nov 08 19:02:02 2007 => Scanning File C:\WINDOWS\system32\ativmvxx.ax
Thu Nov 08 19:02:02 2007 => Scanning File C:\WINDOWS\system32\ativtmxx.dll
Thu Nov 08 19:02:02 2007 => Scanning File C:\WINDOWS\system32\ativvaxx.dll
Thu Nov 08 19:02:02 2007 => Scanning File C:\WINDOWS\system32\ATKCTRS.DLL
Thu Nov 08 19:02:02 2007 => Scanning File C:\WINDOWS\system32\atl.dll
Thu Nov 08 19:02:02 2007 => Scanning File C:\WINDOWS\system32\atl70.dll
Thu Nov 08 19:02:03 2007 => Scanning File C:\WINDOWS\system32\atl71.dll
Thu Nov 08 19:02:03 2007 => Scanning File C:\WINDOWS\system32\atmadm.exe
Thu Nov 08 19:02:03 2007 => Scanning File C:\WINDOWS\system32\atmfd.dll
Thu Nov 08 19:02:03 2007 => Scanning File C:\WINDOWS\system32\atmlib.dll
Thu Nov 08 19:02:03 2007 => Scanning File C:\WINDOWS\system32\ATMPVCNO.DLL
Thu Nov 08 19:02:03 2007 => Scanning File C:\WINDOWS\system32\ATRACE.DLL
Thu Nov 08 19:02:03 2007 => Scanning File C:\WINDOWS\system32\ATTRIB.EXE
Thu Nov 08 19:02:03 2007 => Scanning File C:\WINDOWS\system32\Audio3D.dll
Thu Nov 08 19:02:03 2007 => Scanning File C:\WINDOWS\system32\audiodev.dll
Thu Nov 08 19:02:03 2007 => Scanning File C:\WINDOWS\system32\audiosrv.dll
Thu Nov 08 19:02:03 2007 => Scanning File C:\WINDOWS\system32\auditusr.exe
Thu Nov 08 19:02:03 2007 => Scanning File C:\WINDOWS\system32\authz.dll
Thu Nov 08 19:02:03 2007 => Scanning File C:\WINDOWS\system32\autochk.exe
Thu Nov 08 19:02:03 2007 => Scanning File C:\WINDOWS\system32\autoconv.exe
Thu Nov 08 19:02:04 2007 => Scanning File C:\WINDOWS\system32\AUTODISC.DLL
Thu Nov 08 19:02:04 2007 => Scanning File C:\WINDOWS\system32\AUTOEXEC.NT
Thu Nov 08 19:02:04 2007 => Scanning File C:\WINDOWS\system32\autofmt.exe
Thu Nov 08 19:02:04 2007 => Scanning File C:\WINDOWS\system32\autolfn.exe
Thu Nov 08 19:02:04 2007 => Scanning File C:\WINDOWS\system32\AVICAP.DLL
Thu Nov 08 19:02:04 2007 => Scanning File C:\WINDOWS\system32\AVICAP32.DLL
Thu Nov 08 19:02:04 2007 => Scanning File C:\WINDOWS\system32\avifil32.dll
Thu Nov 08 19:02:04 2007 => Scanning File C:\WINDOWS\system32\AVIFILE.DLL
Thu Nov 08 19:02:04 2007 => Scanning File C:\WINDOWS\system32\AVMETER.DLL
Thu Nov 08 19:02:04 2007 => Scanning File C:\WINDOWS\system32\AVTAPI.DLL
Thu Nov 08 19:02:04 2007 => Scanning File C:\WINDOWS\system32\AVWAV.DLL
Thu Nov 08 19:02:04 2007 => Scanning File C:\WINDOWS\system32\basesrv.dll
Thu Nov 08 19:02:04 2007 => Scanning File C:\WINDOWS\system32\batmeter.dll
Thu Nov 08 19:02:04 2007 => Scanning File C:\WINDOWS\system32\batt.dll
Thu Nov 08 19:02:05 2007 => Scanning File C:\WINDOWS\system32\beegd10.ocx
Thu Nov 08 19:02:06 2007 => Scanning File C:\WINDOWS\system32\bidispl.dll
Thu Nov 08 19:02:06 2007 => Scanning File C:\WINDOWS\system32\big5.nls
Thu Nov 08 19:02:06 2007 => Scanning File C:\WINDOWS\system32\BIOS1.ROM
Thu Nov 08 19:02:06 2007 => Scanning File C:\WINDOWS\system32\BIOS4.ROM
Thu Nov 08 19:02:06 2007 => Scanning File C:\WINDOWS\system32\birst.inf
Thu Nov 08 19:02:06 2007 => Scanning File C:\WINDOWS\system32\bitsprx2.dll
Thu Nov 08 19:02:06 2007 => Scanning File C:\WINDOWS\system32\bitsprx3.dll
Thu Nov 08 19:02:06 2007 => Scanning File C:\WINDOWS\system32\blackbox.dll
Thu Nov 08 19:02:06 2007 => Scanning File C:\WINDOWS\system32\blastcln.exe
Thu Nov 08 19:02:06 2007 => Scanning File C:\WINDOWS\system32\BOOTOK.EXE
Thu Nov 08 19:02:06 2007 => Scanning File C:\WINDOWS\system32\BOOTVID.DLL
Thu Nov 08 19:02:06 2007 => Scanning File C:\WINDOWS\system32\BOOTVRFY.EXE
Thu Nov 08 19:02:06 2007 => Scanning File C:\WINDOWS\system32\bopomofo.nls
Thu Nov 08 19:02:06 2007 => Scanning File C:\WINDOWS\system32\BOPOMOFO.

chrifleur · Answer

je ne sais pas si le rapport est complet?
il semble qu'il ait bien travaillé et fini le travail...
dis moi comment se comporte le PC
à demain

UrbainS · Answer

Il est un peu plus rapide j'ai fait l' Ad-aware Spybot et un scan d'Avast! au cas où mais sa à l'aire de bien marché!

chrifleur · Answer

Maintenant il te reste ceci à effectuer
faire un scan antivirus en ligne avec Internet explorer et accepter l'ActiveX
https://www.bitdefender.fr/ 

En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE 
Dans la nouvelle fenêtre, clique sur j’accepte 
La fenêtre change encore, clique sur scanner 
Les signatures se chargent, etc. 

tuto en image
http://pageperso.aol.fr/rginformatique/mapage/defender.htm


1/
Supprime tous les outils utilisés:
HijackThis, Navilog, smitfraudfix qui sont spécifiques pour des infections et ne te serviront plus!
Supprime aussi tous les rapports obtenus!

Tu peux néanmoins conserver Ccleaner et AVG antispyware, mis à jour régulièrement, ils te serviront, l'un, Ccleaner, pour le nettoyage quotidien de ton PC, l'autre, AVG Antispyware, pour la recherche d'éventuelles infections...

2/
Restauration système
Désactive ta restauration
Clique droit sur poste de travail/propriétés/coche la case désactiver la restauration, appliquer, OK
Redémarre ton PC 
Réactive ta restauration
Clique droit sur poste de travail/propriétés/décoche la case désactiver la restauration, appliquer, OK
Redémarre ton PC

3/
Nettoyage et Défragmentation de tes Disques
Nettoyage
Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Général"
Clique sur le bouton "nettoyage de disque", OK
tu le fais pour chacun de tes disques

Vérifications des erreurs
Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Outil"
"Vérifier maintenant", une boîte s'ouvre, cocher les cases
réparer automatiquement les erreurs...
rechercher et tenter une récupération...
Démarrer, ok
tu le fais pour chacun de tes disques

ensuite toujours dans le même onglet tu choisis
Défragmentation
"défragmenter maintenant", OK
une boîte s'ouvre, tu sélectionnes le disque à défragmenter, et tu cliques sur "analyser", puis après l'analyse, "défragmenter" . OK
tu le fais pour chacun de tes disques

==>

Tu as été infecté, et je pense qu'au travers des différentes manoeuvres données, tu as compris que tu étais mal protégé...

Je te conseille donc de lire attentivement ce qui suit et de suivre les conseils prodigués

==>

Tu trouveras sur ce lien les différentes mises à jour de sécurité à effectuer, suivant les logiciels que tu possèdes.
https://forum.pcastuces.com/sujet.asp?f=25&s=25842

==>

La protection de ton Pc

La sécurité c'est très important mais ne remplace pas l'internaute, un surf prudent en évitant le crack, les sites "chauds", permet déjà d'éviter bien des soucis, le P2P lui aussi est source d'infections...
Outre la parfaite mise à jour du système d'exploitation, désormais, pour surfer tranquillement et sans soucis sur "le Net", il faut se protéger au maximum!
Pour cela il faut :

1. en résident : Il est résident sur ton PC, c'est à dire qu'il fonctionne dès la mise en route de ton Système.
/- un bon antivirus, gratuit ou payant, mis régulièrement à jour, qui te protège en temps réel! 
/- un pare feu autre que celui fourni par Windows, comme Zone Alarm ou Kerio qui te protège aussi en temps réel! 
/- un anti spyware efficace, type Spybot Search and Destroy, avec sa protection résidente, Tea Timer, activée!! 
Tu scannes ton PC toutes les semaines environ avec, après l'avoir mis à jour, et tu as aussi sa protection en temps réel qui te protège.

2. pour scanner régulièrement ton PC
/- un anti trojan efficace, comme AVG antispyware .A la fin d'une période d'essai du logiciel, il est proposé une version payante que tu n'es pas obligé d'acheter. Il perd alors sa fonction "résident" et tu dois faire les mises à jour manuellement. Il reste néanmoins très utile pour scanner régulièrement ton PC et le nettoyer d'éventuelles infections.

3. un logiciel comme Spyware Blaster qui empêche l'installation d'ActiveX nuisibles. 
Il faut régulièrement le mettre à jour pour inscrire les ActiveX dangereux dans sa base de données, et ainsi être protégé contre eux, puisque son rôle est d'empêcher leur installation.

4. un bon navigateur tel Firefox ou Opera pour remplacer IE, que tu ne conserves que pour effectuer les mises à jour de Windows! 

Tu trouveras dans ce tuto, "Sécuriser son PC de Philae", de quoi satisfaire tous tes désirs en matière de logiciels gratuits et performants 
https://forum.pcastuces.com/default.asp

dans celui-ci, tesgaz t'explique les risques du P2P 
https://forum.zebulon.fr/topic/85544-pr%C3%A9vention-le-p2p-et-ses-cons%C3%A9quences/

dans celui-là, les risques du crack 
https://forum.zebulon.fr/topic/93281-pr%C3%A9vention-le-crack-dans-toute-sa-splendeur/

Nous voulons aider avec de plus en plus d'efficacité et lutter contre les malwares pour qu'enfin tout le monde puisse surfer tranquille !
Avec un peu de prévention, il est possible d'être à l'abri des menaces !
S'il te plaît, fais passer le mot autour de toi !
S'il te plaît, s'il y a des internautes infectés autour de toi, envoie les nous sur ce forum !
Une bonne protection permet d'être à abri ! L'ennuyeux est que la protection vaut ce que vaut le maillon le plus faible et donc, il ne faut rien oublier!

==>

Dénonce ton infection pour faire condamner les auteurs.

Crée un message pour faire avancer les choses sur Malware-Complaints, nous devons être les plus nombreux possibles, alors rends compte de ton infection :
- Voir les règles du forum : https://malwarecomplaints.info/
- Après t'être enregistré à l'aide du bouton en haut se nommant "Register"
Si tu as plus de 13 ans, choisir : "I Agree to these terms and am over or exactly 13 years of age"
Si tu as moins, clique sur : "I Agree to these terms and am under 13 years of age"

Tu as alors, sous forme de liste, un sujet par type d'infection (Look2Me, Smitfraud, SpywareQuake etc..).

*** Ton infection : bagle, divers trojans et backdoors

>> https://malwarecomplaints.info/

Si le malware que tu as eu n'apparaît pas dans la liste, ou si tu ne sais pas par quoi tu étais infecté(e), crée un message dans le sujet Autres infections, conforme au règle du forum (âge, ville, département etc..)

bonne continuation

UrbainS · Answer

C'est bon le scan de BitDefender est fini...Je t'envoie le compte rendue?

chrifleur · Answer

s'il y a quelque chose, oui, si non tu suis les recommandations du post précédent

UrbainS · Answer

Oui, je pense qu'il y a quelque chose...Mais le compte rendu est sous forme de page Html, comment pourrai-je faire pour te l'envoyer?

chrifleur · Answer

tu le copies colles ici

chrifleur · Answer

j'ai reçu ton rapport en html
un peu compliqué à déchiffrer...mais Bit Defender semble avoir pas mal nettoyé
j'ai pu constater qu'un grand nombre de fichiers et dossiers ont été touchés, notamment 
C:\Program Files\Microsoft Office\Office10
C:\Program Files\Microsoft Office\media\office10
C:\Program Files\Messenger Plus! Live
C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727
ainsi que ta restauration système
bien que nettoyés par Bit Defender, il est possible que ces logiciels fonctionnent moins bien et que tu sois obligé de les supprimer puis de les réinstaller...

pour ta Restauration système
Désactive ta restauration
Clique droit sur poste de travail/propriétés/coche la case désactiver la restauration, appliquer, OK
Redémarre ton PC
Réactive ta restauration
Clique droit sur poste de travail/propriétés/décoche la case désactiver la restauration, appliquer, OK
Redémarre ton PC 

fais à nouveau un scan online pour vérification...

Mon hijackthis

36 réponses

Discussions similaires

Newsletters