Win 32 agent pdd

Bonjour,

* Lance OTmoveIT.
* Clique sur CleanUp! (le programme va télécharger un fichier texte qui servira a nettoyer les programmes que l'on a téléchargés).

NOTE : Normalement, ton firewall (parefeu) devrait te demander si OTmoveIT peut accéder à internet, Autorise le.

* Une liste apparaît dans la partie gauche d'OTmoveIT.
* Un message apparaît pour confirmer le nettoyage. Confirme.
* Les fichiers infectés qui se trouvent dans les quarantaines seront supprimés aussi.

1/ Il est fortement recommandé d'avoir tous ses logiciels de sécurité à jour, afin d'éviter les failles par lesquelles s'engouffrent les infections.
2/ Tu peux supprimer tous les logiciels que nous avons utilisés (Type: SmitFraufix, Blacklight, SDFix, lopxpMH, ect.....) qui traitent des infections spécifiques et qui sont mis à jour régulièrement. Il est inutile de les garder sur ton PC.
Tu peux par contre, garder AVG Antispyware et CCleaner.
3/ /!\ Maintenant que ton PC n'est plus infecté, désactive puis réactive ta "Restauration du système" afin de créer un point de restauration sain.
Pour désactiver ou activer la Restauration du système, tu dois ouvrir une session Administrateur sous Windows XP.
Désactivation:
Cliquer droit sur le "Poste de travail" > Propriétés > onglet "Restauration du système" > cocher la case "Désactiver la Restauration du système sur tous les lecteurs"
> Appliquer et Ok.
Activation:
Suivre le même chemin ; décocher la case "Désactiver la Restauration du système sur tous les lecteurs"
> Appliquer et Ok. Redémarrer l'ordinateur.
4/ Comment faire pour...(lettre A): https://forum.pcastuces.com/sujet.asp?f=25&s=3902
Pour améliorer la sécurité de ton PC prend quelques instants pour lire:
Sécuriser son PC +WIFI (versions "hot" & "light"): https://forum.pcastuces.com/default.asp
5/ Dénonce ton infection pour faire condamner les auteurs.

Crée un message pour faire avancer les choses sur Malware-Complaints, nous devons être les plus nombreux possibles, alors rends compte de ton infection :
- Voir les règles du forum : https://malwarecomplaints.info/
- Après t'être enregistré à l'aide du bouton en haut se nommant "Register"
Si tu as plus de 13 ans, choisir : "I Agree to these terms and am over or exactly 13 years of age"
Si tu as moins, clique sur : "I Agree to these terms and am under 13 years of age"

Tu as alors, sous forme de liste, un sujet par type d'infection (Look2Me, Smitfraud, SpywareQuake etc..).

*** Tes infections : AdWare.Win32.MegaSearch.n, Rootkit.Win32.Agent.sq, Trojan-Downloader.Win32.Agent.hdy, Porn-Dialer.Win32.Star, AdTool.Win32.MyWebSearch.bm, AdWare.Win32.Gator.3202, AdWare.Win32.NavExcel ***
>> https://malwarecomplaints.info/
Si le malware que tu as eu n'apparaît pas dans la liste, ou si tu ne sais pas par quoi tu étais infecté(e), crée un message dans le sujet Autres infections, conforme au règle du forum (âge, ville, département etc..)
Indique aussi le nom du Forum qui t'a aidé : CCM
6/ Tu peux marquer ton sujet comme résolu en cliquant sur le bouton.
7/ Je te conseille enfin de défragmenter ton PC : http://www.coupdepoucepc.com/modules/news/article.php?storyid=218

Bon surf !

FillPCA

pas de nouvelles bonnes nouvelles
de retour de deplacement tout vas bien

Salut,

* Télécharge OTMoveIt (de Old_Timer) sur ton bureau : http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe
* Double-clique sur OTMoveIt.exe pour lancer le programme,
* Copie la liste de fichiers ou de dossiers ci-dessous et colle-la dans la fenêtre du programme "Paste List Of Files/Folders to be moved" :

D:\GRAVEUR\Nero-6.6.1.15a.exe
E:\Emule\Incoming\Conversor video pinacle Trex.zip
G:\teledechargement\Gravure\burn4free_setup.exe
G:\Tout pour le DVD\Divx_Codec\DivXPro501GAINBundle.exe

* Clique sur MoveIt! pour lancer la suppression,
* Le résultat appraraîtra dans le cadre Results.
* Clique sur Exit pour fermer le programme.
* Poste le rapport qui est situé ici : C:\\\_OTMoveIt\MovedFiles
* Il te sera peut-être demandé de redémarrer ton PC. Dans ce cas, clique sur Yes.

Regarde aussi attentivement le rapport Kaspersky afin de supprimer les Email infectés dans ta boîte de réception.

Vide ensuite la corbeille.

Comment le pc se porte-t-il ?

FillPCA

-------------------------------------------------------------------------------
bonjour
avec mes excuses FillPCA j'ai du m'absenter pendant plusieurs jours
voici ce que tu m'a demandé
encore merci pour ton intervention et ta disponibilité

KASPERSKY ONLINE SCANNER REPORT
Sunday, January 13, 2008 10:07:31 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 12/01/2008
Kaspersky Anti-Virus database records: 508316
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\

Scan Statistics:
Total number of scanned objects: 94190
Number of viruses found: 12
Number of infected objects: 36
Number of suspicious objects: 15
Duration of the scan process: 10:11:27

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-03282007-114032.log Object is locked skipped
C:\Documents and Settings\georges\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Copernic\DesktopSearch2\Index\MainChunk\ChunkSCLF.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Copernic\DesktopSearch2\Index\MainChunk\DocumentsFD.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Copernic\DesktopSearch2\Index\MainChunk\DocumentsID.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Copernic\DesktopSearch2\Index\MainChunk\DocumentsSD.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Copernic\DesktopSearch2\Index\MainChunk\KeywordsDBT.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Copernic\DesktopSearch2\Index\MainChunk\KeywordsDL.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Copernic\DesktopSearch2\Index\MainChunk\KeywordsIBT.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Copernic\DesktopSearch2\Index\MainChunk\KeywordsP.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Copernic\DesktopSearch2\Index\MainChunk\KeywordsSBT.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Copernic\DesktopSearch2\Logs\20080111.log Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Copernic\DesktopSearch2\Queue\MainChunk\IndexingQueueDf.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Copernic\DesktopSearch2\Queue\MainChunk\IndexingQueueTt.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Copernic\DesktopSearch2\Queue\MainChunk\IndexingQueueUt.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Application Data\Microsoft\Windows Defender\FileTracker\{F5981DD5-1123-4F60-9983-72CA413BF0DD} Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Historique\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Historique\History.IE5\MSHist012008011220080113\index.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Temp\1.tmp Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Temp\Perflib_Perfdata_19c.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Temp\Perflib_Perfdata_334.dat Object is locked skipped
C:\Documents and Settings\georges\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\georges\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\georges\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\temp\Historique\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\report\Protection résidente.txt Object is locked skipped
C:\Program Files\vmntoolbar\vmntoolbar.dll.old11 Infected: not-a-virus:AdWare.Win32.MegaSearch.n skipped
C:\QooBox\Quarantine\catchme2008-01-09_121016.53.zip/47780984.Evt Infected: Rootkit.Win32.Agent.sq skipped
C:\QooBox\Quarantine\catchme2008-01-09_121016.53.zip ZIP: infected - 1 skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{D92858E9-0768-4435-B281-5AD97AF2CBB6}\RP279\A0053908.sys Infected: Rootkit.Win32.Agent.sq skipped
C:\System Volume Information\_restore{D92858E9-0768-4435-B281-5AD97AF2CBB6}\RP279\A0054429.exe Infected: Trojan-Downloader.Win32.Agent.hdy skipped
C:\System Volume Information\_restore{D92858E9-0768-4435-B281-5AD97AF2CBB6}\RP280\A0054510.dll Infected: not-a-virus:AdWare.Win32.MegaSearch.n skipped
C:\System Volume Information\_restore{D92858E9-0768-4435-B281-5AD97AF2CBB6}\RP283\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{30D5B661-0EFB-4750-8CE6-8C79E9235788}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_668.dat Object is locked skipped
C:\WINDOWS\Temp\TMP00000050D10A624545B484BC Object is locked skipped
C:\WINDOWS\Temp\_avast4_\Webshlock.txt Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\Carnet d'Adresse\Outlook Express jojo\AMICALE.dbx/[From "Ioneb" <ioneb@wanadoo.fr>][Date Mon, 17 Jan 2005 14:12:21 +0100]/UNNAMED/html Suspicious: Email-Worm.Win32.Bagle.mail skipped
D:\Carnet d'Adresse\Outlook Express jojo\AMICALE.dbx/[From "Ioneb" <ioneb@wanadoo.fr>][Date Mon, 17 Jan 2005 14:12:21 +0100]/UNNAMED Suspicious: Email-Worm.Win32.Bagle.mail skipped
D:\Carnet d'Adresse\Outlook Express jojo\AMICALE.dbx/[From "Ioneb" <ioneb@wanadoo.fr>][Date Mon, 17 Jan 2005 15:29:03 +0100]/UNNAMED/html Suspicious: Email-Worm.Win32.Bagle.mail skipped
D:\Carnet d'Adresse\Outlook Express jojo\AMICALE.dbx/[From "Ioneb" <ioneb@wanadoo.fr>][Date Mon, 17 Jan 2005 15:29:03 +0100]/UNNAMED Suspicious: Email-Worm.Win32.Bagle.mail skipped
D:\Carnet d'Adresse\Outlook Express jojo\AMICALE.dbx Mail MS Outlook 5: suspicious - 4 skipped
D:\Carnet d'Adresse\Outlook Express jojo\maison.dbx/[From "angela" <thib2310@wanadoo.fr>][Date Thu, 6 Mar 2003 19:40:29 +0100]/UNNAMED/GetRight/GO.exe Infected: not-a-virus:Porn-Dialer.Win32.Star skipped
D:\Carnet d'Adresse\Outlook Express jojo\maison.dbx/[From "angela" <thib2310@wanadoo.fr>][Date Thu, 6 Mar 2003 19:40:29 +0100]/UNNAMED/GetRight Infected: not-a-virus:Porn-Dialer.Win32.Star skipped
D:\Carnet d'Adresse\Outlook Express jojo\maison.dbx/[From "angela" <thib2310@wanadoo.fr>][Date Thu, 6 Mar 2003 19:40:29 +0100]/UNNAMED Infected: not-a-virus:Porn-Dialer.Win32.Star skipped
D:\Carnet d'Adresse\Outlook Express jojo\maison.dbx Mail MS Outlook 5: infected - 3 skipped
D:\essai\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 01 .doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 02.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 03.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 04.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 05.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 06.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 07.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 08.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 09.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 10.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 11.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 12.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 13.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 14.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 15.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 16.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 17.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 18.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 19.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 20.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 21.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 22.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 23.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 24.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 25.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 26.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 27.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 28.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 29.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 30.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 31.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 32.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 33.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 34.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 35.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 36.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 37.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 38.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 39.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 40.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 41.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 42.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 43.doc Object is locked skipped
D:\found.000\dir0000.chk\Congé Préavis 44.doc Object is locked skipped
D:\found.000\dir0001.chk\!1swzl1b.gif Object is locked skipped
D:\found.000\dir0001.chk\!9h_rd1.gif Object is locked skipped
D:\found.000\dir0001.chk\4c1.gif Object is locked skipped
D:\found.000\dir0001.chk\A-bomb01.gif Object is locked skipped
D:\found.000\dir0001.chk\aballoonline3.gif Object is locked skipped
D:\found.000\dir0001.chk\ahatline.gif Object is locked skipped
D:\found.000\dir0001.chk\Apencil.gif Object is locked skipped
D:\found.000\dir0001.chk\apoolcue1.gif Object is locked skipped
D:\found.000\dir0001.chk\Aqa_r1.gif Object is locked skipped
D:\found.000\dir0001.chk\Arrwrul1.gif Object is locked skipped
D:\found.000\dir0001.chk\Arrwx1.gif Object is locked skipped
D:\found.000\dir0001.chk\astarline.gif Object is locked skipped
D:\found.000\dir0001.chk\atrolline1.gif Object is locked skipped
D:\found.000\dir0001.chk\aufoline1.gif Object is locked skipped
D:\found.000\dir0001.chk\Bar03.gif Object is locked skipped
D:\found.000\dir0001.chk\bar_flar_clr.gif Object is locked skipped
D:\found.000\dir0001.chk\Blodbar.gif Object is locked skipped
D:\found.000\dir0001.chk\Blubar.gif Object is locked skipped
D:\found.000\dir0001.chk\Borgrule.gif Object is locked skipped
D:\found.000\dir0001.chk\Cad_r1.gif Object is locked skipped
D:\found.000\dir0001.chk\Cad_r3.gif Object is locked skipped
D:\found.000\dir0001.chk\chrome_flare_blk.gif Object is locked skipped
D:\found.000\dir0001.chk\chrome_flare_clr.gif Object is locked skipped
D:\found.000\dir0001.chk\Colbar.gif Object is locked skipped
D:\found.000\dir0001.chk\Construct2.gif Object is locked skipped
D:\found.000\dir0001.chk\Divider01d.gif Object is locked skipped
D:\found.000\dir0001.chk\Dotlin.gif Object is locked skipped
D:\found.000\dir0001.chk\El-bar1.gif Object is locked skipped
D:\found.000\dir0001.chk\El-bar2.gif Object is locked skipped
D:\found.000\dir0001.chk\El-bar3.gif Object is locked skipped
D:\found.000\dir0001.chk\Elmorule.gif Object is locked skipped
D:\found.000\dir0001.chk\Eth_r3.gif Object is locked skipped
D:\found.000\dir0001.chk\fabar.gif Object is locked skipped
D:\found.000\dir0001.chk\Fastbr.gif Object is locked skipped
D:\found.000\dir0001.chk\Fastgy.gif Object is locked skipped
D:\found.000\dir0001.chk\fotball.gif Object is locked skipped
D:\found.000\dir0001.chk\frogDivWHT.gif Object is locked skipped
D:\found.000\dir0001.chk\Fworld.gif Object is locked skipped
D:\found.000\dir0001.chk\gluddo2.gif Object is locked skipped
D:\found.000\dir0001.chk\Grvbar2.gif Object is locked skipped
D:\found.000\dir0001.chk\Grvbar3.gif Object is locked skipped
D:\found.000\dir0001.chk\Gunline.gif Object is locked skipped
D:\found.000\dir0001.chk\hrls.gif Object is locked skipped
D:\found.000\dir0001.chk\Hummbird.gif Object is locked skipped
D:\found.000\dir0001.chk\Laserbar.gif Object is locked skipped
D:\found.000\dir0001.chk\Light Bar T.gif Object is locked skipped
D:\found.000\dir0001.chk\Light2.gif Object is locked skipped
D:\found.000\dir0001.chk\lightbar1CLR.gif Object is locked skipped
D:\found.000\dir0001.chk\lightning_2horz_clr.gif Object is locked skipped
D:\found.000\dir0001.chk\lightning_horz_blk.gif Object is locked skipped
D:\found.000\dir0001.chk\Line1.gif Object is locked skipped
D:\found.000\dir0001.chk\Line2b.gif Object is locked skipped
D:\found.000\dir0001.chk\Line4.gif Object is locked skipped
D:\found.000\dir0001.chk\link_side_wte.gif Object is locked skipped
D:\found.000\dir0001.chk\neon_grn_blk.gif Object is locked skipped
D:\found.000\dir0001.chk\Pow_r1.gif Object is locked skipped
D:\found.000\dir0001.chk\Pow_r3.gif Object is locked skipped
D:\found.000\dir0001.chk\Pprmint.gif Object is locked skipped
D:\found.000\dir0001.chk\rainbow_horz_350.gif Object is locked skipped
D:\found.000\dir0001.chk\Rwd_br2.gif Object is locked skipped
D:\found.000\dir0001.chk\Sgl_r1.gif Object is locked skipped
D:\found.000\dir0001.chk\Sheepline2.gif Object is locked skipped
D:\found.000\dir0001.chk\sherideer.gif Object is locked skipped
D:\found.000\dir0001.chk\sheriswirl.gif Object is locked skipped
D:\found.000\dir0001.chk\Shxmlts2.gif Object is locked skipped
D:\found.000\dir0001.chk\Slibar.gif Object is locked skipped
D:\found.000\dir0001.chk\Slowgy.gif Object is locked skipped
D:\found.000\dir0001.chk\Smalborg.gif Object is locked skipped
D:\found.000\dir0001.chk\Sunset.gif Object is locked skipped
D:\found.000\dir0001.chk\Tealstr2.gif Object is locked skipped
D:\found.000\dir0001.chk\vag2.gif Object is locked skipped
D:\found.000\dir0001.chk\worldCLR.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\!1swzl1b.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\!9h_rd1.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\4c1.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\A-bomb01.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\aballoonline3.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\ahatline.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Apencil.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\apoolcue1.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Aqa_r1.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Arrwrul1.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Arrwx1.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\astarline.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\atrolline1.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\aufoline1.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Bar03.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\bar_flar_clr.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Blodbar.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Blubar.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Borgrule.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Cad_r1.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Cad_r3.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\chrome_flare_blk.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\chrome_flare_clr.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Colbar.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Construct2.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Divider01d.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Dotlin.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\El-bar1.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\El-bar2.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\El-bar3.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Elmorule.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Eth_r3.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\fabar.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Fastbr.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Fastgy.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\fotball.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\frogDivWHT.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Fworld.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\gluddo2.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Grvbar2.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Grvbar3.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Gunline.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\hrls.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Hummbird.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Laserbar.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Light Bar T.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Light2.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\lightbar1CLR.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\lightning_2horz_clr.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\lightning_horz_blk.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Line1.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Line2b.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Line4.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\link_side_wte.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\neon_grn_blk.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Pow_r1.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Pow_r3.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Pprmint.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\rainbow_horz_350.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Rwd_br2.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Sgl_r1.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Sheepline2.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\sherideer.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\sheriswirl.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Shxmlts2.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Slibar.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Slowgy.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Smalborg.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Sunset.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\Tealstr2.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\vag2.gif Object is locked skipped
D:\found.000\dir0001.chk\_vti_cnf\worldCLR.gif Object is locked skipped
D:\found.000\dir0002.chk\!1swz1lf.gif Object is locked skipped
D:\found.000\dir0002.chk\!1swz1rt.gif Object is locked skipped
D:\found.000\dir0002.chk\!1swzdna.gif Object is locked skipped
D:\found.000\dir0002.chk\!1swzdnb.gif Object is locked skipped
D:\found.000\dir0002.chk\1adimd6.gif Object is locked skipped
D:\found.000\dir0002.chk\1adimd7.gif Object is locked skipped
D:\found.000\dir0002.chk\1adimd8.gif Object is locked skipped
D:\found.000\dir0002.chk\1adimd9.gif Object is locked skipped
D:\found.000\dir0002.chk\A-arrow03a.gif Object is locked skipped
D:\found.000\dir0002.chk\A-arrow03b.gif Object is locked skipped
D:\found.000\dir0002.chk\A-arrow03c.gif Object is locked skipped
D:\found.000\dir0002.chk\A-arrow03d.gif Object is locked skipped
D:\found.000\dir0002.chk\Aaaa.gif Object is locked skipped
D:\found.000\dir0002.chk\anar1.gif Object is locked skipped
D:\found.000\dir0002.chk\anar12.gif Object is locked skipped
D:\found.000\dir0002.chk\anar13.gif Object is locked skipped
D:\found.000\dir0002.chk\anar14.gif Object is locked skipped
D:\found.000\dir0002.chk\anar15.gif Object is locked skipped
D:\found.000\dir0002.chk\anar16.gif Object is locked skipped
D:\found.000\dir0002.chk\anar17.gif Object is locked skipped
D:\found.000\dir0002.chk\anar18.gif Object is locked skipped
D:\found.000\dir0002.chk\anar7.gif Object is locked skipped
D:\found.000\dir0002.chk\anar8.gif Object is locked skipped
D:\found.000\dir0002.chk\ani219.GIF Object is locked skipped
D:\found.000\dir0002.chk\ani221.gif Object is locked skipped
D:\found.000\dir0002.chk\ani222.gif Object is locked skipped
D:\found.000\dir0002.chk\ani223.gif Object is locked skipped
D:\found.000\dir0002.chk\ani224.gif Object is locked skipped
D:\found.000\dir0002.chk\ani236.gif Object is locked skipped
D:\found.000\dir0002.chk\Aqa_ad.gif Object is locked skipped
D:\found.000\dir0002.chk\Aqa_al.gif Object is locked skipped
D:\found.000\dir0002.chk\Aqa_ar.gif Object is locked skipped
D:\found.000\dir0002.chk\Aqa_au.gif Object is locked skipped
D:\found.000\dir0002.chk\Ar06dk A.gif Object is locked skipped
D:\found.000\dir0002.chk\Ar06rk A.gif Object is locked skipped
D:\found.000\dir0002.chk\Ar06uk A.gif Object is locked skipped
D:\found.000\dir0002.chk\Ar07lk A.gif Object is locked skipped
D:\found.000\dir0002.chk\Arrbxblr.gif Object is locked skipped
D:\found.000\dir0002.chk\Arrbxgrr.gif Object is locked skipped
D:\found.000\dir0002.chk\Arrow2.gif Object is locked skipped
D:\found.000\dir0002.chk\Arrow2a.gif Object is locked skipped
D:\found.000\dir0002.chk\Arrow3.gif Object is locked skipped
D:\found.000\dir0002.chk\Arrows013.gif Object is locked skipped
D:\found.000\dir0002.chk\arrow_red_crv_lft.gif Object is locked skipped
D:\found.000\dir0002.chk\arrow_red_crv_rt.gif Object is locked skipped
D:\found.000\dir0002.chk\arrow_red_lft_sm.gif Object is locked skipped
D:\found.000\dir0002.chk\arrow_red_rt_med.gif Object is locked skipped
D:\found.000\dir0002.chk\asq1.gif Object is locked skipped
D:\found.000\dir0002.chk\asq2.gif Object is locked skipped
D:\found.000\dir0002.chk\Bbdown.gif Object is locked skipped
D:\found.000\dir0002.chk\Bbnext.gif Object is locked skipped
D:\found.000\dir0002.chk\Bbprev.gif Object is locked skipped
D:\found.000\dir0002.chk\Bbup.gif Object is locked skipped
D:\found.000\dir0002.chk\Bpdown.gif Object is locked skipped
D:\found.000\dir0002.chk\Bpgoback.gif Object is locked skipped
D:\found.000\dir0002.chk\Bpnext.gif Object is locked skipped
D:\found.000\dir0002.chk\Bpup.gif Object is locked skipped
D:\found.000\dir0002.chk\chromeArrowWHT.gif Object is locked skipped
D:\found.000\dir0002.chk\Eth_ad.gif Object is locked skipped
D:\found.000\dir0002.chk\Eth_al.gif Object is locked skipped
D:\found.000\dir0002.chk\Eth_ar.gif Object is locked skipped
D:\found.000\dir0002.chk\Eth_au.gif Object is locked skipped
D:\found.000\dir0002.chk\Grvdown.gif Object is locked skipped
D:\found.000\dir0002.chk\Grvleft.gif Object is locked skipped
D:\found.000\dir0002.chk\Grvright.gif Object is locked skipped
D:\found.000\dir0002.chk\Grvup.gif Object is locked skipped
D:\found.000\dir0002.chk\Pow_ad.gif Object is locked skipped
D:\found.000\dir0002.chk\Pow_al.gif Object is locked skipped
D:\found.000\dir0002.chk\Pow_ar.gif Object is locked skipped
D:\found.000\dir0002.chk\Pow_au.gif Object is locked skipped
D:\found.000\dir0002.chk\redArrowWHT.gif Object is locked skipped
D:\found.000\dir0002.chk\Romdown.gif Object is locked skipped
D:\found.000\dir0002.chk\Romleft.gif Object is locked skipped
D:\found.000\dir0002.chk\Romright.gif Object is locked skipped
D:\found.000\dir0002.chk\Romup.gif Object is locked skipped
D:\found.000\dir0002.chk\Rwd_al.gif Object is locked skipped
D:\found.000\dir0002.chk\Rwd_ar.gif Object is locked skipped
D:\found.000\dir0002.chk\Sgl_ad.gif Object is locked skipped
D:\found.000\dir0002.chk\Sgl_al.gif Object is locked skipped
D:\found.000\dir0002.chk\Sgl_ar.gif Object is locked skipped
D:\found.000\dir0002.chk\Sgl_au.gif Object is locked skipped
D:\found.000\dir0002.chk\Trpdown.gif Object is locked skipped
D:\found.000\dir0002.chk\Trpleft.gif Object is locked skipped
D:\found.000\dir0002.chk\Trpright.gif Object is locked skipped
D:\found.000\dir0002.chk\Trpup.gif Object is locked skipped
D:\found.000\dir0002.chk\Vitdown.gif Object is locked skipped
D:\found.000\dir0002.chk\Vitleft.gif Object is locked skipped
D:\found.000\dir0002.chk\Vitright.gif Object is locked skipped
D:\found.000\dir0002.chk\Vitup.gif Object is locked skipped
D:\found.000\dir0002.chk\Wpdown.gif Object is locked skipped
D:\found.000\dir0002.chk\Wpgoback.gif Object is locked skipped
D:\found.000\dir0002.chk\Wpnext.gif Object is locked skipped
D:\found.000\dir0002.chk\Wpup.gif Object is locked skipped
D:\found.000\dir0002.chk\Wwk_ad_l.gif Object is locked skipped
D:\found.000\dir0002.chk\Wwk_al_l.gif Object is locked skipped
D:\found.000\dir0002.chk\Wwk_ar_l.gif Object is locked skipped
D:\found.000\dir0002.chk\Wwk_au_l.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\!1swz1lf.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\!1swz1rt.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\!1swzdna.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\!1swzdnb.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\1adimd6.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\1adimd7.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\1adimd8.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\1adimd9.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\A-arrow03a.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\A-arrow03b.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\A-arrow03c.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\A-arrow03d.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Aaaa.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\anar1.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\anar12.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\anar13.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\anar14.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\anar15.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\anar16.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\anar17.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\anar18.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\anar7.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\anar8.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\ani219.GIF Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\ani221.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\ani222.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\ani223.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\ani224.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\ani236.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Aqa_ad.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Aqa_al.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Aqa_ar.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Aqa_au.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Ar06dk A.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Ar06rk A.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Ar06uk A.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Ar07lk A.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Arrbxblr.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Arrbxgrr.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Arrow2.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Arrow2a.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Arrow3.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Arrows013.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\arrow_red_crv_lft.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\arrow_red_crv_rt.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\arrow_red_lft_sm.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\arrow_red_rt_med.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\asq1.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\asq2.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Bbdown.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Bbnext.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Bbprev.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Bbup.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Bpdown.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Bpgoback.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Bpnext.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Bpup.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\chromeArrowWHT.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Eth_ad.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Eth_al.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Eth_ar.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Eth_au.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Grvdown.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Grvleft.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Grvright.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Grvup.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Pow_ad.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Pow_al.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Pow_ar.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Pow_au.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\redArrowWHT.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Romdown.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Romleft.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Romright.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Romup.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Rwd_al.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Rwd_ar.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Sgl_ad.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Sgl_al.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Sgl_ar.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Sgl_au.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Trpdown.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Trpleft.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Trpright.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Trpup.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Vitdown.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Vitleft.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Vitright.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Vitup.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Wpdown.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Wpgoback.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Wpnext.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Wpup.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Wwk_ad_l.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Wwk_al_l.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Wwk_ar_l.gif Object is locked skipped
D:\found.000\dir0002.chk\_vti_cnf\Wwk_au_l.gif Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 01 (délivrance log.).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 02.doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 04 (Réparations).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 05.doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 06.doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 07.doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 08.doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 09 (Entretien).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 10 (délivrance log.).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 11 (délivrance log.).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 12 (délivrance-bon état-s'applique lors du renouvellement.doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 13 (Humidité).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 14 ( Entretien - Mise en demeure).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 15 (délivrance log.-Puces-Départ sans préavis).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 16 (jouissance paisible).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 17 (entretien).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 18 (délivrance logement).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 19 (jouissance paisible).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 20 (entretien).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 21 (nouveau acquéreur de l'immeuble).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 22 (termites).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 23 (demande au locataire renonciation en cas de trouble de jouissance).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 24 (délivrance log. Puces -Départ sans préavis).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 25 (délivrance bon état-préavis réduit oui).doc Object is locked skipped
D:\found.000\dir0003.chk\Oblig. Bailleur 26 (changt. chaudière par preneur sans mise en demeure).doc Object is locked skipped
D:\GRAVEUR\Nero-6.6.1.15a.exe/Toolbar.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped
D:\GRAVEUR\Nero-6.6.1.15a.exe RAR: infected - 1 skipped
D:\Sauvegarde\Identities\{57E2C511-87BE-4AF4-BC74-9B69A58406E3}\Microsoft\Outlook Express\AMICALE.dbx/[From "Ioneb" <ioneb@wanadoo.fr>][Date Mon, 17 Jan 2005 14:12:21 +0100]/UNNAMED/html Suspicious: Email-Worm.Win32.Bagle.mail skipped
D:\Sauvegarde\Identities\{57E2C511-87BE-4AF4-BC74-9B69A58406E3}\Microsoft\Outlook Express\AMICALE.dbx/[From "Ioneb" <ioneb@wanadoo.fr>][Date Mon, 17 Jan 2005 14:12:21 +0100]/UNNAMED Suspicious: Email-Worm.Win32.Bagle.mail skipped
D:\Sauvegarde\Identities\{57E2C511-87BE-4AF4-BC74-9B69A58406E3}\Microsoft\Outlook Express\AMICALE.dbx/[From "Ioneb" <ioneb@wanadoo.fr>][Date Mon, 17 Jan 2005 15:29:03 +0100]/UNNAMED/html Suspicious: Email-Worm.Win32.Bagle.mail skipped
D:\Sauvegarde\Identities\{57E2C511-87BE-4AF4-BC74-9B69A58406E3}\Microsoft\Outlook Express\AMICALE.dbx/[From "Ioneb" <ioneb@wanadoo.fr>][Date Mon, 17 Jan 2005 15:29:03 +0100]/UNNAMED Suspicious: Email-Worm.Win32.Bagle.mail skipped
D:\Sauvegarde\Identities\{57E2C511-87BE-4AF4-BC74-9B69A58406E3}\Microsoft\Outlook Express\AMICALE.dbx Mail MS Outlook 5: suspicious - 4 skipped
D:\Sauvegarde\Identities\{57E2C511-87BE-4AF4-BC74-9B69A58406E3}\Microsoft\Outlook Express\maison.dbx/[From "angela" <thib2310@wanadoo.fr>][Date Thu, 6 Mar 2003 19:40:29 +0100]/UNNAMED/GetRight/GO.exe Infected: not-a-virus:Porn-Dialer.Win32.Star skipped
D:\Sauvegarde\Identities\{57E2C511-87BE-4AF4-BC74-9B69A58406E3}\Microsoft\Outlook Express\maison.dbx/[From "angela" <thib2310@wanadoo.fr>][Date Thu, 6 Mar 2003 19:40:29 +0100]/UNNAMED/GetRight Infected: not-a-virus:Porn-Dialer.Win32.Star skipped
D:\Sauvegarde\Identities\{57E2C511-87BE-4AF4-BC74-9B69A58406E3}\Microsoft\Outlook Express\maison.dbx/[From "angela" <thib2310@wanadoo.fr>][Date Thu, 6 Mar 2003 19:40:29 +0100]/UNNAMED Infected: not-a-virus:Porn-Dialer.Win32.Star skipped
D:\Sauvegarde\Identities\{57E2C511-87BE-4AF4-BC74-9B69A58406E3}\Microsoft\Outlook Express\maison.dbx Mail MS Outlook 5: infected - 3 skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
D:\System Volume Information\_restore{D92858E9-0768-4435-B281-5AD97AF2CBB6}\RP283\change.log Object is locked skipped
E:\Emule\Incoming\Conversor video pinacle Trex.zip/DivXPro 5.0.2/DivXPro502GAINBundle.exe/Gain_Trickler.exe Infected: not-a-virus:AdWare.Win32.Gator.3202 skipped
E:\Emule\Incoming\Conversor video pinacle Trex.zip/DivXPro 5.0.2/DivXPro502GAINBundle.exe Infected: not-a-virus:AdWare.Win32.Gator.3202 skipped
E:\Emule\Incoming\Conversor video pinacle Trex.zip ZIP: infected - 2 skipped
E:\essai\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
G:\Sauvegarde\Identities\sauv 052006\Outlook Express\AMICALE.dbx/[From "Ioneb" <ioneb@wanadoo.fr>][Date Mon, 17 Jan 2005 14:12:21 +0100]/UNNAMED/html Suspicious: Email-Worm.Win32.Bagle.mail skipped
G:\Sauvegarde\Identities\sauv 052006\Outlook Express\AMICALE.dbx/[From "Ioneb" <ioneb@wanadoo.fr>][Date Mon, 17 Jan 2005 14:12:21 +0100]/UNNAMED Suspicious: Email-Worm.Win32.Bagle.mail skipped
G:\Sauvegarde\Identities\sauv 052006\Outlook Express\AMICALE.dbx/[From "Ioneb" <ioneb@wanadoo.fr>][Date Mon, 17 Jan 2005 15:29:03 +0100]/UNNAMED/html Suspicious: Email-Worm.Win32.Bagle.mail skipped
G:\Sauvegarde\Identities\sauv 052006\Outlook Express\AMICALE.dbx/[From "Ioneb" <ioneb@wanadoo.fr>][Date Mon, 17 Jan 2005 15:29:03 +0100]/UNNAMED Suspicious: Email-Worm.Win32.Bagle.mail skipped
G:\Sauvegarde\Identities\sauv 052006\Outlook Express\AMICALE.dbx Mail MS Outlook 5: suspicious - 4 skipped
G:\Sauvegarde\Identities\sauv 052006\Outlook Express\maison.dbx/[From "angela" <thib2310@wanadoo.fr>][Date Thu, 6 Mar 2003 19:40:29 +0100]/UNNAMED/GetRight/GO.exe Infected: not-a-virus:Porn-Dialer.Win32.Star skipped
G:\Sauvegarde\Identities\sauv 052006\Outlook Express\maison.dbx/[From "angela" <thib2310@wanadoo.fr>][Date Thu, 6 Mar 2003 19:40:29 +0100]/UNNAMED/GetRight Infected: not-a-virus:Porn-Dialer.Win32.Star skipped
G:\Sauvegarde\Identities\sauv 052006\Outlook Express\maison.dbx/[From "angela" <thib2310@wanadoo.fr>][Date Thu, 6 Mar 2003 19:40:29 +0100]/UNNAMED Infected: not-a-virus:Porn-Dialer.Win32.Star skipped
G:\Sauvegarde\Identities\sauv 052006\Outlook Express\maison.dbx Mail MS Outlook 5: infected - 3 skipped
G:\Sauvegarde\Identities\{B6DA6B41-32C6-11D7-89A7-ADE3A0D3B24D}\Microsoft\Outlook Express\maison.dbx/[From "angela" <thib2310@wanadoo.fr>][Date Thu, 6 Mar 2003 19:40:29 +0100]/UNNAMED/GetRight/GO.exe Infected: not-a-virus:Porn-Dialer.Win32.Star skipped
G:\Sauvegarde\Identities\{B6DA6B41-32C6-11D7-89A7-ADE3A0D3B24D}\Microsoft\Outlook Express\maison.dbx/[From "angela" <thib2310@wanadoo.fr>][Date Thu, 6 Mar 2003 19:40:29 +0100]/UNNAMED/GetRight Infected: not-a-virus:Porn-Dialer.Win32.Star skipped
G:\Sauvegarde\Identities\{B6DA6B41-32C6-11D7-89A7-ADE3A0D3B24D}\Microsoft\Outlook Express\maison.dbx/[From "angela" <thib2310@wanadoo.fr>][Date Thu, 6 Mar 2003 19:40:29 +0100]/UNNAMED Infected: not-a-virus:Porn-Dialer.Win32.Star skipped
G:\Sauvegarde\Identities\{B6DA6B41-32C6-11D7-89A7-ADE3A0D3B24D}\Microsoft\Outlook Express\maison.dbx Mail MS Outlook 5: infected - 3 skipped
G:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
G:\teledechargement\Gravure\burn4free_setup.exe/data0008/NHInstall.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d skipped
G:\teledechargement\Gravure\burn4free_setup.exe/data0008/v2.0.4b.cab/NHelper.dll Infected: not-a-virus:AdWare.Win32.NavExcel.g skipped
G:\teledechargement\Gravure\burn4free_setup.exe/data0008/v2.0.4b.cab/NHUninstaller.exe Infected: not-a-virus:AdWare.Win32.NavExcel skipped
G:\teledechargement\Gravure\burn4free_setup.exe/data0008/v2.0.4b.cab/NHUpdater.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b skipped
G:\teledechargement\Gravure\burn4free_setup.exe/data0008/v2.0.4b.cab Infected: not-a-virus:AdWare.Win32.NavExcel.b skipped
G:\teledechargement\Gravure\burn4free_setup.exe/data0008 Infected: not-a-virus:AdWare.Win32.NavExcel.b skipped
G:\teledechargement\Gravure\burn4free_setup.exe Inno: infected - 6 skipped
G:\Tout pour le DVD\Divx_Codec\DivXPro501GAINBundle.exe/Gain_Trickler.exe Infected: not-a-virus:AdWare.Win32.Gator.3102 skipped
G:\Tout pour le DVD\Divx_Codec\DivXPro501GAINBundle.exe Vise: infected - 1 skipped

Scan process completed.

Bonjour,

Il me faudrait aussi le rapport complet de Kaspersky.

FillPCA

bonjour
rapport 1
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 07:31:09 12/01/2008

+ Résultat de l'analyse:

C:\Documents and Settings\georges\Cookies\georges@2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\georges\Cookies\georges@advertising[2].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\georges\Cookies\georges@bluestreak[1].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Documents and Settings\georges\Cookies\georges@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\georges\Cookies\georges@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Documents and Settings\georges\Cookies\georges@mediaplex[1].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
C:\Documents and Settings\georges\Cookies\georges@smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\georges\Cookies\georges@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.

Fin du rapport

Re,

Le scan n'est pas suffisant. Il faut choisir "My computer", dont le scan est plus long mais plus fouillé.

FillPCA

voici le rapport
KASPERSKY ONLINE SCANNER REPORT
Friday, January 11, 2008 7:35:44 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 11/01/2008
Kaspersky Anti-Virus database records: 507664
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - Critical Areas:
C:\WINDOWS
C:\DOCUME~1\georges\LOCALS~1\Temp\

Scan Statistics:
Total number of scanned objects: 15147
Number of viruses found: 0
Number of infected objects: 0
Number of suspicious objects: 0
Duration of the scan process: 01:06:49

Infected Object Name / Virus Name / Last Action
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{30D5B661-0EFB-4750-8CE6-8C79E9235788}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_668.dat Object is locked skipped
C:\WINDOWS\Temp\_avast4_\Webshlock.txt Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\DOCUME~1\georges\LOCALS~1\Temp\1.tmp Object is locked skipped
C:\DOCUME~1\georges\LOCALS~1\Temp\Acr3ED.tmp Object is locked skipped
C:\DOCUME~1\georges\LOCALS~1\Temp\Acr3F1.tmp Object is locked skipped
C:\DOCUME~1\georges\LOCALS~1\Temp\Perflib_Perfdata_334.dat Object is locked skipped

Scan process completed.

Re,

Non, aucun antivirus ne doit être installé. A la fin du scan, tu as la possibilité d'enregistrer le rapport au format texte. C'est ce qu'il me faut.

FillPCA

bonjour
une question puisque j'ai avast doit je obligatoirement instaler l'antivirus comme il me le demande car en ligne il ne genere aucun rapport

Re,

Tu as quelques indications sur cette vérole ici : http://www.prevx.com/filenames/1427900198371137922-0/SYSREST32.EXE.html#cooliris

1/ Télécharge Ccleaner Basic https://www.ccleaner.com/ccleaner/download

Ouvre Ccleaner, clique sur "lancer le nettoyage".

2/ Télécharge AVGantispyware : https://www.avg.com/en-ww/free-antivirus-download
Tu l'installes.
Lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente.

Clique sur le bouton Analyse (de la barre d'outils)
Puis sur l'onglets Comment réagir, clique sur Actions recommandées. Sélectionne Quarantaine.
Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
A la fin du scan, choisis l'option " Appliquer toutes les actions " en bas. Ensuite.
Clique sur "Enregistrer le rapport". Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

3/ * Fais un scan en ligne en cliquant ici : http://assiste.com.free.fr/...
* Choisis Kaspersky.
* Tu dois réaliser le scan en utilisant Internet explorer. Une information apparait en haut, près de la barre d'état. Tu dois accepter et installer l'activeX proposé. La mise à jour de l'antivirus se lance.
* Réalise un scan complet du système.
* Sauvegarde le rapport en mode texte à l'issue du scan.

4/ Edite le rapport AVGantispyware et le rapport Kaspersky.

5/ Ton antivirus Avast se lance-t-il au démaarage ? Il n'apparait pas en 04.

FillPCA

Re,

Je n'ai que 2 min mais je regarde tout cela ce soir.

FillPCA

rebonjour
avec toutes mes excuse pour FillPCA je croyait qu'il n'en voulait pas
une question depuis les manip nero ( officiel de chez officiel avec mise à jour) est passer en anglais est ce normal?
autre question deja posé dans mon messge precedent que faisait comme action ce trojan?
encore une fois merci

rapport 2
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:35:09, on 10/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\tsnpstd3.exe
C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
C:\WINDOWS\CameraFixer.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\vsnpstd3.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Druide\Antidote\Antidote\Gestionnaire Antidote.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposol08.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\Wanadoo\Watch.exe
c:\progra~1\fichie~1\instal~1\update~1\isuspm.exe
C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\agent.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Copernic Desktop Search 2 - {968631B6-4729-440D-9BF4-251F5593EC9A} - C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand2526.dll
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] C:\PROGRA~1\Druide\Antidote\Antidote\Gestionnaire Antidote.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Copernic Desktop Search 2] "C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: officejet 6100.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - http://ipgweb.cce.hp.com/rdqemea/downloads/sysinfo.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: UPnPService - Magix AG - C:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe

ComboFix 08-01-09.2 - georges 2008-01-09 23:09:30.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.153 [GMT 1:00]
Running from: C:\Documents and Settings\georges\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\georges\Bureau\CFScript.txt
* Created a new restore point

FILE
C:\WINDOWS\system32\sysrest.sys
C:\WINDOWS\system32\sysrest32.exe
.

((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-12-09 to 2008-01-09 ))))))))))))))))))))))))))))))))))))
.

2008-01-09 11:39 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2008-01-09 10:29 . 2008-01-09 10:29 118 --a------ C:\WINDOWS\system32\MRT.INI
2008-01-09 10:24 . 2008-01-09 10:24 1,355 --a------ C:\WINDOWS\imsins.BAK
2008-01-08 12:21 . 2004-07-26 16:16 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll
2008-01-08 12:21 . 2004-07-26 16:16 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll
2008-01-08 12:21 . 2004-07-26 16:16 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll
2008-01-08 12:21 . 2004-07-09 08:43 364,544 --------- C:\WINDOWS\system32\TwnLib4.dll
2008-01-08 12:21 . 2004-07-26 16:16 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll
2008-01-07 11:37 . 2007-03-12 09:41 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage r‚seau
2008-01-07 11:37 . 2007-03-12 09:41 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2008-01-07 11:37 . 2007-03-12 10:01 <REP> d--h----- C:\Documents and Settings\Administrateur\ModŠles
2008-01-07 11:37 . 2007-03-12 09:41 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
2008-01-07 11:37 . 2007-03-12 09:41 <REP> dr------- C:\Documents and Settings\Administrateur\Menu D‚marrer
2008-01-07 11:37 . 2007-03-12 09:41 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
2008-01-07 11:37 . 2007-03-12 09:41 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2008-01-06 13:17 . 1997-06-11 18:01 30,208 --a------ C:\WINDOWS\system32\WNASPI2K.BAK
2008-01-06 13:17 . 2002-05-06 11:01 17,005 --a------ C:\WINDOWS\system32\drivers\ASPI32.SYS
2008-01-06 13:17 . 2001-04-19 17:34 4,672 --a------ C:\WINDOWS\system\WOWPOST.EXE
2008-01-06 13:17 . 1999-10-22 16:58 4,030 --a------ C:\WINDOWS\system\WINASPI.BAK
2008-01-06 01:48 . 2008-01-06 01:48 23,600 --a------ C:\WINDOWS\system32\drivers\TVICHW32.SYS
2008-01-06 01:19 . 2008-01-06 01:20 <REP> d-------- C:\Program Files\Everest 3 Ultime Edition
2008-01-06 00:43 . 2008-01-06 00:43 <REP> d-------- C:\Program Files\avast
2008-01-06 00:37 . 2008-01-09 23:16 <REP> d-------- C:\WINDOWS\system32\NtmsData
2008-01-05 20:38 . 2006-05-26 15:40 61,440 --a------ C:\WINDOWS\system32\vsnpx32.dll
2008-01-03 11:16 . 2001-04-24 15:22 140,288 --a------ C:\WINDOWS\system32\comdlg32.ocx
2008-01-03 11:16 . 2001-06-11 19:03 98,304 --a------ C:\WINDOWS\system32\HLBButton6.ocx
2008-01-03 11:16 . 2007-09-05 21:56 40,960 --a------ C:\WINDOWS\system32\LedCommon.dll
2007-12-29 16:11 . 2007-12-29 16:12 <REP> d-------- C:\Program Files\Paint.NET
2007-12-28 17:41 . 2007-12-28 17:41 <REP> d-------- C:\Documents and Settings\georges\Application Data\CA
2007-12-28 14:00 . 2008-01-09 09:11 320 --a------ C:\WINDOWS\system32\winupdate.dat
2007-12-27 10:57 . 2007-12-27 10:57 <REP> dr-h----- C:\Documents and Settings\georges\Application Data\SecuROM
2007-12-27 10:57 . 2007-12-27 10:57 108,144 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2007-12-17 18:23 . 2007-12-17 18:25 <REP> d-------- C:\Documents and Settings\georges\Application Data\BonkEnc
2007-12-17 18:22 . 2007-12-17 18:23 <REP> d-------- C:\Program Files\BonkEnc
2007-12-12 15:08 . 2007-12-12 15:08 <REP> d-------- C:\Documents and Settings\georges\Application Data\Talkback
2007-12-12 15:07 . 2008-01-04 07:55 <REP> d-------- C:\Program Files\Mozilla Sunbird
2007-12-11 10:24 . 2007-12-13 12:24 <REP> d-------- C:\Program Files\X-Fonter
2007-12-11 09:55 . 2007-12-11 09:55 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avery
2007-12-09 20:42 . 1999-09-29 20:04 1,238,288 --a------ C:\WINDOWS\system32\msjt4jlt.dll
2007-12-09 20:42 . 1998-06-01 14:37 344,064 --a------ C:\WINDOWS\system32\msexch35.dll
2007-12-09 20:42 . 1998-06-01 14:37 294,912 --a------ C:\WINDOWS\system32\msxbse35.dll
2007-12-09 20:42 . 1999-09-09 22:06 252,688 --a------ C:\WINDOWS\system32\msexcl35.dll
2007-12-09 20:42 . 1999-06-07 18:59 250,128 --a------ C:\WINDOWS\system32\mspdox35.dll
2007-12-09 20:42 . 1999-09-09 22:06 168,720 --a------ C:\WINDOWS\system32\msltus35.dll
2007-12-09 20:42 . 1999-09-30 19:21 166,672 --a------ C:\WINDOWS\system32\mstext35.dll
2007-12-09 20:42 . 1999-04-26 20:08 44,304 --a------ C:\WINDOWS\system32\msrpfs35.dll
2007-12-09 20:42 . 1998-05-05 11:36 39,424 --a------ C:\WINDOWS\system32\JETCOMP.exe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-09 22:17 --------- d-----w C:\Program Files\Wanadoo
2008-01-09 22:00 --------- d-----w C:\Program Files\vmntoolbar
2008-01-09 21:49 --------- d-----w C:\Documents and Settings\georges\Application Data\vmntoolbar
2008-01-09 08:17 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
2008-01-08 11:34 --------- d-----w C:\Program Files\Ahead
2008-01-08 09:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-01-05 19:38 --------- d-----w C:\Program Files\Fichiers communs\snpstd3
2007-12-31 15:25 --------- d-----w C:\Documents and Settings\georges\Application Data\Ahead
2007-12-29 15:56 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-29 15:56 --------- d-----w C:\Program Files\Mindscape
2007-12-09 19:38 --------- d-----w C:\Program Files\Micro Application
2007-12-09 18:12 830 ---ha-w C:\Documents and Settings\georges\hpothb07.dat
2007-12-04 14:56 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys
2007-12-04 14:55 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
2007-12-04 14:53 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
2007-12-04 14:51 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
2007-12-04 14:49 26,624 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
2007-12-02 18:34 --------- d-----w C:\Documents and Settings\georges\Application Data\gtk-2.0
2007-11-30 15:41 659 ---ha-w C:\hpothb07.dat
2007-11-30 10:39 --------- d-----w C:\Program Files\Google
2007-11-22 11:54 --------- d-----w C:\Documents and Settings\georges\Application Data\TomTom
2007-11-22 11:53 --------- d-----w C:\Program Files\TomTom HOME 2
2007-11-22 11:53 --------- d-----w C:\Documents and Settings\All Users\Application Data\TomTom
2007-11-22 11:52 --------- d-----w C:\Program Files\TomTom HOME
2007-11-15 09:29 --------- d-----w C:\Program Files\Trend Micro
2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-11-11 22:53 8,192 --sha-w C:\WINDOWS\o2cLicStore.bin
2007-11-11 22:43 --------- d-----w C:\Program Files\Anuman Interactive
1995-09-20 15:16 456,976 ----a-w C:\Program Files\Fichiers communs\dao3032.dll
2006-05-03 09:06 163,328 --sh--r C:\WINDOWS\system32\flvDX.dll
2007-02-21 10:47 31,232 --sh--r C:\WINDOWS\system32\msfDX.dll
.

((((((((((((((((((((((((((((( snapshot@2008-01-09_12.13.05.72 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-01-09 10:42:51 253,952 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\[u]0[/u]0000001\NTUSER.DAT
+ 2008-01-09 22:09:12 253,952 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\[u]0[/u]0000001\NTUSER.DAT
- 2008-01-09 10:42:51 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\[u]0[/u]0000002\UsrClass.dat
+ 2008-01-09 22:09:12 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\[u]0[/u]0000002\UsrClass.dat
- 2008-01-09 10:42:57 5,849,088 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\[u]0[/u]0000003\NTUSER.DAT
+ 2008-01-09 22:09:12 233,472 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\[u]0[/u]0000003\NTUSER.DAT
- 2008-01-09 10:42:58 73,728 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\[u]0[/u]0000004\UsrClass.dat
+ 2008-01-09 22:09:12 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\[u]0[/u]0000004\UsrClass.dat
- 2008-01-09 10:42:59 233,472 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\[u]0[/u]0000005\NTUSER.DAT
+ 2008-01-09 22:09:13 5,849,088 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\[u]0[/u]0000005\NTUSER.DAT
- 2008-01-09 10:42:59 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\[u]0[/u]0000006\UsrClass.dat
+ 2008-01-09 22:09:13 73,728 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\[u]0[/u]0000006\UsrClass.dat
+ 2008-01-09 22:15:52 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_65c.dat
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 16:09 15360]
"WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 13:50 122880]
"Gestionnaire Antidote.exe"="C:\PROGRA~1\Druide\Antidote\Antidote\Gestionnaire Antidote.exe" [2005-06-22 16:12 386752]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 11:55 5674352]
"Copernic Desktop Search 2"="C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" [2006-12-08 16:58 1546544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2006-01-12 15:40 155648]
"InCD"="C:\Program Files\Ahead\InCD\InCD.exe" [2004-03-24 17:41 1294446]
"WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 13:49 20480]
"WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 15:55 32768]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
"Opware12"="C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe" [2002-08-01 02:49 49152]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 17:20 866584]
"REGSHAVE"="C:\Program Files\REGSHAVE\REGSHAVE.exe" [2002-02-04 21:32 53248]
"OSSelectorReinstall"="C:\Program Files\Fichiers communs\Acronis\Partition Suite\oss_reinstall.exe" [2006-04-19 19:36 1281425]
"tsnpstd3"="C:\WINDOWS\tsnpstd3.exe" [2006-09-26 09:13 270336]
"TrueImageMonitor.exe"="C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe" [2006-03-02 20:00 1009003]
"CloneCDTray"="C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe" [2002-12-02 15:17 73728]
"CameraFixer"="C:\WINDOWS\CameraFixer.exe" [2006-12-05 14:18 20480]
"Acronis Scheduler2 Service"="C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe" [2006-03-02 20:00 118784]
"ISUSPM Startup"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-08-09 06:03 221184]
"ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-08-09 06:03 81920]
"snpstd3"="C:\WINDOWS\vsnpstd3.exe" [2006-09-19 09:07 827392]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-19 16:09 15360]
"DWQueuedReporting"="C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" [2005-04-25 13:45 36040]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 relog_ap

S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 13:18]
S3 NUVision;Pinnacle DVC 80 Video;C:\WINDOWS\system32\DRIVERS\nuvvid2.sys [2001-12-03 11:55]
S3 UPnPService;UPnPService;C:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe [2006-12-14 15:00]

.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2007-06-18 09:44:51 C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp officejet 6100 series#1173694717.job"
- C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe
"2008-01-09 10:44:06 C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp officejet 6100 series#1173695991.job"
- C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe:-I
"2008-01-09 22:19:25 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Program Files\Windows Defender\MpCmdRun.exe
.
**************************************************************************
rapport 1
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-09 23:16:34
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-01-09 23:20:01 - machine was rebooted
ComboFix-quarantined-files.txt 2008-01-09 22:19:46
ComboFix2.txt 2008-01-09 11:14:08
.
2008-01-09 09:29:54 --- E O F ---

Bonjour,

J'aurais souhaité avoir les rapports demandés. Ce n'est peut-être pas encore terminé.

FillPCA

bonjour
comme etant partie hier apres midi je n'ai pu faire toutes les manips ce qui y a etait fait hier soir tard
merci tout est rentrée dans l'ordre
question ce trojan que faisait il ou quelle fonction il avait?
encore une fois votre utilité est reconnue

Re,

OK. As-tu vu ma réponse de 12 h 33 ?

FillPCA

Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Prevx1 - - Heuristic: Suspicious File With Bad Parent Associations
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -
Information additionnelle
MD5: 7c9eee928a16baef23d73f23a0cd0850

Bonjour Lyonnais92