Infecte par win32:Small-gen2

Bonjour
tient moi au courant
@+

Bonsoir, Ep44
Je n'ai pas donné de mes nouvelles, je m'en excuse, mais j'ai eu beaucoup de travail, j'aide à la préparation de la soirée des 18 ans de mes petites voisines, des jumelles, comme c'est leur maman et moi qui faisons le repas, je te dis pas.
J'ai pas eu le temps de faire ce que tu m'a dit, je verrai si je peux faire ça dans le week end.
Bon je te laisse je vais me couchée ce soir je suis sur les rotules.
a+
Merci

Bonsoir,

=> clic sur Open the misc tools section
=>open ADS spy...
=>Décoche Quick scan
=>clique sur scan.
=>coche ce qu'il trouve
=>clic sur Remove selected
=>un fois fini clic sur Back
@+

Bonsoir,
J'espère que tu as passé une bonne journée.
Ton boulot est pas trop fatiguant j'espère, parce qu'en plus tu aides tous le monde. C'est sympa de ta part. :-)
Moi j'ai la chance de ne plus travailler.
Enfin bon, revenons aux choses sérieuses.
Voillà le rapport hijack demandé.
a+

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:01:25, on 11/12/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\atiptaxx.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
G:\eMule\emule.exe
H:\Mes documents\perso\MaxiMemo\MaxiMemo.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\csml.exe
C:\WINDOWS\system32\cleanmgr.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\ght\Bureau\logs recherche virus\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lycos.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.navreg.com/index.asp?siteid=8
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = ftp=proxy04.chello.fr:8080;http=proxy04.chello.fr:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\userinit.exe,C:\WINDOWS\system32\1C.tmp
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [MsgCenterExe] "C:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe" -osboot
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Protocol Deployment System Service] "C:\WINDOWS\System32\wpdss.exe" *
O4 - HKLM\..\Run: [Microsoft (R) Windows Network Service Monitor] C:\WINDOWS\system32\1C.tmp
O4 - HKLM\..\Run: [Windows Certificate Verification Service] "C:\WINDOWS\wcvs.exe" *
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "H:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Windows Client/Server Management Layer] "C:\WINDOWS\system32\csml.exe" *
O4 - HKLM\..\Run: [Windows Client/Server Runtime Management Layer] "C:\WINDOWS\system32\csrml.exe" *
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI Multimedia\main\launchpd.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [eMuleAutoStart] G:\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows Client/Server Runtime Management Layer] "C:\WINDOWS\system32\csrml.exe" * (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: La Solution Ciel (L).lnk = C:\CIEL\STARTER.EXE
O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: MaxiMemo.lnk = H:\Mes documents\perso\MaxiMemo\MaxiMemo.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\TV\EXPLBAR.DLL
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/290166a8d2b08aa4eb16/netzip/RdxIE601_fr.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {BC18E6DF-BE57-4580-93E8-F228F9A133AA} (MaxisSimCity4LotTeleX Control) - http://simcity.ea.com/exchange/lots/teleport/MaxisSimCity4LotTeleX.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game01.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Windows Client/Server Management Layer (CSML) - Unknown owner - C:\WINDOWS\system32\csml.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Windows Network Service Monitor (nsmss) - Unknown owner - C:\WINDOWS\system32\1C.tmp (file missing)
O23 - Service: Windows Certificate Verification Service (wcvs) - Unknown owner - C:\WINDOWS\wcvs.exe (file missing)
O23 - Service: Windows Protocol Deployment System Service (wpdss) - Unknown owner - C:\WINDOWS\System32\wpdss.exe (file missing)

Bonsoir refais hijack stp
@+

Bonjour,
Voila le rapport.
Je ne sais pas si le problème est résolu, mais il y a du mieux mon ordi redémarre bien, il n'y a plus toutes les fenêtres au départ.

SDFix: Version 1.118

Run by ght on 11/12/2007 at 09:13

Microsoft Windows XP [version 5.1.2600]

Running From: C:\DOCUME~1\ght\Bureau\LOGSRE~1\SDFix

Safe Mode:
Checking Services:

Name:
MSDisk
MSWindows
NTSS
wfvs
wspvs

Path:
"C:\WINDOWS\System32\irdvxc.exe" /service
"C:\WINDOWS\System32\urdvxc.exe" /service
C:\WINDOWS\system32\ntss.exe
C:\WINDOWS\System32\wfvs.exe
C:\WINDOWS\system32\wspvs.exe

MSDisk - Deleted
MSWindows - Deleted
NTSS - Deleted
wfvs - Deleted
wspvs - Deleted

Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...

Normal Mode:
Checking Files:

Trojan Files Found:

C:\WINDOWS\system32\2.tmp - Deleted
C:\WINDOWS\system32\3.tmp - Deleted
C:\WINDOWS\system32\4.tmp - Deleted
C:\WINDOWS\system32\5.tmp - Deleted
C:\WINDOWS\system32\6.tmp - Deleted
C:\WINDOWS\system32\7.tmp - Deleted
C:\WINDOWS\system32\8.tmp - Deleted
C:\WINDOWS\system32\9.tmp - Deleted
C:\WINDOWS\system32\A.tmp - Deleted
C:\WINDOWS\system32\B.tmp - Deleted
C:\WINDOWS\system32\C.tmp - Deleted
C:\WINDOWS\system32\D.tmp - Deleted
C:\WINDOWS\system32\2.tmp - Deleted
C:\WINDOWS\system32\20.tmp - Deleted
C:\WINDOWS\system32\201.tmp - Deleted
C:\WINDOWS\system32\202.tmp - Deleted
C:\WINDOWS\system32\203.tmp - Deleted
C:\WINDOWS\system32\205.tmp - Deleted
C:\WINDOWS\system32\206.tmp - Deleted
C:\WINDOWS\system32\207.tmp - Deleted
C:\WINDOWS\system32\20C.tmp - Deleted
C:\WINDOWS\system32\21.tmp - Deleted
C:\WINDOWS\system32\210.tmp - Deleted
C:\WINDOWS\system32\211.tmp - Deleted
C:\WINDOWS\system32\216.tmp - Deleted
C:\WINDOWS\system32\218.tmp - Deleted
C:\WINDOWS\system32\219.tmp - Deleted
C:\WINDOWS\system32\21C.tmp - Deleted
C:\WINDOWS\system32\21F.tmp - Deleted
C:\WINDOWS\system32\22.tmp - Deleted
C:\WINDOWS\system32\224.tmp - Deleted
C:\WINDOWS\system32\226.tmp - Deleted
C:\WINDOWS\system32\229.tmp - Deleted
C:\WINDOWS\system32\22A.tmp - Deleted
C:\WINDOWS\system32\23.tmp - Deleted
C:\WINDOWS\system32\230.tmp - Deleted
C:\WINDOWS\system32\231.tmp - Deleted
C:\WINDOWS\system32\232.tmp - Deleted
C:\WINDOWS\system32\234.tmp - Deleted
C:\WINDOWS\system32\236.tmp - Deleted
C:\WINDOWS\system32\237.tmp - Deleted
C:\WINDOWS\system32\24.tmp - Deleted
C:\WINDOWS\system32\241.tmp - Deleted
C:\WINDOWS\system32\249.tmp - Deleted
C:\WINDOWS\system32\24A.tmp - Deleted
C:\WINDOWS\system32\24E.tmp - Deleted
C:\WINDOWS\system32\25.tmp - Deleted
C:\WINDOWS\system32\250.tmp - Deleted
C:\WINDOWS\system32\251.tmp - Deleted
C:\WINDOWS\system32\252.tmp - Deleted
C:\WINDOWS\system32\253.tmp - Deleted
C:\WINDOWS\system32\254.tmp - Deleted
C:\WINDOWS\system32\256.tmp - Deleted
C:\WINDOWS\system32\25A.tmp - Deleted
C:\WINDOWS\system32\25B.tmp - Deleted
C:\WINDOWS\system32\25C.tmp - Deleted
C:\WINDOWS\system32\25D.tmp - Deleted
C:\WINDOWS\system32\25F.tmp - Deleted
C:\WINDOWS\system32\26.tmp - Deleted
C:\WINDOWS\system32\260.tmp - Deleted
C:\WINDOWS\system32\261.tmp - Deleted
C:\WINDOWS\system32\262.tmp - Deleted
C:\WINDOWS\system32\266.tmp - Deleted
C:\WINDOWS\system32\268.tmp - Deleted
C:\WINDOWS\system32\26B.tmp - Deleted
C:\WINDOWS\system32\26E.tmp - Deleted
C:\WINDOWS\system32\26F.tmp - Deleted
C:\WINDOWS\system32\27.tmp - Deleted
C:\WINDOWS\system32\273.tmp - Deleted
C:\WINDOWS\system32\27B.tmp - Deleted
C:\WINDOWS\system32\27C.tmp - Deleted
C:\WINDOWS\system32\27D.tmp - Deleted
C:\WINDOWS\system32\28.tmp - Deleted
C:\WINDOWS\system32\280.tmp - Deleted
C:\WINDOWS\system32\281.tmp - Deleted
C:\WINDOWS\system32\286.tmp - Deleted
C:\WINDOWS\system32\289.tmp - Deleted
C:\WINDOWS\system32\29.tmp - Deleted
C:\WINDOWS\system32\291.tmp - Deleted
C:\WINDOWS\system32\29B.tmp - Deleted
C:\WINDOWS\system32\29E.tmp - Deleted
C:\WINDOWS\system32\29F.tmp - Deleted
C:\WINDOWS\system32\2A.tmp - Deleted
C:\WINDOWS\system32\2A3.tmp - Deleted
C:\WINDOWS\system32\2A4.tmp - Deleted
C:\WINDOWS\system32\2A5.tmp - Deleted
C:\WINDOWS\system32\2AA.tmp - Deleted
C:\WINDOWS\system32\2AB.tmp - Deleted
C:\WINDOWS\system32\2AC.tmp - Deleted
C:\WINDOWS\system32\2AD.tmp - Deleted
C:\WINDOWS\system32\2B.tmp - Deleted
C:\WINDOWS\system32\2B0.tmp - Deleted
C:\WINDOWS\system32\2B4.tmp - Deleted
C:\WINDOWS\system32\2B6.tmp - Deleted
C:\WINDOWS\system32\2B9.tmp - Deleted
C:\WINDOWS\system32\2BE.tmp - Deleted
C:\WINDOWS\system32\2C.tmp - Deleted
C:\WINDOWS\system32\2C0.tmp - Deleted
C:\WINDOWS\system32\2CE.tmp - Deleted
C:\WINDOWS\system32\2D.tmp - Deleted
C:\WINDOWS\system32\2D5.tmp - Deleted
C:\WINDOWS\system32\2D6.tmp - Deleted
C:\WINDOWS\system32\2D7.tmp - Deleted
C:\WINDOWS\system32\2DB.tmp - Deleted
C:\WINDOWS\system32\2DF.tmp - Deleted
C:\WINDOWS\system32\2E.tmp - Deleted
C:\WINDOWS\system32\2E5.tmp - Deleted
C:\WINDOWS\system32\2E6.tmp - Deleted
C:\WINDOWS\system32\2E8.tmp - Deleted
C:\WINDOWS\system32\2EA.tmp - Deleted
C:\WINDOWS\system32\2EB.tmp - Deleted
C:\WINDOWS\system32\2ED.tmp - Deleted
C:\WINDOWS\system32\2EE.tmp - Deleted
C:\WINDOWS\system32\2F.tmp - Deleted
C:\WINDOWS\system32\2F4.tmp - Deleted
C:\WINDOWS\system32\2F7.tmp - Deleted
C:\WINDOWS\system32\10.tmp - Deleted
C:\WINDOWS\system32\103.tmp - Deleted
C:\WINDOWS\system32\106.tmp - Deleted
C:\WINDOWS\system32\109.tmp - Deleted
C:\WINDOWS\system32\10F.tmp - Deleted
C:\WINDOWS\system32\115.tmp - Deleted
C:\WINDOWS\system32\117.tmp - Deleted
C:\WINDOWS\system32\119.tmp - Deleted
C:\WINDOWS\system32\12.tmp - Deleted
C:\WINDOWS\system32\127.tmp - Deleted
C:\WINDOWS\system32\13.tmp - Deleted
C:\WINDOWS\system32\138.tmp - Deleted
C:\WINDOWS\system32\13D.tmp - Deleted
C:\WINDOWS\system32\13E.tmp - Deleted
C:\WINDOWS\system32\14.tmp - Deleted
C:\WINDOWS\system32\146.tmp - Deleted
C:\WINDOWS\system32\14E.tmp - Deleted
C:\WINDOWS\system32\15.tmp - Deleted
C:\WINDOWS\system32\153.tmp - Deleted
C:\WINDOWS\system32\154.tmp - Deleted
C:\WINDOWS\system32\155.tmp - Deleted
C:\WINDOWS\system32\157.tmp - Deleted
C:\WINDOWS\system32\159.tmp - Deleted
C:\WINDOWS\system32\15C.tmp - Deleted
C:\WINDOWS\system32\16.tmp - Deleted
C:\WINDOWS\system32\160.tmp - Deleted
C:\WINDOWS\system32\161.tmp - Deleted
C:\WINDOWS\system32\162.tmp - Deleted
C:\WINDOWS\system32\163.tmp - Deleted
C:\WINDOWS\system32\164.tmp - Deleted
C:\WINDOWS\system32\166.tmp - Deleted
C:\WINDOWS\system32\167.tmp - Deleted
C:\WINDOWS\system32\16B.tmp - Deleted
C:\WINDOWS\system32\16D.tmp - Deleted
C:\WINDOWS\system32\17.tmp - Deleted
C:\WINDOWS\system32\171.tmp - Deleted
C:\WINDOWS\system32\177.tmp - Deleted
C:\WINDOWS\system32\179.tmp - Deleted
C:\WINDOWS\system32\17A.tmp - Deleted
C:\WINDOWS\system32\17B.tmp - Deleted
C:\WINDOWS\system32\17C.tmp - Deleted
C:\WINDOWS\system32\17D.tmp - Deleted
C:\WINDOWS\system32\181.tmp - Deleted
C:\WINDOWS\system32\182.tmp - Deleted
C:\WINDOWS\system32\183.tmp - Deleted
C:\WINDOWS\system32\187.tmp - Deleted
C:\WINDOWS\system32\188.tmp - Deleted
C:\WINDOWS\system32\18D.tmp - Deleted
C:\WINDOWS\system32\18E.tmp - Deleted
C:\WINDOWS\system32\19.tmp - Deleted
C:\WINDOWS\system32\194.tmp - Deleted
C:\WINDOWS\system32\1A.tmp - Deleted
C:\WINDOWS\system32\1A3.tmp - Deleted
C:\WINDOWS\system32\1A4.tmp - Deleted
C:\WINDOWS\system32\1A5.tmp - Deleted
C:\WINDOWS\system32\1AF.tmp - Deleted
C:\WINDOWS\system32\1B.tmp - Deleted
C:\WINDOWS\system32\1B4.tmp - Deleted
C:\WINDOWS\system32\1B5.tmp - Deleted
C:\WINDOWS\system32\1B6.tmp - Deleted
C:\WINDOWS\system32\1B7.tmp - Deleted
C:\WINDOWS\system32\1BF.tmp - Deleted
C:\WINDOWS\system32\1C.tmp - Deleted
C:\WINDOWS\system32\1C2.tmp - Deleted
C:\WINDOWS\system32\1C4.tmp - Deleted
C:\WINDOWS\system32\1C9.tmp - Deleted
C:\WINDOWS\system32\1CD.tmp - Deleted
C:\WINDOWS\system32\1CE.tmp - Deleted
C:\WINDOWS\system32\1CF.tmp - Deleted
C:\WINDOWS\system32\1D.tmp - Deleted
C:\WINDOWS\system32\1D6.tmp - Deleted
C:\WINDOWS\system32\1D9.tmp - Deleted
C:\WINDOWS\system32\1DB.tmp - Deleted
C:\WINDOWS\system32\1E.tmp - Deleted
C:\WINDOWS\system32\1E3.tmp - Deleted
C:\WINDOWS\system32\1E7.tmp - Deleted
C:\WINDOWS\system32\1E8.tmp - Deleted
C:\WINDOWS\system32\1EA.tmp - Deleted
C:\WINDOWS\system32\1F.tmp - Deleted
C:\WINDOWS\system32\1F1.tmp - Deleted
C:\WINDOWS\system32\1F9.tmp - Deleted
C:\WINDOWS\system32\1FA.tmp - Deleted
C:\WINDOWS\system32\1FB.tmp - Deleted
C:\WINDOWS\system32\urdvxc.exe - Deleted

Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.

Final Check:

catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-11 09:20:37
Windows 5.1.2600 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\damineuf-du-69@hotmail.fr\SharingMetadata\petite-chloe@hotmail.fr\DFSR\Staging\CS{BBC2D78D-F97B-4A27-9F1C-2DB43A4D6108}\01\10-{BBC2D78D-F97B-4A27-9F1C-2DB43A4D6108}-v1-{5A16C3A9-0325-4BED-9CD0-E5D19EE49223}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\34\793-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v34-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v793-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 12486 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\34\793-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v34-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v793-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1432 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\57\819-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v57-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v819-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9318 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\57\819-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v57-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v819-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1040 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\01\758-{302E2C03-2BDB-B912-02E3-B8782EA41564}-v1-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v758-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 8 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\13\761-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v13-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v761-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9372 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\13\761-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v13-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v761-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1056 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\13\762-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v13-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v762-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9372 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\13\762-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v13-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v762-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1056 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\14\763-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v14-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v763-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9966 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\14\763-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v14-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v763-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1120 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\15\764-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v15-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v764-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9804 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\15\764-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v15-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v764-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1128 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\16\765-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v16-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v765-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10488 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\16\765-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v16-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v765-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1208 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\17\766-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v17-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v766-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11370 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\17\766-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v17-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v766-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1272 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\18\767-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v18-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v767-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9282 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\18\767-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v18-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v767-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1040 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\19\768-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v19-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v768-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10722 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\19\768-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v19-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v768-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1232 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\20\769-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v20-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v769-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11928 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\20\769-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v20-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v769-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1328 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\21\772-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v21-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v772-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 12738 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\21\772-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v21-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v772-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1440 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\22\773-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v22-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v773-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10434 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\22\773-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v22-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v773-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1176 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\23\774-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v23-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v774-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11226 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\23\774-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v23-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v774-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1280 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\24\775-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v24-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v775-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10164 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\24\775-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v24-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v775-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1120 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\25\776-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v25-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v776-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10074 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\25\776-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v25-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v776-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1120 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\26\777-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v26-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v777-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10272 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\26\777-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v26-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v777-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1160 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\27\784-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v27-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v784-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9804 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\27\784-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v27-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v784-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1096 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\28\785-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v28-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v785-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10992 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\28\785-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v28-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v785-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1248 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\29\786-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v29-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v786-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10614 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\29\786-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v29-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v786-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1184 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\30\787-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v30-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v787-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 12540 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\30\787-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v30-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v787-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1416 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\31\788-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v31-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v788-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11370 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\31\788-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v31-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v788-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1264 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\32\789-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v32-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v789-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10686 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\32\789-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v32-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v789-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1216 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\33\792-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v33-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v792-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10344 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\33\792-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v33-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v792-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1160 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\35\794-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v35-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v794-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 12270 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\35\794-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v35-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v794-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1384 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\36\783-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v36-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v783-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 12846 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\36\783-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v36-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v783-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1424 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\37\795-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v37-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v795-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 12810 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\37\795-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v37-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v795-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1400 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\38\791-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v38-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v791-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 12342 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\38\791-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v38-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v791-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1408 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\39\796-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v39-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v796-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11406 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\39\796-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v39-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v796-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1296 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\40\797-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v40-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v797-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9462 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\40\797-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v40-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v797-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1080 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\41\798-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v41-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v798-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11424 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\41\798-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v41-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v798-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1320 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\42\799-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v42-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v799-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9318 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\42\799-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v42-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v799-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1064 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\43\800-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v43-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v800-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10776 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\43\800-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v43-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v800-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1216 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\44\801-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v44-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v801-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11442 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\44\801-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v44-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v801-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1328 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\45\802-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v45-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v802-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9786 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\45\802-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v45-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v802-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1120 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\46\803-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v46-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v803-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11514 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\46\803-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v46-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v803-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1296 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\47\804-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v47-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v804-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9750 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\47\804-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v47-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v804-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1104 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\48\805-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v48-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v805-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11316 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\48\805-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v48-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v805-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1248 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\49\806-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v49-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v806-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10200 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\49\806-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v49-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v806-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1160 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\50\807-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v50-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v807-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10038 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\50\807-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v50-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v807-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1152 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\51\1417-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1151-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1417-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2730 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\51\1417-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1151-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1417-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 288 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\51\813-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v51-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v813-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10632 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\51\813-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v51-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v813-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1184 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\52\1418-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1152-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1418-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2712 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\52\1418-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1152-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1418-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 280 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\52\814-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v52-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v814-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10632 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\52\814-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v52-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v814-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1168 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\53\1419-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1153-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1419-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2712 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\53\1419-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1153-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1419-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 304 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\53\815-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v53-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v815-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11370 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\53\815-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v53-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v815-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1304 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\54\1420-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1154-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1420-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4206 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\54\1420-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1154-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1420-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 472 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\54\816-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v54-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v816-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11262 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\54\816-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v54-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v816-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1256 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\55\1421-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1155-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1421-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4152 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\55\1421-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1155-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1421-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 432 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\55\817-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v55-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v817-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11118 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\55\817-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v55-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v817-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1240 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\56\818-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v56-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v818-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9354 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\56\818-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v56-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v818-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1080 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\58\1422-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1158-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1422-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4134 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\58\1422-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1158-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1422-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 464 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\58\811-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v58-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v811-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9570 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\58\811-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v58-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v811-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1080 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\58\812-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v58-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v812-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9570 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\58\812-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v58-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v812-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1080 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\59\1423-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1159-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1423-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2640 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\59\1423-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1159-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1423-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 296 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\59\820-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v59-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v820-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10254 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\59\820-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v59-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v820-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1152 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\60\1424-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1160-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1424-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 4332 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\60\1424-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1160-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1424-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 472 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\60\821-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v60-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v821-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 9516 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\60\821-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v60-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v821-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1104 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\61\1425-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1161-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1425-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3252 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\61\1425-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1161-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1425-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 352 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\61\822-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v61-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v822-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10650 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\61\822-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v61-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v822-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1200 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\62\1426-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1162-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1426-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2892 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\62\1426-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1162-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1426-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 312 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\62\823-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v62-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v823-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11316 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\62\823-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v62-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v823-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1248 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\63\1427-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1163-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1427-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3000 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\63\1427-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1163-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1427-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 336 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\63\824-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v63-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v824-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11298 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\63\824-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v63-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v824-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1312 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\64\1428-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1164-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1428-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2910 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\64\1428-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1164-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1428-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 320 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\64\825-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v64-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v825-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 10110 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\64\825-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v64-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v825-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1152 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\65\1429-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1165-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1429-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2838 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\65\1429-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1165-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1429-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 328 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\65\826-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v65-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v826-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11262 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\65\826-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v65-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v826-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1272 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\66\1430-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1166-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1430-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 2730 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\66\1430-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1166-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1430-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 304 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\66\827-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v66-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v827-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 11154 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\66\827-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v66-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v827-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 1264 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\67\1431-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1167-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1431-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 3522 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\67\1431-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1167-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v1431-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS 400 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\67\828-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v67-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v828-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1 12360 bytes hidden from API
C:\Documents and Settings\ght\Local Settings\Application Data\Microsoft\Messenger\mat9185@msn.com\SharingMetadata\jeansdc97@hotmail.fr\DFSR\Staging\CS{302E2C03-2BDB-B912-02E3-B8782EA41564}\67\828-{14D68CBE-6B45-4D0C-8578-2DD71E9B78B4}-v67-{0C990132-3E20-4F7D-B128-A9BD10B1B0DD}-v828-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66

regarde ceci
https://www.malekal.com/avira-free-security-antivirus-gratuit/
@+

bonsoir,
Je fearai tout ça demain, ce soir j'ai pas trop le temps.
Je t'envoi tout demain, pour mes pages web, le blème est réglé, lycos il fallait voir dans mes parametres de connexions, et lidl le site est en panne, pour les autres tout va bien.
Par contre je sais pas si c'est à cause des virus restant,d'après bitdefender il en resterait 2 si j'ai bien compris le scan, quand je reste trop longtemps sans utiliser internet,l'ordi bug.
Je suis obligé de l'éteindre au bouton, et de rallumer.
Bon peut être que tot sera réglé demain.
Dans la quarantaine avast, il y avait allaple, et le trojan qui me pose des souci, mais depuis la suppression, je n'ai plus rien au démarrage.
A demain donc.
Bonne nuit
Patricia
a+

Bonjour
pour la quarantaine d'avast tout dépend de ce qu'il y avait dedans
en attendant le scan de bitdefender à fait un beau nettoyage

installe un pare feu, regarde ici
https://www.malekal.com/tutoriel-zonealarm-firewall/

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec

------
= Redémarre en mode Sans Échec (le démarrage peut prendre plusieurs minutes)
Attention, pas d’accès à internet dans ce mode. Enregistre ou imprime les consignes.

Relance le Pc et tapote la touche F8 ( ou F5 pour certains) , jusqu’à l’apparition des inscriptions avec choix de démarrage
Avec les touches « flèches », sélectionne Mode sans échec ==> entrée ==>nom utilisateur habituel
-------

= Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
= Appuie sur Y pour commencer le processus de nettoyage.
= Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
= Appuie sur une touche pour redémarrer le PC.
= Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
= Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
= Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
= Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
= Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse
@+

Au fait j'ai vidé ma quarantaine avast entre temps, j'espère que j'ai bien fait .

Salut Ep44
voilà le rapport bitdefender comme demandé, E ext mon disque externe, G et H est 1 seul disque partitionné.
Je te donne du boulot, dur pour un lundi matin.
merci de ton aide

BitDefender Online Scanner

Rapport d'analyse généré à: Mon, Dec 10, 2007 - 02:03:34

Voie d'analyse: A:\;C:\;D:\;E:\;F:\;G:\;H:\;

Statistiques

Temps
03:22:13

Fichiers
260053

Directoires
8202

Secteurs de boot
7

Archives
1887

Paquets programmes
9148

Résultats

Virus identifiés
14

Fichiers infectés
503

Fichiers suspects
0

Avertissements
0

Désinfectés
0

Fichiers effacés
501

Info sur les moteurs

Définition virus
880952

Version des moteurs
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Analyse des plugins
14

Archive des plugins
38

Unpack des plugins
7

E-mail plugins
6

Système plugins
1

Paramètres d'analyse

Première action
Désinfecté

Seconde Action
Supprimé

Heuristique
Oui

Acceptez les avertissements
Oui

Extensions analysées
*;

Excludez les extensions

Analyse d'emails
Oui

Analyse des Archives
Oui

Analyser paquets programmes
Oui

Analyse des fichiers
Oui

Analyse de boot
Oui

Fichier analysé
Statut

C:\ComboFix.exe=>(RAR Sfx o)
Infecté par: Trojan.Bat.Sdel.B

C:\ComboFix.exe=>(RAR Sfx o)
Echec de la désinfection

C:\ComboFix.exe=>(RAR Sfx o)
Supprimé

C:\ComboFix.exe
Echec de la mise à jour

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>g.exe
Infecté par: Backdoor.IRC.Zapchast.JG

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>g.exe
Echec de la désinfection

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>g.exe
Supprimé

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)
Echec de la mise à jour

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m1.bmp
Infecté par: Backdoor.Ircflood.B

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m1.bmp
Echec de la désinfection

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m1.bmp
Supprimé

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)
Echec de la mise à jour

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m3.bmp
Infecté par: Backdoor.IRC.Zapchast.JG

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m3.bmp
Echec de la désinfection

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m3.bmp
Supprimé

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)
Echec de la mise à jour

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m5.bmp
Infecté par: Backdoor.MIrc.FV

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m5.bmp
Echec de la désinfection

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m5.bmp
Supprimé

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)
Echec de la mise à jour

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m6.bmp
Infecté par: Backdoor.MIrc.FV

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m6.bmp
Echec de la désinfection

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m6.bmp
Supprimé

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)
Echec de la mise à jour

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m7.bmp
Infecté par: Trojan.IRC.A

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m7.bmp
Echec de la désinfection

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m7.bmp
Supprimé

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)
Echec de la mise à jour

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m8.bmp
Infecté par: Backdoor.Ircflood.B

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m8.bmp
Echec de la désinfection

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>l4m8.bmp
Supprimé

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)
Echec de la mise à jour

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>mirc.ini
Infecté par: Trojan.Irc.Flood.B

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>mirc.ini
Echec de la désinfection

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)=>mirc.ini
Supprimé

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\OJ6HCBM7\l0ert[1].exe=>(CAB Sfx o)
Echec de la mise à jour

C:\WINDOWS\system32\11.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\11.tmp
Echec de la désinfection

C:\WINDOWS\system32\11.tmp
Supprimé

C:\WINDOWS\system32\120.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\120.tmp
Echec de la désinfection

C:\WINDOWS\system32\120.tmp
Supprimé

C:\WINDOWS\system32\14F.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\14F.tmp
Echec de la désinfection

C:\WINDOWS\system32\14F.tmp
Supprimé

C:\WINDOWS\system32\18.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\18.tmp
Echec de la désinfection

C:\WINDOWS\system32\18.tmp
Supprimé

C:\WINDOWS\system32\1BB.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\1BB.tmp
Echec de la désinfection

C:\WINDOWS\system32\1BB.tmp
Supprimé

C:\WINDOWS\system32\1C.tmp
Infecté par: DeepScan:Generic.Ranky.D70BC3A3

C:\WINDOWS\system32\1C.tmp
Echec de la désinfection

C:\WINDOWS\system32\1C.tmp
Echec de la suppression

C:\WINDOWS\system32\46.tmp
Infecté par: DeepScan:Generic.Ranky.D70BC3A3

C:\WINDOWS\system32\46.tmp
Echec de la désinfection

C:\WINDOWS\system32\46.tmp
Supprimé

C:\WINDOWS\system32\47.tmp
Infecté par: DeepScan:Generic.Ranky.D70BC3A3

C:\WINDOWS\system32\47.tmp
Echec de la désinfection

C:\WINDOWS\system32\47.tmp
Supprimé

C:\WINDOWS\system32\5B.tmp
Infecté par: DeepScan:Generic.Ranky.D70BC3A3

C:\WINDOWS\system32\5B.tmp
Echec de la désinfection

C:\WINDOWS\system32\5B.tmp
Supprimé

C:\WINDOWS\system32\74.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\74.tmp
Echec de la désinfection

C:\WINDOWS\system32\74.tmp
Supprimé

C:\WINDOWS\system32\7A.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\7A.tmp
Echec de la désinfection

C:\WINDOWS\system32\7A.tmp
Supprimé

C:\WINDOWS\system32\83.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\83.tmp
Echec de la désinfection

C:\WINDOWS\system32\83.tmp
Supprimé

C:\WINDOWS\system32\87.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\87.tmp
Echec de la désinfection

C:\WINDOWS\system32\87.tmp
Supprimé

C:\WINDOWS\system32\8D.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\8D.tmp
Echec de la désinfection

C:\WINDOWS\system32\8D.tmp
Supprimé

C:\WINDOWS\system32\B0.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\B0.tmp
Echec de la désinfection

C:\WINDOWS\system32\B0.tmp
Supprimé

C:\WINDOWS\system32\BF.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\BF.tmp
Echec de la désinfection

C:\WINDOWS\system32\BF.tmp
Supprimé

C:\WINDOWS\system32\D.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\D.tmp
Echec de la désinfection

C:\WINDOWS\system32\D.tmp
Supprimé

C:\WINDOWS\system32\E.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\E.tmp
Echec de la désinfection

C:\WINDOWS\system32\E.tmp
Supprimé

C:\WINDOWS\system32\F.tmp
Infecté par: Backdoor.Generic.15877

C:\WINDOWS\system32\F.tmp
Echec de la désinfection

C:\WINDOWS\system32\F.tmp
Supprimé

C:\WINDOWS\system32\gfghs\l4m1.bmp
Infecté par: Backdoor.Ircflood.B

C:\WINDOWS\system32\gfghs\l4m1.bmp
Echec de la désinfection

C:\WINDOWS\system32\gfghs\l4m1.bmp
Supprimé

C:\WINDOWS\system32\gfghs\l4m3.bmp
Infecté par: Backdoor.IRC.Zapchast.JG

C:\WINDOWS\system32\gfghs\l4m3.bmp
Echec de la désinfection

C:\WINDOWS\system32\gfghs\l4m3.bmp
Supprimé

C:\WINDOWS\system32\gfghs\l4m5.bmp
Infecté par: Backdoor.MIrc.FV

C:\WINDOWS\system32\gfghs\l4m5.bmp
Echec de la désinfection

C:\WINDOWS\system32\gfghs\l4m5.bmp
Supprimé

C:\WINDOWS\system32\gfghs\l4m6.bmp
Infecté par: Backdoor.MIrc.FV

C:\WINDOWS\system32\gfghs\l4m6.bmp
Echec de la désinfection

C:\WINDOWS\system32\gfghs\l4m6.bmp
Supprimé

C:\WINDOWS\system32\gfghs\l4m7.bmp
Infecté par: Trojan.IRC.A

C:\WINDOWS\system32\gfghs\l4m7.bmp
Echec de la désinfection

C:\WINDOWS\system32\gfghs\l4m7.bmp
Supprimé

C:\WINDOWS\system32\gfghs\l4m8.bmp
Infecté par: Backdoor.Ircflood.B

C:\WINDOWS\system32\gfghs\l4m8.bmp
Echec de la désinfection

C:\WINDOWS\system32\gfghs\l4m8.bmp
Supprimé

C:\WINDOWS\system32\oobe\actsetup\aprvcyms.htm
Infecté par: Trojan.Rahack.HTM

C:\WINDOWS\system32\oobe\actsetup\aprvcyms.htm
Echec de la désinfection

C:\WINDOWS\system32\oobe\actsetup\aprvcyms.htm
Supprimé

C:\WINDOWS\system32\oobe\regerror\rnoansw.htm
Infecté par: Trojan.Rahack.HTM

C:\WINDOWS\system32\oobe\regerror\rnoansw.htm
Echec de la désinfection

C:\WINDOWS\system32\oobe\regerror\rnoansw.htm
Supprimé

C:\WINDOWS\system32\oobe\setup\drdymig.htm
Infecté par: Trojan.Rahack.HTM

C:\WINDOWS\system32\oobe\setup\drdymig.htm
Echec de la désinfection

C:\WINDOWS\system32\oobe\setup\drdymig.htm
Supprimé

C:\WINDOWS\system32\oobe\setup\drdyoem.htm
Infecté par: Trojan.Rahack.HTM

C:\WINDOWS\system32\oobe\setup\drdyoem.htm
Echec de la désinfection

C:\WINDOWS\system32\oobe\setup\drdyoem.htm
Supprimé

C:\WINDOWS\system32\oobe\setup\drdyref.htm
Infecté par: Trojan.Rahack.HTM

C:\WINDOWS\system32\oobe\setup\drdyref.htm
Echec de la désinfection

C:\WINDOWS\system32\oobe\setup\drdyref.htm
Supprimé

C:\WINDOWS\system32\oobe\setup\prodkey.htm
Infecté par: Trojan.Rahack.HTM

C:\WINDOWS\system32\oobe\setup\prodkey.htm
Echec de la désinfection

C:\WINDOWS\system32\oobe\setup\prodkey.htm
Supprimé

C:\WINDOWS\system32\urdvxc.exe
Infecté par: Win32.Worm.Allaple.JF

C:\WINDOWS\system32\urdvxc.exe
Echec de la désinfection

C:\WINDOWS\system32\urdvxc.exe
Supprimé

C:\WINDOWS\system32\wms.exe
Infecté par: Generic.Sdbot.88FDE53F

C:\WINDOWS\system32\wms.exe
Echec de la désinfection

C:\WINDOWS\system32\wms.exe
Echec de la suppression

C:\WINDOWS\Temp\wpdss000.tmp
Infecté par: Backdoor.Generic.15224

C:\WINDOWS\Temp\wpdss000.tmp
Echec de la désinfection

C:\WINDOWS\Temp\wpdss000.tmp
Supprimé

E:\Jeux nitendo DS\CD install carte ne pas effacer\Installation Supercard\Racine\A copier coller dans DS\DSOrganize\HELP\english\nshkkwrn.exe
Infecté par: Win32.Worm.Allaple.JF

E:\Jeux nitendo DS\CD install carte ne pas effacer\Installation Supercard\Racine\A copier coller dans DS\DSOrganize\HELP\english\nshkkwrn.exe
Echec de la désinfection

E:\Jeux nitendo DS\CD install carte ne pas effacer\Installation Supercard\Racine\A copier coller dans DS\DSOrganize\HELP\english\nshkkwrn.exe
Supprimé

E:\Jeux nitendo DS\CD install carte ne pas effacer\Installation Supercard\Racine\A copier coller dans DS\DSOrganize\HELP\nshkkwrn.exe
Infecté par: Win32.Worm.Allaple.JF

E:\Jeux nitendo DS\CD install carte ne pas effacer\Installation Supercard\Racine\A copier coller dans DS\DSOrganize\HELP\nshkkwrn.exe
Echec de la désinfection

E:\Jeux nitendo DS\CD install carte ne pas effacer\Installation Supercard\Racine\A copier coller dans DS\DSOrganize\HELP\nshkkwrn.exe
Supprimé

E:\ksqhjrkk.exe
Infecté par: Win32.Worm.Allaple.JF

E:\ksqhjrkk.exe
Echec de la désinfection

E:\ksqhjrkk.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422416.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422416.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422416.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422417.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422417.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422417.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422418.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422418.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422418.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422419.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422419.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422419.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422420.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422420.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422420.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422421.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422421.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP355\A0422421.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428495.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428495.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428495.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428496.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428496.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428496.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428497.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428497.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428497.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428498.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428498.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428498.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428499.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428499.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428499.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428500.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428500.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428500.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428501.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428501.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428501.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428502.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428502.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428502.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428503.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428503.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428503.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428505.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428505.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428505.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428506.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428506.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428506.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428507.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428507.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428507.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428508.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428508.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428508.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428509.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428509.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428509.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428510.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428510.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428510.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428511.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428511.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428511.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428512.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428512.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428512.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428513.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428513.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP358\A0428513.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP370\A0463952.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP370\A0463952.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP370\A0463952.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP370\A0463953.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP370\A0463953.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP370\A0463953.exe
Supprimé

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP370\A0463954.exe
Infecté par: Win32.Worm.Allaple.JF

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP370\A0463954.exe
Echec de la désinfection

E:\System Volume Information\_restore{4777AB86-6149-4358-91D3-1450BB694247}\RP370\A0463954.exe
Supprimé

E:\verhtbqk.exe
Infecté par: Win32.Worm.Allaple.JF

E:\verhtbqk.exe
Echec de la désinfection

E:\verhtbqk.exe
Supprimé

H:\documents rt logs de C\shcnhnbc.exe
Infecté par: Win32.Worm.Allaple.JF

H:\documents rt logs de C\shcnhnbc.exe
Echec de la désinfection

H:\documents rt logs de C\shcnhnbc.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\adobe_epic\eula\en_US\kvjrbnnk.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\adobe_epic\eula\en_US\kvjrbnnk.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\adobe_epic\eula\en_US\kvjrbnnk.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\adobe_epic\eula\en_US\reklwxbh.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\adobe_epic\eula\en_US\reklwxbh.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\adobe_epic\eula\en_US\reklwxbh.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\adobe_epic\eula\fr_FR\esxwvtej.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\adobe_epic\eula\fr_FR\esxwvtej.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\adobe_epic\eula\fr_FR\esxwvtej.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\adobe_epic\eula\fr_FR\xrhnnxjt.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\adobe_epic\eula\fr_FR\xrhnnxjt.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\adobe_epic\eula\fr_FR\xrhnnxjt.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\BeyondReader\ENU\Onramp\qejhkslj.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\BeyondReader\ENU\Onramp\qejhkslj.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\BeyondReader\ENU\Onramp\qejhkslj.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\BeyondReader\FRA\Onramp\whbksrcx.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\BeyondReader\FRA\Onramp\whbksrcx.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\BeyondReader\FRA\Onramp\whbksrcx.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\ennxsbbh.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\ennxsbbh.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\ennxsbbh.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bebstzlr.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bebstzlr.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bebstzlr.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bhtketrs.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bhtketrs.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bhtketrs.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bjeebesw.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bjeebesw.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bjeebesw.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bkentskn.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bkentskn.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bkentskn.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bkhkvqrs.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bkhkvqrs.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bkhkvqrs.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\blqhrbzx.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\blqhrbzx.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\blqhrbzx.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bsbsntlv.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bsbsntlv.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bsbsntlv.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bsnbknsz.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bsnbknsz.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bsnbknsz.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\btnlzklw.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\btnlzklw.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\btnlzklw.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bwvesesx.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bwvesesx.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bwvesesx.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bzhltjrk.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bzhltjrk.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\bzhltjrk.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\chhztjqe.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\chhztjqe.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\chhztjqe.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cjnkqvcs.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cjnkqvcs.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cjnkqvcs.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\clqrbetx.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\clqrbetx.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\clqrbetx.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cstswjsh.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cstswjsh.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cstswjsh.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cthntjeb.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cthntjeb.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cthntjeb.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ctlbnkcn.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ctlbnkcn.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ctlbnkcn.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cttrncss.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cttrncss.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cttrncss.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cvkrjssj.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cvkrjssj.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\cvkrjssj.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ejetsltn.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ejetsltn.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ejetsltn.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ejvsrxzr.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ejvsrxzr.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ejvsrxzr.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ejxtcqtz.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ejxtcqtz.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ejxtcqtz.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\eknrnjtk.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\eknrnjtk.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\eknrnjtk.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ensztkrl.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ensztkrl.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ensztkrl.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\evljxhrl.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\evljxhrl.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\evljxhrl.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\exjrvrsk.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\exjrvrsk.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\exjrvrsk.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hblswzlq.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hblswzlq.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hblswzlq.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hcblnesc.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hcblnesc.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hcblnesc.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hcreblvk.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hcreblvk.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hcreblvk.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hjrsennx.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hjrsennx.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hjrsennx.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hlbnnllw.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hlbnnllw.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hlbnnllw.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hqrslehv.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hqrslehv.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hqrslehv.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hrzbrjvl.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hrzbrjvl.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hrzbrjvl.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hstbswjq.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hstbswjq.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hstbswjq.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hszrxrxq.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hszrxrxq.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hszrxrxq.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\htsltvll.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\htsltvll.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\htsltvll.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hweskbtn.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hweskbtn.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\hweskbtn.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jhlbkztb.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jhlbkztb.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jhlbkztb.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jjxesthv.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jjxesthv.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jjxesthv.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jltnlrtb.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jltnlrtb.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jltnlrtb.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jnvjtstn.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jnvjtstn.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jnvjtstn.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jsbrlcvz.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jsbrlcvz.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jsbrlcvz.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jshseqse.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jshseqse.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jshseqse.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jvbzster.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jvbzster.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\jvbzster.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\khcntjlt.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\khcntjlt.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\khcntjlt.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kjresthb.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kjresthb.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kjresthb.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kjswrqch.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kjswrqch.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kjswrqch.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\klthjjjr.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\klthjjjr.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\klthjjjr.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kqkrcket.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kqkrcket.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kqkrcket.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ksnevnvn.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ksnevnvn.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ksnevnvn.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ksvttztn.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ksvttztn.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ksvttztn.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kszrltbb.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kszrltbb.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kszrltbb.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kvsxhkrb.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kvsxhkrb.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kvsxhkrb.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kxrcjnvz.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kxrcjnvz.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\kxrcjnvz.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ljejnres.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ljejnres.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ljejnres.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\lkzvkshh.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\lkzvkshh.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\lkzvkshh.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\lreqxnjn.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\lreqxnjn.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\lreqxnjn.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\lshslqbj.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\lshslqbj.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\lshslqbj.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ltvhnrbn.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ltvhnrbn.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ltvhnrbn.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\lxhhrkln.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\lxhhrkln.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\lxhhrkln.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\nnxbwqrn.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\nnxbwqrn.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\nnxbwqrn.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\nzezhsjv.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\nzezhsjv.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\nzezhsjv.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\qshrvtqj.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\qshrvtqj.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\qshrvtqj.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\rhvxwhlb.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\rhvxwhlb.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\rhvxwhlb.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\rjrbkkkl.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\rjrbkkkl.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\rjrbkkkl.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\rjwtseln.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\rjwtseln.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\rjwtseln.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\rxtltznc.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\rxtltznc.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\rxtltznc.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\sewvjhjh.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\sewvjhjh.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\sewvjhjh.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\shkbtqvr.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\shkbtqvr.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\shkbtqvr.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\shlnlhrv.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\shlnlhrv.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\shlnlhrv.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\shwltjlw.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\shwltjlw.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\shwltjlw.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\sktssblk.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\sktssblk.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\sktssblk.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\sqsjntll.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\sqsjntll.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\sqsjntll.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ssersnln.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ssersnln.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ssersnln.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\sslenwvt.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\sslenwvt.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\sslenwvt.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tcewrwex.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tcewrwex.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tcewrwex.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\telbqcwr.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\telbqcwr.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\telbqcwr.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tevrthvr.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tevrthvr.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tevrthvr.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\thzhstjr.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\thzhstjr.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\thzhstjr.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tkzlxzst.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tkzlxzst.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tkzlxzst.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tlektlnq.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tlektlnq.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tlektlnq.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tllwrklj.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tllwrklj.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\tllwrklj.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\trrbchse.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\trrbchse.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\trrbchse.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ttjlxrnh.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ttjlxrnh.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\ttjlxrnh.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\twjlstej.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\twjlstej.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\twjlstej.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\veevtljn.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\veevtljn.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\veevtljn.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\vetlvnjr.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\vetlvnjr.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\vetlvnjr.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\vrtbzttl.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\vrtbzttl.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\vrtbzttl.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\vtxtltrk.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\vtxtltrk.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\vtxtltrk.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wjxevblq.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wjxevblq.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wjxevblq.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wkhrjckw.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wkhrjckw.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wkhrjckw.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wnbrwcvk.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wnbrwcvk.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wnbrwcvk.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wrqqhtlv.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wrqqhtlv.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wrqqhtlv.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wwlwellb.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wwlwellb.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\wwlwellb.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\xelrwbjr.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\xelrwbjr.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\xelrwbjr.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\xllknkjc.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\xllknkjc.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\xllknkjc.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\xsbhcwlw.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\xsbhcwlw.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\xsbhcwlw.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\xtthjkjr.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\xtthjkjr.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\xtthjkjr.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\zbkqhtee.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\zbkqhtee.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\zbkqhtee.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\zejrrssc.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\zejrrssc.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\zejrrssc.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\zthezztb.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\zthezztb.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\zthezztb.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\zvebvntt.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\zvebvntt.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\zvebvntt.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bblxnzxn.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bblxnzxn.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bblxnzxn.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bjlzentx.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bjlzentx.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bjlzentx.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bnxtbwxt.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bnxtbwxt.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bnxtbwxt.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bqlevltn.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bqlevltn.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bqlevltn.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\brsczlhs.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\brsczlhs.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\brsczlhs.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bstslreb.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bstslreb.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bstslreb.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bswellrh.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bswellrh.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bswellrh.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bxvtebbr.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bxvtebbr.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\bxvtebbr.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\cebjhhbl.exe
Infecté par: Win32.Worm.Allaple.JF

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\cebjhhbl.exe
Echec de la désinfection

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\cebjhhbl.exe
Supprimé

H:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\cjrevbbt

ok à demain
@+

a demain, car le scan en a encore pour plus d'une heure.
Je ne sais pas si toi tu travaille demain, moi non.
Je te souhaite de passer une bonne nuit, j'espère que tu ne rêve pas trop a tous les problème des internaute que tu aides.:-)
bye

@+

bonsoir
J'ai bien supprimé les lignes 23 comme tu me la indiqué.
Je ne sais pas pourquoi elle sont encore là.
le scan bitdefender est en train de se faire.
Je t'enverrai le rapport demain.
Comme il en a pour un bon moment.
Je te remercie encore.
pour lidl je pense qu'il y a un blème sur le site.
Pour lycos je sais pas je n'ai pas la mème page que d'habitude, c'est ma page d'accueil quand j'ouvre internet explorer.
Mais bon je peux la changer si il le faut.
J'ai jeté un oeuil sur le scan de bitdefender, ca me fait un peu peur vu le nombre de fichiers infectés, et supprimés!!!!!!!!!!!!!
Je me demande ce qui va rester sur l'ordi

as tu coché les lignes 023 comme indiqué car elles sont toujours présente

pour tes pages internet je ne sais pas trop
Fais un scan antivirus en ligne avec Internet Explorer
https://www.bitdefender.fr/
et copie colle le résultat ici
= En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
= Dans la nouvelle fenêtre, clique sur I agree
= La fenêtre change encore, clique sur Click here to scan
= Les signatures se chargent, etc.

tuto en image

http://pageperso.aol.fr/rginformatique/mapage/defender.htm

et
reposte un nouveau rapport hijackthis

Une autre question, coment se fait-il que certaine de mes page web ne s'affiche pas correctement, ex : lycos ou il me signale une erreur sur la page, www.lidl.fr ou je ne peut plus acceder,
que dois-je faire, est ce par ce que j'ai vidé mon fichier temporary internet, ca ma l'a jamais fait les autres fois.
si tu as un tuyau
merci

Voici le rapport OTMoveIt

File/Folder C:\WINDOWS\System32\irdvxc.exe not found.
C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe moved successfully.
C:\WINDOWS\system32\ntss.exe moved successfully.
File/Folder C:\WINDOWS\system32\wspvs.exe not found.
File/Folder C:\WINDOWS\System32\wfvs.exe not found.

Created on 12/09/2007 18:04:34

et voici Hijack

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:19:52, on 09/12/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\atiptaxx.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\csrml.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
G:\eMule\emule.exe
H:\Mes documents\perso\MaxiMemo\MaxiMemo.exe
C:\WINDOWS\system32\1C.tmp
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\System32\urdvxc.exe
C:\Documents and Settings\ght\Bureau\logs recherche virus\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lycos.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.navreg.com/index.asp?siteid=8
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = ftp=proxy04.chello.fr:8080;http=proxy04.chello.fr:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\1C.tmp
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\userinit.exe,C:\WINDOWS\system32\1C.tmp
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MsgCenterExe] "C:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe" -osboot
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Protocol Deployment System Service] "C:\WINDOWS\System32\wpdss.exe" *
O4 - HKLM\..\Run: [Microsoft (R) Windows Network Service Monitor] C:\WINDOWS\system32\1C.tmp
O4 - HKLM\..\Run: [Windows Certificate Verification Service] "C:\WINDOWS\wcvs.exe" *
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "H:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI Multimedia\main\launchpd.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [eMuleAutoStart] G:\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows Client/Server Management Layer] "C:\WINDOWS\system32\csml.exe" * (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: La Solution Ciel (L).lnk = C:\CIEL\STARTER.EXE
O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: MaxiMemo.lnk = H:\Mes documents\perso\MaxiMemo\MaxiMemo.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\TV\EXPLBAR.DLL
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/290166a8d2b08aa4eb16/netzip/RdxIE601_fr.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {BC18E6DF-BE57-4580-93E8-F228F9A133AA} (MaxisSimCity4LotTeleX Control) - http://simcity.ea.com/exchange/lots/teleport/MaxisSimCity4LotTeleX.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game01.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Windows Client/Server Management Layer (CSML) - Unknown owner - C:\WINDOWS\system32\csml.exe (file missing)
O23 - Service: Windows Client/Server Runtime Management Layer (CSRML) - Unknown owner - C:\WINDOWS\system32\csrml.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Network helper Service (MSDisk) - Unknown owner - C:\WINDOWS\System32\irdvxc.exe (file missing)
O23 - Service: Network Windows Service (MSWindows) - Unknown owner - C:\WINDOWS\System32\urdvxc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Windows Network Service Monitor (nsmss) - Unknown owner - C:\WINDOWS\system32\1C.tmp
O23 - Service: Network Translation System Service (NTSS) - Unknown owner - C:\WINDOWS\system32\ntss.exe (file missing)
O23 - Service: Windows Certificate Verification Service (wcvs) - Unknown owner - C:\WINDOWS\wcvs.exe (file missing)
O23 - Service: Windows File Verification Service (wfvs) - Unknown owner - C:\WINDOWS\System32\wfvs.exe (file missing)
O23 - Service: Windows Management Service (wms) - Unknown owner - C:\WINDOWS\System32\wms.exe
O23 - Service: Windows Protocol Deployment System Service (wpdss) - Unknown owner - C:\WINDOWS\System32\wpdss.exe (file missing)
O23 - Service: Windows Server Peer Verification Service (wspvs) - Unknown owner - C:\WINDOWS\system32\wspvs.exe (file missing)

relance hijack et coche ceci
ensuite tu clic sur fix checked

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Windows Server Peer Verification Service] "C:\WINDOWS\system32\wspvs.exe" *
O4 - HKLM\..\Run: [Windows File Verification Service] "C:\WINDOWS\System32\wfvs.exe" *
O4 - HKLM\..\Run: [Microsoft (R) Windows Network Service Monitor] C:\WINDOWS\system32\1C.tmp
O4 - HKLM\..\Run: [Windows Client/Server Runtime Management Layer] "C:\WINDOWS\system32\csrml.exe" *
O4 - HKLM\..\Run: [Windows Client/Server Management Layer] "C:\WINDOWS\system32\csml.exe" *
O4 - HKUS\S-1-5-18\..\Run: [Windows File Verification Service] "C:\WINDOWS\System32\wfvs.exe" * (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Network Translation System Service] "C:\WINDOWS\system32\ntss.exe" * (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows Certificate Verification Service] "C:\WINDOWS\wcvs.exe" * (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows Client/Server Runtime Management Layer] "C:\WINDOWS\system32\csrml.exe" * (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows Client/Server Management Layer] "C:\WINDOWS\system32\csml.exe" * (User 'SYSTEM')
O4 - Global Startup: Update_0711_KB112020.exe
O4 - Global Startup: Update_0711_KB112021.exe
O16 - DPF: {127698E4-E730-4E5C-A2B1-21490A70C8A1} (CEnroll Class) - https://static.impots.gouv.fr/abos/securite/xenroll.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Windows Client/Server Management Layer (CSML) - Unknown owner - C:\WINDOWS\system32\csml.exe (file missing)
O23 - Service: Windows Client/Server Runtime Management Layer (CSRML) - Unknown owner - C:\WINDOWS\system32\csrml.exe (file missing)
O23 - Service: Network helper Service (MSDisk) - Unknown owner - C:\WINDOWS\System32\irdvxc.exe (file missing)
O23 - Service: Network Translation System Service (NTSS) - Unknown owner - C:\WINDOWS\system32\ntss.exe
O23 - Service: Windows File Verification Service (wfvs) - Unknown owner - C:\WINDOWS\System32\wfvs.exe (file missing)
O23 - Service: Windows Protocol Deployment System Service (wpdss) - Unknown owner - C:\WINDOWS\System32\wpdss.exe (file missing)
O23 - Service: Windows Server Peer Verification Service (wspvs) - Unknown owner - C:\WINDOWS\system32\wspvs.exe (file missing)

ensuite
Télécharger sur le bureau

http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe
= Copier ce texte en gras

C:\WINDOWS\System32\irdvxc.exe
C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
C:\WINDOWS\system32\ntss.exe
C:\WINDOWS\system32\wspvs.exe
C:\WINDOWS\System32\wfvs.exe

= Double-clic sur OTMoveIt.exe
= Dans le cadre de Gauche ==> clic-droit ==> coller
= Clic MoveIt!
= si redémarrage demandé==> Clic : YES
= Un rapport dans ==> C:_\OTMoveItMovedFilesdate du jour à copier/coller dans la réponse + nouveau rapport hijackthis.

Bonjour,
je te souhaite un bon dimanche, et merci de ton aide

ici le rapport combofix

ComboFix 07-08-09.3 - "ght" 2007-12-09 12:02:36.5 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.0.1252.1.1036.18.233 [GMT 1:00]
Command switches used :: C:\CFScript.txt
* Created a new restore point

FILE::
C:\WINDOWS\System32:pi2srv.exe
C:\WINDOWS\system32\wspvs.exe
C:\WINDOWS\System32\wpdss.exe
C:\WINDOWS\System32\wfvs.exe
C:\WINDOWS\wcvs.exe
C:\WINDOWS\system32\csml.exe
C:\WINDOWS\system32\csrml.exe

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

C:\WINDOWS\system32\csml.exe
C:\WINDOWS\system32\csrml.exe
C:\WINDOWS\System32\wfvs.exe
C:\WINDOWS\System32\wpdss.exe
C:\WINDOWS\system32\wspvs.exe
C:\WINDOWS\wcvs.exe

((((((((((((((((((((((((( Files Created from 2007-11-09 to 2007-12-09 )))))))))))))))))))))))))))))))

2007-12-08 11:57 <REP> d-------- C:\VundoFix Backups
2007-12-08 10:46 <REP> d-------- C:\Program Files\Navilog1
2007-12-07 22:39 51,200 --a------ C:\WINDOWS\nircmd.exe
2007-12-07 22:39 1,412,580 --a------ C:\ComboFix.exe
2007-12-07 18:42 8,646,776 --a------ C:\Program Files\Windows-KB890830-V1.35.exe
2007-12-05 23:46 <REP> d-------- C:\WINDOWS\setup.pss
2007-11-22 12:15 <REP> d-------- C:\DOCUME~1\ght\APPLIC~1\Artweaver
2007-11-19 17:16 304,128 --a------ C:\WINDOWS\unin040c.exe
2007-11-14 11:39 45 ---h----- C:\WINDOWS\dsez9885.dat

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-12-07 19:08 318369 --a------ C:\Program Files\HiJackThis.zip
2007-12-05 23:50 87262 --a------ C:\WINDOWS\system32\perfc00C.dat
2007-12-05 23:50 537598 --a------ C:\WINDOWS\system32\perfh00C.dat
2007-11-25 13:01 --------- d-------- C:\Program Files\Virtools Web Player 3.5
2007-11-09 15:34 32888 --a------ C:\DOCUME~1\ght\APPLIC~1\GDIPFONTCACHEV1.DAT
2007-11-08 08:41 441 --a------ C:\WINDOWS\system32\CRUNX.BIN
2007-11-07 12:35 737280 --a------ C:\WINDOWS\iun6002.exe
2007-10-28 19:54 --------- d-------- C:\Program Files\DivX
2007-10-26 16:01 --------- d-------- C:\Program Files\Norton Security Scan
2007-10-09 16:58 --------- d-------- C:\Program Files\QuickTime
2007-10-05 21:27 3766 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
2007-09-29 12:33 0 --a------ C:\WINDOWS\nsreg.dat
2007-09-28 17:08 156992 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2007-09-28 17:07 524288 --a------ C:\WINDOWS\system32\DivXsm.exe
2007-09-28 17:07 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2007-09-28 17:07 200704 --a------ C:\WINDOWS\system32\ssldivx.dll
2007-09-28 17:07 129784 --------- C:\WINDOWS\system32\pxafs.dll
2007-09-28 17:07 120056 --------- C:\WINDOWS\system32\pxcpyi64.exe
2007-09-28 17:07 118520 --------- C:\WINDOWS\system32\pxinsi64.exe
2007-09-28 17:07 1044480 --a------ C:\WINDOWS\system32\libdivx.dll
2007-09-28 17:05 823296 --a------ C:\WINDOWS\system32\divx_xx0c.dll
2007-09-28 17:05 823296 --a------ C:\WINDOWS\system32\divx_xx07.dll
2007-09-28 17:05 81920 --a------ C:\WINDOWS\system32\dpl100.dll
2007-09-28 17:05 802816 --a------ C:\WINDOWS\system32\divx_xx11.dll
2007-09-28 17:05 739840 --a------ C:\WINDOWS\system32\DivX.dll
2007-09-28 17:05 593920 --a------ C:\WINDOWS\system32\dpuGUI11.dll
2007-09-28 17:05 57344 --a------ C:\WINDOWS\system32\dpv11.dll
2007-09-28 17:05 53248 --a------ C:\WINDOWS\system32\dpuGUI10.dll
2007-09-28 17:05 344064 --a------ C:\WINDOWS\system32\dpus11.dll
2007-09-28 17:05 294912 --a------ C:\WINDOWS\system32\dpu11.dll
2007-09-28 17:05 294912 --a------ C:\WINDOWS\system32\dpu10.dll
2007-09-28 17:05 196608 --a------ C:\WINDOWS\system32\dtu100.dll
2007-09-28 17:05 12288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll
2007-09-25 07:55 183416 -r-hs---- C:\WINDOWS\system32\ntss.exe
2007-09-17 08:34 88 -r-hs---- C:\WINDOWS\system32\8B89B09422.sys
2007-07-25 18:58 774144 --a------ C:\Program Files\RngInterstitial.dll
2007-08-24 16:31:57 8,482 --sha-w C:\WINDOWS\system32\wms.exe

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AtiPTA"="atiptaxx.exe" [2002-06-27 18:51 C:\WINDOWS\system32\atiptaxx.exe]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-07-27 23:03]
"MsgCenterExe"="C:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe" []
"Ulead AutoDetector v2"="C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe" [2004-11-26 10:43]
"NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-08-08 10:04]
"Windows Server Peer Verification Service"="C:\WINDOWS\system32\wspvs.exe" []
"Windows Protocol Deployment System Service"="C:\WINDOWS\System32\wpdss.exe" []
"Windows File Verification Service"="C:\WINDOWS\System32\wfvs.exe" []
"Microsoft (R) Windows Network Service Monitor"="C:\WINDOWS\system32\1C.tmp" [2007-09-17 08:00]
"Network Translation System Service"="C:\WINDOWS\system32\ntss.exe" [2007-09-25 07:55]
"Windows Certificate Verification Service"="C:\WINDOWS\wcvs.exe" []
"Adobe Reader Speed Launcher"="H:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51]
"Windows Client/Server Runtime Management Layer"="C:\WINDOWS\system32\csrml.exe" []
"Windows Client/Server Management Layer"="C:\WINDOWS\system32\csml.exe" []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATI Launchpad"="C:\Program Files\ATI Multimedia\main\launchpd.exe" [2002-05-02 09:57]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-16 16:55]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-10-09 11:28]
"eMuleAutoStart"="G:\eMule\emule.exe" [2007-05-13 15:57]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Windows Server Peer Verification Service"="C:\WINDOWS\system32\wspvs.exe" *
"Windows Protocol Deployment System Service"="C:\WINDOWS\System32\wpdss.exe" *
"Windows File Verification Service"="C:\WINDOWS\System32\wfvs.exe" *
"Network Translation System Service"="C:\WINDOWS\system32\ntss.exe" *
"Windows Certificate Verification Service"="C:\WINDOWS\wcvs.exe" *
"Windows Client/Server Runtime Management Layer"="C:\WINDOWS\system32\csrml.exe" *
"Windows Client/Server Management Layer"="C:\WINDOWS\system32\csml.exe" *

C:\Documents and Settings\ght\Menu D‚marrer\Programmes\D‚marrage\
La Solution Ciel (L).lnk - C:\CIEL\STARTER.EXE [2007-06-26 09:48:10]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Contr“leur de calendrier Ulead.lnk - C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe [2007-09-19 20:10:03]
MaxiMemo.lnk - H:\Mes documents\perso\MaxiMemo\MaxiMemo.exe [2007-08-03 16:30:38]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 10:01:04]
Update_0711_KB112020.exe [2007-11-11 21:19:16]
Update_0711_KB112021.exe [2007-11-11 21:20:43]

R1 lusbaudio;Microphone USB Logitech;C:\WINDOWS\System32\drivers\OVSound2.sys
R2 CSML;Windows Client/Server Management Layer;C:\WINDOWS\system32\csml.exe
R2 CSRML;Windows Client/Server Runtime Management Layer;C:\WINDOWS\system32\csrml.exe
R2 Dnscache;Client DNS;C:\WINDOWS\System32\svchost.exe -k NetworkService
R2 nsmss;Windows Network Service Monitor;C:\WINDOWS\system32\1C.tmp
R2 NTSS;Network Translation System Service;C:\WINDOWS\system32\ntss.exe
R2 wcvs;Windows Certificate Verification Service;C:\WINDOWS\wcvs.exe
R2 wfvs;Windows File Verification Service;C:\WINDOWS\System32\wfvs.exe
R2 wms;Windows Management Service;C:\WINDOWS\System32\wms.exe
R2 wpdss;Windows Protocol Deployment System Service;C:\WINDOWS\System32\wpdss.exe
R2 wspvs;Windows Server Peer Verification Service;C:\WINDOWS\system32\wspvs.exe
R3 AN983;Carte Fast Ethernet 10/100 Mbps ADMtek AN983/AN985/ADM951X;C:\WINDOWS\System32\DRIVERS\AN983.sys
R3 ati2mtaa;ati2mtaa;C:\WINDOWS\System32\DRIVERS\ati2mtaa.sys
R3 QCEmerald;QuickCam Web Logitech;C:\WINDOWS\System32\DRIVERS\OVCE.sys
S2 MSDisk;Network helper Service;"C:\WINDOWS\System32\irdvxc.exe" /service
S3 ati2mpaa;ati2mpaa;C:\WINDOWS\System32\DRIVERS\ati2mpaa.sys
S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe"
S3 CO_Mon;CO_Mon;\??\C:\WINDOWS\System32\Drivers\CO_Mon.sys
S3 JL2005;JL2005A Camera;C:\WINDOWS\System32\Drivers\toywdm.sys

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{DB749F5C-4E5A-9303-73E5-529067FD290B}]
C:\WINDOWS\System32:pi2srv.exe

Contents of the 'Scheduled Tasks' folder
2007-12-04 03:30:00 C:\WINDOWS\Tasks\avast! Antivirus.job - C:\PROGRA~1\ALWILS~1\Avast4\ashAvast.exe

**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-09 12:05:54
Windows 5.1.2600 NTFS

scanning hidden processes ...

scanning hidden registry entries ...

scanning hidden files ...

**************************************************************************

Completion time: 2007-12-09 12:07:29
C:\ComboFix-quarantined-files.txt ... 2007-12-09 12:06
C:\ComboFix2.txt ... 2007-12-09 11:56
C:\ComboFix3.txt ... 2007-12-08 21:13

--- E O F ---

et voila le rapport hijack
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:12:38, on 09/12/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\atiptaxx.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\csml.exe
C:\WINDOWS\system32\csrml.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\1C.tmp
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
G:\eMule\emule.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\wpdss.exe
C:\WINDOWS\system32\ntss.exe
C:\WINDOWS\wcvs.exe
C:\WINDOWS\system32\wspvs.exe
C:\WINDOWS\System32\wfvs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\explorer.exe
C:\Documents and Settings\ght\Bureau\logs recherche virus\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lycos.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.navreg.com/index.asp?siteid=8
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = ftp=proxy04.chello.fr:8080;http=proxy04.chello.fr:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MsgCenterExe] "C:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe" -osboot
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Server Peer Verification Service] "C:\WINDOWS\system32\wspvs.exe" *
O4 - HKLM\..\Run: [Windows Protocol Deployment System Service] "C:\WINDOWS\System32\wpdss.exe" *
O4 - HKLM\..\Run: [Windows File Verification Service] "C:\WINDOWS\System32\wfvs.exe" *
O4 - HKLM\..\Run: [Microsoft (R) Windows Network Service Monitor] C:\WINDOWS\system32\1C.tmp
O4 - HKLM\..\Run: [Network Translation System Service] "C:\WINDOWS\system32\ntss.exe" *
O4 - HKLM\..\Run: [Windows Certificate Verification Service] "C:\WINDOWS\wcvs.exe" *
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "H:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Windows Client/Server Runtime Management Layer] "C:\WINDOWS\system32\csrml.exe" *
O4 - HKLM\..\Run: [Windows Client/Server Management Layer] "C:\WINDOWS\system32\csml.exe" *
O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI Multimedia\main\launchpd.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [eMuleAutoStart] G:\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows File Verification Service] "C:\WINDOWS\System32\wfvs.exe" * (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Network Translation System Service] "C:\WINDOWS\system32\ntss.exe" * (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows Certificate Verification Service] "C:\WINDOWS\wcvs.exe" * (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows Client/Server Runtime Management Layer] "C:\WINDOWS\system32\csrml.exe" * (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows Client/Server Management Layer] "C:\WINDOWS\system32\csml.exe" * (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: La Solution Ciel (L).lnk = C:\CIEL\STARTER.EXE
O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: MaxiMemo.lnk = H:\Mes documents\perso\MaxiMemo\MaxiMemo.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Update_0711_KB112020.exe
O4 - Global Startup: Update_0711_KB112021.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\TV\EXPLBAR.DLL
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {127698E4-E730-4E5C-A2B1-21490A70C8A1} (CEnroll Class) - https://static.impots.gouv.fr/abos/securite/xenroll.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/290166a8d2b08aa4eb16/netzip/RdxIE601_fr.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {BC18E6DF-BE57-4580-93E8-F228F9A133AA} (MaxisSimCity4LotTeleX Control) - http://simcity.ea.com/exchange/lots/teleport/MaxisSimCity4LotTeleX.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game01.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/...
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Windows Client/Server Management Layer (CSML) - Unknown owner - C:\WINDOWS\system32\csml.exe (file missing)
O23 - Service: Windows Client/Server Runtime Management Layer (CSRML) - Unknown owner - C:\WINDOWS\system32\csrml.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Network helper Service (MSDisk) - Unknown owner - C:\WINDOWS\System32\irdvxc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Windows Network Service Monitor (nsmss) - Unknown owner - C:\WINDOWS\system32\1C.tmp
O23 - Service: Network Translation System Service (NTSS) - Unknown owner - C:\WINDOWS\system32\ntss.exe
O23 - Service: Windows Certificate Verification Service (wcvs) - Unknown owner - C:\WINDOWS\wcvs.exe (file missing)
O23 - Service: Windows File Verification Service (wfvs) - Unknown owner - C:\WINDOWS\System32\wfvs.exe (file missing)
O23 - Service: Windows Management Service (wms) - Unknown owner - C:\WINDOWS\System32\wms.exe
O23 - Service: Windows Protocol Deployment System Service (wpdss) - Unknown owner - C:\WINDOWS\System32\wpdss.exe (file missing)
O23 - Service: Windows Server Peer Verification Service (wspvs) - Unknown owner - C:\WINDOWS\system32\wspvs.exe (file missing)