Pub intempestive

Tu dois obligatoirement installer le SP1 de Vista :
http://www.microsoft.com/downloads/details.aspx?FamilyID=b0c7136d-5ebb-413b-89c9-cb3d06d12674&DisplayLang=fr

Utilise plutôt Mozilla Firefox qu'Internet Explorer :
http://www.mozilla-europe.org/fr/firefox/

"As tu des infos à me donner pour configurer ma boite mail windows mail en relation avec mon compte Yahoo."
---> http://www.commentcamarche.net/faq/sujet 995 yahoo configuration pop3 pour outlook eudora thunderbird

Change ta page d'accueil, elle ne devrait plus se modifier.

F --------- Logfile of AD-Remover 1.0.2.7 by C_XX ---------

START at: 9:48:58 | 07/11/2008
ON: Microsoft Windows [version 6.0.6000] ( Windows Vista )
OPTION: Scan
EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
USER: F. ALBERT-BRUNET | PC: PC-BUREAU
BOOT MODE: Normal
UAC is disable
DRIVE(S): C:\ D:\ E:\ F:\ G:\ H:\ I:\ (Systemdrive= C:\)

--------- [ PROCESSES ] ---------

C:\Windows\system32\csrss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\OEM07Mon.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Windows\System32\FastUserSwitching.exe
C:\Program Files\DELL\Dell Webcam Manager\DellWMgr.exe
C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe
C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\SPAMfighter\SFAgent.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Intel\IntelDH\CCU\CCU_Engine.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\SetPoint\SetPoint.exe
C:\Windows\System32\MediaButtons.exe
C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\System32\DELLOSD.exe
C:\Windows\system32\AERTSrv.exe
C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\Common Files\Intel\IntelDH\NMS\NMSCore\NMSCore.exe
C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\qualitymanager.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\SPAMfighter\sfus.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe
C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe
C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\taskeng.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\WUDFHost.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\explorer.exe
C:\Windows\System32\cmd.exe
C:\Windows\System32\WScript.exe
C:\Windows\system32\wbem\wmiprvse.exe

---------------------------- [ 84 ]

+---------------------------------------------------------------------------+
+------------------------------- SERVICES FOUND
+---------------------------------------------------------------------------+

+---------------------------------------------------------------------------+
+------------------------------- REGISTRY ELEMENTS FOUND
+---------------------------------------------------------------------------+

+---------------------------------------------------------------------------+
+------------------------------- FILES\FOLDERS FOUND
+---------------------------------------------------------------------------+

+---------- Temp files found.. ( Elements found aren't necessarily harmful )

[07/11/2008 09:41|--a------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\F. ALBERT-BRUNET.bmp
[07/11/2008 09:41|d--------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\WPDNSE
[07/11/2008 09:25|---------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\~DFAEB0.tmp
[07/11/2008 09:26|-------t-] C:\Windows\temp\mcmsc_psioC0hjbLQSuDg
[07/11/2008 09:26|-------t-] C:\Windows\temp\sqlite_K7zK9orBoIqMObr
[07/11/2008 09:26|-------t-] C:\Windows\temp\sqlite_KtKmaMsaKxZehfn
[07/11/2008 09:25|---------] C:\Windows\temp\WFV4420.tmp

+---------- Scanning prefs.js ... ( # Mozilla User Preferences )

...\ggpivvsj.default\prefs.js :

STARTPAGE: "http://www.lo.st"

+----------+

+---------------------------------------------------------------------------+

+---------- Added scan ...

+-----[HKLM\...\Run]

Windows Defender REG_EXPAND_SZ %ProgramFiles%\Windows Defender\MSASCui.exe -hide
ECenter REG_SZ C:\Dell\E-Center\EULALauncher.exe
RtHDVCpl REG_SZ RtHDVCpl.exe
OEM07Mon.exe REG_SZ C:\Windows\OEM07Mon.exe
IgfxTray REG_SZ C:\Windows\system32\igfxtray.exe
HotKeysCmds REG_SZ C:\Windows\system32\hkcmd.exe
Persistence REG_SZ C:\Windows\system32\igfxpers.exe
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
UserSwitch REG_SZ C:\Windows\System32\FastUserSwitching.exe
DELL Webcam Manager REG_SZ "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s
Kernel and Hardware Abstraction Layer REG_SZ KHALMNPR.EXE
NMSSupport REG_SZ "C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe" /startup
CCUTRAYICON REG_SZ "C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe"
Google Desktop Search REG_SZ "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
dscactivate REG_SZ "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
mcagent_exe REG_SZ C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
DellSupportCenter REG_SZ "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
SPAMfighter Agent REG_SZ "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60
ISTray REG_SZ "C:\Program Files\Spyware Doctor\pctsTray.exe"
OlStatusMon REG_SZ "C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe" dvcStatusMinimize

+-----[HKCU\...\Run]

ehTray.exe REG_SZ C:\Windows\ehome\ehTray.exe
swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
DellSupportCenter REG_SZ "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
WMPNSCFG REG_SZ C:\Program Files\Windows Media Player\WMPNSCFG.exe

+-----[HKLM\...\Internet Explorer\MAIN]

Start Page : hxxp://fr.msn.com/

+-----[HKCU\...\Internet Explorer\MAIN]

Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+---------------------------------------------------------------------------+
+------------------------------- [ EOF - 162 lines ]
+---------------------------------------------------------------------------+

[ END at: 9:49:41 | 07/11/2008 ] - [ Time elapsed: 43.5 seconds ]

Refais l'option A et poste le rapport.

F --------- Logfile of AD-Remover 1.0.2.7 by C_XX ---------

START at: 9:38:29 | 07/11/2008
ON: Microsoft Windows [version 6.0.6000] ( Windows Vista )
OPTION: Clean
EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
USER: F. ALBERT-BRUNET | PC: PC-BUREAU
BOOT MODE: Normal
UAC is disable
DRIVE(S): C:\ D:\ E:\ F:\ G:\ H:\ I:\ (Systemdrive= C:\)

--------- [ PROCESSES ] ---------

C:\Windows\system32\csrss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\OEM07Mon.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Windows\System32\FastUserSwitching.exe
C:\Program Files\DELL\Dell Webcam Manager\DellWMgr.exe
C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe
C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\SPAMfighter\SFAgent.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Intel\IntelDH\CCU\CCU_Engine.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\SetPoint\SetPoint.exe
C:\Windows\System32\MediaButtons.exe
C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\System32\DELLOSD.exe
C:\Windows\system32\AERTSrv.exe
C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\Common Files\Intel\IntelDH\NMS\NMSCore\NMSCore.exe
C:\Program Files\Olivetti\ANY_WAY\olMntrService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\qualitymanager.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\SPAMfighter\sfus.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe
C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe
C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\taskeng.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\WUDFHost.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\System32\cmd.exe
C:\Windows\System32\WScript.exe
C:\Windows\system32\wbem\wmiprvse.exe

---------------------------- [ 84 ]

+---------------------------------------------------------------------------+
+------------------------------- SERVICES DELETED
+---------------------------------------------------------------------------+

+---------------------------------------------------------------------------+
+------------------------------- REGISTRY ELEMENTS DELETED
+---------------------------------------------------------------------------+

"HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}"
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run" /v "EoEngine"
"HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}"
"HKEY_CURRENT_USER\SOFTWARE\EoRezo"
"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}"
"HKEY_CLASSES_ROOT\EoRezoBHO.EoBho"
"HKEY_CLASSES_ROOT\EoRezoBHO.EoBho.1"
"HKEY_CLASSES_ROOT\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}"
"HKEY_CLASSES_ROOT\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}"

+---------------------------------------------------------------------------+
+------------------------------- FILES\FOLDERS DELETED
+---------------------------------------------------------------------------+

[04/11/2008 09:36|--a------] C:\Windows\PFRO.log
[07/11/2008 06:22|d--------] C:\Program Files\EoRezo

+---------- Temp files deleted.. ( Elements deleted was not necessarily harmful )

[07/11/2008 09:21|--a------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\Administrateur.bmp
[07/11/2008 09:25|--a------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\AUInst.log
[07/11/2008 09:37|--a------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\F. ALBERT-BRUNET.bmp
[07/11/2008 09:21|--a------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\Invit‚.bmp
[07/11/2008 09:21|--a------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\IUSR_NMPR.bmp
[07/11/2008 09:30|--a------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\jusched.log
[07/11/2008 09:22|d--------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\Low
[07/11/2008 09:11|d--------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\outlook logging
[07/11/2008 09:26|d--------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\svl5c.tmp
[07/11/2008 09:26|--a------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\wmplog00.sqm
[07/11/2008 09:26|d--------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\WPDNSE
[07/11/2008 08:36|d--------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\{b34d56f9-d769-4174-90dd-b13a07d4ca4b}
[07/11/2008 08:18|--a------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\~DF2B15.tmp
[07/11/2008 08:08|--a------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\~DF3D5A.tmp
/!\ - [07/11/2008 09:25|---------] C:\Users\F9D22~1.ALB\AppData\Local\Temp\~DFAEB0.tmp
[02/11/2006 13:48|d--------] C:\Windows\temp\cmi{99681151-3537-434F-8D53-AA0EF9812DEC}
[03/10/2008 14:52|--a------] C:\Windows\temp\coinlog.log
[03/10/2008 15:31|d--hs----] C:\Windows\temp\Cookies
[13/11/2006 09:46|--a------] C:\Windows\temp\DMI2D18.tmp
[04/03/2008 23:49|--a------] C:\Windows\temp\DMI9CDA.tmp
[04/03/2008 23:55|--a------] C:\Windows\temp\DMIE001.tmp
[24/10/2008 23:20|--a------] C:\Windows\temp\ehprivjob.log
[09/10/2008 03:30|--a------] C:\Windows\temp\ehprivjob1.log
[03/10/2008 15:32|--a------] C:\Windows\temp\ehprivjob2.log
[03/10/2008 15:18|--a------] C:\Windows\temp\ehprivjob3.log
[03/10/2008 15:18|--a------] C:\Windows\temp\ehprivjob4.log
[03/10/2008 15:31|d--hs----] C:\Windows\temp\Fichiers Internet temporaires
[03/10/2008 16:43|d--------] C:\Windows\temp\Google Toolbar
[03/10/2008 16:43|--a------] C:\Windows\temp\GoogleToolbarInstaller1.log
[03/10/2008 16:43|--a------] C:\Windows\temp\GoogleToolbarInstaller2.log
[03/10/2008 15:31|d--hs----] C:\Windows\temp\History
[07/10/2008 01:23|--a------] C:\Windows\temp\lpksetup-20081007-022303-0.log
[07/10/2008 01:23|--a------] C:\Windows\temp\lpksetup-20081007-022320-0.log
[07/10/2008 07:06|--a------] C:\Windows\temp\lpksetup-20081007-080635-0.log
[07/10/2008 07:06|--a------] C:\Windows\temp\lpksetup-20081007-080649-0.log
[08/10/2008 19:31|--a------] C:\Windows\temp\lpksetup-20081008-203136-0.log
[08/10/2008 19:31|--a------] C:\Windows\temp\lpksetup-20081008-203153-0.log
[09/10/2008 03:05|--a------] C:\Windows\temp\lpksetup-20081009-040453-0.log
[09/10/2008 03:05|--a------] C:\Windows\temp\lpksetup-20081009-040511-0.log
[09/10/2008 15:55|--a------] C:\Windows\temp\lpksetup-20081009-165532-0.log
[09/10/2008 15:55|--a------] C:\Windows\temp\lpksetup-20081009-165549-0.log
[10/10/2008 20:45|--a------] C:\Windows\temp\lpksetup-20081010-214423-0.log
[10/10/2008 20:45|--a------] C:\Windows\temp\lpksetup-20081010-214523-0.log
[12/10/2008 18:03|--a------] C:\Windows\temp\lpksetup-20081012-190320-0.log
[12/10/2008 18:03|--a------] C:\Windows\temp\lpksetup-20081012-190337-0.log
[13/10/2008 02:37|--a------] C:\Windows\temp\lpksetup-20081013-033734-0.log
[13/10/2008 02:37|--a------] C:\Windows\temp\lpksetup-20081013-033753-0.log
[13/10/2008 15:16|--a------] C:\Windows\temp\lpksetup-20081013-161616-0.log
[13/10/2008 15:16|--a------] C:\Windows\temp\lpksetup-20081013-161632-0.log
[14/10/2008 07:47|--a------] C:\Windows\temp\lpksetup-20081014-084725-0.log
[14/10/2008 07:47|--a------] C:\Windows\temp\lpksetup-20081014-084740-0.log
[15/10/2008 01:51|--a------] C:\Windows\temp\lpksetup-20081015-025131-0.log
[15/10/2008 01:51|--a------] C:\Windows\temp\lpksetup-20081015-025145-0.log
[15/10/2008 10:42|--a------] C:\Windows\temp\lpksetup-20081015-114233-0.log
[15/10/2008 10:42|--a------] C:\Windows\temp\lpksetup-20081015-114250-0.log
[16/10/2008 08:20|--a------] C:\Windows\temp\lpksetup-20081016-092031-0.log
[16/10/2008 08:20|--a------] C:\Windows\temp\lpksetup-20081016-092046-0.log
[16/10/2008 11:42|--a------] C:\Windows\temp\lpksetup-20081016-124245-0.log
[16/10/2008 11:43|--a------] C:\Windows\temp\lpksetup-20081016-124259-0.log
[16/10/2008 13:42|--a------] C:\Windows\temp\lpksetup-20081016-144245-0.log
[16/10/2008 13:42|--a------] C:\Windows\temp\lpksetup-20081016-144259-0.log
[17/10/2008 18:29|--a------] C:\Windows\temp\lpksetup-20081017-192844-0.log
[17/10/2008 18:29|--a------] C:\Windows\temp\lpksetup-20081017-192904-0.log
[18/10/2008 07:51|--a------] C:\Windows\temp\lpksetup-20081018-085047-0.log
[18/10/2008 07:51|--a------] C:\Windows\temp\lpksetup-20081018-085101-0.log
[18/10/2008 10:23|--a------] C:\Windows\temp\lpksetup-20081018-112301-0.log
[18/10/2008 10:23|--a------] C:\Windows\temp\lpksetup-20081018-112315-0.log
[18/10/2008 11:39|--a------] C:\Windows\temp\lpksetup-20081018-123856-0.log
[18/10/2008 11:39|--a------] C:\Windows\temp\lpksetup-20081018-123910-0.log
[18/10/2008 21:51|--a------] C:\Windows\temp\lpksetup-20081018-225117-0.log
[18/10/2008 21:51|--a------] C:\Windows\temp\lpksetup-20081018-225131-0.log
[19/10/2008 03:31|--a------] C:\Windows\temp\lpksetup-20081019-043142-0.log
[19/10/2008 03:31|--a------] C:\Windows\temp\lpksetup-20081019-043159-0.log
[19/10/2008 17:43|--a------] C:\Windows\temp\lpksetup-20081019-184251-0.log
[19/10/2008 17:43|--a------] C:\Windows\temp\lpksetup-20081019-184304-0.log
[19/10/2008 23:14|--a------] C:\Windows\temp\lpksetup-20081020-001425-0.log
[19/10/2008 23:14|--a------] C:\Windows\temp\lpksetup-20081020-001442-0.log
[20/10/2008 23:32|--a------] C:\Windows\temp\lpksetup-20081021-003206-0.log
[20/10/2008 23:32|--a------] C:\Windows\temp\lpksetup-20081021-003220-0.log
[21/10/2008 04:26|--a------] C:\Windows\temp\lpksetup-20081021-052553-0.log
[21/10/2008 04:26|--a------] C:\Windows\temp\lpksetup-20081021-052609-0.log
[22/10/2008 03:13|--a------] C:\Windows\temp\lpksetup-20081022-041314-0.log
[22/10/2008 03:13|--a------] C:\Windows\temp\lpksetup-20081022-041328-0.log
[22/10/2008 12:50|--a------] C:\Windows\temp\lpksetup-20081022-135044-0.log
[22/10/2008 12:50|--a------] C:\Windows\temp\lpksetup-20081022-135058-0.log
[22/10/2008 22:09|--a------] C:\Windows\temp\lpksetup-20081022-230942-0.log
[22/10/2008 22:09|--a------] C:\Windows\temp\lpksetup-20081022-230956-0.log
[23/10/2008 00:18|--a------] C:\Windows\temp\lpksetup-20081023-011758-0.log
[23/10/2008 00:18|--a------] C:\Windows\temp\lpksetup-20081023-011815-0.log
[23/10/2008 01:06|--a------] C:\Windows\temp\lpksetup-20081023-020606-0.log
[23/10/2008 01:06|--a------] C:\Windows\temp\lpksetup-20081023-020619-0.log
[23/10/2008 03:08|--a------] C:\Windows\temp\lpksetup-20081023-040811-0.log
[23/10/2008 03:08|--a------] C:\Windows\temp\lpksetup-20081023-040825-0.log
[24/10/2008 21:10|--a------] C:\Windows\temp\lpksetup-20081024-220936-0.log
[24/10/2008 21:10|--a------] C:\Windows\temp\lpksetup-20081024-221025-0.log
[24/10/2008 23:30|--a------] C:\Windows\temp\lpksetup-20081025-003001-0.log
[24/10/2008 23:30|--a------] C:\Windows\temp\lpksetup-20081025-003015-0.log
[25/10/2008 20:14|--a------] C:\Windows\temp\lpksetup-20081025-211402-0.log
[25/10/2008 20:14|--a------] C:\Windows\temp\lpksetup-20081025-211415-0.log
[26/10/2008 07:04|--a------] C:\Windows\temp\lpksetup-20081026-070351-0.log
[26/10/2008 07:04|--a------] C:\Windows\temp\lpksetup-20081026-070408-0.log
[27/10/2008 08:26|--a------] C:\Windows\temp\lpksetup-20081027-082554-0.log
[27/10/2008 08:26|--a------] C:\Windows\temp\lpksetup-20081027-082608-0.log
[27/10/2008 16:39|--a------] C:\Windows\temp\lpksetup-20081027-163914-0.log
[27/10/2008 16:39|--a------] C:\Windows\temp\lpksetup-20081027-163928-0.log
[27/10/2008 18:41|--a------] C:\Windows\temp\lpksetup-20081027-184107-0.log
[27/10/2008 18:41|--a------] C:\Windows\temp\lpksetup-20081027-184123-0.log
[29/10/2008 03:51|--a------] C:\Windows\temp\lpksetup-20081029-035115-0.log
[29/10/2008 03:51|--a------] C:\Windows\temp\lpksetup-20081029-035130-0.log
[29/10/2008 13:54|--a------] C:\Windows\temp\lpksetup-20081029-135443-0.log
[29/10/2008 13:54|--a------] C:\Windows\temp\lpksetup-20081029-135458-0.log
[30/10/2008 05:10|--a------] C:\Windows\temp\lpksetup-20081030-051013-0.log
[30/10/2008 05:10|--a------] C:\Windows\temp\lpksetup-20081030-051027-0.log
[30/10/2008 13:06|--a------] C:\Windows\temp\lpksetup-20081030-130624-0.log
[30/10/2008 13:06|--a------] C:\Windows\temp\lpksetup-20081030-130638-0.log
[30/10/2008 22:11|--a------] C:\Windows\temp\lpksetup-20081030-221057-0.log
[30/10/2008 22:11|--a------] C:\Windows\temp\lpksetup-20081030-221111-0.log
[31/10/2008 03:18|--a------] C:\Windows\temp\lpksetup-20081031-031525-0.log
[31/10/2008 03:18|--a------] C:\Windows\temp\lpksetup-20081031-031812-0.log
[01/11/2008 23:17|--a------] C:\Windows\temp\lpksetup-20081101-231449-0.log
[01/11/2008 23:17|--a------] C:\Windows\temp\lpksetup-20081101-231713-0.log
[04/11/2008 09:51|--a------] C:\Windows\temp\lpksetup-20081104-095138-0.log
[04/11/2008 09:51|--a------] C:\Windows\temp\lpksetup-20081104-095153-0.log
[05/11/2008 16:52|--a------] C:\Windows\temp\lpksetup-20081105-165202-0.log
[05/11/2008 16:52|--a------] C:\Windows\temp\lpksetup-20081105-165216-0.log
[07/11/2008 03:56|--a------] C:\Windows\temp\lpksetup-20081107-035603-0.log
[07/11/2008 03:56|--a------] C:\Windows\temp\lpksetup-20081107-035617-0.log
[07/11/2008 04:52|--a------] C:\Windows\temp\lpksetup-20081107-045212-0.log
[07/11/2008 04:52|--a------] C:\Windows\temp\lpksetup-20081107-045228-0.log
[07/11/2008 08:34|--a------] C:\Windows\temp\lpksetup-20081107-083346-0.log
[07/11/2008 08:34|--a------] C:\Windows\temp\lpksetup-20081107-083402-0.log
[07/11/2008 09:39|--a------] C:\Windows\temp\lpksetup-20081107-093932-0.log
[07/11/2008 09:39|--a------] C:\Windows\temp\lpksetup-20081107-093947-0.log
[16/10/2008 11:39|--a----t-] C:\Windows\temp\mcafee_3mBwpEhn9PzyPcq
[15/10/2008 12:12|--a----t-] C:\Windows\temp\mcafee_9eCeat084Z1bz4V
[07/11/2008 03:55|--a----t-] C:\Windows\temp\mcafee_B7ljhHhBdnwcFsI
[27/10/2008 08:11|--a----t-] C:\Windows\temp\mcafee_CzkXjpxg97cRKah
[03/10/2008 17:09|--a----t-] C:\Windows\temp\mcafee_du1ZiMthIj8hfLh
[14/10/2008 07:33|--a----t-] C:\Windows\temp\mcafee_EX8jfdWvYeOEZkD
[19/10/2008 18:16|--a----t-] C:\Windows\temp\mcafee_fXSHGV55CZx4jk7
[22/10/2008 21:55|--a----t-] C:\Windows\temp\mcafee_KZ5DPbtb9M8l8Z8
[07/10/2008 01:08|--a----t-] C:\Windows\temp\mcafee_MizWBpFMgfvNoY7
[04/10/2008 01:02|--a----t-] C:\Windows\temp\mcafee_nvGdkGVbpR5rwlO
[03/10/2008 15:27|d--------] C:\Windows\temp\MCE00000
[03/10/2008 16:12|d--------] C:\Windows\temp\MCE00001
[04/10/2008 00:01|d--------] C:\Windows\temp\MCE00002
[04/10/2008 00:03|d--------] C:\Windows\temp\MCE00003
[04/10/2008 01:00|d--------] C:\Windows\temp\MCE00004
[07/10/2008 01:08|d--------] C:\Windows\temp\MCE00005
[07/10/2008 06:51|d--------] C:\Windows\temp\MCE00006
[08/10/2008 19:17|d--------] C:\Windows\temp\MCE00007
[09/10/2008 02:50|d--------] C:\Windows\temp\MCE00008
[09/10/2008 15:40|d--------] C:\Windows\temp\MCE00009
[10/10/2008 02:14|d--------] C:\Windows\temp\MCE0000a
[10/10/2008 20:29|d--------] C:\Windows\temp\MCE0000b
[12/10/2008 17:48|d--------] C:\Windows\temp\MCE0000c
[13/10/2008 02:22|d--------] C:\Windows\temp\MCE0000d
[13/10/2008 15:01|d--------] C:\Windows\temp\MCE0000e
[14/10/2008 07:32|d--------] C:\Windows\temp\MCE0000f
[15/10/2008 01:36|d--------] C:\Windows\temp\MCE00010
[15/10/2008 10:27|d--------] C:\Windows\temp\MCE00011
[16/10/2008 08:06|d--------] C:\Windows\temp\MCE00012
[16/10/2008 11:27|d--------] C:\Windows\temp\MCE00013
[16/10/2008 13:27|d--------] C:\Windows\temp\MCE00014
[17/10/2008 18:13|d--------] C:\Windows\temp\MCE00015
[18/10/2008 07:35|d--------] C:\Windows\temp\MCE00016
[18/10/2008 10:08|d--------] C:\Windows\temp\MCE00017
[18/10/2008 11:23|d--------] C:\Windows\temp\MCE00018
[18/10/2008 21:36|d--------] C:\Windows\temp\MCE00019
[19/10/2008 03:16|d--------] C:\Windows\temp\MCE0001a
[19/10/2008 17:27|d--------] C:\Windows\temp\MCE0001b
[19/10/2008 22:59|d--------] C:\Windows\temp\MCE0001c
[20/10/2008 23:17|d--------] C:\Windows\temp\MCE0001d
[21/10/2008 04:10|d--------] C:\Windows\temp\MCE0001e
[22/10/2008 02:58|d--------] C:\Windows\temp\MCE0001f
[22/10/2008 12:35|d--------] C:\Windows\temp\MCE00020
[22/10/2008 21:54|d--------] C:\Windows\temp\MCE00021
[23/10/2008 00:02|d--------] C:\Windows\temp\MCE00022
[23/10/2008 00:51|d--------] C:\Windows\temp\MCE00023
[23/10/2008 02:54|d--------] C:\Windows\temp\MCE00024
[24/10/2008 20:54|d--------] C:\Windows\temp\MCE00025
[24/10/2008 23:15|d--------] C:\Windows\temp\MCE00026
[25/10/2008 19:59|d--------] C:\Windows\temp\MCE00027
[26/10/2008 06:49|d--------] C:\Windows\temp\MCE00028
[27/10/2008 08:10|d--------] C:\Windows\temp\MCE00029
[27/10/2008 16:25|d--------] C:\Windows\temp\MCE0002a
[27/10/2008 18:27|d--------] C:\Windows\temp\MCE0002b
[29/10/2008 03:36|d--------] C:\Windows\temp\MCE0002c
[29/10/2008 13:07|d--------] C:\Windows\temp\MCE0002d
[29/10/2008 13:20|d--------] C:\Windows\temp\MCE0002e
[29/10/2008 13:32|d--------] C:\Windows\temp\MCE0002f
[29/10/2008 13:40|d--------] C:\Windows\temp\MCE00030
[30/10/2008 04:55|d--------] C:\Windows\temp\MCE00031
[30/10/2008 12:52|d--------] C:\Windows\temp\MCE00032
[30/10/2008 21:52|d--------] C:\Windows\temp\MCE00033
[30/10/2008 21:55|d--------] C:\Windows\temp\MCE00034
[31/10/2008 03:01|d--------] C:\Windows\temp\MCE00035
[01/11/2008 23:00|d--------] C:\Windows\temp\MCE00036
[04/11/2008 09:37|d--------] C:\Windows\temp\MCE00037
[05/11/2008 16:37|d--------] C:\Windows\temp\MCE00038
[07/11/2008 03:41|d--------] C:\Windows\temp\MCE00039
[07/11/2008 04:38|d--------] C:\Windows\temp\MCE0003a
[07/11/2008 07:51|d--------] C:\Windows\temp\MCE0003b
[07/11/2008 08:04|d--------] C:\Windows\temp\MCE0003c
[07/11/2008 08:08|d--------] C:\Windows\temp\MCE0003d
[07/11/2008 08:19|d--------] C:\Windows\temp\MCE0003e
[07/11/2008 09:25|d--------] C:\Windows\temp\MCE0003f
[16/10/2008 05:25|--a----t-] C:\Windows\temp\mcmsc_1ON7NQadeq4HyqG
[15/10/2008 10:28|--a----t-] C:\Windows\temp\mcmsc_6OVNmqKKxAGOCQp
[19/10/2008 17:30|--a----t-] C:\Windows\temp\mcmsc_7a0qv3cdFf3vewJ
[22/10/2008 21:55|--a----t-] C:\Windows\temp\mcmsc_AYFprsgjHzhE9Ig
[30/10/2008 21:53|--a----t-] C:\Windows\temp\mcmsc_D8g6ANxFy3mrw3S
[22/10/2008 12:36|--a----t-] C:\Windows\temp\mcmsc_EqbokuHnjpbfnCF
[03/10/2008 16:43|--a----t-] C:\Windows\temp\mcmsc_J7HZdkBQoUDwoJa
[04/10/2008 01:00|--a----t-] C:\Windows\temp\mcmsc_lpj7GyQQeiXhWau
[16/10/2008 11:30|--a----t-] C:\Windows\temp\mcmsc_lSx2c2Gb0K8F0D4
[07/10/2008 01:08|--a----t-] C:\Windows\temp\mcmsc_o7edGAFmgebqTTR
[15/10/2008 12:51|--a----t-] C:\Windows\temp\mcmsc_oOeAxMHQjukWqch
[27/10/2008 08:31|--a----t-] C:\Windows\temp\mcmsc_PBbd3mRQzZt7uuc
/!\ - [07/11/2008 09:26|-------t-] C:\Windows\temp\mcmsc_psioC0hjbLQSuDg
[03/10/2008 16:14|--a----t-] C:\Windows\temp\mcmsc_qVsDlHDdmXbmk1h
[27/10/2008 08:11|--a----t-] C:\Windows\temp\mcmsc_rVdUqhmjBYXEBOZ
[27/10/2008 08:31|--a----t-] C:\Windows\temp\mcmsc_TEggExaRQ3hZqPt
[14/10/2008 07:33|--a----t-] C:\Windows\temp\mcmsc_Tfdu28HXq8Djmo0
[10/10/2008 02:15|--a----t-] C:\Windows\temp\mcmsc_Twa3IyRiPH7srVw
[29/10/2008 13:33|--a----t-] C:\Windows\temp\mcmsc_tYOJouAQurgMFmp
[06/10/2008 19:25|--a----t-] C:\Windows\temp\mcmsc_ukgSxbnDNJrWZj0
[07/11/2008 03:44|--a----t-] C:\Windows\temp\mcmsc_wMAhLodjvRRnJmZ
[23/10/2008 02:54|--a----t-] C:\Windows\temp\mcmsc_Y6cAwibujDD8aOl
[15/10/2008 12:51|--a----t-] C:\Windows\temp\mcmsc_YxtX3ppkLBSShh7
[03/10/2008 16:43|--a----t-] C:\Windows\temp\mcmsc_Z7Lq9VHq0FkZzYh
[03/10/2008 15:18|--a------] C:\Windows\temp\NMSP_EF.log
[05/03/2008 00:01|--a------] C:\Windows\temp\SetupAV.log
[05/03/2008 00:02|--a------] C:\Windows\temp\SetupAVC.log
[18/10/2008 21:37|--a----t-] C:\Windows\temp\sqlite_0NX0GSkUesqGM2K
[13/10/2008 15:02|--a----t-] C:\Windows\temp\sqlite_1umYqb899AwkG8i
[16/10/2008 08:07|--a----t-] C:\Windows\temp\sqlite_1z3krrykCOdqB5k
[29/10/2008 13:33|--a----t-] C:\Windows\temp\sqlite_2fWqZiAlB3hSQzV
[27/10/2008 08:11|--a----t-] C:\Windows\temp\sqlite_2gk4ZoSusUhxyMs
[29/10/2008 13:33|--a----t-] C:\Windows\temp\sqlite_2IjHdl3r4JmcwR8
[07/10/2008 01:09|--a----t-] C:\Windows\temp\sqlite_2kg8pWCjoGIEYLw
[25/10/2008 20:00|--a----t-] C:\Windows\temp\sqlite_2LT114gZDrBpLnc
[24/10/2008 20:55|--a----t-] C:\Windows\temp\sqlite_39oievZmihwWxsp
[19/10/2008 03:17|--a----t-] C:\Windows\temp\sqlite_3brjvihSPVNmhem
[07/11/2008 08:20|--a----t-] C:\Windows\temp\sqlite_3Kg24oERxl6WXdc
[29/10/2008 13:35|--a----t-] C:\Windows\temp\sqlite_5iCDgbUUlO6m9kU
[04/10/2008 00:04|--a----t-] C:\Windows\temp\sqlite_6jbOeKJkggtWTRZ
[18/10/2008 10:09|--a----t-] C:\Windows\temp\sqlite_6M43HdgGcN1Q2j5
[10/10/2008 02:15|--a----t-] C:\Windows\temp\sqlite_7CHMEsYBBl4X0kk
[23/10/2008 02:55|--a----t-] C:\Windows\temp\sqlite_7imc3PBsXpGyhqM
[15/10/2008 01:37|--a----t-] C:\Windows\temp\sqlite_7mdF6MeskewwoYG
[29/10/2008 03:37|--a----t-] C:\Windows\temp\sqlite_7ROL8F4c3Igpxhy
[16/10/2008 13:28|--a----t-] C:\Windows\temp\sqlite_84oD0Sibk8riPSJ
[23/10/2008 00:52|--a----t-] C:\Windows\temp\sqlite_863YeTRetHVdewc
[07/11/2008 08:20|--a----t-] C:\Windows\temp\sqlite_9FbKZRE6bWluH26
[19/10/2008 17:28|--a----t-] C:\Windows\temp\sqlite_9FJfqjKxlqfpacr
[30/10/2008 21:56|--a----t-] C:\Windows\temp\sqlite_AaVVTF4pdKqc2Mo
[03/10/2008 15:28|--a----t-] C:\Windows\temp\sqlite_AbBogCnzIpZYFEB
[23/10/2008 05:08|--a----t-] C:\Windows\temp\sqlite_aoeknxPwhci1zSM
[30/10/2008 12:53|--a----t-] C:\Windows\temp\sqlite_C1edZCudggCWX72
[15/10/2008 01:37|--a----t-] C:\Windows\temp\sqlite_CgNTTQgNcB9dbAJ
[15/10/2008 10:28|--a----t-] C:\Windows\temp\sqlite_cN4D4Y5I8m2hQli
[22/10/2008 12:36|--a----t-] C:\Windows\temp\sqlite_cN74YFy9yXaNapc
[18/10/2008 07:37|--a----t-] C:\Windows\temp\sqlite_DB9lwpA259JDNfx
[24/10/2008 20:55|--a----t-] C:\Windows\temp\sqlite_DcpuCxbueRIFmPN
[29/10/2008 13:08|--a----t-] C:\Windows\temp\sqlite_ddVpdrZgwrfwu3e
[13/10/2008 02:23|--a----t-] C:\Windows\temp\sqlite_DG6sllNXY2oMwOW
[12/10/2008 17:49|--a----t-] C:\Windows\temp\sqlite_dZyZtcsfMkvpjLE
[22/10/2008 21:55|--a----t-] C:\Windows\temp\sqlite_eEDqzWpHLt0DH2r
[29/10/2008 13:41|--a----t-] C:\Windows\temp\sqlite_EkQ8FhCp5i99IQc
[23/10/2008 00:52|--a----t-] C:\Windows\temp\sqlite_Eme922crDVaR5pg
[17/10/2008 18:14|--a----t-] C:\Windows\temp\sqlite_Esx9CA1GRU9Dofz
[04/11/2008 09:38|--a----t-] C:\Windows\temp\sqlite_fe1lrcuKv3LSlQd
[29/10/2008 03:37|--a----t-] C:\Windows\temp\sqlite_fhHfdLoHEoTT0Qh
[30/10/2008 21:53|--a----t-] C:\Windows\temp\sqlite_fIheYaObu0eAnJA
[15/10/2008 10:28|--a----t-] C:\Windows\temp\sqlite_fKrIMBytduRFw3Z
[18/10/2008 07:37|--a----t-] C:\Windows\temp\sqlite_fOMW9CUpmpaPAgo
[04/10/2008 00:04|--a----t-] C:\Windows\temp\sqlite_gETWrSMAbg5Zbv4
[08/10/2008 19:18|--a----t-] C:\Windows\temp\sqlite_Gk45iqz1Ee41wue
[26/10/2008 06:50|--a----t-] C:\Windows\temp\sqlite_glml9qMsaTla4WQ
[07/11/2008 04:39|--a----t-] C:\Windows\temp\sqlite_GrDu6l2womk6fe9
[22/10/2008 02:59|--a----t-] C:\Windows\temp\sqlite_GtDbcNAWWDcXECY
[26/10/2008 06:50|--a----t-] C:\Windows\temp\sqlite_GXg7Oi5biYvJmDO
[10/10/2008 20:30|--a----t-] C:\Windows\temp\sqlite_H3J0SsAPTtrKK5p
[22/10/2008 02:59|--a----t-] C:\Windows\temp\sqlite_heMpdfB5sO7ectt
[07/11/2008 03:42|--a----t-] C:\Windows\temp\sqlite_HivUVVsg6WCjuzL
[08/10/2008 19:18|--a----t-] C:\Windows\temp\sqlite_hJ79g0D08iMTOsf
[07/11/2008 03:42|--a----t-] C:\Windows\temp\sqlite_I7lgxnFK4AgWJR4
[16/10/2008 08:07|--a----t-] C:\Windows\temp\sqlite_icdE1ISIMDAhpDl
[19/10/2008 23:00|--a----t-] C:\Windows\temp\sqlite_iEqn8JI5HJGrgNB
[05/11/2008 16:38|--a----t-] C:\Windows\temp\sqlite_IZ2eEvCUf7r1KFf
[09/10/2008 02:51|--a----t-] C:\Windows\temp\sqlite_JAGnPrhbbtJxRHA
[31/10/2008 03:02|--a----t-] C:\Windows\temp\sqlite_JBYcQhzYu8NZwhq
[18/10/2008 11:24|--a----t-] C:\Windows\temp\sqlite_JFtJfxANI74Rc02
[19/10/2008 03:17|--a----t-] C:\Windows\temp\sqlite_jujuu6fV1Ogm7Gu
[23/10/2008 00:03|--a----t-] C:\Windows\temp\sqlite_k0oZx6Pnj1bgQ9f
/!\ - [07/11/2008 09:26|-------t-] C:\Windows\temp\sqlite_K7zK9orBoIqMObr
[29/10/2008 13:21|--a----t-] C:\Windows\temp\sqlite_KfR4UirdiJ1CDaf
/!\ - [07/11/2008 09:26|-------t-] C:\Windows\temp\sqlite_KtKmaMsaKxZehfn
[27/10/2008 16:26|--a----t-] C:\Windows\temp\sqlite_kvXGFXafNegs7Xg
[27/10/2008 18:28|--a----t-] C:\Windows\temp\sqlite_l0eG6PbGJFow0ls
[09/10/2008 02:51|--a----t-] C:\Windows\temp\sqlite_LgOIE6haC81797S
[30/10/2008 04:56|--a----t-] C:\Windows\temp\sqlite_lHtneHcRgN8I0F3
[10/10/2008 02:15|--a----t-] C:\Windows\temp\sqlite_lVvtuMWxdmVrld7
[09/10/2008 15:41|--a----t-] C:\Windows\temp\sqlite_lWcR5YwAth7AWjw
[04/11/2008 09:38|--a----t-] C:\Windows\temp\sqlite_LXFCoPX1YUUz7sy
[29/10/2008 13:08|--a----t-] C:\Windows\temp\sqlite_LytyBQH6CbS0yIb
[14/10/2008 07:33|--a----t-] C:\Windows\temp\sqlite_M7pOS0sRU0bi5ob
[27/10/2008 18:28|--a----t-] C:\Windows\temp\sqlite_Mbh15AGYsqutejt
[07/11/2008 08:09|--a----t-] C:\Windows\temp\sqlite_mLbfUA31D0G1wLQ
[04/10/2008 01:01|--a----t-] C:\Windows\temp\sqlite_mQZura1A1VZg5cS
[18/10/2008 21:37|--a----t-] C:\Windows\temp\sqlite_mRuEnSa3merkYem
[19/10/2008 17:28|--a----t-] C:\Windows\temp\sqlite_MUVFuLwGqNg9oVF
[13/10/2008 02:23|--a----t-] C:\Windows\temp\sqlite_N6zkPT845AeAy3e
[29/10/2008 13:21|--a----t-] C:\Windows\temp\sqlite_N8c6hR95JK49sB0
[19/10/2008 23:00|--a----t-] C:\Windows\temp\sqlite_naAf7dbk2qfpRA0
[20/10/2008 23:18|--a----t-] C:\Windows\temp\sqlite_Nhgykej946q88MU
[04/10/2008 01:01|--a----t-] C:\Windows\temp\sqlite_NrogLyRQ46mKIz4
[22/10/2008 12:36|--a----t-] C:\Windows\temp\sqlite_O7z0MX1ithpgKBZ
[14/10/2008 07:33|--a----t-] C:\Windows\temp\sqlite_OSk3MZ1P6XiBwmf
[23/10/2008 02:55|--a----t-] C:\Windows\temp\sqlite_oZ6grmmDgERbB3a
[16/10/2008 11:28|--a----t-] C:\Windows\temp\sqlite_p70mpgV0aVX5yxM
[16/10/2008 13:28|--a----t-] C:\Windows\temp\sqlite_poVbqPemJepgWe0
[30/10/2008 12:53|--a----t-] C:\Windows\temp\sqlite_PQe9YcSenuk30Ov
[18/10/2008 11:24|--a----t-] C:\Windows\temp\sqlite_PvXCsLrMVcXxHht
[24/10/2008 23:16|--a----t-] C:\Windows\temp\sqlite_Q7xKR64N9KSqX18
[03/10/2008 14:52|--a----t-] C:\Windows\temp\sqlite_qBPxTwSmlX9PLBA
[05/03/2008 00:20|--a----t-] C:\Windows\temp\sqlite_QeAxRhvCHJlIMOg
[25/10/2008 20:00|--a----t-] C:\Windows\temp\sqlite_qvuNcHyZIe0Xv7G
[07/10/2008 06:52|--a----t-] C:\Windows\temp\sqlite_QZvrgTXgCj9CCOI
[05/11/2008 16:38|--a----t-] C:\Windows\temp\sqlite_rbSORgILnTwdOoQ
[04/10/2008 00:02|--a----t-] C:\Windows\temp\sqlite_RbU3WQZjEx80Aja
[01/11/2008 23:01|--a----t-] C:\Windows\temp\sqlite_rcj7Mrjw5YbEadU
[10/10/2008 20:30|--a----t-] C:\Windows\temp\sqlite_RcMuqnntn4Vx8Cl
[03/10/2008 15:28|--a----t-] C:\Windows\temp\sqlite_SePykEeAEFzJAst
[30/10/2008 21:53|--a----t-] C:\Windows\temp\sqlite_SgEkOLEdD65p7wt
[22/10/2008 21:16|--a----t-] C:\Windows\temp\sqlite_tCdq2HvVZK6xBil
[04/10/2008 00:02|--a----t-] C:\Windows\temp\sqlite_tyW6nmUfY3CX3Tm
[07/11/2008 07:52|--a----t-] C:\Windows\temp\sqlite_u4ks9wRm4M05yFw
[07/11/2008 08:09|--a----t-] C:\Windows\temp\sqlite_U7ptLrgtdCxpE0J
[03/10/2008 16:13|--a----t-] C:\Windows\temp\sqlite_UeQDSCl3v40ibGW
[05/03/2008 00:20|--a----t-] C:\Windows\temp\sqlite_UKMYgh65HQuw48L
[24/10/2008 23:16|--a----t-] C:\Windows\temp\sqlite_UUfh8sJEXarcBvU
[03/10/2008 16:13|--a----t-] C:\Windows\temp\sqlite_UWX02drOJdZaB7c
[18/10/2008 10:09|--a----t-] C:\Windows\temp\sqlite_vaYO7OXa13qVw5R
[29/10/2008 13:41|--a----t-] C:\Windows\temp\sqlite_vbnxnQCqsQ6hxiQ
[16/10/2008 11:28|--a----t-] C:\Windows\temp\sqlite_Virs0RxBO7z779f
[27/10/2008 16:26|--a----t-] C:\Windows\temp\sqlite_VxplOlIt45Imp1k
[30/10/2008 21:56|--a----t-] C:\Windows\temp\sqlite_w18ed158XbVTpsf
[31/10/2008 03:02|--a----t-] C:\Windows\temp\sqlite_weRBN3wa0uJganh
[23/10/2008 00:03|--a----t-] C:\Windows\temp\sqlite_wuazf8BHUmvDwMz
[07/10/2008 06:52|--a----t-] C:\Windows\temp\sqlite_XbRzqKpTUn7Ipjy
[22/10/2008 21:55|--a----t-] C:\Windows\temp\sqlite_XYursm4p51U8ZGR
[12/10/2008 17:49|--a----t-] C:\Windows\temp\sqlite_yAK701bkqhPJNzb
[21/10/2008 04:11|--a----t-] C:\Windows\temp\sqlite_ylt7vVFzZYMHFVQ
[09/10/2008 15:41|--a----t-] C:\Windows\temp\sqlite_ynjUopvLyislaVQ
[03/10/2008 14:52|--a----t-] C:\Windows\temp\sqlite_Yp3qEaOz2iYsLfb
[21/10/2008 04:11|--a----t-] C:\Windows\temp\sqlite_YsWf54omu30I55s
[07/11/2008 07:52|--a----t-] C:\Windows\temp\sqlite_yZXNHOcTt8TMBPW
[01/11/2008 23:01|--a----t-] C:\Windows\temp\sqlite_zcIr0o6EaY3SkGE
[27/10/2008 08:11|--a----t-] C:\Windows\temp\sqlite_ZCL0moPQ1tR6Wlo
[20/10/2008 23:18|--a----t-] C:\Windows\temp\sqlite_zcXbeudeVUtWELf
[30/10/2008 04:56|--a----t-] C:\Windows\temp\sqlite_Zfux1oq12IketPN
[13/10/2008 15:02|--a----t-] C:\Windows\temp\sqlite_Zgs4kHUJGNktNej
[07/10/2008 01:09|--a----t-] C:\Windows\temp\sqlite_zlNvAfIKZc1AdUw
[17/10/2008 18:14|--a----t-] C:\Windows\temp\sqlite_zmDuUmAekuCugg8
[07/11/2008 04:39|--a----t-] C:\Windows\temp\sqlite_ZZWVZlfgEdJ6EeE
[03/10/2008 15:45|d--------] C:\Windows\temp\SxsTemp
[07/11/2008 09:23|--a------] C:\Windows\temp\WERBA4C.tmp.hdmp
/!\ - [07/11/2008 09:25|---------] C:\Windows\temp\WFV4420.tmp
[03/10/2008 14:53|--a------] C:\Windows\temp\WinSAT_DX.etl
[03/10/2008 14:53|--a------] C:\Windows\temp\WinSAT_KernelLog.etl
[03/10/2008 14:55|--a------] C:\Windows\temp\WinSAT_StorageAsmt.etl
[02/11/2006 13:56|--a------] C:\Windows\temp\wmsetup.log
[02/11/2006 12:18|d--------] C:\Windows\temp\~msdt

+---------- Scanning prefs.js ... ( # Mozilla User Preferences ) ----+

...\ggpivvsj.default\prefs.js :

STARTPAGE: "http://www.lo.st"

+----------+

+---------- Added scan ...

+-----[HKLM\...\Run]

Windows Defender REG_EXPAND_SZ %ProgramFiles%\Windows Defender\MSASCui.exe -hide
ECenter REG_SZ C:\Dell\E-Center\EULALauncher.exe
RtHDVCpl REG_SZ RtHDVCpl.exe
OEM07Mon.exe REG_SZ C:\Windows\OEM07Mon.exe
IgfxTray REG_SZ C:\Windows\system32\igfxtray.exe
HotKeysCmds REG_SZ C:\Windows\system32\hkcmd.exe
Persistence REG_SZ C:\Windows\system32\igfxpers.exe
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
UserSwitch REG_SZ C:\Windows\System32\FastUserSwitching.exe
DELL Webcam Manager REG_SZ "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s
Kernel and Hardware Abstraction Layer REG_SZ KHALMNPR.EXE
NMSSupport REG_SZ "C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe" /startup
CCUTRAYICON REG_SZ "C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe"
Google Desktop Search REG_SZ "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
dscactivate REG_SZ "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
mcagent_exe REG_SZ C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
DellSupportCenter REG_SZ "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
SPAMfighter Agent REG_SZ "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60
ISTray REG_SZ "C:\Program Files\Spyware Doctor\pctsTray.exe"
OlStatusMon REG_SZ "C:\Program Files\Olivetti\ANY_WAY\olDvcStatus.exe" dvcStatusMinimize

+-----[HKCU\...\Run]

ehTray.exe REG_SZ C:\Windows\ehome\ehTray.exe
swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
DellSupportCenter REG_SZ "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
WMPNSCFG REG_SZ C:\Program Files\Windows Media Player\WMPNSCFG.exe

+-----[HKLM\...\Internet Explorer\MAIN]

Start Page : hxxp://go.microsoft.com/fwlink/?LinkId=69157

+-----[HKCU\...\Internet Explorer\MAIN]

Start Page : hxxp://www.lo.st

+---------------------------------------------------------------------------+
+------------------------------- [ EOF - 541 lines ]
+---------------------------------------------------------------------------+

[ END at: 9:45:57 | 07/11/2008 ] - [ Time elapsed: 7 minutes, 27 seconds ]

/!\ Déconnecte-toi et ferme toutes applications en cours /!\

● Clique droit sur AD-Remover et choisis Exécuter en tant qu'administrateur : au menu principal choisi l'option "B".

--> Le programme va travailler...

● Poste le rapport qui apparaît à la fin.

(Le rapport est sauvegardé aussi sous C:\Ad-report.log)

/!\ Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide) /!\

---> Désactive l'UAC le temps de la désinfection :
http://www.commentcamarche.net/faq/sujet 8343 vista desactiver l uac

"Et la c'est bon, le programme se lance mais plusieur lignes avec "Accées refusé " apparaisse."
---> Il faut l'exécuter en tant qu'administrateur et il faut que l'UAC soit désactivé.

Tu l'as installé où ?

"Qd vous dites choiissez un compte, De quel compte s'agit t'il??"
---> Je parle de la session.

https://www.malekal.com/demarrer-windows-mode-sans-echec/

Refais la procédure en mode normal.

Refais la même manip' mais en mode sans échec.

---> Pour redémarrer en mode sans échec :
- Redémarre ton PC.
- Au démarrage, tapote sur F8 (F5 sur certains PC) juste après l'affichage du BIOS et juste avant le chargement de Windows.
- Dans le menu d'options avancées, choisis Mode sans échec.
- Choisis ton compte.

---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
http://oldtimer.geekstogo.com/OTMoveIt3.exe

---> Double-clique sur OTMoveIt3.exe afin de le lancer.

---> Copie (Ctrl+C) le texte suivant ci-dessous :

:processes
explorer.exe

:services
a1lwu5m3

:files
C:\PROGRA~1\EoRezo
C:\Users\F. ALBERT-BRUNET\AppData\Roaming\EoRezo
C:\Windows\system32\drivers\a1lwu5m3.sys

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"EoEngine"=-

:commands
[emptytemp]
[start explorer]
[reboot]

---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

Le rapport log.txt est incomplet.

Justement, je veux bien t'aider mais poste le rapport RSIT.

RSIT, c'est seulement pour savoir les infections...

Salut,

- Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

- Double-clique sur RSIT.exe afin de lancer le programme.

- Clique sur Continue à l'écran Disclaimer.

- Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : Les rapports sont sauvegardés dans le dossier C:\rsit.