Virus CID

Woké -  
Bonjour,
j'ai un virus CID, quelqu'un peut m'aidé svp ?

Merci
Configuration: Windows XP
Internet Explorer 7.0

27 réponses

Résumé de la discussion

L'infection par le virus CID sur un PC sous Windows XP avec Internet Explorer 7 est décrite, révélant entrées malveillantes dans le registre Run et des modifications du fichier hosts. Des réponses identifient des emplacements suspects (Application Data, tâches planifiées) et recommandent des outils comme Lop S&D, Catchme et Malwarebytes pour détecter et supprimer les éléments malveillants. Le diagnostic montre axis web cake second Run et des exécutables comme Rule real.exe et TEAM DRIVE DEFAULT.exe, ainsi que des entrées hosts CID, indiquant une surveillance et une manipulation réseau. En dernier, Catchme indique un rootkit scan sans éléments cachés et le fichier hosts modifié liste de nombreuses redirections CID, ce qui souligne l’importance d’un nettoyage complet et surveillé.

Bobot (l’IA à votre service)
  1. jlpjlp Contributeur sécurité
    Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked".

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [axis web cake second] C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web\Rule real.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    _________

    vire lop sd ,otmovit

    __________

    utilise pour supprimer tes traces

    CCLEANER: (lance un nettoyage et répare 3 fois les erreurs) sans installer la barre yahoo (tu le gardera)

    https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

    ________________

    voila pour cid c'est fini!!!

    sinon pour voir si rien d'autre:

    colle le rapport d'un scan en ligne
    avec un des suivants:

    bitdefender en ligne :
    http://www.bitdefender.fr/scan_fr/scan8/ie.html

    Panda en ligne :
    http://pandasoftware.fr
    1. Woké
      File/Folder C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web\Rule real.exe not found.

      OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07122008_151937

      voila
      1. jlpjlp Contributeur sécurité
        télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau.
        double-clique sur OTMoveIt.exe pour le lancer.
        copie la liste qui se trouve en citation ci-dessous,
        et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

        Citation :

        C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web\Rule real.exe

        clique sur MoveIt! pour lancer la suppression.
        le résultat apparaitra dans le cadre "Results".
        clique sur Exit pour fermer.
        poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

        il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
        1. Woké
          -----------------------[ Lop S&D 4.2.2-1 XP/Vista ]---------------------

          [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
          [ USER : Adrien ] [ "C:\Lop SD" ] [ Selection : 2 ]
          [ 12/07/2008 | 13:53:18,92 ] [ PC : PRINCIPAL ]
          [ MAJ : 09-07-2008 | 21:02 ]

          \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Book Slow Axis Web\Rule real.exe
          Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\hqmusapj.exe
          Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\hzzijluz.exe
          Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\mliolkhv.exe
          Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\Mode Heck Okay Up.exe
          Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\TEAM DRIVE DEFAULT.exe
          Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\TWO 4.exe
          Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\vcngtpit.exe
          Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\wgbczodl.exe
          Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@www.adserver5[1].txt
          Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@adin.bigpoint[2].txt
          Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@bigpoint[2].txt
          Supprime! - C:\DOCUME~1\Adrien\Cookies\adrien@fr1.seafight.bigpoint[1].txt
          Supprime! - C:\WINDOWS\Tasks\AFD26B749185E2FC.job
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Book Slow Axis Web
          Supprime! - C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1
          Supprime! - C:\Program Files\stupid~1
          RestaurÚ! - Fichier Hosts

          //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

          Supprime! - C:\Program Files\Viewpoint
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint

          //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

          -------------[ Listing des dossiers dans Application Data ]------------

          [25/09/2006|14:48] C:\DOCUME~1\ADMINI~1\APPLIC~1\Ahead
          [25/09/2006|15:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\AOL
          [25/09/2006|13:41] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
          [25/09/2006|11:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
          [25/09/2006|14:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
          [25/09/2006|17:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
          [25/09/2006|15:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

          [08/02/2008|19:54] C:\DOCUME~1\Adrien\APPLIC~1\Adobe
          [13/04/2007|12:43] C:\DOCUME~1\Adrien\APPLIC~1\AdobeUM
          [03/01/2008|15:03] C:\DOCUME~1\Adrien\APPLIC~1\Ahead
          [25/09/2006|15:28] C:\DOCUME~1\Adrien\APPLIC~1\AOL
          [21/03/2008|21:31] C:\DOCUME~1\Adrien\APPLIC~1\Apple Computer
          [20/12/2006|23:59] C:\DOCUME~1\Adrien\APPLIC~1\CyberLink
          [25/09/2006|13:41] C:\DOCUME~1\Adrien\APPLIC~1\desktop.ini
          [23/11/2006|22:29] C:\DOCUME~1\Adrien\APPLIC~1\DivX
          [03/02/2008|14:12] C:\DOCUME~1\Adrien\APPLIC~1\GDIPFONTCACHEV1.DAT
          [29/04/2007|13:22] C:\DOCUME~1\Adrien\APPLIC~1\Google
          [08/11/2006|15:36] C:\DOCUME~1\Adrien\APPLIC~1\HP
          [25/09/2006|11:46] C:\DOCUME~1\Adrien\APPLIC~1\Identities
          [07/03/2008|23:13] C:\DOCUME~1\Adrien\APPLIC~1\InstallShield
          [31/03/2007|20:24] C:\DOCUME~1\Adrien\APPLIC~1\La Bataille pour la Terre du Milieu T II
          [24/06/2008|16:56] C:\DOCUME~1\Adrien\APPLIC~1\LimeWire
          [25/09/2006|14:11] C:\DOCUME~1\Adrien\APPLIC~1\Macromedia
          [08/07/2008|00:21] C:\DOCUME~1\Adrien\APPLIC~1\Malwarebytes
          [03/01/2008|17:15] C:\DOCUME~1\Adrien\APPLIC~1\Microsoft
          [27/06/2008|22:08] C:\DOCUME~1\Adrien\APPLIC~1\mIRC
          [23/11/2006|21:35] C:\DOCUME~1\Adrien\APPLIC~1\Mozilla
          [29/04/2007|22:08] C:\DOCUME~1\Adrien\APPLIC~1\Screenshot Sender
          [07/03/2008|23:27] C:\DOCUME~1\Adrien\APPLIC~1\Sony
          [10/02/2008|12:38] C:\DOCUME~1\Adrien\APPLIC~1\Sun
          [23/11/2006|21:35] C:\DOCUME~1\Adrien\APPLIC~1\Talkback
          [26/06/2008|23:59] C:\DOCUME~1\Adrien\APPLIC~1\teamspeak2
          [07/08/2007|23:16] C:\DOCUME~1\Adrien\APPLIC~1\uqm
          [27/01/2008|15:46] C:\DOCUME~1\Adrien\APPLIC~1\vlc
          [11/07/2008|22:41] C:\DOCUME~1\Adrien\APPLIC~1\wklnhst.dat
          [11/07/2008|21:47] C:\DOCUME~1\Adrien\APPLIC~1\Xfire
          [25/09/2006|15:28] C:\DOCUME~1\Adrien\APPLIC~1\You've Got Pictures Screensaver

          [08/02/2008|20:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
          [01/05/2007|18:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
          [07/03/2008|23:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
          [07/03/2008|23:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
          [07/03/2008|23:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
          [21/10/2006|23:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
          [25/09/2006|13:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
          [24/04/2007|19:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
          [14/10/2006|12:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
          [14/10/2006|12:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
          [08/07/2008|00:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
          [29/04/2007|22:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
          [06/07/2008|01:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
          [25/09/2006|17:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
          [04/06/2008|14:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
          [10/12/2006|19:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
          [03/07/2008|13:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Razer
          [25/09/2006|11:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
          [14/10/2006|12:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
          [07/03/2008|23:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
          [07/03/2008|23:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
          [07/06/2007|19:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
          [25/09/2006|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
          [29/03/2008|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
          [14/10/2006|12:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

          [25/09/2006|14:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Ahead
          [25/09/2006|15:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AOL
          [25/09/2006|13:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
          [25/09/2006|11:46] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
          [25/09/2006|14:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
          [25/09/2006|17:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
          [25/09/2006|15:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

          [25/09/2006|11:49] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
          [02/11/2007|21:36] C:\DOCUME~1\LOCALS~1\APPLIC~1\Xfire

          [05/02/2008|11:03] C:\DOCUME~1\Martine\APPLIC~1\Adobe
          [20/06/2007|13:53] C:\DOCUME~1\Martine\APPLIC~1\AdobeUM
          [25/09/2006|14:48] C:\DOCUME~1\Martine\APPLIC~1\Ahead
          [25/09/2006|15:28] C:\DOCUME~1\Martine\APPLIC~1\AOL
          [23/10/2006|17:57] C:\DOCUME~1\Martine\APPLIC~1\CyberLink
          [25/09/2006|13:41] C:\DOCUME~1\Martine\APPLIC~1\desktop.ini
          [01/03/2008|17:41] C:\DOCUME~1\Martine\APPLIC~1\DivX
          [15/05/2008|21:44] C:\DOCUME~1\Martine\APPLIC~1\GDIPFONTCACHEV1.DAT
          [01/05/2007|10:24] C:\DOCUME~1\Martine\APPLIC~1\Google
          [08/01/2007|19:28] C:\DOCUME~1\Martine\APPLIC~1\HP
          [25/09/2006|11:46] C:\DOCUME~1\Martine\APPLIC~1\Identities
          [25/09/2006|14:11] C:\DOCUME~1\Martine\APPLIC~1\Macromedia
          [02/01/2008|20:23] C:\DOCUME~1\Martine\APPLIC~1\Microsoft
          [06/03/2008|13:17] C:\DOCUME~1\Martine\APPLIC~1\Mozilla
          [06/03/2008|13:17] C:\DOCUME~1\Martine\APPLIC~1\Talkback
          [30/01/2008|11:14] C:\DOCUME~1\Martine\APPLIC~1\vlc
          [08/05/2008|18:54] C:\DOCUME~1\Martine\APPLIC~1\wklnhst.dat
          [25/09/2006|15:28] C:\DOCUME~1\Martine\APPLIC~1\You've Got Pictures Screensaver

          [25/09/2006|11:49] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
          [21/03/2008|19:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\Xfire

          [23/10/2006|17:56] C:\DOCUME~1\PROPRI~1\APPLIC~1\You've Got Pictures Screensaver

          [30/01/2008|20:23] C:\DOCUME~1\ROGERP~1\APPLIC~1\Adobe
          [10/12/2007|13:54] C:\DOCUME~1\ROGERP~1\APPLIC~1\AdobeUM
          [25/09/2006|14:48] C:\DOCUME~1\ROGERP~1\APPLIC~1\Ahead
          [25/09/2006|15:28] C:\DOCUME~1\ROGERP~1\APPLIC~1\AOL
          [18/04/2008|17:03] C:\DOCUME~1\ROGERP~1\APPLIC~1\Apple Computer
          [10/03/2008|20:31] C:\DOCUME~1\ROGERP~1\APPLIC~1\CyberLink
          [25/09/2006|13:41] C:\DOCUME~1\ROGERP~1\APPLIC~1\desktop.ini
          [22/11/2007|17:14] C:\DOCUME~1\ROGERP~1\APPLIC~1\DivX
          [25/03/2008|11:17] C:\DOCUME~1\ROGERP~1\APPLIC~1\GDIPFONTCACHEV1.DAT
          [29/06/2007|19:01] C:\DOCUME~1\ROGERP~1\APPLIC~1\Google
          [02/09/2007|18:30] C:\DOCUME~1\ROGERP~1\APPLIC~1\HP
          [25/09/2006|11:46] C:\DOCUME~1\ROGERP~1\APPLIC~1\Identities
          [25/09/2006|14:11] C:\DOCUME~1\ROGERP~1\APPLIC~1\Macromedia
          [28/01/2008|22:49] C:\DOCUME~1\ROGERP~1\APPLIC~1\Microsoft
          [10/10/2007|14:48] C:\DOCUME~1\ROGERP~1\APPLIC~1\Microsoft Web Folders
          [30/01/2008|02:43] C:\DOCUME~1\ROGERP~1\APPLIC~1\Sun
          [26/11/2007|01:25] C:\DOCUME~1\ROGERP~1\APPLIC~1\Viewpoint
          [27/01/2008|23:47] C:\DOCUME~1\ROGERP~1\APPLIC~1\vlc
          [16/06/2008|02:22] C:\DOCUME~1\ROGERP~1\APPLIC~1\wklnhst.dat
          [23/03/2008|20:20] C:\DOCUME~1\ROGERP~1\APPLIC~1\Xfire
          [25/09/2006|15:28] C:\DOCUME~1\ROGERP~1\APPLIC~1\You've Got Pictures Screensaver

          ----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

          [18/06/2008 11:08][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
          [11/07/2008 18:49][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{6EADE4E3-6385-4B5F-8939-003506F34A63}.job
          [12/07/2008 12:02][--ah-----] C:\WINDOWS\tasks\SA.DAT
          [05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

          ---------------[ Listing des dossiers dans C:\Program Files ]--------------

          [18/01/2008|04:03] C:\Program Files\3DBELOTE
          [05/07/2008|11:18] C:\Program Files\Adobe
          [25/09/2006|13:13] C:\Program Files\AMD
          [25/09/2006|13:18] C:\Program Files\Analog Devices
          [01/05/2007|18:59] C:\Program Files\AOL
          [24/06/2007|18:24] C:\Program Files\AOL 9.0
          [25/09/2006|15:28] C:\Program Files\AOL Compagnon
          [22/11/2006|22:14] C:\Program Files\AOL Toolbar
          [07/03/2008|23:21] C:\Program Files\Apple Software Update
          [11/07/2008|18:52] C:\Program Files\Avanquest update
          [01/06/2008|14:13] C:\Program Files\Beston
          [09/01/2007|19:44] C:\Program Files\CA
          [11/07/2008|22:25] C:\Program Files\ComboFix.exe
          [24/11/2006|23:40] C:\Program Files\Common Files
          [25/09/2006|11:45] C:\Program Files\ComPlus Applications
          [10/02/2007|15:09] C:\Program Files\Custom-Strike
          [25/09/2006|17:56] C:\Program Files\Cyberlink
          [25/09/2006|13:22] C:\Program Files\DIFX
          [03/09/2007|15:20] C:\Program Files\DivX
          [14/10/2006|19:31] C:\Program Files\EA GAMES
          [29/10/2007|14:14] C:\Program Files\Electronic Arts
          [10/07/2008|19:52] C:\Program Files\eMule
          [25/09/2006|14:11] C:\Program Files\Encarta
          [08/07/2008|01:30] C:\Program Files\Fichiers communs
          [24/11/2006|23:37] C:\Program Files\GameSpy
          [24/04/2007|19:32] C:\Program Files\Google
          [20/06/2008|20:00] C:\Program Files\HC2Setup.exe
          [14/10/2006|12:25] C:\Program Files\Hewlett-Packard
          [07/07/2008|22:20] C:\Program Files\Hijackthis
          [14/10/2006|12:29] C:\Program Files\HP
          [20/06/2008|20:00] C:\Program Files\HyCam2
          [21/11/2007|13:25] C:\Program Files\IncrediMail
          [03/07/2008|13:29] C:\Program Files\InstallShield Installation Information
          [11/06/2008|23:03] C:\Program Files\Internet Explorer
          [14/03/2008|20:22] C:\Program Files\Java
          [25/09/2006|15:28] C:\Program Files\Learn2.com
          [22/04/2008|13:28] C:\Program Files\LimeWire
          [05/11/2006|17:52] C:\Program Files\Logitech
          [07/07/2008|20:53] C:\Program Files\Lopxp
          [08/07/2008|00:21] C:\Program Files\Malwarebytes' Anti-Malware
          [20/05/2007|21:56] C:\Program Files\Messenger
          [29/03/2008|01:40] C:\Program Files\Messenger Plus! Live
          [24/09/2007|11:13] C:\Program Files\Micro Application
          [25/09/2006|14:14] C:\Program Files\Microsoft AutoRoute
          [20/05/2007|21:56] C:\Program Files\Microsoft Digital Image 2006
          [10/10/2007|14:48] C:\Program Files\microsoft frontpage
          [25/09/2006|14:51] C:\Program Files\Microsoft Games
          [25/09/2006|14:07] C:\Program Files\Microsoft Money 2005
          [10/10/2007|14:48] C:\Program Files\Microsoft Office
          [20/05/2007|21:56] C:\Program Files\Microsoft Works
          [25/09/2006|13:58] C:\Program Files\Microsoft Works Suite 2006
          [27/06/2008|22:08] C:\Program Files\mIRC
          [25/09/2006|11:45] C:\Program Files\Movie Maker
          [06/07/2008|18:39] C:\Program Files\Mozilla Firefox
          [25/09/2006|11:44] C:\Program Files\MSN
          [13/10/2006|21:30] C:\Program Files\MSN Apps
          [25/09/2006|11:44] C:\Program Files\MSN Gaming Zone
          [29/03/2008|21:29] C:\Program Files\MSN Messenger
          [16/11/2006|23:49] C:\Program Files\MSXML 4.0
          [25/09/2006|13:34] C:\Program Files\Multimedia keyboard utility
          [11/07/2008|22:52] C:\Program Files\Navilog1
          [25/09/2006|14:47] C:\Program Files\Nero
          [25/09/2006|11:45] C:\Program Files\NetMeeting
          [25/09/2006|11:44] C:\Program Files\Online Services
          [13/06/2007|08:50] C:\Program Files\Outlook Express
          [03/11/2006|13:29] C:\Program Files\Portrait Displays
          [07/03/2008|23:22] C:\Program Files\QuickTime
          [03/07/2008|13:29] C:\Program Files\Razer
          [25/09/2006|15:27] C:\Program Files\Real
          [15/12/2006|21:37] C:\Program Files\Rockstar Games
          [08/07/2008|00:14] C:\Program Files\RogueRemover FREE
          [25/09/2006|11:45] C:\Program Files\Services en ligne
          [07/03/2008|23:23] C:\Program Files\Sony Ericsson
          [07/06/2007|19:49] C:\Program Files\Spybot - Search & Destroy
          [12/07/2008|12:22] C:\Program Files\Steam
          [25/09/2006|14:24] C:\Program Files\Targa VFD Display
          [07/01/2007|19:48] C:\Program Files\Teamspeak2_RC2
          [16/05/2008|23:01] C:\Program Files\TrackMania Nations ESWC
          [07/07/2008|22:14] C:\Program Files\Trend Micro
          [25/09/2006|11:49] C:\Program Files\Uninstall Information
          [27/01/2008|15:42] C:\Program Files\VideoLAN
          [25/09/2006|11:49] C:\Program Files\Windows Journal Viewer
          [29/03/2008|21:28] C:\Program Files\Windows Live
          [21/12/2006|19:19] C:\Program Files\Windows Media Connect
          [20/05/2007|21:56] C:\Program Files\Windows Media Connect 2
          [21/10/2007|14:53] C:\Program Files\Windows Media Player
          [25/09/2006|11:44] C:\Program Files\Windows NT
          [25/09/2006|11:45] C:\Program Files\WindowsUpdate
          [25/09/2006|13:24] C:\Program Files\Wireless LAN USB Dongle
          [29/08/2007|17:25] C:\Program Files\Wolfenstein - Enemy Territory
          [25/09/2006|11:46] C:\Program Files\xerox
          [14/10/2006|12:06] C:\Program Files\Yahoo!

          ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

          [08/02/2008|20:07] C:\Program Files\Fichiers communs\Adobe
          [25/09/2006|14:49] C:\Program Files\Fichiers communs\Ahead
          [24/09/2007|14:05] C:\Program Files\Fichiers communs\AOL
          [25/09/2006|15:28] C:\Program Files\Fichiers communs\aolback
          [02/10/2006|09:46] C:\Program Files\Fichiers communs\aolshare
          [24/09/2007|11:15] C:\Program Files\Fichiers communs\Borland Shared
          [25/09/2006|14:03] C:\Program Files\Fichiers communs\Designer
          [14/10/2006|12:24] C:\Program Files\Fichiers communs\Hewlett-Packard
          [14/10/2006|12:27] C:\Program Files\Fichiers communs\HP
          [25/09/2006|14:31] C:\Program Files\Fichiers communs\InstallShield
          [11/01/2008|22:27] C:\Program Files\Fichiers communs\Java
          [05/11/2006|17:52] C:\Program Files\Fichiers communs\Labtec
          [13/10/2006|21:03] C:\Program Files\Fichiers communs\LightScribe
          [29/03/2008|21:29] C:\Program Files\Fichiers communs\Microsoft Shared
          [25/09/2006|11:45] C:\Program Files\Fichiers communs\MSSoap
          [25/09/2006|15:27] C:\Program Files\Fichiers communs\Nullsoft
          [25/09/2006|13:41] C:\Program Files\Fichiers communs\ODBC
          [25/09/2006|15:27] C:\Program Files\Fichiers communs\Real
          [25/09/2006|11:45] C:\Program Files\Fichiers communs\Services
          [14/10/2006|12:28] C:\Program Files\Fichiers communs\Sonic Shared
          [25/09/2006|13:41] C:\Program Files\Fichiers communs\SpeechEngines
          [10/10/2007|14:49] C:\Program Files\Fichiers communs\System
          [29/03/2008|21:29] C:\Program Files\Fichiers communs\WindowsLiveInstaller

          ---------------------------[ Process ]--------------------------

          ... 63

          ... OK !

          ----------------------[ Recherche avec S_Lop ]---------------------

          Aucun fichier / dossier Lop trouvé !

          -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

          C:\DOCUME~1\Adrien\Cookies\adrien@adopt.euroclick[2].txt
          C:\DOCUME~1\Adrien\Cookies\adrien@32vegas[2].txt
          C:\DOCUME~1\Adrien\Cookies\adrien@banner.32vegas[2].txt

          ----------------------[ Verification du Registre ]----------------------

          ..... OK !

          --------------------[ Verification du fichier Hosts ]---------------------

          Fichier Hosts PROPRE

          ----------------[ Recherche de fichiers avec Catchme ]-----------------

          catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
          Rootkit scan 2008-07-12 13:54:18
          Windows 5.1.2600 Service Pack 2 NTFS
          scanning hidden processes ...
          scanning hidden files ...
          scan completed successfully
          hidden processes: 0
          hidden files: 0

          --------------------[ Recherche d'autres infections ]---------------------

          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrack.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatest.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestlightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestlightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcracklightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcracklightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrack.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatest.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncracklightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrack.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatest.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestlightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcracklightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcracklightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrack.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrack.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatest.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestlightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestlightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcracklightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcracklightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrack.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatest.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncracklightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrack.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatest.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestlightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcracklightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcracklightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrack.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackpointlight.cfx
          => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrack.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatest.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestlightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestlightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcracklightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcracklightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrack.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatest.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncracklightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrack.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatest.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestlightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcracklightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcracklightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrack.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrack.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatest.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestlightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestlightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcracklightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcracklightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrack.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatest.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncracklightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrack.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatest.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestlightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcracklightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcracklightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrack.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackpointlight.cfx
          => C:\Documents and Settings\Adrien\Mes documents\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackshadow.cfx

          [F:22][D:4]-> C:\DOCUME~1\Adrien\LOCALS~1\Temp
          [F:339][D:0]-> C:\DOCUME~1\Adrien\Cookies
          [F:1638][D:8]-> C:\DOCUME~1\Adrien\LOCALS~1\TEMPOR~1\content.IE5

          --------------------[ Fin du rapport a 13:55:08,51 ]----------------------

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 13:57:11, on 12/07/2008
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16674)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
          C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
          C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
          C:\Program Files\CA\eTrust Antivirus\InoRT.exe
          C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
          C:\WINDOWS\system32\nvsvc32.exe
          C:\WINDOWS\system32\HPZipm12.exe
          C:\WINDOWS\system32\PnkBstrA.exe
          C:\Program Files\Cyberlink\Shared files\RichVideo.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\wanmpsvc.exe
          C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
          C:\Program Files\Analog Devices\Core\smax4pnp.exe
          C:\WINDOWS\sm56hlpr.exe
          C:\Program Files\Multimedia keyboard utility\LED.exe
          C:\Program Files\CyberLink\PowerCinema\PCMService.exe
          C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
          C:\WINDOWS\system32\rundll32.exe
          C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe
          C:\Program Files\Logitech\Video\LogiTray.exe
          C:\PROGRA~1\CA\ETRUST~1\realmon.exe
          C:\Program Files\Real\RealPlayer\RealPlay.exe
          C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe
          C:\WINDOWS\system32\RUNDLL32.EXE
          C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
          C:\WINDOWS\system32\LVComS.exe
          C:\Program Files\Razer\Lachesis\razerhid.exe
          C:\Program Files\Razer\Lachesis\OSD.exe
          C:\program files\steam\steam.exe
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          C:\WINDOWS\system32\wuauclt.exe
          C:\Program Files\Portrait Displays\Pivot Software\floater.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          C:\Program Files\Razer\Lachesis\razertra.exe
          C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
          C:\Program Files\Windows Media Player\WMPNSCFG.exe
          C:\Program Files\Razer\Lachesis\razerofa.exe
          C:\Program Files\Windows Live\Messenger\usnsvc.exe
          C:\Program Files\Windows Media Player\wmplayer.exe
          C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
          C:\WINDOWS\explorer.exe
          C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\Trend Micro\HijackThis\Eden.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
          R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
          O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
          O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
          O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
          O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
          O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
          O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
          O4 - HKLM\..\Run: [FLMK08KB] C:\Program Files\Multimedia keyboard utility\LED.exe
          O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
          O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
          O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
          O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe" /c
          O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
          O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
          O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe"
          O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
          O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
          O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
          O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
          O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe
          O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
          O4 - HKLM\..\Run: [Lachesis] C:\Program Files\Razer\Lachesis\razerhid.exe
          O4 - HKLM\..\Run: [axis web cake second] C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web\Rule real.exe
          O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
          O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
          O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
          O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
          O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
          O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O14 - IERESET.INF: START_PAGE_URL=https://www.targa.gmbh/eng/targa/
          O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
          O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
          O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
          O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
          O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
          O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
          O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
          O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
          O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
          O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
          O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
          O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
          O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
          O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
          2. jlpjlp Contributeur sécurité
            vire le fichier Battlefield 2142 car surement infécté: : en allant dans poste de travail puis

            C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142

            ________________

            refais lop sd et nettoie avec l'option 2 et colle le rapport

            __________________

            recolle un hijackhtis et dis tes soucis actuels
            1. Woké
              -----------------------[ Lop S&D 4.2.2-1 XP/Vista ]---------------------

              [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
              [ USER : Adrien ] [ "C:\Lop SD" ] [ Selection : 1 ]
              [ 11/07/2008 | 23:00:31,32 ] [ PC : PRINCIPAL ]
              [ MAJ : 09-07-2008 | 21:02 ]

              -------------[ Listing des dossiers dans Application Data ]------------

              [25/09/2006|14:48] C:\DOCUME~1\ADMINI~1\APPLIC~1\Ahead
              [25/09/2006|15:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\AOL
              [25/09/2006|13:41] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
              [25/09/2006|11:46] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
              [25/09/2006|14:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
              [25/09/2006|17:17] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
              [25/09/2006|15:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

              [08/02/2008|19:54] C:\DOCUME~1\Adrien\APPLIC~1\Adobe
              [13/04/2007|12:43] C:\DOCUME~1\Adrien\APPLIC~1\AdobeUM
              [03/01/2008|15:03] C:\DOCUME~1\Adrien\APPLIC~1\Ahead
              [25/09/2006|15:28] C:\DOCUME~1\Adrien\APPLIC~1\AOL
              [21/03/2008|21:31] C:\DOCUME~1\Adrien\APPLIC~1\Apple Computer
              [20/12/2006|23:59] C:\DOCUME~1\Adrien\APPLIC~1\CyberLink
              [25/09/2006|13:41] C:\DOCUME~1\Adrien\APPLIC~1\desktop.ini
              [23/11/2006|22:29] C:\DOCUME~1\Adrien\APPLIC~1\DivX
              [03/02/2008|14:12] C:\DOCUME~1\Adrien\APPLIC~1\GDIPFONTCACHEV1.DAT
              [29/04/2007|13:22] C:\DOCUME~1\Adrien\APPLIC~1\Google
              [08/11/2006|15:36] C:\DOCUME~1\Adrien\APPLIC~1\HP
              [25/09/2006|11:46] C:\DOCUME~1\Adrien\APPLIC~1\Identities
              [07/03/2008|23:13] C:\DOCUME~1\Adrien\APPLIC~1\InstallShield
              [31/03/2007|20:24] C:\DOCUME~1\Adrien\APPLIC~1\La Bataille pour la Terre du Milieu T II
              [24/06/2008|16:56] C:\DOCUME~1\Adrien\APPLIC~1\LimeWire
              [25/09/2006|14:11] C:\DOCUME~1\Adrien\APPLIC~1\Macromedia
              [08/07/2008|00:21] C:\DOCUME~1\Adrien\APPLIC~1\Malwarebytes
              [03/01/2008|17:15] C:\DOCUME~1\Adrien\APPLIC~1\Microsoft
              [27/06/2008|22:08] C:\DOCUME~1\Adrien\APPLIC~1\mIRC
              [23/11/2006|21:35] C:\DOCUME~1\Adrien\APPLIC~1\Mozilla
              [29/04/2007|22:08] C:\DOCUME~1\Adrien\APPLIC~1\Screenshot Sender
              [07/03/2008|23:27] C:\DOCUME~1\Adrien\APPLIC~1\Sony
              [10/02/2008|12:38] C:\DOCUME~1\Adrien\APPLIC~1\Sun
              [23/11/2006|21:35] C:\DOCUME~1\Adrien\APPLIC~1\Talkback
              [26/06/2008|23:59] C:\DOCUME~1\Adrien\APPLIC~1\teamspeak2
              [07/08/2007|23:16] C:\DOCUME~1\Adrien\APPLIC~1\uqm
              [27/01/2008|15:46] C:\DOCUME~1\Adrien\APPLIC~1\vlc
              [11/07/2008|22:41] C:\DOCUME~1\Adrien\APPLIC~1\wklnhst.dat
              [11/07/2008|21:47] C:\DOCUME~1\Adrien\APPLIC~1\Xfire
              [25/09/2006|15:28] C:\DOCUME~1\Adrien\APPLIC~1\You've Got Pictures Screensaver

              [08/02/2008|20:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
              [01/05/2007|18:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
              [07/03/2008|23:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
              [07/03/2008|23:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
              [11/07/2008|11:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Book Slow Axis Web
              [07/03/2008|23:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
              [21/10/2006|23:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
              [25/09/2006|13:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
              [24/04/2007|19:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
              [14/10/2006|12:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
              [14/10/2006|12:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
              [08/07/2008|00:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
              [29/04/2007|22:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
              [06/07/2008|01:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
              [25/09/2006|17:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
              [04/06/2008|14:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QTSBandwidthCache
              [10/12/2006|19:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
              [03/07/2008|13:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Razer
              [25/09/2006|11:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
              [14/10/2006|12:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
              [07/03/2008|23:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony
              [07/03/2008|23:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
              [07/06/2007|19:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
              [25/09/2006|15:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
              [25/09/2006|15:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
              [29/03/2008|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
              [14/10/2006|12:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

              [25/09/2006|14:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Ahead
              [25/09/2006|15:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AOL
              [25/09/2006|13:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
              [25/09/2006|11:46] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
              [25/09/2006|14:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
              [25/09/2006|17:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
              [25/09/2006|15:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

              [25/09/2006|11:49] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
              [02/11/2007|21:36] C:\DOCUME~1\LOCALS~1\APPLIC~1\Xfire

              [05/02/2008|11:03] C:\DOCUME~1\Martine\APPLIC~1\Adobe
              [20/06/2007|13:53] C:\DOCUME~1\Martine\APPLIC~1\AdobeUM
              [25/09/2006|14:48] C:\DOCUME~1\Martine\APPLIC~1\Ahead
              [25/09/2006|15:28] C:\DOCUME~1\Martine\APPLIC~1\AOL
              [23/10/2006|17:57] C:\DOCUME~1\Martine\APPLIC~1\CyberLink
              [25/09/2006|13:41] C:\DOCUME~1\Martine\APPLIC~1\desktop.ini
              [01/03/2008|17:41] C:\DOCUME~1\Martine\APPLIC~1\DivX
              [15/05/2008|21:44] C:\DOCUME~1\Martine\APPLIC~1\GDIPFONTCACHEV1.DAT
              [01/05/2007|10:24] C:\DOCUME~1\Martine\APPLIC~1\Google
              [08/01/2007|19:28] C:\DOCUME~1\Martine\APPLIC~1\HP
              [25/09/2006|11:46] C:\DOCUME~1\Martine\APPLIC~1\Identities
              [25/09/2006|14:11] C:\DOCUME~1\Martine\APPLIC~1\Macromedia
              [02/01/2008|20:23] C:\DOCUME~1\Martine\APPLIC~1\Microsoft
              [06/03/2008|13:17] C:\DOCUME~1\Martine\APPLIC~1\Mozilla
              [06/03/2008|13:17] C:\DOCUME~1\Martine\APPLIC~1\Talkback
              [30/01/2008|11:14] C:\DOCUME~1\Martine\APPLIC~1\vlc
              [08/05/2008|18:54] C:\DOCUME~1\Martine\APPLIC~1\wklnhst.dat
              [25/09/2006|15:28] C:\DOCUME~1\Martine\APPLIC~1\You've Got Pictures Screensaver

              [25/09/2006|11:49] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
              [21/03/2008|19:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\Xfire

              [23/10/2006|17:56] C:\DOCUME~1\PROPRI~1\APPLIC~1\You've Got Pictures Screensaver

              [30/01/2008|20:23] C:\DOCUME~1\ROGERP~1\APPLIC~1\Adobe
              [10/12/2007|13:54] C:\DOCUME~1\ROGERP~1\APPLIC~1\AdobeUM
              [25/09/2006|14:48] C:\DOCUME~1\ROGERP~1\APPLIC~1\Ahead
              [25/09/2006|15:28] C:\DOCUME~1\ROGERP~1\APPLIC~1\AOL
              [18/04/2008|17:03] C:\DOCUME~1\ROGERP~1\APPLIC~1\Apple Computer
              [10/03/2008|20:31] C:\DOCUME~1\ROGERP~1\APPLIC~1\CyberLink
              [25/09/2006|13:41] C:\DOCUME~1\ROGERP~1\APPLIC~1\desktop.ini
              [22/11/2007|17:14] C:\DOCUME~1\ROGERP~1\APPLIC~1\DivX
              [25/03/2008|11:17] C:\DOCUME~1\ROGERP~1\APPLIC~1\GDIPFONTCACHEV1.DAT
              [29/06/2007|19:01] C:\DOCUME~1\ROGERP~1\APPLIC~1\Google
              [02/09/2007|18:30] C:\DOCUME~1\ROGERP~1\APPLIC~1\HP
              [25/09/2006|11:46] C:\DOCUME~1\ROGERP~1\APPLIC~1\Identities
              [25/09/2006|14:11] C:\DOCUME~1\ROGERP~1\APPLIC~1\Macromedia
              [28/01/2008|22:49] C:\DOCUME~1\ROGERP~1\APPLIC~1\Microsoft
              [10/10/2007|14:48] C:\DOCUME~1\ROGERP~1\APPLIC~1\Microsoft Web Folders
              [02/07/2008|12:09] C:\DOCUME~1\ROGERP~1\APPLIC~1\StupidHold
              [30/01/2008|02:43] C:\DOCUME~1\ROGERP~1\APPLIC~1\Sun
              [26/11/2007|01:25] C:\DOCUME~1\ROGERP~1\APPLIC~1\Viewpoint
              [27/01/2008|23:47] C:\DOCUME~1\ROGERP~1\APPLIC~1\vlc
              [16/06/2008|02:22] C:\DOCUME~1\ROGERP~1\APPLIC~1\wklnhst.dat
              [23/03/2008|20:20] C:\DOCUME~1\ROGERP~1\APPLIC~1\Xfire
              [25/09/2006|15:28] C:\DOCUME~1\ROGERP~1\APPLIC~1\You've Got Pictures Screensaver

              ----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

              [11/07/2008 23:00][--ah-----] C:\WINDOWS\tasks\AFD26B749185E2FC.job
              [18/06/2008 11:08][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
              [11/07/2008 18:49][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{6EADE4E3-6385-4B5F-8939-003506F34A63}.job
              [11/07/2008 18:46][--ah-----] C:\WINDOWS\tasks\SA.DAT
              [05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

              AFD26B749185E2FC.job <--> c:\docume~1\marina\applic~1\stupid~1\TEAMDRIVEDEFAULT.exe

              ---------------[ Listing des dossiers dans C:\Program Files ]--------------

              [18/01/2008|04:03] C:\Program Files\3DBELOTE
              [05/07/2008|11:18] C:\Program Files\Adobe
              [25/09/2006|13:13] C:\Program Files\AMD
              [25/09/2006|13:18] C:\Program Files\Analog Devices
              [01/05/2007|18:59] C:\Program Files\AOL
              [24/06/2007|18:24] C:\Program Files\AOL 9.0
              [25/09/2006|15:28] C:\Program Files\AOL Compagnon
              [22/11/2006|22:14] C:\Program Files\AOL Toolbar
              [07/03/2008|23:21] C:\Program Files\Apple Software Update
              [11/07/2008|18:52] C:\Program Files\Avanquest update
              [01/06/2008|14:13] C:\Program Files\Beston
              [09/01/2007|19:44] C:\Program Files\CA
              [11/07/2008|22:25] C:\Program Files\ComboFix.exe
              [24/11/2006|23:40] C:\Program Files\Common Files
              [25/09/2006|11:45] C:\Program Files\ComPlus Applications
              [10/02/2007|15:09] C:\Program Files\Custom-Strike
              [25/09/2006|17:56] C:\Program Files\Cyberlink
              [25/09/2006|13:22] C:\Program Files\DIFX
              [03/09/2007|15:20] C:\Program Files\DivX
              [14/10/2006|19:31] C:\Program Files\EA GAMES
              [29/10/2007|14:14] C:\Program Files\Electronic Arts
              [10/07/2008|19:52] C:\Program Files\eMule
              [25/09/2006|14:11] C:\Program Files\Encarta
              [08/07/2008|01:30] C:\Program Files\Fichiers communs
              [24/11/2006|23:37] C:\Program Files\GameSpy
              [24/04/2007|19:32] C:\Program Files\Google
              [20/06/2008|20:00] C:\Program Files\HC2Setup.exe
              [14/10/2006|12:25] C:\Program Files\Hewlett-Packard
              [07/07/2008|22:20] C:\Program Files\Hijackthis
              [14/10/2006|12:29] C:\Program Files\HP
              [20/06/2008|20:00] C:\Program Files\HyCam2
              [21/11/2007|13:25] C:\Program Files\IncrediMail
              [03/07/2008|13:29] C:\Program Files\InstallShield Installation Information
              [11/06/2008|23:03] C:\Program Files\Internet Explorer
              [14/03/2008|20:22] C:\Program Files\Java
              [25/09/2006|15:28] C:\Program Files\Learn2.com
              [22/04/2008|13:28] C:\Program Files\LimeWire
              [05/11/2006|17:52] C:\Program Files\Logitech
              [07/07/2008|20:53] C:\Program Files\Lopxp
              [08/07/2008|00:21] C:\Program Files\Malwarebytes' Anti-Malware
              [20/05/2007|21:56] C:\Program Files\Messenger
              [29/03/2008|01:40] C:\Program Files\Messenger Plus! Live
              [24/09/2007|11:13] C:\Program Files\Micro Application
              [25/09/2006|14:14] C:\Program Files\Microsoft AutoRoute
              [20/05/2007|21:56] C:\Program Files\Microsoft Digital Image 2006
              [10/10/2007|14:48] C:\Program Files\microsoft frontpage
              [25/09/2006|14:51] C:\Program Files\Microsoft Games
              [25/09/2006|14:07] C:\Program Files\Microsoft Money 2005
              [10/10/2007|14:48] C:\Program Files\Microsoft Office
              [20/05/2007|21:56] C:\Program Files\Microsoft Works
              [25/09/2006|13:58] C:\Program Files\Microsoft Works Suite 2006
              [27/06/2008|22:08] C:\Program Files\mIRC
              [25/09/2006|11:45] C:\Program Files\Movie Maker
              [06/07/2008|18:39] C:\Program Files\Mozilla Firefox
              [25/09/2006|11:44] C:\Program Files\MSN
              [13/10/2006|21:30] C:\Program Files\MSN Apps
              [25/09/2006|11:44] C:\Program Files\MSN Gaming Zone
              [29/03/2008|21:29] C:\Program Files\MSN Messenger
              [16/11/2006|23:49] C:\Program Files\MSXML 4.0
              [25/09/2006|13:34] C:\Program Files\Multimedia keyboard utility
              [11/07/2008|22:52] C:\Program Files\Navilog1
              [25/09/2006|14:47] C:\Program Files\Nero
              [25/09/2006|11:45] C:\Program Files\NetMeeting
              [25/09/2006|11:44] C:\Program Files\Online Services
              [13/06/2007|08:50] C:\Program Files\Outlook Express
              [03/11/2006|13:29] C:\Program Files\Portrait Displays
              [07/03/2008|23:22] C:\Program Files\QuickTime
              [03/07/2008|13:29] C:\Program Files\Razer
              [25/09/2006|15:27] C:\Program Files\Real
              [15/12/2006|21:37] C:\Program Files\Rockstar Games
              [08/07/2008|00:14] C:\Program Files\RogueRemover FREE
              [25/09/2006|11:45] C:\Program Files\Services en ligne
              [07/03/2008|23:23] C:\Program Files\Sony Ericsson
              [07/06/2007|19:49] C:\Program Files\Spybot - Search & Destroy
              [11/07/2008|20:50] C:\Program Files\Steam
              [11/07/2008|11:34] C:\Program Files\StupidHold
              [25/09/2006|14:24] C:\Program Files\Targa VFD Display
              [07/01/2007|19:48] C:\Program Files\Teamspeak2_RC2
              [16/05/2008|23:01] C:\Program Files\TrackMania Nations ESWC
              [07/07/2008|22:14] C:\Program Files\Trend Micro
              [25/09/2006|11:49] C:\Program Files\Uninstall Information
              [27/01/2008|15:42] C:\Program Files\VideoLAN
              [01/08/2007|13:37] C:\Program Files\Viewpoint
              [25/09/2006|11:49] C:\Program Files\Windows Journal Viewer
              [29/03/2008|21:28] C:\Program Files\Windows Live
              [21/12/2006|19:19] C:\Program Files\Windows Media Connect
              [20/05/2007|21:56] C:\Program Files\Windows Media Connect 2
              [21/10/2007|14:53] C:\Program Files\Windows Media Player
              [25/09/2006|11:44] C:\Program Files\Windows NT
              [25/09/2006|11:45] C:\Program Files\WindowsUpdate
              [25/09/2006|13:24] C:\Program Files\Wireless LAN USB Dongle
              [29/08/2007|17:25] C:\Program Files\Wolfenstein - Enemy Territory
              [25/09/2006|11:46] C:\Program Files\xerox
              [14/10/2006|12:06] C:\Program Files\Yahoo!

              ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

              [08/02/2008|20:07] C:\Program Files\Fichiers communs\Adobe
              [25/09/2006|14:49] C:\Program Files\Fichiers communs\Ahead
              [24/09/2007|14:05] C:\Program Files\Fichiers communs\AOL
              [25/09/2006|15:28] C:\Program Files\Fichiers communs\aolback
              [02/10/2006|09:46] C:\Program Files\Fichiers communs\aolshare
              [24/09/2007|11:15] C:\Program Files\Fichiers communs\Borland Shared
              [25/09/2006|14:03] C:\Program Files\Fichiers communs\Designer
              [14/10/2006|12:24] C:\Program Files\Fichiers communs\Hewlett-Packard
              [14/10/2006|12:27] C:\Program Files\Fichiers communs\HP
              [25/09/2006|14:31] C:\Program Files\Fichiers communs\InstallShield
              [11/01/2008|22:27] C:\Program Files\Fichiers communs\Java
              [05/11/2006|17:52] C:\Program Files\Fichiers communs\Labtec
              [13/10/2006|21:03] C:\Program Files\Fichiers communs\LightScribe
              [29/03/2008|21:29] C:\Program Files\Fichiers communs\Microsoft Shared
              [25/09/2006|11:45] C:\Program Files\Fichiers communs\MSSoap
              [25/09/2006|15:27] C:\Program Files\Fichiers communs\Nullsoft
              [25/09/2006|13:41] C:\Program Files\Fichiers communs\ODBC
              [25/09/2006|15:27] C:\Program Files\Fichiers communs\Real
              [25/09/2006|11:45] C:\Program Files\Fichiers communs\Services
              [14/10/2006|12:28] C:\Program Files\Fichiers communs\Sonic Shared
              [25/09/2006|13:41] C:\Program Files\Fichiers communs\SpeechEngines
              [10/10/2007|14:49] C:\Program Files\Fichiers communs\System
              [29/03/2008|21:29] C:\Program Files\Fichiers communs\WindowsLiveInstaller

              ---------------------------[ Process ]--------------------------

              ... 63

              iexplore.exe ~ [2324]

              ----------------------[ Recherche avec S_Lop ]---------------------

              Aucun fichier / dossier Lop trouvé !

              -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

              C:\DOCUME~1\ALLUSE~1\APPLIC~1\Book Slow Axis Web
              C:\DOCUME~1\ALLUSE~1\APPLIC~1\Book Slow Axis Web\Rule real.exe
              C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1
              C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\hqmusapj.exe
              C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\hzzijluz.exe
              C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\mliolkhv.exe
              C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\Mode Heck Okay Up.exe
              C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\TEAM DRIVE DEFAULT.exe
              C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\TWO 4.exe
              C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\vcngtpit.exe
              C:\DOCUME~1\ROGERP~1\APPLIC~1\stupid~1\wgbczodl.exe
              C:\Program Files\stupid~1
              C:\WINDOWS\Prefetch\RULE REAL.EXE-345BF0DC.pf
              C:\WINDOWS\Prefetch\TEAM DRIVE DEFAULT.EXE-257B81EF.pf
              C:\WINDOWS\Prefetch\TWO 4.EXE-04ED7220.pf
              C:\DOCUME~1\Adrien\Cookies\adrien@www.adserver5[1].txt
              C:\DOCUME~1\Adrien\Cookies\adrien@adin.bigpoint[2].txt
              C:\DOCUME~1\Adrien\Cookies\adrien@bigpoint[2].txt
              C:\DOCUME~1\Adrien\Cookies\adrien@fr1.seafight.bigpoint[1].txt
              C:\DOCUME~1\Adrien\Cookies\adrien@adopt.euroclick[1].txt
              C:\DOCUME~1\Adrien\Cookies\adrien@fr1.seafight.bigpoint[1].txt
              C:\DOCUME~1\Adrien\Cookies\adrien@32vegas[1].txt
              C:\WINDOWS\Tasks\AFD26B749185E2FC.job

              ----------------------[ Verification du Registre ]----------------------

              [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "axis web cake second"="C:\\Documents and Settings\\All Users\\Application Data\\Book Slow Axis Web\\Rule real.exe"

              --------------------[ Verification du fichier Hosts ]---------------------

              Fichier Hosts MODIFIE

              127.0.0.1 bin.errorprotector.com ## added by CiD
              127.0.0.1 br.errorsafe.com ## added by CiD
              127.0.0.1 br.winantivirus.com ## added by CiD
              127.0.0.1 br.winfixer.com ## added by CiD
              127.0.0.1 cdn.drivecleaner.com ## added by CiD
              127.0.0.1 cdn.errorsafe.com ## added by CiD
              127.0.0.1 cdn.winsoftware.com ## added by CiD
              127.0.0.1 de.errorsafe.com ## added by CiD
              127.0.0.1 de.winantivirus.com ## added by CiD
              127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
              127.0.0.1 download.cdn.errorsafe.com ## added by CiD
              127.0.0.1 download.cdn.winsoftware.com ## added by CiD
              127.0.0.1 download.errorsafe.com ## added by CiD
              127.0.0.1 download.systemdoctor.com ## added by CiD
              127.0.0.1 download.winantispyware.com ## added by CiD
              127.0.0.1 download.windrivecleaner.com ## added by CiD
              127.0.0.1 download.winfixer.com ## added by CiD
              127.0.0.1 drivecleaner.com ## added by CiD
              127.0.0.1 dynamique.drivecleaner.com ## added by CiD
              127.0.0.1 errorprotector.com ## added by CiD
              127.0.0.1 errorsafe.com ## added by CiD
              127.0.0.1 es.winantivirus.com ## added by CiD
              127.0.0.1 fr.winantivirus.com ## added by CiD
              127.0.0.1 fr.winfixer.com ## added by CiD
              127.0.0.1 go.drivecleaner.com ## added by CiD
              127.0.0.1 go.errorsafe.com ## added by CiD
              127.0.0.1 go.winantispyware.com ## added by CiD
              127.0.0.1 go.winantivirus.com ## added by CiD
              127.0.0.1 hk.winantivirus.com ## added by CiD
              127.0.0.1 instlog.errorsafe.com ## added by CiD
              127.0.0.1 instlog.winantivirus.com ## added by CiD
              127.0.0.1 instlog.winfixer.com ## added by CiD
              127.0.0.1 jsp.drivecleaner.com ## added by CiD
              127.0.0.1 kb.errorsafe.com ## added by CiD
              127.0.0.1 kb.winantivirus.com ## added by CiD
              127.0.0.1 nl.errorsafe.com ## added by CiD
              127.0.0.1 se.errorsafe.com ## added by CiD
              127.0.0.1 secure.drivecleaner.com ## added by CiD
              127.0.0.1 secure.errorsafe.com ## added by CiD
              127.0.0.1 secure.winantispam.com ## added by CiD
              127.0.0.1 secure.winantispy.com ## added by CiD
              127.0.0.1 secure.winantivirus.com ## added by CiD
              127.0.0.1 support.winantivirus.com ## added by CiD
              127.0.0.1 trial.updates.winsoftware.com ## added by CiD
              127.0.0.1 ulog.winantivirus.com ## added by CiD
              127.0.0.1 utils.errorsafe.com ## added by CiD
              127.0.0.1 utils.winantivirus.com ## added by CiD
              127.0.0.1 utils.winfixer.com ## added by CiD
              127.0.0.1 winantispyware.com ## added by CiD
              127.0.0.1 winantivirus.com ## added by CiD
              127.0.0.1 winfixer.com ## added by CiD
              127.0.0.1 winfixer2006.com ## added by CiD
              127.0.0.1 winsoftware.com ## added by CiD
              127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
              127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
              127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
              127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
              127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
              127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
              127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
              127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
              127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
              127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
              127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
              127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
              127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
              127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
              127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
              127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
              127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

              -> 72 ( 70 ## added by CiD )

              /!\ 1 Not 127.0.0.1 !!

              ----------------[ Recherche de fichiers avec Catchme ]-----------------

              catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
              Rootkit scan 2008-07-11 23:01:24
              Windows 5.1.2600 Service Pack 2 NTFS
              scanning hidden processes ...
              scanning hidden files ...
              scan completed successfully
              hidden processes: 0
              hidden files: 0

              --------------------[ Recherche d'autres infections ]---------------------

              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrack.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcracklightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcracklightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrack.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncracklightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrack.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcracklightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcracklightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrack.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\bf2\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrack.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcracklightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcracklightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrack.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncracklightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackndetailncrackshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetailcrackshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrack.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcracklightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcracklightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrack.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2\mods\xpack\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_2878_3\rashaderstmbasedetaildirtcrackshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrack.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackalphatestlightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackalphatestlightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackalphatestpointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackalphatesttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmapalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmapalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmapalphatestlightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmapalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmapalphatestlightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmapalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmapalphatestpointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmapalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmapalphatesttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmaplightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmaplightmappointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmaplightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmaplightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmaplightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmappointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackenvmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcracklightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcracklightmappointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcracklightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcracklightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcracklightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrack.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackalphatestpointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackalphatesttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmapalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmapalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmapalphatestlightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmapalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmapalphatestlightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmapalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmapalphatestpointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmapalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmapalphatesttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmaplightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmaplightmappointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmaplightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmaplightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmaplightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmappointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackenvmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncracklightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncracklightmappointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncracklightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncracklightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncracklightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackpointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncrackshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackndetailncracktitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackpointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcrackshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetailcracktitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrack.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackalphatestlightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackalphatestlightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackalphatestpointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackalphatesttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcracklightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcracklightmappointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcracklightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcracklightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcracklightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncrack.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncrackalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestlightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestpointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncrackalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncrackalphatesttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncracklightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncracklightmappointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncracklightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncracklightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncracklightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncrackpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncrackpointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncrackshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackndetailncracktitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackpointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcrackshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_23_3\rashaderstmbasedetaildirtcracktitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrack.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackalphatestlightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackalphatestlightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackalphatestpointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackalphatesttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmapalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmapalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmapalphatestlightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmapalphatestlightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmapalphatestlightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmapalphatestpointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmapalphatestpointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmapalphatestshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmapalphatesttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmaplightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmaplightmappointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmaplightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmaplightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmaplightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmappointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackenvmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcracklightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcracklightmappointlight.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcracklightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcracklightmapshadow.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcracklightmaptitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackndetailncrack.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackndetailncrackalphatest.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmap.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackndetailncrackalphatestlightmappointlighttitaninterior.cfx
              => C:\DOCUME~1\Adrien\MESDOC~1\Battlefield 2142\mods\bf2142\cache\{D7B71E3E-40D2-11CF-4850-1DA200C2CB35}_25_3\rashaderstmbasedetailcrackndetailncrackalphatestl
              1. jlpjlp Contributeur sécurité
                tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

                * Double-clique dessus pour lancer l'installation
                * Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
                * Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
                * Patiente jusqu'à la fin du scan
                * Poste le rapport généré (C:\lopR.txt)
                1. Woké
                  Logfile of Trend Micro HijackThis v2.0.2
                  Scan saved at 22:54:05, on 11/07/2008
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v7.00 (7.00.6000.16674)
                  Boot mode: Normal

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\Program Files\Analog Devices\Core\smax4pnp.exe
                  C:\WINDOWS\sm56hlpr.exe
                  C:\Program Files\Multimedia keyboard utility\LED.exe
                  C:\Program Files\CyberLink\PowerCinema\PCMService.exe
                  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                  C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe
                  C:\Program Files\Logitech\Video\LogiTray.exe
                  C:\Program Files\Real\RealPlayer\RealPlay.exe
                  C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe
                  C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                  C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                  C:\WINDOWS\WebCam\M1000\M1000Mnt.exe
                  C:\Program Files\Razer\Lachesis\razerhid.exe
                  C:\WINDOWS\system32\LVComS.exe
                  C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
                  C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
                  C:\Program Files\CA\eTrust Antivirus\InoRT.exe
                  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  C:\Program Files\CA\eTrust Antivirus\InoTask.exe
                  C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                  C:\WINDOWS\system32\nvsvc32.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Windows Media Player\WMPNSCFG.exe
                  C:\WINDOWS\system32\PnkBstrA.exe
                  C:\Program Files\Portrait Displays\Pivot Software\floater.exe
                  C:\Program Files\Cyberlink\Shared files\RichVideo.exe
                  C:\Program Files\Razer\Lachesis\OSD.exe
                  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\wanmpsvc.exe
                  C:\Program Files\Targa VFD Display\Targa VFD Display.exe
                  C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
                  C:\Program Files\Razer\Lachesis\razerofa.exe
                  C:\Program Files\Messenger\msmsgs.exe
                  C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
                  C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                  C:\WINDOWS\system32\wuauclt.exe
                  C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
                  C:\Program Files\Windows Live\Messenger\usnsvc.exe
                  C:\WINDOWS\explorer.exe
                  C:\Program Files\Trend Micro\HijackThis\Eden.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                  R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                  O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
                  O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                  O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
                  O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                  O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                  O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
                  O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
                  O4 - HKLM\..\Run: [FLMK08KB] C:\Program Files\Multimedia keyboard utility\LED.exe
                  O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
                  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
                  O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
                  O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                  O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe" /c
                  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                  O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
                  O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe"
                  O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                  O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                  O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
                  O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
                  O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe
                  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                  O4 - HKLM\..\Run: [Lachesis] C:\Program Files\Razer\Lachesis\razerhid.exe
                  O4 - HKLM\..\Run: [axis web cake second] C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web\Rule real.exe
                  O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
                  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
                  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                  O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
                  O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                  O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                  O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
                  O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
                  O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
                  O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
                  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O14 - IERESET.INF: START_PAGE_URL=https://www.targa.gmbh/eng/targa/
                  O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
                  O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
                  O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
                  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                  O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                  O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
                  O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
                  O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                  O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
                  O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
                  O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
                  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                  O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                  O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                  O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
                  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
                  O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
                  1. Woké
                    Search Navipromo version 3.6.0 commencé le 11/07/2008 à 22:45:42,43

                    !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
                    !!! Postez ce rapport sur le forum pour le faire analyser !!!
                    !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

                    Outil exécuté depuis C:\Program Files\navilog1
                    Session actuelle : "Adrien"

                    Mise à jour le 27.06.2008 à 23h00 par IL-MAFIOSO

                    Microsoft Windows XP [version 5.1.2600]
                    Internet Explorer : 7.0.5730.11
                    Système de fichiers : NTFS

                    Recherche executé en mode normal

                    *** Recherche Programmes installés ***

                    Favorit

                    *** Recherche dossiers dans "C:\WINDOWS" ***

                    *** Recherche dossiers dans "C:\Program Files" ***

                    *** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

                    *** Recherche dossiers dans "c:\docume~1\alluse~1\menudm~1\progra~1" ***

                    *** Recherche dossiers dans "C:\Documents and Settings\Adrien\applic~1" ***

                    *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***

                    *** Recherche dossiers dans "C:\DOCUME~1\Martine\applic~1" ***

                    *** Recherche dossiers dans "C:\DOCUME~1\PROPRI~1\applic~1" ***

                    *** Recherche dossiers dans "C:\DOCUME~1\ROGERP~1\applic~1" ***

                    *** Recherche dossiers dans "C:\Documents and Settings\Adrien\locals~1\applic~1" ***

                    *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***

                    *** Recherche dossiers dans "C:\DOCUME~1\Martine\locals~1\applic~1" ***

                    *** Recherche dossiers dans "C:\DOCUME~1\ROGERP~1\locals~1\applic~1" ***

                    *** Recherche dossiers dans "C:\Documents and Settings\Adrien\menudm~1\progra~1" ***

                    *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***

                    *** Recherche dossiers dans "C:\DOCUME~1\Martine\menudm~1\progra~1" ***

                    *** Recherche dossiers dans "C:\DOCUME~1\ROGERP~1\menudm~1\progra~1" ***

                    *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
                    pour + d'infos : http://www.gmer.net

                    Aucun Fichier trouvé

                    *** Recherche avec GenericNaviSearch ***
                    !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
                    !!! A vérifier impérativement avant toute suppression manuelle !!!

                    * Recherche dans "C:\WINDOWS\system32" *

                    * Recherche dans "C:\Documents and Settings\Adrien\locals~1\applic~1" *

                    * Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

                    * Recherche dans "C:\DOCUME~1\Martine\locals~1\applic~1" *

                    * Recherche dans "C:\DOCUME~1\ROGERP~1\locals~1\applic~1" *

                    *** Recherche fichiers ***

                    *** Recherche clés spécifiques dans le Registre ***

                    *** Module de Recherche complémentaire ***
                    (Recherche fichiers spécifiques)

                    1)Recherche nouveaux fichiers Instant Access :

                    2)Recherche Heuristique :

                    * Dans "C:\WINDOWS\system32" :

                    * Dans "C:\Documents and Settings\Adrien\locals~1\applic~1" :

                    * Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :

                    * Dans "C:\DOCUME~1\Martine\locals~1\applic~1" :

                    * Dans "C:\DOCUME~1\ROGERP~1\locals~1\applic~1" :

                    3)Recherche Certificats :

                    Certificat Egroup absent !
                    Certificat Electronic-Group absent !
                    Certificat OOO-Favorit absent !
                    Certificat Sunny-Day-Design-Ltd absent !

                    4)Recherche fichiers connus :

                    *** Analyse terminée le 11/07/2008 à 22:52:32,07 ***

                    Voici naviglog
                    1. Woké
                      ComboFix 08-07-11.1 - Adrien 2008-07-11 22:31:47.1 - NTFSx86
                      Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.514 [GMT 2:00]
                      Endroit: C:\Documents and Settings\Adrien\Bureau\ComboFix.exe
                      * Création d'un nouveau point de restauration

                      [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
                      .

                      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                      .

                      C:\Documents and Settings\Roger Prévosto\Local Settings\Application Data\amwauok.dat
                      C:\Documents and Settings\Roger Prévosto\Local Settings\Application Data\amwauok.exe
                      C:\Documents and Settings\Roger Prévosto\Local Settings\Application Data\amwauok_nav.dat
                      C:\Documents and Settings\Roger Prévosto\Local Settings\Application Data\amwauok_navps.dat
                      C:\Documents and Settings\Roger Prévosto\Menu Démarrer\Programmes\Spyware-Secure
                      C:\Documents and Settings\Roger Prévosto\Menu Démarrer\Programmes\Spyware-Secure\Spyware-Secure trial.lnk
                      C:\Documents and Settings\Roger Prévosto\Menu Démarrer\Programmes\Spyware-Secure\Website.lnk
                      C:\WINDOWS\system32\oeminfo.ini

                      .
                      ((((((((((((((((((((((((((((( Fichiers créés 2008-06-11 to 2008-07-11 ))))))))))))))))))))))))))))))))))))
                      .

                      2008-07-11 22:25 . 2008-07-11 22:25 2,611,847 --a------ C:\Program Files\ComboFix.exe
                      2008-07-11 11:35 . 2008-07-11 11:35 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web
                      2008-07-11 11:34 . 2008-07-11 11:34 <REP> d-------- C:\Program Files\StupidHold
                      2008-07-08 00:21 . 2008-07-08 00:21 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
                      2008-07-08 00:21 . 2008-07-08 00:21 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
                      2008-07-08 00:21 . 2008-07-08 00:21 <REP> d-------- C:\Documents and Settings\Adrien\Application Data\Malwarebytes
                      2008-07-08 00:21 . 2008-06-28 14:16 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
                      2008-07-08 00:21 . 2008-06-28 14:16 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
                      2008-07-08 00:13 . 2008-07-08 00:14 <REP> d-------- C:\Program Files\RogueRemover FREE
                      2008-07-07 22:14 . 2008-07-07 22:14 <REP> d-------- C:\Program Files\Trend Micro
                      2008-07-07 20:44 . 2008-07-07 20:53 <REP> d-------- C:\Program Files\Lopxp
                      2008-07-03 13:30 . 2008-07-03 13:30 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Razer
                      2008-07-03 13:30 . 2007-08-08 09:51 249,856 --a------ C:\WINDOWS\system32\Lachesis.cpl
                      2008-07-03 13:30 . 2005-12-21 11:23 14,592 --a------ C:\WINDOWS\system32\drivers\Usbicp.sys
                      2008-07-03 13:30 . 2007-08-08 11:04 12,032 --a------ C:\WINDOWS\system32\drivers\Lachesis.sys
                      2008-07-03 13:29 . 2008-07-03 13:29 <REP> d-------- C:\Program Files\Razer
                      2008-06-24 23:09 . 2008-07-10 14:56 54,156 --ah----- C:\WINDOWS\QTFont.qfn
                      2008-06-24 23:09 . 2008-06-24 23:09 1,409 --a------ C:\WINDOWS\QTFont.for
                      2008-06-20 20:00 . 2008-06-20 20:00 <REP> d-------- C:\Program Files\HyCam2
                      2008-06-20 19:59 . 2008-06-20 20:00 668,952 --a------ C:\Program Files\HC2Setup.exe
                      2008-06-18 12:47 . 2008-06-18 12:47 12,270 --a------ C:\WINDOWS\system32\ealregsnapshot1.reg

                      .
                      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                      .
                      2008-07-11 20:28 6,190 ----a-w C:\Documents and Settings\Adrien\Application Data\wklnhst.dat
                      2008-07-11 19:47 --------- d-----w C:\Documents and Settings\Adrien\Application Data\Xfire
                      2008-07-11 18:50 --------- d-----w C:\Program Files\Steam
                      2008-07-11 16:52 --------- d-----w C:\Program Files\Avanquest update
                      2008-07-10 17:52 --------- d-----w C:\Program Files\eMule
                      2008-07-03 11:29 --------- d--h--w C:\Program Files\InstallShield Installation Information
                      2008-07-02 10:09 --------- d-----w C:\Documents and Settings\Roger Prévosto\Application Data\StupidHold
                      2008-06-27 20:08 --------- d-----w C:\Program Files\mIRC
                      2008-06-27 20:08 --------- d-----w C:\Documents and Settings\Adrien\Application Data\mIRC
                      2008-06-26 21:59 --------- d-----w C:\Documents and Settings\Adrien\Application Data\teamspeak2
                      2008-06-24 14:56 --------- d-----w C:\Documents and Settings\Adrien\Application Data\LimeWire
                      2008-06-20 17:41 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
                      2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
                      2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
                      2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
                      2008-06-16 00:22 38,108 ----a-w C:\Documents and Settings\Roger Prévosto\Application Data\wklnhst.dat
                      2008-06-14 17:59 272,768 ----a-w C:\WINDOWS\system32\drivers\bthport.sys
                      2008-06-01 12:13 --------- d-----w C:\Program Files\Beston
                      2008-05-16 21:01 --------- d-----w C:\Program Files\TrackMania Nations ESWC
                      2008-05-15 19:44 66,616 ----a-w C:\Documents and Settings\Martine\Application Data\GDIPFONTCACHEV1.DAT
                      2008-05-08 16:54 15,608 ----a-w C:\Documents and Settings\Martine\Application Data\wklnhst.dat
                      2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
                      2008-04-23 04:16 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
                      2008-04-22 11:57 107,832 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
                      2008-04-19 10:16 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe
                      2008-03-25 09:17 66,616 ----a-w C:\Documents and Settings\Roger Prévosto\Application Data\GDIPFONTCACHEV1.DAT
                      2008-02-03 12:12 66,616 ----a-w C:\Documents and Settings\Adrien\Application Data\GDIPFONTCACHEV1.DAT
                      .

                      ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                      .
                      .
                      REGEDIT4
                      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

                      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                      "Steam"="c:\program files\steam\steam.exe" [2008-03-28 19:44 1271032]
                      "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-20 13:51 68856]
                      "EA Core"="C:\Program Files\Electronic Arts\EADM\Core.exe" [2008-06-13 18:27 2752512]
                      "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 13:00 15360]
                      "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]
                      "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2008-02-20 17:19 360448]
                      "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 09:59 204288]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                      "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-06-29 00:43 8466432]
                      "SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2006-06-23 11:21 847872]
                      "FLMK08KB"="C:\Program Files\Multimedia keyboard utility\LED.exe" [2006-09-25 13:33 634880]
                      "PCMService"="C:\Program Files\CyberLink\PowerCinema\PCMService.exe" [2006-08-31 14:37 151552]
                      "NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40 155648]
                      "AntivirusRegistration"="C:\Program Files\CA\Etrust Antivirus\Register.exe" [2005-01-31 15:09 458752]
                      "AOLDialer"="C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe" [2006-11-17 13:41 71216]
                      "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 07:24 286720]
                      "InstantOn"="C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe" [2006-06-21 16:29 93640]
                      "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 02:41 49152]
                      "PivotSoftware"="C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe" [2005-10-21 12:07 800504]
                      "LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2004-02-12 17:57 188416]
                      "LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2004-02-12 17:59 77824]
                      "Realtime Monitor"="C:\PROGRA~1\CA\ETRUST~1\realmon.exe" [2004-06-26 01:17 504080]
                      "RealTray"="C:\Program Files\Real\RealPlayer\RealPlay.exe" [2006-09-25 15:27 26112]
                      "HostManager"="C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe" [2006-11-17 15:16 50736]
                      "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-06-29 00:43 81920]
                      "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
                      "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
                      "Lachesis"="C:\Program Files\Razer\Lachesis\razerhid.exe" [2007-09-12 11:52 172032]
                      "axis web cake second"="C:\Documents and Settings\All Users\Application Data\Book Slow Axis Web\Rule real.exe" [2008-07-11 22:23 5717504]
                      "nwiz"="nwiz.exe" [2007-06-29 00:43 1626112 C:\WINDOWS\system32\nwiz.exe]
                      "SMSERIAL"="sm56hlpr.exe" [2005-08-24 21:04 548864 C:\WINDOWS\sm56hlpr.exe]
                      "BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-05 13:00 110592 C:\WINDOWS\system32\bthprops.cpl]

                      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                      "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 13:00 15360]

                      C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
                      AOL 9.0 Ic“ne AOL.lnk - C:\Program Files\AOL 9.0\aoltray.exe [2006-09-25 15:27:03 156784]
                      D‚marrage rapide de HP Photosmart Premier.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [2006-02-10 07:56:20 73728]
                      HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2006-02-19 04:21:22 288472]
                      Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 23:05:56 65588]
                      Targa VFD Display.lnk - C:\WINDOWS\Installer\{635EDAAB-BF20-414D-A87A-3D43BFA3EDB9}\_0F36D9B3E4D771B362D91D.exe [2006-09-25 14:24:50 11166]

                      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
                      "msacm.enc"= ITIG726.acm
                      "VIDC.XFR1"= xfcodec.dll

                      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
                      "EnableFirewall"= 0 (0x0)

                      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                      "%windir%\\system32\\sessmgr.exe"=
                      "C:\\Program Files\\Cyberlink\\PowerCinema\\PowerCinema.exe"=
                      "C:\\Program Files\\Cyberlink\\PowerCinema\\PCMService.exe"=
                      "C:\\Program Files\\CA\\Etrust Antivirus\\InoRpc.exe"=
                      "C:\\Program Files\\CA\\Etrust Antivirus\\InocIT.exe"=
                      "C:\\Program Files\\CA\\Etrust Antivirus\\Realmon.exe"=
                      "C:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLacsd.exe"=
                      "C:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLDial.exe"=
                      "C:\\Program Files\\AOL 9.0\\waol.exe"=
                      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
                      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
                      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
                      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
                      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
                      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
                      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
                      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
                      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
                      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
                      "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
                      "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
                      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
                      "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
                      "C:\\Program Files\\Wolfenstein - Enemy Territory\\ET.exe"=
                      "C:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe"=
                      "C:\\Xfire\\xfire.exe"=
                      "C:\\Program Files\\Electronic Arts\\Battlefield 2142\\BF2142.exe"=
                      "C:\\Program Files\\Steam\\SteamApps\\punk64122\\counter-strike source\\hl2.exe"=
                      "C:\\Program Files\\Steam\\SteamApps\\punk64122\\day of defeat source\\hl2.exe"=
                      "C:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\game.dat"=
                      "C:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\patchget.dat"=
                      "C:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe"=
                      "C:\\Program Files\\Messenger\\msmsgs.exe"=
                      "C:\\Program Files\\eMule\\emule.exe"=
                      "C:\\Program Files\\Steam\\steam.exe"=
                      "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                      "C:\\Documents and Settings\\Martine\\Mes documents\\incredimail_install.exe"=
                      "C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
                      "C:\\Documents and Settings\\Martine\\Bureau\\arriere plan de courriel.exe"=
                      "C:\\Program Files\\LimeWire\\LimeWire.exe"=
                      "C:\\Program Files\\Sony Ericsson\\Sony Ericsson Media Manager 1.0\\MediaManager.exe"=
                      "C:\\Program Files\\mIRC\\mirc.exe"=
                      "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
                      "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
                      "C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
                      "C:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=

                      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
                      "AllowInboundEchoRequest"= 1 (0x1)

                      R1 Machnm32;Machnm32 Driver;C:\WINDOWS\system32\Machnm32.sys [2004-11-22 13:07]
                      R1 Pivot;Pivot;C:\WINDOWS\system32\drivers\pivot.sys [2005-10-21 12:07]
                      R3 3xHybrid;ASUSTek SAA713x PCI Card;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2006-07-13 11:52]
                      R3 LachesisFltr;Lachesis Mouse Driver;C:\WINDOWS\system32\drivers\Lachesis.sys [2007-08-08 11:04]
                      R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08]
                      S3 M1000Srv;M5603C USB2.0 Camera Driver;C:\WINDOWS\system32\Drivers\M1000KNT.sys [2005-07-20 08:28]
                      S3 pivotmou;Pivot Mouse/Pointers Filter Driver;C:\WINDOWS\system32\drivers\pivotmou.sys [2005-10-21 12:07]
                      S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58]
                      S3 ZD1211BU(ZyDAS);ZyDAS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ZyDAS);C:\WINDOWS\system32\DRIVERS\zd1211Bu.sys [2005-10-28 11:38]

                      *Newly Created Service* - CATCHME
                      .
                      Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
                      "2008-07-11 20:00:00 C:\WINDOWS\Tasks\AFD26B749185E2FC.job"
                      - c:\docume~1\marina\applic~1\stupid~1\TEAM DRIVE DEFAULT.exe
                      "2008-06-18 09:08:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
                      - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
                      "2008-07-11 16:49:35 C:\WINDOWS\Tasks\User_Feed_Synchronization-{6EADE4E3-6385-4B5F-8939-003506F34A63}.job"
                      - C:\WINDOWS\system32\msfeedssync.exe
                      .
                      - - - - ORPHANS REMOVED - - - -

                      HKLM-Run-NWEReboot - (no file)
                      HKLM-Run-OEM-Reset - (no file)
                      HKLM-Run-M1000Mnt - M1000Rmv.exe

                      **************************************************************************

                      catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                      Rootkit scan 2008-07-11 22:35:57
                      Windows 5.1.2600 Service Pack 2 NTFS

                      Balayage processus cachés ...

                      Balayage caché autostart entries ...

                      Balayage des fichiers cachés ...

                      Scan terminé avec succès
                      Les fichiers cachés: 0

                      **************************************************************************
                      .
                      Temps d'accomplissement: 2008-07-11 22:36:48
                      ComboFix-quarantined-files.txt 2008-07-11 20:36:30

                      Pre-Run: 231,015,067,648 octets libres
                      Post-Run: 232,621,735,936 octets libres

                      209 --- E O F --- 2008-07-09 17:50:38

                      voila pour combofix
                      2. Woké
                        Oui :s autant pour moi j'avais compté de le faire se soir ( je ne suis pas à l'ordi tous les soirs ).

                        Quesque je dois faire maintenant?
                        1. jlpjlp Contributeur sécurité
                          si tu avais collé ce qui a été demandé en 13 cela ne serait pas arrivé!!!
                          1. Woké
                            Le virus c'est remis :s!!!!

                            comment je fais pour coupé ma connection internet ???? j'ai cegetel et la connection est automatique ><
                            1. jlpjlp Contributeur sécurité
                              c'est bon

                              fais ceci:

                              Télécharge combofix (par sUBs) ici :

                              http://download.bleepingcomputer.com/sUBs/ComboFix.exe

                              et enregistre le sur le Bureau

                              déconnecte toi d'internet et ferme toutes tes applications.

                              désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

                              double-clique sur combofix.exe et suis les instructions

                              à la fin, il va produire un rapport C:\ComboFix.txt

                              réactive ton parefeu, ton antivirus, la garde de ton antispyware

                              copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

                              Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

                              Tu as un tutoriel complet ici :

                              https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

                              _______________________

                              Fais un clic droit sur ce lien : (IL-MAFIOSO)
                              http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
                              Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
                              Ensuite double clique sur navilog1.exe pour lancer l'installation.
                              Une fois l'installation terminée, le fix s'exécutera automatiquement.
                              (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

                              Laisse-toi guider. Au menu principal, choisis 1 et valides.
                              (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

                              Patiente jusqu'au message :
                              *** Analyse Termine le ..... ***
                              Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
                              Copie-colle l'intégralité dans une réponse. Referme le blocnote.
                              Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
                              1. Woké
                                Logfile of Trend Micro HijackThis v2.0.2
                                Scan saved at 01:33:55, on 08/07/2008
                                Platform: Windows XP SP2 (WinNT 5.01.2600)
                                MSIE: Internet Explorer v7.00 (7.00.6000.16674)
                                Boot mode: Normal

                                Running processes:
                                C:\WINDOWS\System32\smss.exe
                                C:\WINDOWS\system32\winlogon.exe
                                C:\WINDOWS\system32\services.exe
                                C:\WINDOWS\system32\lsass.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\WINDOWS\System32\svchost.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\WINDOWS\system32\spoolsv.exe
                                C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                                C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
                                C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
                                C:\WINDOWS\System32\svchost.exe
                                C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
                                C:\Program Files\CA\eTrust Antivirus\InoRT.exe
                                C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                                C:\WINDOWS\system32\nvsvc32.exe
                                C:\WINDOWS\system32\HPZipm12.exe
                                C:\WINDOWS\system32\PnkBstrA.exe
                                C:\Program Files\Cyberlink\Shared files\RichVideo.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\WINDOWS\wanmpsvc.exe
                                C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
                                C:\WINDOWS\Explorer.EXE
                                C:\Program Files\Analog Devices\Core\smax4pnp.exe
                                C:\WINDOWS\sm56hlpr.exe
                                C:\Program Files\Multimedia keyboard utility\LED.exe
                                C:\Program Files\CyberLink\PowerCinema\PCMService.exe
                                C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                                C:\WINDOWS\system32\rundll32.exe
                                C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe
                                C:\Program Files\Logitech\Video\LogiTray.exe
                                C:\PROGRA~1\CA\ETRUST~1\realmon.exe
                                C:\Program Files\Real\RealPlayer\RealPlay.exe
                                C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe
                                C:\WINDOWS\system32\RUNDLL32.EXE
                                C:\WINDOWS\system32\LVComS.exe
                                C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                                C:\Program Files\Razer\Lachesis\razerhid.exe
                                C:\WINDOWS\WebCam\M1000\M1000Mnt.exe
                                C:\program files\steam\steam.exe
                                C:\Program Files\Razer\Lachesis\OSD.exe
                                C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                C:\WINDOWS\system32\ctfmon.exe
                                C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
                                C:\Program Files\Razer\Lachesis\razertra.exe
                                C:\Program Files\Windows Media Player\WMPNSCFG.exe
                                C:\Program Files\Portrait Displays\Pivot Software\floater.exe
                                C:\Program Files\Razer\Lachesis\razerofa.exe
                                C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                                C:\Program Files\Targa VFD Display\Targa VFD Display.exe
                                C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
                                C:\Program Files\Messenger\msmsgs.exe
                                C:\WINDOWS\system32\wuauclt.exe
                                C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                                C:\Program Files\Windows Media Player\wmplayer.exe
                                C:\Program Files\Windows Live\Messenger\usnsvc.exe
                                C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
                                C:\Program Files\Internet Explorer\iexplore.exe
                                C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                                C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                                C:\Program Files\Trend Micro\HijackThis\Eden.exe

                                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
                                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                                R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
                                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
                                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
                                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                                O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
                                O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                                O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
                                O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                                O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                                O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                                O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                                O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
                                O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
                                O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
                                O4 - HKLM\..\Run: [FLMK08KB] C:\Program Files\Multimedia keyboard utility\LED.exe
                                O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
                                O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
                                O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
                                O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
                                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                                O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe" /c
                                O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                                O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
                                O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe"
                                O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                                O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                                O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
                                O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
                                O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe
                                O4 - HKLM\..\Run: [DNSE] "C:\Program Files\Fichiers communs\SystemDoctor\DNSE.exe" -c
                                O4 - HKLM\..\Run: [DC6V_Check] "C:\Program Files\Fichiers communs\SystemDoctor\usdrdc.exe"
                                O4 - HKLM\..\Run: [MDRV_Check] "C:\Program Files\Fichiers communs\SystemDoctor\usdrmdr.exe"
                                O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                                O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                                O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                                O4 - HKLM\..\Run: [M1000Mnt] M1000Rmv.exe /StartStillMnt
                                O4 - HKLM\..\Run: [Lachesis] C:\Program Files\Razer\Lachesis\razerhid.exe
                                O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
                                O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
                                O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                                O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                                O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
                                O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                                O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                                O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                                O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                                O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                                O4 - Startup: Xfire.lnk = C:\Xfire\xfire.exe
                                O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
                                O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
                                O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                                O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
                                O4 - Global Startup: Targa VFD Display.lnk = ?
                                O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
                                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
                                O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
                                O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
                                O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
                                O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                O14 - IERESET.INF: START_PAGE_URL=https://www.targa.gmbh/eng/targa/
                                O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
                                O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                                O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
                                O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                                O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
                                O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                                O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                                O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
                                O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
                                O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
                                O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
                                O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
                                O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
                                O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                                O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                                O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                                O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                                O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
                                O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
                                O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
                                1. Woké
                                  Malwarebytes' Anti-Malware 1.19
                                  Version de la base de données: 930
                                  Windows 5.1.2600 Service Pack 2

                                  01:30:10 08/07/2008
                                  mbam-log-7-8-2008 (01-30-10).txt

                                  Type de recherche: Examen complet (C:\|)
                                  Eléments examinés: 185978
                                  Temps écoulé: 1 hour(s), 2 minute(s), 39 second(s)

                                  Processus mémoire infecté(s): 0
                                  Module(s) mémoire infecté(s): 0
                                  Clé(s) du Registre infectée(s): 4
                                  Valeur(s) du Registre infectée(s): 0
                                  Elément(s) de données du Registre infecté(s): 0
                                  Dossier(s) infecté(s): 1
                                  Fichier(s) infecté(s): 4

                                  Processus mémoire infecté(s):
                                  (Aucun élément nuisible détecté)

                                  Module(s) mémoire infecté(s):
                                  (Aucun élément nuisible détecté)

                                  Clé(s) du Registre infectée(s):
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{90b5a95a-afd5-4d11-b9bd-a69d53d22226} (Adware.Hotbar) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8109fd3d-d891-4f80-8339-50a4913ace6f} (Adware.Zango) -> Quarantined and deleted successfully.
                                  HKEY_CLASSES_ROOT\Interface\{85e06077-c824-43d0-a8dc-5efb17bc348a} (Adware.Zango) -> Quarantined and deleted successfully.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\ParisHilton (Adware.NaviPromo) -> Quarantined and deleted successfully.

                                  Valeur(s) du Registre infectée(s):
                                  (Aucun élément nuisible détecté)

                                  Elément(s) de données du Registre infecté(s):
                                  (Aucun élément nuisible détecté)

                                  Dossier(s) infecté(s):
                                  C:\Program Files\Fichiers communs\SystemDoctor (Rogue.SystemDoctor) -> Quarantined and deleted successfully.

                                  Fichier(s) infecté(s):
                                  C:\Program Files\Fichiers communs\SystemDoctor\err.log (Rogue.SystemDoctor) -> Quarantined and deleted successfully.
                                  C:\WINDOWS\system32\nvs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.
                                  C:\Documents and Settings\Roger Prévosto\Bureau\Spyware-Secure trial.lnk (Rogue.Spyware-Secure) -> Quarantined and deleted successfully.
                                  C:\WINDOWS\Temp\cd11.tmp (Heuristics.Malware) -> Quarantined and deleted successfully.
                                  1. Woké
                                    Etape 1 : jai téléchargé rogue remover et jai remove tous les trucks chelou mais je sais pas si j'ai bien fais , la je fais malware byte et a la fin je refais un rapport hijackthis?
                                    1. jlpjlp Contributeur sécurité
                                      ok tu as SystemDoctor qui est un espion!!!

                                      _______________

                                      lance rogue remover

                                      pour info :
                                      http://www.libellules.ch/dotclear/index.php?2006/11/29/1518-rogue-remover

                                      pour telecharger :
                                      https://www.01net.com/telecharger/

                                      ________________

                                      scan avec
                                      MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport

                                      https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

                                      ________________

                                      recolle un hijackhtis complet cette fois
                                      1. Woké
                                        C:\Program Files\Razer\Lachesis\razerhid.exe
                                        C:\WINDOWS\WebCam\M1000\M1000Mnt.exe
                                        C:\program files\steam\steam.exe
                                        C:\Program Files\Razer\Lachesis\OSD.exe
                                        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                        C:\WINDOWS\system32\ctfmon.exe
                                        C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
                                        C:\Program Files\Razer\Lachesis\razertra.exe
                                        C:\Program Files\Windows Media Player\WMPNSCFG.exe
                                        C:\Program Files\Portrait Displays\Pivot Software\floater.exe
                                        C:\Program Files\Razer\Lachesis\razerofa.exe
                                        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                                        C:\Program Files\Targa VFD Display\Targa VFD Display.exe
                                        C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
                                        C:\Program Files\Messenger\msmsgs.exe
                                        C:\WINDOWS\system32\wuauclt.exe
                                        C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                                        C:\Program Files\Windows Media Player\wmplayer.exe
                                        C:\Program Files\Windows Live\Messenger\usnsvc.exe
                                        C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
                                        C:\Program Files\Internet Explorer\iexplore.exe
                                        C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                                        C:\Program Files\Hijackthis\Eden.exe

                                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.msn.com/
                                        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.msn.com/
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                                        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
                                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
                                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                        O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                        O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                                        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                        O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
                                        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                                        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
                                        O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                                        O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
                                        O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                                        O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                                        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                                        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                                        O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
                                        O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
                                        O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
                                        O4 - HKLM\..\Run: [FLMK08KB] C:\Program Files\Multimedia keyboard utility\LED.exe
                                        O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
                                        O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
                                        O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
                                        O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
                                        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                                        O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe" /c
                                        O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                                        O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
                                        O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe"
                                        O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                                        O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                                        O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
                                        O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
                                        O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1178038683\ee\AOLSoftware.exe
                                        O4 - HKLM\..\Run: [DNSE] "C:\Program Files\Fichiers communs\SystemDoctor\DNSE.exe" -c
                                        O4 - HKLM\..\Run: [DC6V_Check] "C:\Program Files\Fichiers communs\SystemDoctor\usdrdc.exe"
                                        O4 - HKLM\..\Run: [MDRV_Check] "C:\Program Files\Fichiers communs\SystemDoctor\usdrmdr.exe"
                                        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                                        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                                        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                                        O4 - HKLM\..\Run: [M1000Mnt] M1000Rmv.exe /StartStillMnt
                                        O4 - HKLM\..\Run: [Lachesis] C:\Program Files\Razer\Lachesis\razerhid.exe
                                        O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
                                        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                        O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
                                        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                                        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                                        O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
                                        O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                                        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                                        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                                        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                                        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                                        O4 - Startup: Xfire.lnk = C:\Xfire\xfire.exe
                                        O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
                                        O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
                                        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                                        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
                                        O4 - Global Startup: Targa VFD Display.lnk = ?
                                        O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
                                        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                        O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
                                        O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
                                        O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
                                        O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
                                        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                        O14 - IERESET.INF: START_PAGE_URL=http://www.targa.co.uk
                                        O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
                                        O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                                        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
                                        O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                                        O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
                                        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                                        O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                                        O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
                                        O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
                                        O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
                                        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                        O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
                                        O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
                                        O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
                                        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
                                        O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                                        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                                        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                                        O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
                                        O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
                                        O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
                                        • 1
                                        • 2

                                        Discussions similaires

                                        Softonic,est-ce un virus ?
                                        techmel1

                                        6 réponses
                                        Chrome://newtab
                                        Nova

                                        14 réponses
                                        Désinstaller Softonic
                                        Diguimette

                                        5 réponses
                                        Supprimer New Tab
                                        tysaozon

                                        8 réponses
                                        Bouton pause/break
                                        frans003

                                        3 réponses