System security 4.52

Question

Bonjour,

Depuis hier, j'ai un message qui s'affiche en fond d'écran : "Warning ! you're in danger ! your computer is infected with spyware ..." Mon PC me propose ensuite de lancer un logiciel que je n'ai pas installé qui s'appelle System Security 4.52 (Il me demande aussi, bien évidemment, de rentrer mon numéro de carte bancaire pour que je puisse bénéficier de l'antivirus)

J'ai l'impression que ce virus m'empêche de lancer tous mes logiciels (il bloque les fichiers en .exe)

je n'avais plus d'antivirus depuis quelques temps, j'ai donc acheté la mise à jour de NORTON 360 hier mais il refuse de lancer le CD pour l'installation. J'ai donc procédé à l'installation en mode sans échec mais NORTON ne trouve pas le problème après le scan (il trouve des choses mais pas le virus principal)...et je ne peux pas faire de liveupdate.....

J'ai donc fait ce qui a été conseillé à dolphin paradise :

http://www.commentcamarche.net/forum/affich 13192900 probleme avec system security 4 52

J'ai installé findykill et voilà le rapport :




############################## | FindyKill V6.005 | 

# User : Guillaume & Emilie (Administrateurs) # NOM-4DA1615194C 
# Update on 11/07/09 by Chiquitine29 & C_XX 
# Start at: 01:36:18 | 12/07/2009 
# Website : http://pagesperso-orange.fr/NosTools/index.html 

# Intel(R) Pentium(R) M processor 1.73GHz 
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 2 
# Internet Explorer 7.0.5730.11 
# Windows Firewall Status : Enabled 

# C:\ # Disque fixe local # 32,6 Go (5,45 Go free) [VAIO] # NTFS 
# D:\ # Disque fixe local # 34,94 Go (3,35 Go free) [VAIO] # NTFS 
# E:\ # Disque CD-ROM 
# F:\ # Disque CD-ROM 
# I:\ # Disque CD-ROM 

############################## | Processus actifs | 

C:\WINDOWS\System32\smss.exe 
C:\WINDOWS\system32\csrss.exe 
C:\WINDOWS\system32\winlogon.exe 
C:\WINDOWS\system32\services.exe 
C:\WINDOWS\system32\lsass.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\Explorer.EXE 
C:\Program Files\Internet Explorer\iexplore.exe 
C:\WINDOWS\system32\ctfmon.exe 
C:\WINDOWS\fonts\services.exe 
C:\WINDOWS\system32\wbem\wmiprvse.exe 

################## | Registre Startup | 

HKCU_Main: "Local Page"="C:\WINDOWS\system32\blank.htm" 
HKCU_Main: "Search Page"="https://www.google.com/?gws_rd=ssl" 
HKCU_Main: "Start Page"="https://www.google.fr/?gws_rd=ssl" 
HKLM_logon: "Userinit"="C:\WINDOWS\system32\userinit.exe," 
HKLM_logon: "DefaultUserName"="Guillaume & Emilie" 
HKLM_logon: "AltDefaultUserName"="Guillaume & Emilie" 
HKLM_logon: "LegalNoticeCaption"="" 
HKLM_logon: "LegalNoticeText"="" 
HKLM_Run: Hcontrol=C:\WINDOWS\ATK0100\Hcontrol.exe 
HKLM_Run: Apoint=C:\Program Files\Apoint\Apoint.exe 
HKLM_Run: ATIPTA="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" 
HKLM_Run: Alcmtr=ALCMTR.EXE 
HKLM_Run: AzMixerSel=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe 
HKLM_Run: Mouse Suite 98 Daemon=ICO.EXE 
HKLM_Run: SonyPowerCfg=C:\Program Files\Sony\VAIO Power Management\SPMgr.exe 
HKLM_Run: ISBMgr.exe=C:\Program Files\Sony\ISB Utility\ISBMgr.exe 
HKLM_Run: PDService.exe=C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe 
HKLM_Run: Acrobat Assistant 7.0="C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" 
HKLM_Run: HP Software Update=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 
HKLM_Run: SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe" 
HKLM_Run: VAIO Update 3="C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe" /Stationary 
HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime 
HKLM_Run: iTunesHelper="C:\Program Files\iTunes\iTunesHelper.exe" 
HKLM_Run: NSLauncher=C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup 
HKLM_Run: Adobe Photo Downloader="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" 
HKLM_Run: BluetoothAuthenticationAgent=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent 
HKLM_Run: Switcher.exe=C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe 
HKLM_Run: PWRISOVM.EXE=C:\Program Files\PowerISO\PWRISOVM.EXE 
HKLM_Run: sysldtray=C:\windows\ld12.exe 
HKLM_Run: 18914064=C:\Documents and Settings\All Users\Application Data\18914064\18914064.exe 
HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun\OptionalComponents= 
HKCU_Run: CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe 
HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
HKCU_Run: Yahoo! Pager=C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet 
HKCU_Run: updateMgr=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0 
HKCU_Run: DAEMON Tools Lite="C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun 
HKCU_Run: hsf7husjnfg98gi498aejhiugjkdg4=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\vbqh55.exe 
HKCU_Run: Cognac=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\b.exe 
HKCU_Run: PowerMgr="C:\WINDOWS\system32\Rundll32.exe" "C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp	mp186.tmp",Init 

################## | Fichiers # Dossiers infectieux | 

Présent ! C:\WINDOWS\system32\gsf83iujid.dll [f7ac077d4769bd54a9a9769a3bf430b8] 

################## | C:\Documents and Settings\Guillaume 

Présent ! C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\Desinstall.exe 

################## | All Drives ... | 


################## | Registre # Clés Run infectieuses | 

Présent ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "sysldtray" 
Présent ! HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Cognac" 
Présent ! HKU\S-1-5-21-194801287-367139244-2394972533-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Cognac" 
Présent ! HKLM\software\microsoft\security center "AntiVirusDisableNotify" ( 0x1 ) 
Présent ! HKLM\software\microsoft\security center "FirewallDisableNotify" ( 0x1 ) 

################## | Registre # Mountpoints2 | 

HKCU\..\..\Explorer\MountPoints2\{ad7d138f-6ae9-11dd-a667-0002c7dc5170} 
Shell\AutoRun\command =I:\setup.exe 

################## | Etat / Services / Informations | 

# Affichage des fichiers cachés : OK 
# Mode sans echec : OK 
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 ) 
# Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 ) 
# (!) SharedAccess -> Start = 4 ( Good = 2 | Bad = 4 ) 
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 ) 
# (!) wscsvc -> Start = 4 ( Good = 2 | Bad = 4 ) 


################## | Cracks / Keygens / Serials | 


################## | ! Fin du rapport # FindyKill V6.005 ! | 

Merci d'avance pour votre aide... 

Guillaume

chimay8 · Answer

salut, y a pas que ça!!

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d'avoir été infectées sans les ouvrir
réouvre Findykill, 

choisis cette fois ci l'option 2 (suppression) 

il y aura 1 redémarrage, laisse travailler l'outils jusqu'a l'apparition du message "nettoyage effectué" 

un rapport va s'ouvrir, poste le dans ta prochaine réponse s-t-p 

Note : le rapport FindyKill.txt est sauvegardé à la racine du disque
Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tape explorer.exe et valides

guillaume1976 · Answer

Merci pour votre réponse...

J'ai lancé findykill et "suppression"

Etant précisé que pour lancer findykill je dois être en mode sans echec sinon impossible de le lancer

puis j'ai refait une "recherche" et voilà le rapport :


############################## | FindyKill V6.005 |

# User : Guillaume & Emilie (Administrateurs) # NOM-4DA1615194C
# Update on 11/07/09 by Chiquitine29 & C_XX
# Start at: 17:35:28 | 12/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html

#         Intel(R) Pentium(R) M processor 1.73GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 2
# Internet Explorer 7.0.5730.11
# Windows Firewall Status : Enabled

# C:\ # Disque fixe local # 32,6 Go (5,38 Go free) [VAIO] # NTFS
# D:\ # Disque fixe local # 34,94 Go (3,35 Go free) [VAIO] # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque CD-ROM
# I:\ # Disque CD-ROM

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## | Registre Startup |

HKCU_Main:   "Local Page"="C:\WINDOWS\system32\blank.htm" 
HKCU_Main:   "Search Page"="https://www.google.com/?gws_rd=ssl" 
HKCU_Main:   "Start Page"="https://www.google.fr/?gws_rd=ssl" 
HKLM_logon:  "Userinit"="C:\WINDOWS\system32\userinit.exe," 
HKLM_logon:  "DefaultUserName"="Guillaume & Emilie" 
HKLM_logon:  "AltDefaultUserName"="Guillaume & Emilie" 
HKLM_logon:  "LegalNoticeCaption"="" 
HKLM_logon:  "LegalNoticeText"="" 
HKLM_Run:    Hcontrol=C:\WINDOWS\ATK0100\Hcontrol.exe 
HKLM_Run:    Apoint=C:\Program Files\Apoint\Apoint.exe 
HKLM_Run:    ATIPTA="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" 
HKLM_Run:    Alcmtr=ALCMTR.EXE 
HKLM_Run:    AzMixerSel=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe 
HKLM_Run:    Mouse Suite 98 Daemon=ICO.EXE 
HKLM_Run:    SonyPowerCfg=C:\Program Files\Sony\VAIO Power Management\SPMgr.exe 
HKLM_Run:    ISBMgr.exe=C:\Program Files\Sony\ISB Utility\ISBMgr.exe 
HKLM_Run:    PDService.exe=C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe 
HKLM_Run:    Acrobat Assistant 7.0="C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" 
HKLM_Run:    HP Software Update=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 
HKLM_Run:    SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe" 
HKLM_Run:    VAIO Update 3="C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe"  /Stationary 
HKLM_Run:    QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime 
HKLM_Run:    iTunesHelper="C:\Program Files\iTunes\iTunesHelper.exe" 
HKLM_Run:    NSLauncher=C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup 
HKLM_Run:    Adobe Photo Downloader="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" 
HKLM_Run:    BluetoothAuthenticationAgent=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent 
HKLM_Run:    Switcher.exe=C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe 
HKLM_Run:    PWRISOVM.EXE=C:\Program Files\PowerISO\PWRISOVM.EXE 
HKLM_Run:    sysldtray=C:\windows\ld12.exe 
HKLM_Run:    18914064=C:\Documents and Settings\All Users\Application Data\18914064\18914064.exe 
HKLM_Run:    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun\OptionalComponents= 
HKCU_Run:    CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe  
HKCU_Run:    swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe  
HKCU_Run:    Yahoo! Pager=C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet  
HKCU_Run:    updateMgr=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0  
HKCU_Run:    DAEMON Tools Lite="C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun  
HKCU_Run:    hsf7husjnfg98gi498aejhiugjkdg4=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\vbqh55.exe  
HKCU_Run:    Cognac=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\b.exe  
HKCU_Run:    PowerMgr="C:\WINDOWS\system32\Rundll32.exe" "C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp	mp186.tmp",Init  

################## | Fichiers # Dossiers infectieux |

Présent ! C:\WINDOWS\system32\gsf83iujid.dll [f7ac077d4769bd54a9a9769a3bf430b8]  

################## | C:\Documents and Settings\Guillaume 

Présent ! C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\Desinstall.exe  

################## | All Drives ... |


################## | Registre # Clés Run infectieuses |

Présent ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "sysldtray"    
Présent ! HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Cognac"    
Présent ! HKU\S-1-5-21-194801287-367139244-2394972533-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Cognac"    
Présent ! HKLM\software\microsoft\security center "AntiVirusDisableNotify" ( 0x1 )  
Présent ! HKLM\software\microsoft\security center "FirewallDisableNotify" ( 0x1 )  

################## | Registre # Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{ad7d138f-6ae9-11dd-a667-0002c7dc5170}
Shell\AutoRun\command =I:\setup.exe 

################## | Etat / Services / Informations |

# Affichage des fichiers cachés : OK
# Mode sans echec : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 ) 
# Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 ) 
# (!) SharedAccess -> Start = 4 ( Good = 2 | Bad = 4 )  
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 ) 
# (!) wscsvc -> Start = 4 ( Good = 2 | Bad = 4 )  


################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # FindyKill V6.005 ! |

chimay8 · Answer

bon,

marche pas

Télécharge random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.
Clique "Continue" à l'écran Disclaimer.

Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT va le télécharger (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.
Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

NB : Les rapports sont sauvegardés dans le dossier C:\rsit

ensuite

Télécharge SDfix (créé par AndyManchesta) et sauvegarde le sur ton Bureau. Tu peux suivre le tutorial SDFix de Malekal pour t'aider : 

Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec 
Choisis ton compte. 

Déroule la liste des instructions ci-dessous : 
Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script. 
Appuie sur Y pour commencer le nettoyage.
 
Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer. 
Appuie sur une touche pour redémarrer le PC. 
Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers. 
Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
 
Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau. 
Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt. 
Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis ! 

Si SDFix ne se lance pas 
Clique sur Démarrer > Exécuter 
Copie/colle ceci : 
%systemroot%\system32\cmd.exe /K %systemdrive%\SDFix\apps\FixPath.exe 

Clique sur Ok. 
Redémarre et essaie de relance SDFix.

guillaume1976 · Answer

voila le contenu de log - bloc-notes :

Logfile of random's system information tool 1.06 (written by random/random)
Run by Guillaume & Emilie at 2009-07-12 18:08:53
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 6 GB (16%) free of 33 GB
Total RAM: 1023 MB (75% free)


======Scheduled tasks folder======

C:\WINDOWS	asks\AppleSoftwareUpdate.job
C:\WINDOWS	asks\HubTask 0 {0E7C166E-2D2F-4269-9034-DE1898BF2B1A} 0~0.job
C:\WINDOWS	asks\{5B57CF47-0BFA-43c6-ACF9-3B3653DCADBA}.job
C:\WINDOWS	asks\{783AF354-B514-42d6-970E-3E8BF0A5279C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}]
C:\WINDOWS\system32\gsf83iujid.dll - C:\WINDOWS\system32\gsf83iujid.dll [2009-07-11 15000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{ecdee021-0d17-467f-a1ff-c7a115230949} - free-downloads.net Toolbar - C:\Program Files\free-downloads.net	bfre0.dll [2009-06-01 2094616]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton 360\Engine\3.0.0.134\coIEPlg.dll [2009-07-12 372592]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-13 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Hcontrol"=C:\WINDOWS\ATK0100\Hcontrol.exe [2004-07-19 61440]
"Apoint"=C:\Program Files\Apoint\Apoint.exe [2003-11-07 114688]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-06-28 344064]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"AzMixerSel"=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2005-02-14 53248]
"Mouse Suite 98 Daemon"=C:\WINDOWS\system32\ICO.EXE [2002-03-14 45056]
"SonyPowerCfg"=C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2005-05-15 184320]
"ISBMgr.exe"=C:\Program Files\Sony\ISB Utility\ISBMgr.exe [2004-02-20 32768]
"PDService.exe"=C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe [2004-07-06 40960]
"Acrobat Assistant 7.0"=C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [2005-03-03 483328]
""= []
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-15 136600]
"VAIO Update 3"=C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe [2007-01-25 546936]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-02-01 385024]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-02-19 267048]
"NSLauncher"=C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe [2007-08-02 3096576]
"Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe [2005-06-23 57344]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"Switcher.exe"=C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe [2006-02-14 176128]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2008-11-02 167936]
"sysldtray"=C:\windows\ld12.exe [2009-07-12 17921]
"18914064"=C:\Documents and Settings\All Users\Application Data\18914064\18914064 [2009-07-12 56]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"exec"=C:\WINDOWS\system32\mskcefl.exe [2004-08-05 128000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-07-15 68856]
"Yahoo! Pager"=C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet []
"updateMgr"=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [2006-03-30 313472]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
""=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\vbqh55.exe [2009-07-11 15001]
"hsf7husjnfg98gi498aejhiugjkdg4"=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\vbqh55.exe [2009-07-11 15001]
"Cognac"=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\b.exe [2009-07-11 153088]
"PowerMgr"=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp	mp186.tmp [2009-07-11 24876]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
Démarrage rapide du logiciel HP Image Zone.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe

C:\Documents and Settings\Guillaume & Emilie\Menu Démarrer\Programmes\Démarrage
Outil de détection de support PMB.lnk - C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-06-28 46080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt]
crypts.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\VESWinlogon]
C:\WINDOWS\system32\VESWinlogon.dll [2006-09-23 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2006-06-19 702768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
rtasgvfu76ew8ndkfno94 - {D76AB2A1-00F3-42BD-F434-00BBC39C8953} - C:\WINDOWS\system32\gsf83iujid.dll [2009-07-11 15000]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot
etwork
m]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot
etwork
m.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot
etwork\SymEFA.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0
"NoViewOnDrive"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Yahoo!\Messenger\YPager.exe"="C:\Program Files\Yahoo!\Messenger\YPager.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Sony\VAIO Media 4.0\Vc.exe"="C:\Program Files\Sony\VAIO Media 4.0\Vc.exe:*:Enabled:[VAIO Media] VAIO Media"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ad7d138f-6ae9-11dd-a667-0002c7dc5170}]
shell\AutoRun\command - I:\setup.exe


======File associations======

.exe - open - C:\WINDOWS\system32\mshjxw.exe "%1" %*
.bat - open - C:\WINDOWS\system32\mshjxw.exe "%1" %*
.bat - edit - 
.com - open - C:\WINDOWS\system32\mshjxw.exe "%1" %*

======List of files/folders created in the last 1 months======

2009-07-12 18:08:54 ----D---- C:\Program Files	rend micro
2009-07-12 18:08:53 ----D---- C:sit
2009-07-12 17:35:26 ----A---- C:\FindyKill.txt
2009-07-12 12:17:54 ----HDC---- C:\Documents and Settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}
2009-07-12 01:34:49 ----D---- C:\FindyKill
2009-07-12 01:04:56 ----RD---- C:\Program Files\Norton Support
2009-07-12 00:54:21 ----D---- C:\Program Files\Symantec
2009-07-12 00:54:21 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2009-07-12 00:53:31 ----D---- C:\Program Files\Norton 360
2009-07-12 00:39:09 ----D---- C:\Documents and Settings\All Users\Application Data\PCSettings
2009-07-12 00:38:59 ----D---- C:\Documents and Settings\All Users\Application Data\Norton
2009-07-12 00:37:20 ----D---- C:\Program Files\NortonInstaller
2009-07-12 00:37:20 ----D---- C:\Documents and Settings\All Users\Application Data\NortonInstaller
2009-07-12 00:33:04 ----A---- C:\WINDOWS
tbtlog.txt
2009-07-11 12:16:08 ----D---- C:\Program Files\sFX
2009-07-11 12:16:02 ----A---- C:\WINDOWS\system32	psaxyd.exe
2009-07-11 12:15:33 ----A---- C:\WINDOWS\msa.exe
2009-07-11 12:15:11 ----A---- C:\WINDOWS\system32\msxml71.dll
2009-07-11 12:14:35 ----D---- C:\Documents and Settings\All Users\Application Data\18914064
2009-07-11 12:13:47 ----A---- C:\derrk.exe
2009-07-11 12:13:45 ----A---- C:\WINDOWS\ld12.exe
2009-07-11 12:13:45 ----A---- C:\glnx.exe
2009-07-11 12:13:28 ----A---- C:\WINDOWS\system32\gsf83iujid.dll
2009-06-26 22:11:32 ----D---- C:\Program Files\Fichiers communs\Adobe AIR
2009-06-26 21:48:18 ----D---- C:\Winamax

======List of files/folders modified in the last 1 months======

2009-07-12 18:08:55 ----D---- C:\WINDOWS\system32
2009-07-12 18:08:54 ----RD---- C:\Program Files
2009-07-12 17:53:30 ----D---- C:\WINDOWS\Temp
2009-07-12 17:51:17 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-07-12 17:45:28 ----D---- C:\WINDOWS\system32\CatRoot2
2009-07-12 17:44:33 ----SD---- C:\WINDOWS\Tasks
2009-07-12 17:15:19 ----D---- C:\WINDOWS
2009-07-12 06:26:36 ----D---- C:\WINDOWS\system32\config
2009-07-12 01:04:20 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2009-07-12 00:56:53 ----SHD---- C:\System Volume Information
2009-07-12 00:54:28 ----D---- C:\WINDOWS\system32\drivers
2009-07-12 00:54:27 ----HD---- C:\WINDOWS\inf
2009-07-12 00:41:40 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2009-07-12 00:40:53 ----D---- C:\Documents and Settings\Guillaume & Emilie\Application Data\Symantec
2009-07-12 00:39:50 ----SHD---- C:\WINDOWS\Installer
2009-07-11 12:52:11 ----D---- C:\Documents and Settings\Guillaume & Emilie\Application Data\Azureus
2009-07-11 12:17:10 ----RSD---- C:\WINDOWS\Fonts
2009-07-11 12:13:31 ----D---- C:\WINDOWS\Prefetch
2009-06-27 11:07:32 ----D---- C:\Program Files\PokerStars
2009-06-26 22:14:31 ----D---- C:\Documents and Settings\Guillaume & Emilie\Application Data\Adobe
2009-06-26 22:14:31 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-06-26 22:11:35 ----SHD---- C:\Config.Msi
2009-06-26 22:11:32 ----D---- C:\Program Files\Fichiers communs
2009-06-20 00:49:47 ----D---- C:\WINDOWS\system32\wbem
2009-06-20 00:49:47 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 acehlp09;acehlp09; \??\C:\WINDOWS\system32\drivers\acehlp09.sys []
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\WINDOWS\system32\DRIVERS\Apfiltr.sys [2003-09-29 94601]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2004-08-12 137728]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-05 9600]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2003-09-26 5786]
R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2004-12-02 70912]
R3 SNC;Sony Notebook Control Device; C:\WINDOWS\System32\Drivers\SonyNC.sys [2000-11-09 48896]
R3 SPI;Sony Programmable I/O Control Device; C:\WINDOWS\system32\DRIVERS\SonyPI.sys [2002-08-20 71961]
R3 SymIMMP;SymIMMP; C:\WINDOWS\system32\DRIVERS\SymIM.sys [2009-07-12 36400]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
R3 w29n51;Pilote de carte de connexion réseau Intel(R) PRO/Wireless 2200BG pour Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2006-06-29 2206720]
S1 BHDrvx86;Symantec Heuristics Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\BHDrvx86.sys []
S1 ccHP;Symantec Hash Provider; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\ccHPx86.sys []
S1 DMICall;Sony DMI Call service; C:\WINDOWS\system32\DRIVERS\DMICall.sys [2000-12-05 3952]
S1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []
S1 IDSxpx86;IDSxpx86; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090206.001\IDSxpx86.sys []
S1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-27 40320]
S1 PrivateDisk;PrivateDisk; C:\WINDOWS\System32\Drivers\PrivateDiskM.sys [2004-07-06 45627]
S1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2008-11-02 56572]
S1 sFxdrv;sFxdrv; \??\C:\Program Files\sFX\sfX.sYs []
S1 SRTSPX;Symantec Real Time Storage Protection (PEL); \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SRTSPX.SYS []
S1 SYMTDI;Symantec Network Dispatch Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SYMTDI.SYS []
S1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:\WINDOWS\System32\Drivers	osrfcom.sys [2005-06-21 59648]
S2 acedrv09;acedrv09; \??\C:\WINDOWS\system32\drivers\acedrv09.sys []
S2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.5.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2008-08-24 21419]
S2 BCMNTIO;BCMNTIO; \??\C:\PROGRA~1\CheckIt\DIAGNO~1\BCMNTIO.sys []
S2 MAPMEM;MAPMEM; \??\C:\PROGRA~1\CheckIt\DIAGNO~1\MAPMEM.sys []
S2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
S2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2006-08-02 12544]
S3 adg2crko;adg2crko; C:\WINDOWS\system32\drivers\adg2crko.sys []
S3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-05 60800]
S3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-06-28 1241088]
S3 BthEnum;Pilote de bloc de demande Bluetooth; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2004-08-03 17024]
S3 BTHMODEM;Pilote de communications modem Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2004-08-03 38016]
S3 BthPan;Périphérique Bluetooth (réseau personnel); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2004-08-03 100992]
S3 BTHPORT;Pilote de port Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272768]
S3 BTHUSB;Pilote USB radio Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2004-08-03 18944]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-04 14080]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-07-06 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-07-06 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-07-06 21744]
S3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-05-23 1034752]
S3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2005-05-23 178048]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-06-29 3173888]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NAVENG;NAVENG; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090226.034\NAVENG.SYS []
S3 NAVEX15;NAVEX15; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090226.034\NAVEX15.SYS []
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS
ic1394.sys [2004-08-05 61824]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers
mwcd.sys [2007-02-22 137216]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers
mwcdc.sys [2007-02-22 8320]
S3 nmwcdcj;Nokia USB Port; C:\WINDOWS\system32\drivers
mwcdcj.sys [2007-02-22 12288]
S3 nmwcdcm;Nokia USB Modem; C:\WINDOWS\system32\drivers
mwcdcm.sys [2007-02-22 12288]
S3 pcmstub;pcmstub; \??\C:\WINDOWS\system32\pcmstub.sys []
S3 pelmouse;Mouse Suite Driver; C:\WINDOWS\system32\DRIVERS\pelmouse.sys [2002-06-28 17251]
S3 pelusblf;USB Mouse Low Filter Driver; C:\WINDOWS\system32\DRIVERS\pelusblf.sys [2001-07-24 7520]
S3 RFCOMM;Périphérique Bluetooth (TDI protocole RFCOMM); C:\WINDOWS\system32\DRIVERSfcomm.sys [2004-08-03 59648]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 SONYTVC;Sony MPEG RR-Engine; C:\WINDOWS\system32\DRIVERS\SONYTVC.sys [2005-03-18 237568]
S3 SRTSP;Symantec Real Time Storage Protection; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SRTSP.SYS []
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
S3 SYMFW;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SYMFW.SYS []
S3 SYMIDS;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SYMIDS.SYS []
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\WINDOWS\system32\DRIVERS\SymIM.sys [2009-07-12 36400]
S3 SYMNDIS;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SYMNDIS.SYS []
S3 tifmsony;tifmsony; C:\WINDOWS\system32\drivers	ifmsony.sys [2007-02-28 80896]
S3 toshidpt;TOSHIBA Bluetooth HID port driver; C:\WINDOWS\system32\drivers\Toshidpt.sys [2002-10-16 2851]
S3 tosporte;Bluetooth Port Driver from Toshiba; C:\WINDOWS\system32\DRIVERS	osporte.sys [2005-06-20 44288]
S3 Tosrfbd;Bluetooth RFBUS from TOSHIBA; C:\WINDOWS\System32\Drivers	osrfbd.sys [2005-06-17 98944]
S3 Tosrfbnp;Bluetooth RFBNEP from TOSHIBA; C:\WINDOWS\System32\Drivers	osrfbnp.sys [2005-05-27 34176]
S3 Tosrfhid;Bluetooth RFHID from TOSHIBA; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2005-04-22 53248]
S3 tosrfnds;Bluetooth Personal Area Network from TOSHIBA; C:\WINDOWS\system32\DRIVERS	osrfnds.sys [2005-01-06 18612]
S3 TosRfSnd;Bluetooth Audio Device (WDM) from TOSHIBA; C:\WINDOWS\system32\drivers\TosRfSnd.sys [2005-04-06 50048]
S3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\System32\Drivers	osrfusb.sys [2004-12-21 34816]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-05-23 716288]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 6to4;6to4; C:\WINDOWS\System32\svchost.exe [2004-08-05 14336]
S2 AdobeActiveFileMonitor;Adobe Active File Monitor; C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-12 98304]
S2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-02-18 110592]
S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-06-28 376832]
S2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2007-07-24 229376]
S2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]
S2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2006-08-02 434176]
S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-15 152984]
S2 msncache;msncache; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]
S2 MSSQL$VAIO_VEDB;MSSQL$VAIO_VEDB; C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe [2002-12-17 7520337]
S2 N360;Norton 360; C:\Program Files\Norton 360\Engine\3.0.0.134\ccSvcHst.exe [2009-07-12 115560]
S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe []
S2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2006-08-02 327680]
S2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2006-08-02 937984]
S2 sfx;sfx; C:\WINDOWS\sySTEM32\SvchoSt.ExE [2004-08-05 14336]
S2 sopidkc;sopidkc  Service; C:\WINDOWS\system32\sopidkc.exe [2004-08-05 98816]
S2 VAIO Event Service;VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [2006-09-23 176128]
S2 VCI;VAIO Cooporated Initialisation; C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe [2005-01-04 398336]
S2 VzCdbSvc;VAIO Entertainment Database Service; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [2005-06-15 167936]
S2 VzFw;VAIO Entertainment File Import Service; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe [2005-06-15 135168]
S2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 Boonty Games;Boonty Games; C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe [2006-10-21 69120]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-27 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 Image Converter video recording monitor for VAIO Entertainment;Image Converter video recording monitor for VAIO Entertainment; C:\Program Files\Sony\Image Converter 2\IcVzMon.exe [2005-04-05 32768]
S3 iPod Service;Service de l'iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-02-19 504104]
S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe [2006-12-14 45056]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PACSPTISVR;PACSPTISVR; C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe [2006-12-14 57344]
S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2007-02-08 212480]
S3 SonicStage Back-End Service;SonicStage Back-End Service; C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe [2007-02-05 112184]
S3 SPTISRV;Sony SPTI Service; C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe [2006-12-14 69632]
S3 SQLAgent$VAIO_VEDB;SQLAgent$VAIO_VEDB; C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE [2002-12-17 311872]
S3 SSScsiSV;SonicStage SCSI Service; C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe [2007-02-05 75320]
S3 VAIO Entertainment Aggregation and Control Service;VAIO Entertainment Aggregation and Control Service; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe [2005-06-17 143360]
S3 VAIO Entertainment Task Scheduler;VAIO Entertainment Task Scheduler; C:\Program Files\Sony\VAIO Entertainment\VzTaskScheduler.exe [2005-06-17 397312]
S3 VAIO Entertainment TV Device Arbitration Service;VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe [2005-06-15 73728]
S3 VAIOMediaPlatform-IntegratedServer-AppServer;VAIO Media Integrated Server; C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe [2006-06-12 1957888]
S3 VAIOMediaPlatform-IntegratedServer-HTTP;VAIO Media Integrated Server (HTTP); C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe [2005-06-07 57344]
S3 VAIOMediaPlatform-IntegratedServer-UPnP;VAIO Media Integrated Server (UPnP); C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe [2006-05-22 770048]
S3 VAIOMediaPlatform-Mobile-Gateway;VAIO Media Gateway Server; C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe [2006-05-17 155648]
S3 Vcsw;VAIO Entertainment UPnP Client Adapter; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [2005-06-15 270336]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]

-----------------EOF-----------------


voila le contenu de info - bloc-notes :

info.txt logfile of random's system information tool 1.06 2009-07-12 18:09:04

======Uninstall list======

-->C:\Program Files\Fichiers communs\Real\Update_OB1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\InstallShield Installation Information\{36C41D70-56F5-4E2B-81DA-6BEB7502D7A1}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{3D173DC5-4AE5-4B3F-9819-3977DD11B1D0}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{B2C4A8C4-AA20-425D-9FEE-C78039238C81}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{B34B6E67-FCDD-4E03-8742-B5701427FAFB}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->Dummy
-->MsiExec.exe /I{5B782FFA-6A95-480D-8E0A-0954A14693D6}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FD836E74-7923-4174-A055-F97CD0F3BB46}\Setup.exe" -l0x40c 
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Acrobat  7.0 Elements - Français-->msiexec /I {E5E6E687-1036-0000-0000-000000000002}
Adobe AIR-->c:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Photoshop 7.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll"
Adobe Photoshop Elements 3.0-->MsiExec.exe /I{851C67EF-068A-4060-9EF5-2E3DDCD68382}
Adobe Premiere Standard-->RunDll32 "C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll",LaunchSetup "C:\Program Files\InstallShield Installation Information\{7998F67D-655B-42E3-B651-18D96DD17268}\setup.exe"
Adobe Reader 7.1.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A71000000002}
Adobe® Photoshop® Album Edition Découverte 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}
AIDA32 v3.93-->"C:\Program Files\AIDA32 - Personal System Information\unins000.exe"
Apple Mobile Device Support-->MsiExec.exe /I{44734179-8A79-4DEE-BB08-73037F065543}
Apple Software Update-->MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATK0100 ACPI UTILITY-->C:\WINDOWS\ATK0100\XPunin.exe
Azureus Vuze-->C:\Program Files\Azureus\uninstall.exe
Bonjour-->MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
Call of Duty(R) 2-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D0A05794-48C2-4424-A15A-9F20FCFDD374} /l2057 
Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch-->C:\Program Files\InstallShield Installation Information\{3BD633E0-4BF8-4499-9149-88F0767D449C}\setup.exe -runfromtemp -l0x0409
CheckIt  Diagnostics-->C:\PROGRA~1\CheckIt\DIAGNO~1\UNWISE.EXE C:\PROGRA~1\CheckIt\DIAGNO~1\INSTALL.LOG
Citrix Web Client-->C:\WINDOWS\system32\ctxsetup.exe /uninst C:\PROGRA~1\Citrix\icaweb32\uninst.inf
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB914440)-->"C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB935448)-->"C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif Windows XP - KB307154-->C:\WINDOWS\$NtUninstallKB307154$\spuninst\spuninst.exe
Correctif Windows XP - KB873333-->C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Correctif Windows XP - KB884018-->C:\WINDOWS\$NtUninstallKB884018$\spuninst\spuninst.exe
Correctif Windows XP - KB884575-->C:\WINDOWS\$NtUninstallKB884575$\spuninst\spuninst.exe
Correctif Windows XP - KB885250-->C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Correctif Windows XP - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Correctif Windows XP - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Correctif Windows XP - KB887742-->C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe
Correctif Windows XP - KB888113-->C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
Correctif Windows XP - KB888239-->C:\WINDOWS\$NtUninstallKB888239$\spuninst\spuninst.exe
Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
Correctif Windows XP - KB893056-->C:\WINDOWS\$NtUninstallKB893056$\spuninst\spuninst.exe
Correctif Windows XP - KB893086-->"C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe"
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
DivX-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
DVgate Plus-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{685BCC47-B8EC-45EC-BBCE-77DF2451502C}\setup.exe" -l0x40c 
fedkit_screensaver-->C:\WINDOWS\fedkit_screensaver.scr /u
FindyKill-->C:\FindyKill\Uninstal.exe
free-downloads.net Toolbar-->C:\PROGRA~1\FREE-D~1.NET\UNWISE.EXE C:\PROGRA~1\FREE-D~1.NET\INSTALL.LOG
GdiplusUpgrade-->MsiExec.exe /I{5421155F-B033-49DB-9B33-8F80F233D4D5}
GearDrvs-->MsiExec.exe /I{206FD69B-F9FE-4164-81BD-D52552BC9C23}
GearDrvs-->MsiExec.exe /I{CB84F0F2-927B-458D-9DC5-87832E3DC653}
Google Toolbar for Firefox-->MsiExec.exe /X{2CCBABCB-6427-4A55-B091-49864623C43F}
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
HDAUDIO SoftV92 Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0600\HXFSETUP.EXE -U -ISnyHDAk.inf
High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
HijackThis 2.0.2-->"C:\Program Files	rend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
HP Driver Diagnostics-->MsiExec.exe /I{16BE87BC-69F5-4D36-8CF0-E1CB3ACD5ED3}
HP Extended Capabilities 4.7-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Image Zone 4.7-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP PSC & OfficeJet 4.7-->"C:\Program Files\HP\Digital Imaging\{342C7C88-D335-4bc2-8CF1-281857629CE2}\setup\hpzscr01.exe" -datfile hposcr05.dat
HP Software Update-->MsiExec.exe /X{15EE79F4-4ED1-4267-9B0F-351009325D7D}
Image Converter 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{29999594-B540-4C88-A8D3-C99CA43809FC}\setup.exe" /UNINSTALL
Impossible Team backyard Screen Saver-->C:\WINDOWS\system32\Impossible Team backyard.scr /u
InterVideo WinDVD for VAIO-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
InterVideo WinDVDX-->"C:\Program Files\InstallShield Installation Information\{1A91D1FA-B9B3-4556-9878-5C61059A19B2}\setup.exe" REMOVEALL
iPod for Windows 2005-09-23-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{D4936AAF-FFD0-44A1-A7EA-A2DB41CEB5BC} /l1036 
iTunes-->MsiExec.exe /I{80FD852F-5AAC-4129-B931-06AAFFA43138}
J2SE Runtime Environment 5.0 Update 10-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
J2SE Runtime Environment 5.0 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030}
J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
Kit d'installation-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9C650676-CDDB-42C0-8D11-3EEB7F791F99}\setup.exe" -l0x40c  -eth
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Logiciel Intel(R) PROSet/Wireless-->C:\WINDOWS\Installer\iProInst.exe
mCore-->MsiExec.exe /I{E81667C6-2856-46D6-ABEA-6A2F42166779}
mDriver-->MsiExec.exe /I{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}
Memory Stick Formatter-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{27337663-2619-11D4-99DC-0000F49094C7}\Setup.exe" -l0x40c /UNINSTALL
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft .NET Framework 3.0 French Language Pack-->MsiExec.exe /X{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}
Microsoft .NET Framework 3.0-->C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Small Business Edition 2003-->MsiExec.exe /I{91CA040C-6000-11D3-8CFE-0150048383C9}
Microsoft SQL Server Desktop Engine (VAIO_VEDB)-->MsiExec.exe /X{E09B48B5-E141-427A-AB0C-D3605127224A}
Microsoft User-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB883939)-->"C:\WINDOWS\$NtUninstallKB883939$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB893066)-->"C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896422)-->"C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896424)-->"C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911567)-->"C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB912812)-->"C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB912919)-->"C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913446)-->"C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB916281)-->"C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917159)-->"C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917344)-->"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917422)-->"C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917953)-->"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918899)-->"C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB919007)-->"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920214)-->"C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921398)-->"C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921503)-->"C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921883)-->"C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922616)-->"C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922760)-->"C:\WINDOWS\$NtUninstallKB922760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923414)-->"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923694)-->"C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924191)-->"C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924496)-->"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925454)-->"C:\WINDOWS\$NtUninstallKB925454$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925486)-->"C:\WINDOWS\$NtUninstallKB925486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB936021)-->"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938829)-->"C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941568)-->"C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941644)-->"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941693)-->"C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948881)-->"C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB904942)-->"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB925720)-->"C:\WINDOWS\$NtUninstallKB925720$\spuninst\spuninst.exe"

guillaume1976 · Answer

Je ne sais pas si j'ai bien fait mais quand SDfix m'a demandé de redémarrer mon PC j'ai redémmaré en mode sans echec.............

Sinon, voila le rapport de SDfix :


[b]SDFix: Version 1.240 [/b]
Run by Guillaume 

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]: 

Trojan Files Found:

C:\GLNX.EXE - Deleted
C:\142013~1 - Deleted
C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\a.exe - Deleted
C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\b.exe - Deleted
C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\c.exe - Deleted
C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp	mp3.tmp - Deleted
C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp	mp6.tmp - Deleted
C:\WINDOWS\system32\comsa32.sys - Deleted
C:\WINDOWS\system32\msxml71.dll - Deleted





Removing Temp Files

[b]ADS Check [/b]:
 


                                 [b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-12 19:12:01
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

disk error: C:\WINDOWS\system32\config\system, 1381
scanning hidden registry entries ...

disk error: C:\WINDOWS\system32\config\software, 1381
disk error: C:\Documents and Settings\Guillaume & Emilie
tuser.dat, 1381
scanning hidden files ...

disk error: C:\WINDOWS\

please note that you need administrator rights to perform deep scan

[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Yahoo!\Messenger\YPager.exe"="C:\Program Files\Yahoo!\Messenger\YPager.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Sony\VAIO Media 4.0\Vc.exe"="C:\Program Files\Sony\VAIO Media 4.0\Vc.exe:*:Enabled:[VAIO Media] VAIO Media"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[b]Remaining Files [/b]:


File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Sun 12 Jul 2009    69,206,016 A.SH. --- "C:\NRTPage.sys"
Sat 11 Jul 2009        50,688 ..SHR --- "C:\Documents and Settings\Guillaume & Emilie\Guillaume & Emilie.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\Fonts\logcde.dll"
Thu  5 Aug 2004        34,304 ...H. --- "C:\WINDOWS\Fonts\services.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\Fonts\windef.dll"
Thu  5 Aug 2004        65,024 A.SH. --- "C:\WINDOWS\system32\asycfilt.dll"
Fri 25 Aug 2006       617,472 A.SH. --- "C:\WINDOWS\system32\comctl32.dll"
Thu  5 Aug 2004     1,028,096 A.SH. --- "C:\WINDOWS\system32\mfc42.dll"
Thu  5 Aug 2004        57,344 A.SH. --- "C:\WINDOWS\system32\mfc42loc.dll"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msceqyw.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mscjkocv.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mscjoyz.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mscoboa.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mscom.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mscpbqxd.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mscslzgd.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msctniv.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mscvvp.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdap.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdarr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msddcf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msddkde.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msden.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdgbgkh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdhwqp.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdiz.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdjzfth.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdkyuxa.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdltzo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdqqo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdrgop.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdsfn.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdthdb.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdtpzb.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdugs.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdvswx.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdxya.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdzk.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdzmlgv.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msdzs.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mseebh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msegizqj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msegosyj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msehiulp.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msehknw.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mseibfra.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msejylg.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msemgn.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msenj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msenwmv.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msepom.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mserbr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msesm.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msesuc.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msetmrjw.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msetutm.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msevty.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msevumdu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msezcgr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msezfuu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfaid.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfap.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfcpuo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfgp.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfhxzq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfkfioh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfktaro.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfkw.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfld.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msflef.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msflme.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msflq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfltbzm.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msflv.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfmj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfninh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfpacdp.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msftgc.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfuukxj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfxasm.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfxnwx.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msfzu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgawhr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgchxbl.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgdhtz.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msggvu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgjfn.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgjw.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgmllx.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgpa.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgpg.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgpnod.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgrpeke.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgsxjtr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgtl.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgtujyx.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgtun.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgwml.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msgxwd.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mshfrxxg.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mshgoqhy.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mshhe.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mshhtqy.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mshhzr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mshih.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mshjxw.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mshrbbpj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mshuy.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mshxm.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mshxxhg.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mshzd.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msibirjj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msidyip.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msikfg.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msikhy.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msilal.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msipcmq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msipthtq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msiuf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msivzxq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msiwf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msizsmqd.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjebdv.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjegf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjfzsoj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjgbw.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjgpua.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjgtop.exe"
Wed 20 Sep 1995        35,088 A.SH. --- "C:\WINDOWS\system32\msjint32.dll"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjirh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjis.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjknm.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjmnmtz.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjqo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjrtqaa.exe"
Wed 20 Sep 1995       977,680 A.SH. --- "C:\WINDOWS\system32\msjt3032.dll"
Wed 20 Sep 1995        23,824 A.SH. --- "C:\WINDOWS\system32\msjter32.dll"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjuwpxh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjvglyo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjvog.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjwct.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjwgavi.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjwjf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msjzlqyn.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mskbo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mskcefl.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mskdh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mskeqq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msklxt.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mskooxez.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mskoqm.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mskpldam.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mskqfhop.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mskqzuy.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mskrdot.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msktgxql.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mskvwu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msletyh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mslfeo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mslfo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msljaoml.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mslovzrg.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mslqrggg.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mslrlh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mslusxkx.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mslwq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mslxckna.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mslxnh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mslxz.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mslyrn.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmaj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmhyi.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmini.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmjgnnd.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmkqy.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmluoty.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmnbu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmpqg.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmqml.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmrgrsw.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmrsaig.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmuerxw.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmvg.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmyke.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msmzkaz.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnave.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnhbkmc.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnjibnt.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnkvop.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnme.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnnu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnoc.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnoktur.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnop.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnrr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnswjds.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnvo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnxim.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnyydow.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnzdfv.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msnzrf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msoba.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msocfqjo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msodnq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msofmybl.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msohtduo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msomulq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msopu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msoqr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msott.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msoww.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msoydsa.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mspacifa.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mspbtc.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mspbvd.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mspdd.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mspecb.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mspfvkh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mspkxibw.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msplxp.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mspneq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msppvij.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mspsnu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msptoyc.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msputg.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mspvx.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mspyfg.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mspytmu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mspyu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqakfyn.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqbir.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqbt.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqdnbcr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqdo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqezy.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqfy.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqghmz.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqhz.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqkc.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqksmpc.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqmbn.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqmr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqndmyn.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqnqvo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqplgtr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqplvdf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqpycyx.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqrwbz.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqspjum.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqurql.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msqvntjy.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msraiebi.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msraiwqd.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msrazoft.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msrbh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msrdr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msrehf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msritywo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msrixr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msrjou.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msrjrxn.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msrlx.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msrqoyaa.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msrsnle.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msrxp.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msrypefj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mssaizx.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mssavyau.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mssbbfv.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mssfbzoq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msshjqf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mssibau.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mssjsp.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mssjzpr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msslhwm.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mssllbt.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mssnfj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mssnwqlj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mssskvw.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msswop.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstbjan.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstdaqxr.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstee.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstgf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstglyh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstij.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstkds.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstkm.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstlkkbw.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstlred.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstqa.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstqd.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstrpqif.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msttrt.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstxhl.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstzxfcl.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mstzyyd.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msuakp.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msufafu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msuip.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msujk.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msujufjo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msukepbk.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msulbbh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msulxp.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msumk.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msupai.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msuqn.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msuqtgz.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msusvb.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msuthqa.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msuuqfyq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msuxobzt.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msuzu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msuzuqye.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msvajdau.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msvarmf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msvcj.exe"
Thu  5 Aug 2004       413,696 A.SH. --- "C:\WINDOWS\system32\msvcp60.dll"
Thu  5 Aug 2004       343,040 A.SH. --- "C:\WINDOWS\system32\msvcrt.dll"
Thu  5 Aug 2004       253,952 A.SH. --- "C:\WINDOWS\system32\msvcrt20.dll"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msveday.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msvgd.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msvhhpme.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msvjfhq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msvntyu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msvoq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msvphak.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msvqubo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msvsuxo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msvtcu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msvwuu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswbns.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswjrct.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswjttg.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswmnu.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswmwwf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswnja.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswqaf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswqcae.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswrz.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswtc.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswvrq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswwmn.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswwqurc.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswxk.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswxtef.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswydezt.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswyk.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswywhbm.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mswzwgvw.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msxavhxz.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msxbg.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msxbyzwk.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msxevhsd.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msxjh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msxjl.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msxjxxui.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msxodib.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msxov.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msxvlez.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msxwkfjj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msxxcj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msxznjgp.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msxzo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msybcsb.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msychonq.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msyckxh.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msyfjjvz.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msygtrmn.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msyhesp.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msyihp.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msyjalj.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msylfofy.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msynxz.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msyohi.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msypiv.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msypo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msyrasf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msytp.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msyub.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msyvcht.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msyvw.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msyyfi.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszat.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszatps.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszedezo.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszfkt.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszjlb.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszjqb.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszkxgee.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszlsd.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszmf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\msznepun.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszpebk.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszqfl.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszrgf.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszsko.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszstl.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszzve.exe"
Thu  5 Aug 2004       128,000 ...H. --- "C:\WINDOWS\system32\mszzyaw.exe"
Tue  4 Dec 2007       550,912 A.SH. --- "C:\WINDOWS\system32\oleaut32.dll"
Thu  5 Aug 2004        83,456 A.SH. --- "C:\WINDOWS\system32\olepro32.dll"
Thu  5 Aug 2004        30,749 A.SH. --- "C:\WINDOWS\system32\vbajet32.dll"
Sun 25 Apr 1999       368,912 A.SH. --- "C:\WINDOWS\system32\Vbar332.dll"
Sat 16 Sep 2006         4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Mon  4 Jun 2007             0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv06.tmp"
Sun 21 Nov 2004        30,720 A..H. --- "C:\Documents and Settings\Guillaume & Emilie\Mes documents\Dossiers Guillaume\Caisse d'Epargne\~WRL3457.tmp"

[b]Finished![/b]

Merci

guillaume1976 · Answer

Mon problème demeure.........................je ne sais plus quoi faire

HELP !!!!

chimay8 · Answer

re,

normal que le problème demeure,on n'a pas fini!!

 Télécharge SmitFraudfix de S!Ri, balltrap34 et moe31 
 http://siri.urz.free.fr/Fix/SmitfraudFix.zip  -
en cas de problème avec le premier lien, 
 mirroir: http://72.232.135.12/siri/SmitfraudFix.php 
 
 voila à quoi cela ressemble : http://siri.urz.free.fr/Fix/SmitfraudFix.php
 une aide en vidéo (merci à balltrap34)
 http://pagesperso-orange.fr/rginformatique/section%20virus/smitfraudfix.htm
 
 Désactive les logiciels de protections(antivirus et antispyware)
-- Fais un clic droit puis Extraire tout sur le fichier SmitfraudFix.zip, cela va tout décompresser dans un nouveau dossier SmitFraudfix
-- Ouvre le dossier SmitfraudFix double-clique sur SmitfraudFix.cmd (le .cmd peut ne pas être présent)
-- Choisis l'option 1 et appuie sur Entrée
-- Réponds o (Oui) aux deux questions suivantes si elles sont posées
-- Un rapport sera généré; sauvegarde le dans un dossier.
-- Copie/colle le contenu du rapport ici

guillaume1976 · Answer

Voilà le rapport de SmitfraudFix : 
SmitFraudFix v2.423

Rapport fait à 18:40:32,79, 13/07/2009
Executé à partir de 
C:\Documents and Settings\Guillaume & Emilie\Bureau\Smitfraudfix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\WINZIP\winzip32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\fonts\services.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles




»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp




»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\GUILLA~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{D76AB2A1-00F3-42BD-F434-00BBC39C8953}"="rtasgvfu76ew8ndkfno94"

[HKEY_CLASSES_ROOT\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
@="C:\WINDOWS\system32\gsf83iujid.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
@="C:\WINDOWS\system32\gsf83iujid.dll"



»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\WINDOWS\system32\userinit.exe,"

»»»»»»»»»»»»»»»»»»»»»»»» RK

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""




»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Realtek RTL8169/8110 Family Gigabit Ethernet NIC - Miniport d'ordonnancement de paquets
DNS Server Search Order: 89.2.0.1
DNS Server Search Order: 89.2.0.2

HKLM\SYSTEM\CCS\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS1\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS2\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

chimay8 · Answer

parfait,

Redémarre l'ordinateur en mode sans échec . 
Comment aller en Mode sans échec 
1) Redémarre ton ordi 
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" 
3) Tu verras un écran avec options de démarrage apparaître 
4) Choisis la première option : Sans Échec, et valide avec "Entrée" 
5) Choisis ton compte habituel, et non Administrateur (si besoin ... ) 
( ps : n'oublies pas , en mode sans échec , pas de connexion ! Donc copie ou imprime bien les infos ci-dessous ...) 

*Double click sur SmitfraudFix.exe 

* Sélectionnes 2 et presses "Entrée" dans le menu pour supprimer les fichiers responsables de l'infection. 

* A la question: Voulez-vous nettoyer le registre ? répondre O (oui) et presse Entrée afin de débloquer le fond d'écran et supprimer les clés de registre de l'infection. 

( Le correctif déterminera si le fichier wininet.dll est infecté.) 

* A la question: "Corriger le fichier infecté ?" répondre O (oui) et presser Entrée 
pour remplacer le fichier corrompu. 

* Un redémarrage sera peut être nécessaire pour terminer la procédure de nettoyage ( sinon fais le manuellement ) 

Le rapport se trouve à la racine de C\: 
(dans le fichier "rapport.txt") 

Poste ce dernier rapport 

ensuite

Télécharge Malwarebytes' Anti-Malware et enregistre le sur ton Bureau. 
https://www.malwarebytes.com/ 

(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharges le ici : https://www.malekal.com/tutorial-aboutbuster/ )

A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci. 
Double-clique sur l'icône "Download_mbam-setup.exe" sur ton bureau pour démarrer le programme d'installation.
 
Pendant l'installation, suis les indications n'apporte aucune modification aux réglages par défaut et en fin d'installation, vérifie que les options "Update Malwarebytes' Anti-Malware" et "Launch Malwarebytes' Anti-Malware" soit cochées.
 
MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue.
La fenêtre principale de MBAM s'affiche : 
Dans l'onglet analyse, vérifie que "Exécuter un examen complet" est coché et clique sur le bouton Rechercher pour démarrer l'analyse. 
MBAM analyse ton ordinateur.
 
L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.
 
A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre. 
Si des malwares sont détectés, leur liste s'affiche. 
***EN CLIQUANT SUR SUPPRESSION(?)FAIT LE*** , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine. 

MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Ferme le Bloc-notes. (Le rapport peut être retrouvé sous l'onglet Rapports/logs) 
Ferme MBAM en cliquant sur Quitter.
 
Poste le rapport dans ta réponse

guillaume1976 · Answer

je ne trouve pas smitfraudfix.exe ............ je n'ai que smitfraudfix.cmd

chimay8 · Answer

non,c'est bon!
vas-y
;)

guillaume1976 · Answer

Voilà le rapport de smitfraudfix :

SmitFraudFix v2.423

Rapport fait à 20:14:03,59, 13/07/2009
Executé à partir de 
C:\Documents and Settings\Guillaume & Emilie\Bureau\Smitfraudfix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{D76AB2A1-00F3-42BD-F434-00BBC39C8953}"="rtasgvfu76ew8ndkfno94"

[HKEY_CLASSES_ROOT\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
@="C:\WINDOWS\system32\gsf83iujid.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
@="C:\WINDOWS\system32\gsf83iujid.dll"


»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» RK


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS1\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS2\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» RK.2



»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
 
Nettoyage terminé. 
 
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{D76AB2A1-00F3-42BD-F434-00BBC39C8953}"="rtasgvfu76ew8ndkfno94"

[HKEY_CLASSES_ROOT\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
@="C:\WINDOWS\system32\gsf83iujid.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
@="C:\WINDOWS\system32\gsf83iujid.dll"



»»»»»»»»»»»»»»»»»»»»»»»» Fin

guillaume1976 · Answer

Je continue avec Malwarebytes....

Merci beaucoup pour ta disponibilité....

chimay8 · Answer

Merci beaucoup pour ta disponibilité....

de rien!!ça fais plaisir
merci à toi!
:))

guillaume1976 · Answer

Voilà le rapport de Malwarebytes :

Malwarebytes' Anti-Malware 1.38
Version de la base de données: 2420
Windows 5.1.2600 Service Pack 2

13/07/2009 21:25:13
mbam-log-2009-07-13 (21-25-12).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 191750
Temps écoulé: 38 minute(s), 2 second(s)

Processus mémoire infecté(s): 2
Module(s) mémoire infecté(s): 2
Clé(s) du Registre infectée(s): 29
Valeur(s) du Registre infectée(s): 20
Elément(s) de données du Registre infecté(s): 6
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 568

Processus mémoire infecté(s):
c:\WINDOWS\ld12.exe (Worm.Koobface) -> Unloaded process successfully.
C:\WINDOWS\Fonts\services.exe (Worm.Archive) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\gsf83iujid.dll (Trojan.Ertfor) -> Delete on reboot.
C:\WINDOWS\system32\MSWINSCK.OCX (Worm.Nyxem) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Zlob.H) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Ertfor) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Ertfor) -> Delete on reboot.
HKEY_CLASSES_ROOT\Typelib\{40196867-19f8-7157-c097-ecaff653c9ad} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sfx (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sfx (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sfx (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sfxdrv (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sfxdrv (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sfxdrv (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\6to4 (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\6to4 (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\6to4 (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{248dd896-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{248dd897-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pcmstub (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\pcmstub (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pcmstub (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sopidkc (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sopidkc (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sopidkc (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Cognac (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009 (Rogue.SystemSecurity) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Zlob.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\18914064 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysldtray (Worm.Koobface) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\exec (Spyware.Passwords) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\hsf7husjnfg98gi498aejhiugjkdg4 (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\idstrf (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\BuildW (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\FirstInstallFlag (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\guid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\i (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\mms (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\mso (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\udso (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\uid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Ulrn (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Update (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\UpdateNew (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\run (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\sfx (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\powermgr (Trojan.Agent) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Run (Spyware.Passwords) -> Data: c:\windows\system32\mseyozhm.exe -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Load (Spyware.Passwords) -> Data: c:\windows\system32\msgajbs.exe -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.bat\(default) (Hijacked.BatFile) -> Bad: (csfile) Good: (batfile) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.com\(default) (Hijacked.ComFile) -> Bad: (csfile) Good: (comfile) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.exe\(default) (Hijacked.exeFile) -> Bad: (csfile) Good: (exefile) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Documents and Settings\All Users\Application Data\18914064 (Rogue.Multiple.H) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\WINDOWS\system32\gsf83iujid.dll (Trojan.Zlob.H) -> Delete on reboot.
c:\documents and settings\all users\application data\18914064\18914064 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\18914064\18914064.exe (Rogue.Multiple.H) -> Quarantined and deleted successfully.
c:\WINDOWS\ld12.exe (Worm.Koobface) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\msocu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\derrk.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\localservice\local settings\temporary internet files\Content.IE5\CP2RSTIJ\w[1].bin (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\localservice\local settings\temporary internet files\Content.IE5\RJ2FIKC7\w[1].bin (Trojan.Agent) -> Quarantined and deleted successfully.
c:\program files\sFX\SfX.DlL (Trojan.Agent) -> Quarantined and deleted successfully.
c:\program files\sFX\sfX.sYs (Rootkit.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\msa.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Fonts\cooecp.tlb (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\Fonts\logcde.dll (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\Fonts\windef.dll (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\Fonts\windef.Log (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\Fonts\winpaged.ocx (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\6to4v32.dll (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscelern.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msceqyw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscjkocv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscjoyz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscjqk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscoboa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscom.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscpbqxd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscqa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscslzgd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscsms.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msctdcj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msctniv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscvvp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscxuq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdap.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdarr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msddcf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msddkde.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msden.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdftp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdgbgkh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdhwqp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdirtg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdiz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdja.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdjzfth.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdkr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdkyuxa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdltzo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdqqo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdrgop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdsfn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdthdb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdtpzb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdugs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdvswx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdxb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdxya.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdyu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdzk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdzmlgv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdzs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mseaszco.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mseebh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mseezx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msegizqj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msegosyj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msehiulp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msehwuv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mseibfra.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mseie.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msejylg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msekmdao.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msekxgek.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msemgn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msenj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msentd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msenwmv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msepom.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mserbr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mserxso.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msesef.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msesm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msesuc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msetmrjw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msetutm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msevty.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msevumdu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mseyozhm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msezcgr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msezfuu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfabke.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfaid.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfap.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfcpuo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfgp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfhxzq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfkfioh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfkozfm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfktaro.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfkw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfld.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msflef.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msflme.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msflq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfltbzm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msflv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfmj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfninh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfnl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfofg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfogrq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfpacdp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfstyra.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msftd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msftgc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfuukxj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfxasm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfxnwx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfzu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgajbs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgchxbl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgdhtz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msggvu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msggwsb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msghvwp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgjfn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgjw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgmllx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgmnly.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgmnwg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgoxwwj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgpg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgpnod.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgqqur.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgqr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgrpeke.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgsfpns.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgsxjtr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgtl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgtujyx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgtun.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgvd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgwml.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgxvlwm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgxwd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgzm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshaxold.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshbot.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshdct.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshfl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshfrxxg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshgoqhy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshhe.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshhtqy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshhxotu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshhzr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshih.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshjxw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshkk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshobbe.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshotuu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshqjm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshrbbpj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshsrw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshuy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshxm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshxxhg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshzd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msibirjj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msidyip.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msikfg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msikhy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msikn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msilal.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msily.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msipcmq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msipthtq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msiuf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msivzxq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msiwf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msiwjcc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msizsmqd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjcn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjcttuv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjebdv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjegf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjfduh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjfzsoj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjgbw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjgpua.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjgtop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjhu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjhyxp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjirh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjis.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjknm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjmnmtz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjqo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjrkp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjrtqaa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjsuk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjuwpxh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjvglyo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjvog.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjwct.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjwgavi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjwjf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjyurf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjzlqyn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskagk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskbo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskcefl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskdh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskeqq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskglug.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msklxt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskooxez.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskoqm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskpldam.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskqfhop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskqzuy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskrdot.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskryz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msktgxql.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskvv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskvwu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskxr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskyk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msletyh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslfeo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslfo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msljaoml.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msljxodr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslkz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslovzrg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslpdd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslqcg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslqrggg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslrlh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msltzqn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslusxkx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslwq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslwtl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslxa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslxckna.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslxnh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslxz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslyrn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmaj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmfkged.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmhyi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmini.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmjgnnd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmkqy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmluoty.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmnbu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmpqg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmqml.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmrgrsw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmrsaig.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmuerxw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmvg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmyke.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmyrpwl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmzkaz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnave.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msncache.dll (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msneq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnhbkmc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnjibnt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnkvop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnme.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnnu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnoc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnoktur.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnousz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnrewl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnrr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnswjds.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnvo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnxim.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnyydow.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnzdfv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnzrf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msoba.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msobsh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msocfqjo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msodnq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msofmybl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msohtduo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msojvtc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msomulq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msopu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msopyan.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msoqr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msorca.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msott.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msouyull.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msoww.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msoydsa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspacifa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspbtc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspbvd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspdd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspecb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspfvkh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspkxibw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msplr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msplxp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspneq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msppvij.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspsnu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msptoyc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspty.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msputg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspyfg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspytmu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspyu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqakfyn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqbir.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqbs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqbt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqdgp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqdnbcr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqdo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqezy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqfy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqghmz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqhz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqixz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqjbyi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqjflng.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqkc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqksmpc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqmbn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqmr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqndmyn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqnqvo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqoralv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqplgtr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqplvdf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqpycyx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqrwbz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqspjum.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqsq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqsqxa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msquih.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqurql.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqvntjy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msraiebi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msraiwqd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrazoft.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrbh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrcel.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrdr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrehf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrgi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrgk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msritywo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrixr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrjou.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrjrxn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrlx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrnut.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msroefmu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrqoyaa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrrnv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrsddgs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrsnle.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrtebd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrustcz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrwv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrxedv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrxp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrypefj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssaizx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssavyau.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssbbfv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssdj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssfbzoq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssfg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msshj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msshjqf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssibau.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssjsp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssjyl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssjzpr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msslhwm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssllbt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssnfj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssnwqlj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msspsqwm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssskvw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msswop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstbjan.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstdaqxr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstee.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msteuq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstfa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstgf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstglyh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstij.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstiwndd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstkds.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstkm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstlkkbw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstlred.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstmasq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstpy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstqa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstqd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstrpqif.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msttrt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstxhl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstzxfcl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstzyyd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuakp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msufafu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msugsop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuhnf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuip.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msujk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msujufjo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msukepbk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msulbbh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msulxp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msumk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msupai.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuqn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuqtgz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msurkw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msurovi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msusewru.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msusvb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuthqa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuuqfyq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuwios.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuxobzt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuzu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuzuqye.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvajdau.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvarmf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvay.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvcj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msveday.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvgd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvhhpme.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvjfhq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvjgg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvntyu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvoq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvor.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvphak.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvqubo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvsuxo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvsvb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvtcu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvwuu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswbns.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswimsnm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\MSWINSCK.OCX (Worm.Nyxem) -> Delete on reboot.
c:\WINDOWS\system32\mswjrct.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswjttg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswkehhg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswmnu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswmwwf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswnja.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswqaf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswqcae.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswrz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswtc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswvrq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswwmn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswwqurc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswxk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswxn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswxtef.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswydezt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswyk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswywhbm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswzwgvw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxavhxz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxbg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxbyzwk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxfcxx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxgpe.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxii.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxjh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxjl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxjxxui.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxkb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxkvp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxodib.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxov.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxvlez.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxvq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxwh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxwkfjj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxxcj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxznjgp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxzo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msybcsb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msycd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msychonq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyckxh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyfjjvz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msygb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msygtrmn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyhesp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyihp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyjalj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msylbzom.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msylfofy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyltapu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msynxz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyoced.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyohi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msypiv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msypo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyqobl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyrasf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msytfe.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msytp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyub.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyunuh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyvcht.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyvit.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyvw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyvykye.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msywupo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyyfi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszat.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszatps.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszcacg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszedezo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszfkt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszgix.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszjlb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszjqb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszkky.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszkxgee.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszlsd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszmf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msznepun.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszpebk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszqfl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszrgf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszrlj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszsko.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszstl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszvcec.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszweic.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszxb.

guillaume1976 · Answer

J'ai tenté de redémarrer en mode normal

Windows a mis 15 minutes pour s'ouvrir, je n'ai plus de fonds d'écran et je n'ai pas réussi à ouvrir la moinde application...

En revanche, le message "you're in danger..." a disparu et le logiciel system security 4.52 ne s'ouvre plus toutes les 2 minutes....

Voilà les symptomes Docteur.... ;)

chimay8 · Answer

ça!
Fichier(s) infecté(s): 568
j'avais jamais vu...

bon,si il a détruit des fichiers infectés au reboot de la machine,c'est normal que windows est pris du temps pour se lancer!

tu as relancé ton pc pour voir si il prenais toujours autant de temps?

guillaume1976 · Answer

oui, il met toujours autant de temps.... le virus est supprimé?

chimay8 · Answer

le virus est supprimé?

bah...au vue de ce qu'a dégommé MBAM,je pense qu'une bonne partie de tes infections sont parties


tu as le cd de windows?

guillaume1976 · Answer

pas vraiment... non   ;)

pourquoi, il faut réinstaller?

chimay8 · Answer

pourquoi, il faut réinstaller?
non,
mais il existe une commande qui permet de réparer sans trop chipoter
mais si t'as pas le cd...ça va être dur!

guillaume1976 · Answer

si je retrouve le CD, qu'est ce qu'il faut que je fasse?

guillaume1976 · Answer

je n'arrive même pas à ouvrir le menu demarrer... d'ailleurs si je peux t'écrire maintenant c'est parceque je suis en mode sans echec....

chimay8 · Answer

si tu as le cd,

fais ceci
clic sur démarrer=>executer
tape sfc /scannow
valide
si il demande le cd tu le mets simplement dans ton lecteur et tu valides


cela va réparer les fichiers qui ont été détruit par les malwares

guillaume1976 · Answer

j'ai tenté de taper sfc/scannow mais ca ne marche pas.....

étant précisé que je suis toujours en mode sans echec avec prise en charge réseau....

chimay8 · Answer

tu as bien laissé un espace entre sfc et le "/" ?

guillaume1976 · Answer

oui... en cherchant un peu plus sur le net, on me conseille de taper cmd et après de taper sfc/scannow ?

j'ai cherché mon cd windows mais je n'en ai pas.  En réfléchissant, je crois que je n'en ai jamais eu. J'ai acheté mon PC portable à la FNAC et je crois que windows s'installait tout seul lorsque je l'ai démarré la 1ère fois... j'ai un étiquette officielle windows sous le pc avec les numéros de série mais pas de CD...dons je ne sais pas quoi faire?

Il semblerait que je puisse, après avoir appuyé su F8 au démarrage, choisir une option "Dernière bonne configuration connue", qu'en pense tu?

chimay8 · Answer

non,marchera pas

tu peus essayer de restaurer avant les malwares,mais c'est pas joué d'avance car il s'installe souvent dans la restau système aussi!

chimay8 · Answer

tu peux pas avoir un cd de windows à prêter?

guillaume1976 · Answer

j'ai demandé à un pote de m'en ramener un..........

et là tu pense que je n'ai plus de virus?

chimay8 · Answer

tu pense que je n'ai plus de virus?

pas sur,en tout cas MBAM a bien travailler...mais pour savoir il faut que ton pc soit en mode normal
et là,on pourra faire un scan en ligne pour être sur

guillaume1976 · Answer

ca va beaucoup mieux !!!! ;)

je suis en mode normal

j'ai pu installer la mise à jour NORTON et lancer un scan

J'ai mis à jour aussi windows ...

Tout semble fonctionner.......

Tu pense que je dois faire un nouveau scan?

chimay8 · Answer

Tu pense que je dois faire un nouveau scan?

oh oui!
c'est préférable

je te colle la manière de le faire

Pour éffectuer les scans,
**désactive ton antivirus, logiciels de protections et logiciels pouvant bloquer les popups (barres Google, barres Yahoo etc..).**

Ouvre internet explorer --> Outils --> Options internet --> onglet "sécurité" --> Valide "niveau par défaut".
Toujours sur Internet explorer --> Outils --> Options internet --> onglet "avancé" --> valide "Paramètres par défaut".


Scan en ligne avec Kaspersky :
- https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr  en utilisant Internet Explorer et pas Firefox, ça ne marchera pas!.
- Si tu es perdu, tu peux suivre l'aide pour les scans en ligne https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId291566 

AIDE : Configurer le contrôle des ActiveX < http://www.inoculer.com/activex.php3 > 
Tuto ici si problème : http://www.vista-xp.fr/forum/topic109.html , ou là : https://forum.pcastuces.com/sujet.asp?f=25&s=37641 (par Morgane & nico_dodo)
 
- Au moment de choisir la cible à analyser, clique sur le bouton Paramètres d'analyse
- Dans la nouvelle fenêtre, coche "étendu" au milieu puis clique sur OK.
- Choisis le poste de travail dans la cible à analyser
- Copie/colle le rapport du scan ici

NOTE : Si tu reçois le message "La licence de Kaspersky On-line Scanner est périmée", va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner,
 reconnecte-toi sur le site de Kaspersky pour retenter le scan en ligne.

guillaume1976 · Answer

B

System security 4.52

34 réponses

Discussions similaires

Newsletters