High-Tech Santé Médecine Droit-Finances

Réalisation

vidéo numérique

Rechercher : dans
Par :

System security 4.52

Dernière réponse le 28 aoû 2009 à 16:50:38 guillaume1976, le 12 jui 2009 à 11:57:39 
 Signaler ce message aux modérateurs

Bonjour,

Depuis hier, j'ai un message qui s'affiche en fond d'écran : "Warning ! you're in danger ! your computer is infected with spyware ..." Mon PC me propose ensuite de lancer un logiciel que je n'ai pas installé qui s'appelle System Security 4.52 (Il me demande aussi, bien évidemment, de rentrer mon numéro de carte bancaire pour que je puisse bénéficier de l'antivirus)

J'ai l'impression que ce virus m'empêche de lancer tous mes logiciels (il bloque les fichiers en .exe)

je n'avais plus d'antivirus depuis quelques temps, j'ai donc acheté la mise à jour de NORTON 360 hier mais il refuse de lancer le CD pour l'installation. J'ai donc procédé à l'installation en mode sans échec mais NORTON ne trouve pas le problème après le scan (il trouve des choses mais pas le virus principal)...et je ne peux pas faire de liveupdate.....

J'ai donc fait ce qui a été conseillé à dolphin paradise :

http://www.commentcamarche.net/forum/affich 13192900 probleme avec system security 4 52

J'ai installé findykill et voilà le rapport :




############################## | FindyKill V6.005 |

# User : Guillaume & Emilie (Administrateurs) # NOM-4DA1615194C
# Update on 11/07/09 by Chiquitine29 & C_XX
# Start at: 01:36:18 | 12/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html

# Intel(R) Pentium(R) M processor 1.73GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 2
# Internet Explorer 7.0.5730.11
# Windows Firewall Status : Enabled

# C:\ # Disque fixe local # 32,6 Go (5,45 Go free) [VAIO] # NTFS
# D:\ # Disque fixe local # 34,94 Go (3,35 Go free) [VAIO] # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque CD-ROM
# I:\ # Disque CD-ROM

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\fonts\services.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## | Registre Startup |

HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
HKCU_Main: "Search Page"="http://www.google.com"
HKCU_Main: "Start Page"="http://www.google.fr/"
HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
HKLM_logon: "DefaultUserName"="Guillaume & Emilie"
HKLM_logon: "AltDefaultUserName"="Guillaume & Emilie"
HKLM_logon: "LegalNoticeCaption"=""
HKLM_logon: "LegalNoticeText"=""
HKLM_Run: Hcontrol=C:\WINDOWS\ATK0100\Hcontrol.exe
HKLM_Run: Apoint=C:\Program Files\Apoint\Apoint.exe
HKLM_Run: ATIPTA="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
HKLM_Run: Alcmtr=ALCMTR.EXE
HKLM_Run: AzMixerSel=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
HKLM_Run: Mouse Suite 98 Daemon=ICO.EXE
HKLM_Run: SonyPowerCfg=C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
HKLM_Run: ISBMgr.exe=C:\Program Files\Sony\ISB Utility\ISBMgr.exe
HKLM_Run: PDService.exe=C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe
HKLM_Run: Acrobat Assistant 7.0="C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
HKLM_Run: HP Software Update=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
HKLM_Run: SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
HKLM_Run: VAIO Update 3="C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe" /Stationary
HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
HKLM_Run: iTunesHelper="C:\Program Files\iTunes\iTunesHelper.exe"
HKLM_Run: NSLauncher=C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
HKLM_Run: Adobe Photo Downloader="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
HKLM_Run: BluetoothAuthenticationAgent=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
HKLM_Run: Switcher.exe=C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
HKLM_Run: PWRISOVM.EXE=C:\Program Files\PowerISO\PWRISOVM.EXE
HKLM_Run: sysldtray=C:\windows\ld12.exe
HKLM_Run: 18914064=C:\Documents and Settings\All Users\Application Data\18914064\18914064.exe
HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
HKCU_Run: CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe
HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
HKCU_Run: Yahoo! Pager=C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
HKCU_Run: updateMgr=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
HKCU_Run: DAEMON Tools Lite="C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
HKCU_Run: hsf7husjnfg98gi498aejhiugjkdg4=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\vbqh55.exe
HKCU_Run: Cognac=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\b.exe
HKCU_Run: PowerMgr="C:\WINDOWS\system32\Rundll32.exe" "C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\tmp186.tmp",Init

################## | Fichiers # Dossiers infectieux |

Présent ! C:\WINDOWS\system32\gsf83iujid.dll [f7ac077d4769bd54a9a9769a3bf430b8]

################## | C:\Documents and Settings\Guillaume

Présent ! C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\Desinstall.exe

################## | All Drives ... |


################## | Registre # Clés Run infectieuses |

Présent ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "sysldtray"
Présent ! HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Cognac"
Présent ! HKU\S-1-5-21-194801287-367139244-2394972533-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Cognac"
Présent ! HKLM\software\microsoft\security center "AntiVirusDisableNotify" ( 0x1 )
Présent ! HKLM\software\microsoft\security center "FirewallDisableNotify" ( 0x1 )

################## | Registre # Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{ad7d138f-6ae9-11dd-a667-0002c7dc5170}
Shell\AutoRun\command =I:\setup.exe

################## | Etat / Services / Informations |

# Affichage des fichiers cachés : OK
# Mode sans echec : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 )
# (!) SharedAccess -> Start = 4 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# (!) wscsvc -> Start = 4 ( Good = 2 | Bad = 4 )


################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # FindyKill V6.005 ! |

Merci d'avance pour votre aide...

Guillaume

Configuration: Windows XP Internet Explorer 7.0

Posez votre question Répondre

1

chimay8, le 12 jui 2009 à 12:06:56

Salut, y a pas que ça!!

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d'avoir été infectées sans les ouvrir
réouvre Findykill,

choisis cette fois ci l'option 2 (suppression)

il y aura 1 redémarrage, laisse travailler l'outils jusqu'a l'apparition du message "nettoyage effectué"

un rapport va s'ouvrir, poste le dans ta prochaine réponse s-t-p

Note : le rapport FindyKill.txt est sauvegardé à la racine du disque
Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tape explorer.exe et valides
I LIKE SHAKA PONK!!!!

   
Répondre à chimay8

2

guillaume1976, le 12 jui 2009 à 17:57:42

Merci pour votre réponse...

J'ai lancé findykill et "suppression"

Etant précisé que pour lancer findykill je dois être en mode sans echec sinon impossible de le lancer

puis j'ai refait une "recherche" et voilà le rapport :


############################## | FindyKill V6.005 |

# User : Guillaume & Emilie (Administrateurs) # NOM-4DA1615194C
# Update on 11/07/09 by Chiquitine29 & C_XX
# Start at: 17:35:28 | 12/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html

# Intel(R) Pentium(R) M processor 1.73GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 2
# Internet Explorer 7.0.5730.11
# Windows Firewall Status : Enabled

# C:\ # Disque fixe local # 32,6 Go (5,38 Go free) [VAIO] # NTFS
# D:\ # Disque fixe local # 34,94 Go (3,35 Go free) [VAIO] # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque CD-ROM
# I:\ # Disque CD-ROM

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## | Registre Startup |

HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
HKCU_Main: "Search Page"="http://www.google.com"
HKCU_Main: "Start Page"="http://www.google.fr/"
HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
HKLM_logon: "DefaultUserName"="Guillaume & Emilie"
HKLM_logon: "AltDefaultUserName"="Guillaume & Emilie"
HKLM_logon: "LegalNoticeCaption"=""
HKLM_logon: "LegalNoticeText"=""
HKLM_Run: Hcontrol=C:\WINDOWS\ATK0100\Hcontrol.exe
HKLM_Run: Apoint=C:\Program Files\Apoint\Apoint.exe
HKLM_Run: ATIPTA="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
HKLM_Run: Alcmtr=ALCMTR.EXE
HKLM_Run: AzMixerSel=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
HKLM_Run: Mouse Suite 98 Daemon=ICO.EXE
HKLM_Run: SonyPowerCfg=C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
HKLM_Run: ISBMgr.exe=C:\Program Files\Sony\ISB Utility\ISBMgr.exe
HKLM_Run: PDService.exe=C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe
HKLM_Run: Acrobat Assistant 7.0="C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
HKLM_Run: HP Software Update=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
HKLM_Run: SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
HKLM_Run: VAIO Update 3="C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe" /Stationary
HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
HKLM_Run: iTunesHelper="C:\Program Files\iTunes\iTunesHelper.exe"
HKLM_Run: NSLauncher=C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
HKLM_Run: Adobe Photo Downloader="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
HKLM_Run: BluetoothAuthenticationAgent=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
HKLM_Run: Switcher.exe=C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
HKLM_Run: PWRISOVM.EXE=C:\Program Files\PowerISO\PWRISOVM.EXE
HKLM_Run: sysldtray=C:\windows\ld12.exe
HKLM_Run: 18914064=C:\Documents and Settings\All Users\Application Data\18914064\18914064.exe
HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
HKCU_Run: CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe
HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
HKCU_Run: Yahoo! Pager=C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
HKCU_Run: updateMgr=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
HKCU_Run: DAEMON Tools Lite="C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
HKCU_Run: hsf7husjnfg98gi498aejhiugjkdg4=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\vbqh55.exe
HKCU_Run: Cognac=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\b.exe
HKCU_Run: PowerMgr="C:\WINDOWS\system32\Rundll32.exe" "C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\tmp186.tmp",Init

################## | Fichiers # Dossiers infectieux |

Présent ! C:\WINDOWS\system32\gsf83iujid.dll [f7ac077d4769bd54a9a9769a3bf430b8]

################## | C:\Documents and Settings\Guillaume

Présent ! C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\Desinstall.exe

################## | All Drives ... |


################## | Registre # Clés Run infectieuses |

Présent ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "sysldtray"
Présent ! HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Cognac"
Présent ! HKU\S-1-5-21-194801287-367139244-2394972533-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Cognac"
Présent ! HKLM\software\microsoft\security center "AntiVirusDisableNotify" ( 0x1 )
Présent ! HKLM\software\microsoft\security center "FirewallDisableNotify" ( 0x1 )

################## | Registre # Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{ad7d138f-6ae9-11dd-a667-0002c7dc5170}
Shell\AutoRun\command =I:\setup.exe

################## | Etat / Services / Informations |

# Affichage des fichiers cachés : OK
# Mode sans echec : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 )
# (!) SharedAccess -> Start = 4 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# (!) wscsvc -> Start = 4 ( Good = 2 | Bad = 4 )


################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # FindyKill V6.005 ! |

   
Répondre à guillaume1976

3

chimay8, le 12 jui 2009 à 18:02:38

Bon,

marche pas

Télécharge random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.
Clique "Continue" à l'écran Disclaimer.

Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT va le télécharger (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.
Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

NB : Les rapports sont sauvegardés dans le dossier C:\rsit

ensuite

Télécharge SDfix (créé par AndyManchesta) et sauvegarde le sur ton Bureau. Tu peux suivre le tutorial SDFix de Malekal pour t'aider :

Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec
Choisis ton compte.

Déroule la liste des instructions ci-dessous :
Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
Appuie sur Y pour commencer le nettoyage.

Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
Appuie sur une touche pour redémarrer le PC.
Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.

Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !

Si SDFix ne se lance pas
Clique sur Démarrer > Exécuter
Copie/colle ceci :
%systemroot%\system32\cmd.exe /K %systemdrive%\SDFix\apps\FixPath.exe

Clique sur Ok.
Redémarre et essaie de relance SDFix. I LIKE SHAKA PONK!!!!

   
Répondre à chimay8

4

guillaume1976, le 12 jui 2009 à 18:12:29

voila le contenu de log - bloc-notes :

Logfile of random's system information tool 1.06 (written by random/random)
Run by Guillaume & Emilie at 2009-07-12 18:08:53
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 6 GB (16%) free of 33 GB
Total RAM: 1023 MB (75% free)


======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\HubTask 0 {0E7C166E-2D2F-4269-9034-DE1898BF2B1A} 0~0.job
C:\WINDOWS\tasks\{5B57CF47-0BFA-43c6-ACF9-3B3653DCADBA}.job
C:\WINDOWS\tasks\{783AF354-B514-42d6-970E-3E8BF0A5279C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}]
C:\WINDOWS\system32\gsf83iujid.dll - C:\WINDOWS\system32\gsf83iujid.dll [2009-07-11 15000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{ecdee021-0d17-467f-a1ff-c7a115230949} - free-downloads.net Toolbar - C:\Program Files\free-downloads.net\tbfre0.dll [2009-06-01 2094616]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton 360\Engine\3.0.0.134\coIEPlg.dll [2009-07-12 372592]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-13 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Hcontrol"=C:\WINDOWS\ATK0100\Hcontrol.exe [2004-07-19 61440]
"Apoint"=C:\Program Files\Apoint\Apoint.exe [2003-11-07 114688]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-06-28 344064]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"AzMixerSel"=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2005-02-14 53248]
"Mouse Suite 98 Daemon"=C:\WINDOWS\system32\ICO.EXE [2002-03-14 45056]
"SonyPowerCfg"=C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2005-05-15 184320]
"ISBMgr.exe"=C:\Program Files\Sony\ISB Utility\ISBMgr.exe [2004-02-20 32768]
"PDService.exe"=C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe [2004-07-06 40960]
"Acrobat Assistant 7.0"=C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [2005-03-03 483328]
""= []
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-15 136600]
"VAIO Update 3"=C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe [2007-01-25 546936]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-02-01 385024]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-02-19 267048]
"NSLauncher"=C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe [2007-08-02 3096576]
"Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe [2005-06-23 57344]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"Switcher.exe"=C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe [2006-02-14 176128]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2008-11-02 167936]
"sysldtray"=C:\windows\ld12.exe [2009-07-12 17921]
"18914064"=C:\Documents and Settings\All Users\Application Data\18914064\18914064 [2009-07-12 56]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"exec"=C:\WINDOWS\system32\mskcefl.exe [2004-08-05 128000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-07-15 68856]
"Yahoo! Pager"=C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet []
"updateMgr"=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [2006-03-30 313472]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
""=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\vbqh55.exe [2009-07-11 15001]
"hsf7husjnfg98gi498aejhiugjkdg4"=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\vbqh55.exe [2009-07-11 15001]
"Cognac"=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\b.exe [2009-07-11 153088]
"PowerMgr"=C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\tmp186.tmp [2009-07-11 24876]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
Démarrage rapide du logiciel HP Image Zone.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

C:\Documents and Settings\Guillaume & Emilie\Menu Démarrer\Programmes\Démarrage
Outil de détection de support PMB.lnk - C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-06-28 46080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt]
crypts.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\VESWinlogon]
C:\WINDOWS\system32\VESWinlogon.dll [2006-09-23 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2006-06-19 702768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
rtasgvfu76ew8ndkfno94 - {D76AB2A1-00F3-42BD-F434-00BBC39C8953} - C:\WINDOWS\system32\gsf83iujid.dll [2009-07-11 15000]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SymEFA.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0
"NoViewOnDrive"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Yahoo!\Messenger\YPager.exe"="C:\Program Files\Yahoo!\Messenger\YPager.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Sony\VAIO Media 4.0\Vc.exe"="C:\Program Files\Sony\VAIO Media 4.0\Vc.exe:*:Enabled:[VAIO Media] VAIO Media"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ad7d138f-6ae9-11dd-a667-0002c7dc5170}]
shell\AutoRun\command - I:\setup.exe


======File associations======

.exe - open - C:\WINDOWS\system32\mshjxw.exe "%1" %*
.bat - open - C:\WINDOWS\system32\mshjxw.exe "%1" %*
.bat - edit -
.com - open - C:\WINDOWS\system32\mshjxw.exe "%1" %*

======List of files/folders created in the last 1 months======

2009-07-12 18:08:54 ----D---- C:\Program Files\trend micro
2009-07-12 18:08:53 ----D---- C:\rsit
2009-07-12 17:35:26 ----A---- C:\FindyKill.txt
2009-07-12 12:17:54 ----HDC---- C:\Documents and Settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}
2009-07-12 01:34:49 ----D---- C:\FindyKill
2009-07-12 01:04:56 ----RD---- C:\Program Files\Norton Support
2009-07-12 00:54:21 ----D---- C:\Program Files\Symantec
2009-07-12 00:54:21 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2009-07-12 00:53:31 ----D---- C:\Program Files\Norton 360
2009-07-12 00:39:09 ----D---- C:\Documents and Settings\All Users\Application Data\PCSettings
2009-07-12 00:38:59 ----D---- C:\Documents and Settings\All Users\Application Data\Norton
2009-07-12 00:37:20 ----D---- C:\Program Files\NortonInstaller
2009-07-12 00:37:20 ----D---- C:\Documents and Settings\All Users\Application Data\NortonInstaller
2009-07-12 00:33:04 ----A---- C:\WINDOWS\ntbtlog.txt
2009-07-11 12:16:08 ----D---- C:\Program Files\sFX
2009-07-11 12:16:02 ----A---- C:\WINDOWS\system32\tpsaxyd.exe
2009-07-11 12:15:33 ----A---- C:\WINDOWS\msa.exe
2009-07-11 12:15:11 ----A---- C:\WINDOWS\system32\msxml71.dll
2009-07-11 12:14:35 ----D---- C:\Documents and Settings\All Users\Application Data\18914064
2009-07-11 12:13:47 ----A---- C:\derrk.exe
2009-07-11 12:13:45 ----A---- C:\WINDOWS\ld12.exe
2009-07-11 12:13:45 ----A---- C:\glnx.exe
2009-07-11 12:13:28 ----A---- C:\WINDOWS\system32\gsf83iujid.dll
2009-06-26 22:11:32 ----D---- C:\Program Files\Fichiers communs\Adobe AIR
2009-06-26 21:48:18 ----D---- C:\Winamax

======List of files/folders modified in the last 1 months======

2009-07-12 18:08:55 ----D---- C:\WINDOWS\system32
2009-07-12 18:08:54 ----RD---- C:\Program Files
2009-07-12 17:53:30 ----D---- C:\WINDOWS\Temp
2009-07-12 17:51:17 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-07-12 17:45:28 ----D---- C:\WINDOWS\system32\CatRoot2
2009-07-12 17:44:33 ----SD---- C:\WINDOWS\Tasks
2009-07-12 17:15:19 ----D---- C:\WINDOWS
2009-07-12 06:26:36 ----D---- C:\WINDOWS\system32\config
2009-07-12 01:04:20 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2009-07-12 00:56:53 ----SHD---- C:\System Volume Information
2009-07-12 00:54:28 ----D---- C:\WINDOWS\system32\drivers
2009-07-12 00:54:27 ----HD---- C:\WINDOWS\inf
2009-07-12 00:41:40 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2009-07-12 00:40:53 ----D---- C:\Documents and Settings\Guillaume & Emilie\Application Data\Symantec
2009-07-12 00:39:50 ----SHD---- C:\WINDOWS\Installer
2009-07-11 12:52:11 ----D---- C:\Documents and Settings\Guillaume & Emilie\Application Data\Azureus
2009-07-11 12:17:10 ----RSD---- C:\WINDOWS\Fonts
2009-07-11 12:13:31 ----D---- C:\WINDOWS\Prefetch
2009-06-27 11:07:32 ----D---- C:\Program Files\PokerStars
2009-06-26 22:14:31 ----D---- C:\Documents and Settings\Guillaume & Emilie\Application Data\Adobe
2009-06-26 22:14:31 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-06-26 22:11:35 ----SHD---- C:\Config.Msi
2009-06-26 22:11:32 ----D---- C:\Program Files\Fichiers communs
2009-06-20 00:49:47 ----D---- C:\WINDOWS\system32\wbem
2009-06-20 00:49:47 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 acehlp09;acehlp09; \??\C:\WINDOWS\system32\drivers\acehlp09.sys []
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\WINDOWS\system32\DRIVERS\Apfiltr.sys [2003-09-29 94601]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2004-08-12 137728]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-05 9600]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2003-09-26 5786]
R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2004-12-02 70912]
R3 SNC;Sony Notebook Control Device; C:\WINDOWS\System32\Drivers\SonyNC.sys [2000-11-09 48896]
R3 SPI;Sony Programmable I/O Control Device; C:\WINDOWS\system32\DRIVERS\SonyPI.sys [2002-08-20 71961]
R3 SymIMMP;SymIMMP; C:\WINDOWS\system32\DRIVERS\SymIM.sys [2009-07-12 36400]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
R3 w29n51;Pilote de carte de connexion réseau Intel(R) PRO/Wireless 2200BG pour Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2006-06-29 2206720]
S1 BHDrvx86;Symantec Heuristics Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\BHDrvx86.sys []
S1 ccHP;Symantec Hash Provider; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\ccHPx86.sys []
S1 DMICall;Sony DMI Call service; C:\WINDOWS\system32\DRIVERS\DMICall.sys [2000-12-05 3952]
S1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []
S1 IDSxpx86;IDSxpx86; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090206.001\IDSxpx86.sys []
S1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-27 40320]
S1 PrivateDisk;PrivateDisk; C:\WINDOWS\System32\Drivers\PrivateDiskM.sys [2004-07-06 45627]
S1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2008-11-02 56572]
S1 sFxdrv;sFxdrv; \??\C:\Program Files\sFX\sfX.sYs []
S1 SRTSPX;Symantec Real Time Storage Protection (PEL); \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SRTSPX.SYS []
S1 SYMTDI;Symantec Network Dispatch Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SYMTDI.SYS []
S1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2005-06-21 59648]
S2 acedrv09;acedrv09; \??\C:\WINDOWS\system32\drivers\acedrv09.sys []
S2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.5.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2008-08-24 21419]
S2 BCMNTIO;BCMNTIO; \??\C:\PROGRA~1\CheckIt\DIAGNO~1\BCMNTIO.sys []
S2 MAPMEM;MAPMEM; \??\C:\PROGRA~1\CheckIt\DIAGNO~1\MAPMEM.sys []
S2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
S2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2006-08-02 12544]
S3 adg2crko;adg2crko; C:\WINDOWS\system32\drivers\adg2crko.sys []
S3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-05 60800]
S3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-06-28 1241088]
S3 BthEnum;Pilote de bloc de demande Bluetooth; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2004-08-03 17024]
S3 BTHMODEM;Pilote de communications modem Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2004-08-03 38016]
S3 BthPan;Périphérique Bluetooth (réseau personnel); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2004-08-03 100992]
S3 BTHPORT;Pilote de port Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272768]
S3 BTHUSB;Pilote USB radio Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2004-08-03 18944]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-04 14080]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-07-06 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-07-06 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-07-06 21744]
S3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-05-23 1034752]
S3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2005-05-23 178048]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-06-29 3173888]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NAVENG;NAVENG; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090226.034\NAVENG.SYS []
S3 NAVEX15;NAVEX15; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090226.034\NAVEX15.SYS []
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-05 61824]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2007-02-22 137216]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2007-02-22 8320]
S3 nmwcdcj;Nokia USB Port; C:\WINDOWS\system32\drivers\nmwcdcj.sys [2007-02-22 12288]
S3 nmwcdcm;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2007-02-22 12288]
S3 pcmstub;pcmstub; \??\C:\WINDOWS\system32\pcmstub.sys []
S3 pelmouse;Mouse Suite Driver; C:\WINDOWS\system32\DRIVERS\pelmouse.sys [2002-06-28 17251]
S3 pelusblf;USB Mouse Low Filter Driver; C:\WINDOWS\system32\DRIVERS\pelusblf.sys [2001-07-24 7520]
S3 RFCOMM;Périphérique Bluetooth (TDI protocole RFCOMM); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2004-08-03 59648]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 SONYTVC;Sony MPEG RR-Engine; C:\WINDOWS\system32\DRIVERS\SONYTVC.sys [2005-03-18 237568]
S3 SRTSP;Symantec Real Time Storage Protection; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SRTSP.SYS []
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
S3 SYMFW;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SYMFW.SYS []
S3 SYMIDS;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SYMIDS.SYS []
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\WINDOWS\system32\DRIVERS\SymIM.sys [2009-07-12 36400]
S3 SYMNDIS;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\N360\0300000.086\SYMNDIS.SYS []
S3 tifmsony;tifmsony; C:\WINDOWS\system32\drivers\tifmsony.sys [2007-02-28 80896]
S3 toshidpt;TOSHIBA Bluetooth HID port driver; C:\WINDOWS\system32\drivers\Toshidpt.sys [2002-10-16 2851]
S3 tosporte;Bluetooth Port Driver from Toshiba; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2005-06-20 44288]
S3 Tosrfbd;Bluetooth RFBUS from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbd.sys [2005-06-17 98944]
S3 Tosrfbnp;Bluetooth RFBNEP from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2005-05-27 34176]
S3 Tosrfhid;Bluetooth RFHID from TOSHIBA; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2005-04-22 53248]
S3 tosrfnds;Bluetooth Personal Area Network from TOSHIBA; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612]
S3 TosRfSnd;Bluetooth Audio Device (WDM) from TOSHIBA; C:\WINDOWS\system32\drivers\TosRfSnd.sys [2005-04-06 50048]
S3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\System32\Drivers\tosrfusb.sys [2004-12-21 34816]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-05-23 716288]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 6to4;6to4; C:\WINDOWS\System32\svchost.exe [2004-08-05 14336]
S2 AdobeActiveFileMonitor;Adobe Active File Monitor; C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-12 98304]
S2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-02-18 110592]
S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-06-28 376832]
S2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2007-07-24 229376]
S2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]
S2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2006-08-02 434176]
S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-15 152984]
S2 msncache;msncache; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]
S2 MSSQL$VAIO_VEDB;MSSQL$VAIO_VEDB; C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe [2002-12-17 7520337]
S2 N360;Norton 360; C:\Program Files\Norton 360\Engine\3.0.0.134\ccSvcHst.exe [2009-07-12 115560]
S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe []
S2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2006-08-02 327680]
S2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2006-08-02 937984]
S2 sfx;sfx; C:\WINDOWS\sySTEM32\SvchoSt.ExE [2004-08-05 14336]
S2 sopidkc;sopidkc Service; C:\WINDOWS\system32\sopidkc.exe [2004-08-05 98816]
S2 VAIO Event Service;VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [2006-09-23 176128]
S2 VCI;VAIO Cooporated Initialisation; C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe [2005-01-04 398336]
S2 VzCdbSvc;VAIO Entertainment Database Service; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [2005-06-15 167936]
S2 VzFw;VAIO Entertainment File Import Service; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe [2005-06-15 135168]
S2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 Boonty Games;Boonty Games; C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe [2006-10-21 69120]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-27 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 Image Converter video recording monitor for VAIO Entertainment;Image Converter video recording monitor for VAIO Entertainment; C:\Program Files\Sony\Image Converter 2\IcVzMon.exe [2005-04-05 32768]
S3 iPod Service;Service de l'iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-02-19 504104]
S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe [2006-12-14 45056]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PACSPTISVR;PACSPTISVR; C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe [2006-12-14 57344]
S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2007-02-08 212480]
S3 SonicStage Back-End Service;SonicStage Back-End Service; C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe [2007-02-05 112184]
S3 SPTISRV;Sony SPTI Service; C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe [2006-12-14 69632]
S3 SQLAgent$VAIO_VEDB;SQLAgent$VAIO_VEDB; C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE [2002-12-17 311872]
S3 SSScsiSV;SonicStage SCSI Service; C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe [2007-02-05 75320]
S3 VAIO Entertainment Aggregation and Control Service;VAIO Entertainment Aggregation and Control Service; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe [2005-06-17 143360]
S3 VAIO Entertainment Task Scheduler;VAIO Entertainment Task Scheduler; C:\Program Files\Sony\VAIO Entertainment\VzTaskScheduler.exe [2005-06-17 397312]
S3 VAIO Entertainment TV Device Arbitration Service;VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe [2005-06-15 73728]
S3 VAIOMediaPlatform-IntegratedServer-AppServer;VAIO Media Integrated Server; C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe [2006-06-12 1957888]
S3 VAIOMediaPlatform-IntegratedServer-HTTP;VAIO Media Integrated Server (HTTP); C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe [2005-06-07 57344]
S3 VAIOMediaPlatform-IntegratedServer-UPnP;VAIO Media Integrated Server (UPnP); C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe [2006-05-22 770048]
S3 VAIOMediaPlatform-Mobile-Gateway;VAIO Media Gateway Server; C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe [2006-05-17 155648]
S3 Vcsw;VAIO Entertainment UPnP Client Adapter; C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [2005-06-15 270336]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]

-----------------EOF-----------------


voila le contenu de info - bloc-notes :

info.txt logfile of random's system information tool 1.06 2009-07-12 18:09:04

======Uninstall list======

-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\InstallShield Installation Information\{36C41D70-56F5-4E2B-81DA-6BEB7502D7A1}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{3D173DC5-4AE5-4B3F-9819-3977DD11B1D0}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{B2C4A8C4-AA20-425D-9FEE-C78039238C81}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\Program Files\InstallShield Installation Information\{B34B6E67-FCDD-4E03-8742-B5701427FAFB}\setup.exe -runfromtemp -l0x040c -removeonly
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->Dummy
-->MsiExec.exe /I{5B782FFA-6A95-480D-8E0A-0954A14693D6}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FD836E74-7923-4174-A055-F97CD0F3BB46}\Setup.exe" -l0x40c
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Acrobat 7.0 Elements - Français-->msiexec /I {E5E6E687-1036-0000-0000-000000000002}
Adobe AIR-->c:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Photoshop 7.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll"
Adobe Photoshop Elements 3.0-->MsiExec.exe /I{851C67EF-068A-4060-9EF5-2E3DDCD68382}
Adobe Premiere Standard-->RunDll32 "C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll",LaunchSetup "C:\Program Files\InstallShield Installation Information\{7998F67D-655B-42E3-B651-18D96DD17268}\setup.exe"
Adobe Reader 7.1.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A71000000002}
Adobe® Photoshop® Album Edition Découverte 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}
AIDA32 v3.93-->"C:\Program Files\AIDA32 - Personal System Information\unins000.exe"
Apple Mobile Device Support-->MsiExec.exe /I{44734179-8A79-4DEE-BB08-73037F065543}
Apple Software Update-->MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATK0100 ACPI UTILITY-->C:\WINDOWS\ATK0100\XPunin.exe
Azureus Vuze-->C:\Program Files\Azureus\uninstall.exe
Bonjour-->MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
Call of Duty(R) 2-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D0A05794-48C2-4424-A15A-9F20FCFDD374} /l2057
Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch-->C:\Program Files\InstallShield Installation Information\{3BD633E0-4BF8-4499-9149-88F0767D449C}\setup.exe -runfromtemp -l0x0409
CheckIt Diagnostics-->C:\PROGRA~1\CheckIt\DIAGNO~1\UNWISE.EXE C:\PROGRA~1\CheckIt\DIAGNO~1\INSTALL.LOG
Citrix Web Client-->C:\WINDOWS\system32\ctxsetup.exe /uninst C:\PROGRA~1\Citrix\icaweb32\uninst.inf
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB914440)-->"C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB935448)-->"C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif Windows XP - KB307154-->C:\WINDOWS\$NtUninstallKB307154$\spuninst\spuninst.exe
Correctif Windows XP - KB873333-->C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Correctif Windows XP - KB884018-->C:\WINDOWS\$NtUninstallKB884018$\spuninst\spuninst.exe
Correctif Windows XP - KB884575-->C:\WINDOWS\$NtUninstallKB884575$\spuninst\spuninst.exe
Correctif Windows XP - KB885250-->C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Correctif Windows XP - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Correctif Windows XP - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Correctif Windows XP - KB887742-->C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe
Correctif Windows XP - KB888113-->C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
Correctif Windows XP - KB888239-->C:\WINDOWS\$NtUninstallKB888239$\spuninst\spuninst.exe
Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
Correctif Windows XP - KB893056-->C:\WINDOWS\$NtUninstallKB893056$\spuninst\spuninst.exe
Correctif Windows XP - KB893086-->"C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe"
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
DivX-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
DVgate Plus-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{685BCC47-B8EC-45EC-BBCE-77DF2451502C}\setup.exe" -l0x40c
fedkit_screensaver-->C:\WINDOWS\fedkit_screensaver.scr /u
FindyKill-->C:\FindyKill\Uninstal.exe
free-downloads.net Toolbar-->C:\PROGRA~1\FREE-D~1.NET\UNWISE.EXE C:\PROGRA~1\FREE-D~1.NET\INSTALL.LOG
GdiplusUpgrade-->MsiExec.exe /I{5421155F-B033-49DB-9B33-8F80F233D4D5}
GearDrvs-->MsiExec.exe /I{206FD69B-F9FE-4164-81BD-D52552BC9C23}
GearDrvs-->MsiExec.exe /I{CB84F0F2-927B-458D-9DC5-87832E3DC653}
Google Toolbar for Firefox-->MsiExec.exe /X{2CCBABCB-6427-4A55-B091-49864623C43F}
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
HDAUDIO SoftV92 Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0600\HXFSETUP.EXE -U -ISnyHDAk.inf
High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
HP Driver Diagnostics-->MsiExec.exe /I{16BE87BC-69F5-4D36-8CF0-E1CB3ACD5ED3}
HP Extended Capabilities 4.7-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Image Zone 4.7-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP PSC & OfficeJet 4.7-->"C:\Program Files\HP\Digital Imaging\{342C7C88-D335-4bc2-8CF1-281857629CE2}\setup\hpzscr01.exe" -datfile hposcr05.dat
HP Software Update-->MsiExec.exe /X{15EE79F4-4ED1-4267-9B0F-351009325D7D}
Image Converter 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{29999594-B540-4C88-A8D3-C99CA43809FC}\setup.exe" /UNINSTALL
Impossible Team backyard Screen Saver-->C:\WINDOWS\system32\Impossible Team backyard.scr /u
InterVideo WinDVD for VAIO-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
InterVideo WinDVDX-->"C:\Program Files\InstallShield Installation Information\{1A91D1FA-B9B3-4556-9878-5C61059A19B2}\setup.exe" REMOVEALL
iPod for Windows 2005-09-23-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{D4936AAF-FFD0-44A1-A7EA-A2DB41CEB5BC} /l1036
iTunes-->MsiExec.exe /I{80FD852F-5AAC-4129-B931-06AAFFA43138}
J2SE Runtime Environment 5.0 Update 10-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
J2SE Runtime Environment 5.0 Update 11-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
J2SE Runtime Environment 5.0 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030}
J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
Kit d'installation-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9C650676-CDDB-42C0-8D11-3EEB7F791F99}\setup.exe" -l0x40c -eth
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Logiciel Intel(R) PROSet/Wireless-->C:\WINDOWS\Installer\iProInst.exe
mCore-->MsiExec.exe /I{E81667C6-2856-46D6-ABEA-6A2F42166779}
mDriver-->MsiExec.exe /I{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}
Memory Stick Formatter-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{27337663-2619-11D4-99DC-0000F49094C7}\Setup.exe" -l0x40c /UNINSTALL
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft .NET Framework 3.0 French Language Pack-->MsiExec.exe /X{E3C080B0-23F5-49AF-89F8-8E8DBC89E659}
Microsoft .NET Framework 3.0-->C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Small Business Edition 2003-->MsiExec.exe /I{91CA040C-6000-11D3-8CFE-0150048383C9}
Microsoft SQL Server Desktop Engine (VAIO_VEDB)-->MsiExec.exe /X{E09B48B5-E141-427A-AB0C-D3605127224A}
Microsoft User-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB883939)-->"C:\WINDOWS\$NtUninstallKB883939$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB893066)-->"C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896422)-->"C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896424)-->"C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911567)-->"C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB912812)-->"C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB912919)-->"C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913446)-->"C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB916281)-->"C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917159)-->"C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917344)-->"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917422)-->"C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917953)-->"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918899)-->"C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB919007)-->"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920214)-->"C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921398)-->"C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921503)-->"C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921883)-->"C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922616)-->"C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922760)-->"C:\WINDOWS\$NtUninstallKB922760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923414)-->"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923694)-->"C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924191)-->"C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924496)-->"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925454)-->"C:\WINDOWS\$NtUninstallKB925454$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925486)-->"C:\WINDOWS\$NtUninstallKB925486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB936021)-->"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938829)-->"C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941568)-->"C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941644)-->"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941693)-->"C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948881)-->"C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB904942)-->"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB925720)-->"C:\WINDOWS\$NtUninstallKB925720$\spuninst\spuninst.exe"

   
Répondre à guillaume1976

5

guillaume1976, le 12 jui 2009 à 19:17:12

Je ne sais pas si j'ai bien fait mais quand SDfix m'a demandé de redémarrer mon PC j'ai redémmaré en mode sans echec.............

Sinon, voila le rapport de SDfix :


[b]SDFix: Version 1.240 /b
Run by Guillaume

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services /b:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files /b:

Trojan Files Found:

C:\GLNX.EXE - Deleted
C:\142013~1 - Deleted
C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\a.exe - Deleted
C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\b.exe - Deleted
C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\c.exe - Deleted
C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\tmp3.tmp - Deleted
C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp\tmp6.tmp - Deleted
C:\WINDOWS\system32\comsa32.sys - Deleted
C:\WINDOWS\system32\msxml71.dll - Deleted





Removing Temp Files

[b]ADS Check /b:



[b]Final Check /b:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-12 19:12:01
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

disk error: C:\WINDOWS\system32\config\system, 1381
scanning hidden registry entries ...

disk error: C:\WINDOWS\system32\config\software, 1381
disk error: C:\Documents and Settings\Guillaume & Emilie\ntuser.dat, 1381
scanning hidden files ...

disk error: C:\WINDOWS\

please note that you need administrator rights to perform deep scan

[b]Remaining Services /b:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Yahoo!\\Messenger\\YPager.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YPager.exe:*:Enabled:Yahoo! Messenger"
"C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Program Files\\Sony\\VAIO Media 4.0\\Vc.exe"="C:\\Program Files\\Sony\\VAIO Media 4.0\\Vc.exe:*:Enabled:[VAIO Media] VAIO Media"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[b]Remaining Files /b:


File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes /b:

Sun 12 Jul 2009 69,206,016 A.SH. --- "C:\NRTPage.sys"
Sat 11 Jul 2009 50,688 ..SHR --- "C:\Documents and Settings\Guillaume & Emilie\Guillaume & Emilie.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\Fonts\logcde.dll"
Thu 5 Aug 2004 34,304 ...H. --- "C:\WINDOWS\Fonts\services.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\Fonts\windef.dll"
Thu 5 Aug 2004 65,024 A.SH. --- "C:\WINDOWS\system32\asycfilt.dll"
Fri 25 Aug 2006 617,472 A.SH. --- "C:\WINDOWS\system32\comctl32.dll"
Thu 5 Aug 2004 1,028,096 A.SH. --- "C:\WINDOWS\system32\mfc42.dll"
Thu 5 Aug 2004 57,344 A.SH. --- "C:\WINDOWS\system32\mfc42loc.dll"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msceqyw.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mscjkocv.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mscjoyz.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mscoboa.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mscom.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mscpbqxd.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mscslzgd.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msctniv.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mscvvp.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdap.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdarr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msddcf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msddkde.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msden.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdgbgkh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdhwqp.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdiz.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdjzfth.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdkyuxa.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdltzo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdqqo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdrgop.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdsfn.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdthdb.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdtpzb.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdugs.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdvswx.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdxya.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdzk.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdzmlgv.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msdzs.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mseebh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msegizqj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msegosyj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msehiulp.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msehknw.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mseibfra.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msejylg.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msemgn.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msenj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msenwmv.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msepom.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mserbr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msesm.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msesuc.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msetmrjw.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msetutm.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msevty.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msevumdu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msezcgr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msezfuu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfaid.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfap.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfcpuo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfgp.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfhxzq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfkfioh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfktaro.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfkw.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfld.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msflef.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msflme.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msflq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfltbzm.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msflv.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfmj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfninh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfpacdp.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msftgc.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfuukxj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfxasm.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfxnwx.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msfzu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgawhr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgchxbl.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgdhtz.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msggvu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgjfn.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgjw.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgmllx.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgpa.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgpg.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgpnod.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgrpeke.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgsxjtr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgtl.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgtujyx.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgtun.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgwml.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msgxwd.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshfrxxg.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshgoqhy.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshhe.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshhtqy.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshhzr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshih.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshjxw.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshrbbpj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshuy.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshxm.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshxxhg.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mshzd.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msibirjj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msidyip.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msikfg.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msikhy.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msilal.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msipcmq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msipthtq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msiuf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msivzxq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msiwf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msizsmqd.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjebdv.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjegf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjfzsoj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjgbw.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjgpua.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjgtop.exe"
Wed 20 Sep 1995 35,088 A.SH. --- "C:\WINDOWS\system32\msjint32.dll"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjirh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjis.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjknm.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjmnmtz.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjqo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjrtqaa.exe"
Wed 20 Sep 1995 977,680 A.SH. --- "C:\WINDOWS\system32\msjt3032.dll"
Wed 20 Sep 1995 23,824 A.SH. --- "C:\WINDOWS\system32\msjter32.dll"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjuwpxh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjvglyo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjvog.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjwct.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjwgavi.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjwjf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msjzlqyn.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskbo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskcefl.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskdh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskeqq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msklxt.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskooxez.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskoqm.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskpldam.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskqfhop.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskqzuy.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskrdot.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msktgxql.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mskvwu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msletyh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslfeo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslfo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msljaoml.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslovzrg.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslqrggg.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslrlh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslusxkx.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslwq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslxckna.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslxnh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslxz.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mslyrn.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmaj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmhyi.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmini.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmjgnnd.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmkqy.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmluoty.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmnbu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmpqg.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmqml.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmrgrsw.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmrsaig.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmuerxw.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmvg.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmyke.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msmzkaz.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnave.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnhbkmc.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnjibnt.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnkvop.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnme.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnnu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnoc.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnoktur.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnop.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnrr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnswjds.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnvo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnxim.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnyydow.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnzdfv.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msnzrf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msoba.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msocfqjo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msodnq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msofmybl.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msohtduo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msomulq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msopu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msoqr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msott.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msoww.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msoydsa.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspacifa.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspbtc.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspbvd.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspdd.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspecb.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspfvkh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspkxibw.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msplxp.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspneq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msppvij.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspsnu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msptoyc.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msputg.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspvx.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspyfg.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspytmu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mspyu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqakfyn.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqbir.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqbt.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqdnbcr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqdo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqezy.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqfy.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqghmz.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqhz.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqkc.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqksmpc.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqmbn.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqmr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqndmyn.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqnqvo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqplgtr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqplvdf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqpycyx.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqrwbz.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqspjum.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqurql.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msqvntjy.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msraiebi.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msraiwqd.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrazoft.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrbh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrdr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrehf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msritywo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrixr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrjou.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrjrxn.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrlx.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrqoyaa.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrsnle.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrxp.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msrypefj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssaizx.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssavyau.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssbbfv.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssfbzoq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msshjqf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssibau.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssjsp.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssjzpr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msslhwm.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssllbt.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssnfj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssnwqlj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mssskvw.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msswop.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstbjan.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstdaqxr.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstee.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstgf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstglyh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstij.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstkds.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstkm.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstlkkbw.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstlred.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstqa.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstqd.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstrpqif.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msttrt.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstxhl.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstzxfcl.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mstzyyd.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuakp.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msufafu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuip.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msujk.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msujufjo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msukepbk.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msulbbh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msulxp.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msumk.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msupai.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuqn.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuqtgz.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msusvb.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuthqa.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuuqfyq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuxobzt.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuzu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msuzuqye.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvajdau.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvarmf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvcj.exe"
Thu 5 Aug 2004 413,696 A.SH. --- "C:\WINDOWS\system32\msvcp60.dll"
Thu 5 Aug 2004 343,040 A.SH. --- "C:\WINDOWS\system32\msvcrt.dll"
Thu 5 Aug 2004 253,952 A.SH. --- "C:\WINDOWS\system32\msvcrt20.dll"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msveday.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvgd.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvhhpme.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvjfhq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvntyu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvoq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvphak.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvqubo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvsuxo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvtcu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msvwuu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswbns.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswjrct.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswjttg.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswmnu.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswmwwf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswnja.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswqaf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswqcae.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswrz.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswtc.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswvrq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswwmn.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswwqurc.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswxk.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswxtef.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswydezt.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswyk.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswywhbm.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mswzwgvw.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxavhxz.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxbg.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxbyzwk.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxevhsd.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxjh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxjl.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxjxxui.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxodib.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxov.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxvlez.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxwkfjj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxxcj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxznjgp.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msxzo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msybcsb.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msychonq.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyckxh.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyfjjvz.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msygtrmn.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyhesp.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyihp.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyjalj.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msylfofy.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msynxz.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyohi.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msypiv.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msypo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyrasf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msytp.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyub.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyvcht.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyvw.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msyyfi.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszat.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszatps.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszedezo.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszfkt.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszjlb.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszjqb.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszkxgee.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszlsd.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszmf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\msznepun.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszpebk.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszqfl.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszrgf.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszsko.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszstl.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszzve.exe"
Thu 5 Aug 2004 128,000 ...H. --- "C:\WINDOWS\system32\mszzyaw.exe"
Tue 4 Dec 2007 550,912 A.SH. --- "C:\WINDOWS\system32\oleaut32.dll"
Thu 5 Aug 2004 83,456 A.SH. --- "C:\WINDOWS\system32\olepro32.dll"
Thu 5 Aug 2004 30,749 A.SH. --- "C:\WINDOWS\system32\vbajet32.dll"
Sun 25 Apr 1999 368,912 A.SH. --- "C:\WINDOWS\system32\Vbar332.dll"
Sat 16 Sep 2006 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Mon 4 Jun 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv06.tmp"
Sun 21 Nov 2004 30,720 A..H. --- "C:\Documents and Settings\Guillaume & Emilie\Mes documents\Dossiers Guillaume\Caisse d'Epargne\~WRL3457.tmp"

[b]Finished!/b

Merci

   
Répondre à guillaume1976

6

guillaume1976, le 12 jui 2009 à 19:38:08

Mon problème demeure.........................je ne sais plus quoi faire

HELP !!!!

   
Répondre à guillaume1976

7

chimay8, le 13 jui 2009 à 04:48:44

Re,

normal que le problème demeure,on n'a pas fini!!

Télécharge SmitFraudfix de S!Ri, balltrap34 et moe31
http://siri.urz.free.fr/Fix/SmitfraudFix.zip -
en cas de problème avec le premier lien,
mirroir: http://72.232.135.12/siri/SmitfraudFix.php

voila à quoi cela ressemble : http://siri.urz.free.fr/Fix/SmitfraudFix.php
une aide en vidéo (merci à balltrap34)
http://pagesperso-orange.fr/rginformatique/section%20virus/s­mitfraudfix.htm

Désactive les logiciels de protections(antivirus et antispyware)
-- Fais un clic droit puis Extraire tout sur le fichier SmitfraudFix.zip, cela va tout décompresser dans un nouveau dossier SmitFraudfix
-- Ouvre le dossier SmitfraudFix double-clique sur SmitfraudFix.cmd (le .cmd peut ne pas être présent)
-- Choisis l'option 1 et appuie sur Entrée
-- Réponds o (Oui) aux deux questions suivantes si elles sont posées
-- Un rapport sera généré; sauvegarde le dans un dossier.
-- Copie/colle le contenu du rapport ici I LIKE SHAKA PONK!!!!

   
Répondre à chimay8

8

guillaume1976, le 13 jui 2009 à 18:44:25

Voilà le rapport de SmitfraudFix :
SmitFraudFix v2.423

Rapport fait à 18:40:32,79, 13/07/2009
Executé à partir de
C:\Documents and Settings\Guillaume & Emilie\Bureau\Smitfraudfix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\WINZIP\winzip32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\fonts\services.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles




»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\GUILLA~1\LOCALS~1\Temp




»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\GUILLA~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"


»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{D76AB2A1-00F3-42BD-F434-00BBC39C8953}"="rtasgvfu76ew8ndkfno94"

[HKEY_CLASSES_ROOT\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
@="C:\WINDOWS\system32\gsf83iujid.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
@="C:\WINDOWS\system32\gsf83iujid.dll"



»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

»»»»»»»»»»»»»»»»»»»»»»»» RK

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""




»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Realtek RTL8169/8110 Family Gigabit Ethernet NIC - Miniport d'ordonnancement de paquets
DNS Server Search Order: 89.2.0.1
DNS Server Search Order: 89.2.0.2

HKLM\SYSTEM\CCS\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS1\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS2\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

   
Répondre à guillaume1976

9

chimay8, le 13 jui 2009 à 19:35:01

Parfait,

Redémarre l'ordinateur en mode sans échec .
Comment aller en Mode sans échec
1) Redémarre ton ordi
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip"
3) Tu verras un écran avec options de démarrage apparaître
4) Choisis la première option : Sans Échec, et valide avec "Entrée"
5) Choisis ton compte habituel, et non Administrateur (si besoin ... )
( ps : n'oublies pas , en mode sans échec , pas de connexion ! Donc copie ou imprime bien les infos ci-dessous ...)

*Double click sur SmitfraudFix.exe

* Sélectionnes 2 et presses "Entrée" dans le menu pour supprimer les fichiers responsables de l'infection.

* A la question: Voulez-vous nettoyer le registre ? répondre O (oui) et presse Entrée afin de débloquer le fond d'écran et supprimer les clés de registre de l'infection.

( Le correctif déterminera si le fichier wininet.dll est infecté.)

* A la question: "Corriger le fichier infecté ?" répondre O (oui) et presser Entrée
pour remplacer le fichier corrompu.

* Un redémarrage sera peut être nécessaire pour terminer la procédure de nettoyage ( sinon fais le manuellement )

Le rapport se trouve à la racine de C\:
(dans le fichier "rapport.txt")

Poste ce dernier rapport

ensuite

Télécharge Malwarebytes' Anti-Malware et enregistre le sur ton Bureau.
http://www.malwarebytes.org/

(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharges le ici : http://www.malekal.com/download/comctl32.ocx )

A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.
Double-clique sur l'icône "Download_mbam-setup.exe" sur ton bureau pour démarrer le programme d'installation.

Pendant l'installation, suis les indications n'apporte aucune modification aux réglages par défaut et en fin d'installation, vérifie que les options "Update Malwarebytes' Anti-Malware" et "Launch Malwarebytes' Anti-Malware" soit cochées.

MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue.
La fenêtre principale de MBAM s'affiche :
Dans l'onglet analyse, vérifie que "Exécuter un examen complet" est coché et clique sur le bouton Rechercher pour démarrer l'analyse.
MBAM analyse ton ordinateur.

L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.

A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.
Si des malwares sont détectés, leur liste s'affiche.
***EN CLIQUANT SUR SUPPRESSION(?)FAIT LE*** , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Ferme le Bloc-notes. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)
Ferme MBAM en cliquant sur Quitter.

Poste le rapport dans ta réponse
I LIKE SHAKA PONK!!!!

   
Répondre à chimay8

10

guillaume1976, le 13 jui 2009 à 20:05:40

Je ne trouve pas smitfraudfix.exe ............ je n'ai que smitfraudfix.cmd

   
Répondre à guillaume1976

11

chimay8, le 13 jui 2009 à 20:11:33

Non,c'est bon!
vas-y
;) I LIKE SHAKA PONK!!!!

   
Répondre à chimay8

12

guillaume1976, le 13 jui 2009 à 20:27:36

Voilà le rapport de smitfraudfix :

SmitFraudFix v2.423

Rapport fait à 20:14:03,59, 13/07/2009
Executé à partir de
C:\Documents and Settings\Guillaume & Emilie\Bureau\Smitfraudfix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{D76AB2A1-00F3-42BD-F434-00BBC39C8953}"="rtasgvfu76ew8ndkfno94"

[HKEY_CLASSES_ROOT\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
@="C:\WINDOWS\system32\gsf83iujid.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
@="C:\WINDOWS\system32\gsf83iujid.dll"


»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» RK


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS1\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS2\Services\Tcpip\..\{33E2A050-B756-445F-89D8-A2108EE3CA0C}: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=89.2.0.1 89.2.0.2


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» RK.2



»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{D76AB2A1-00F3-42BD-F434-00BBC39C8953}"="rtasgvfu76ew8ndkfno94"

[HKEY_CLASSES_ROOT\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
@="C:\WINDOWS\system32\gsf83iujid.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{D76AB2A1-00F3-42BD-F434-00BBC39C8953}\InProcServer32]
@="C:\WINDOWS\system32\gsf83iujid.dll"



»»»»»»»»»»»»»»»»»»»»»»»» Fin

   
Répondre à guillaume1976

13

guillaume1976, le 13 jui 2009 à 20:29:31

Je continue avec Malwarebytes....

Merci beaucoup pour ta disponibilité....

   
Répondre à guillaume1976

14

chimay8, le 13 jui 2009 à 20:33:07

Merci beaucoup pour ta disponibilité....

de rien!!ça fais plaisir
merci à toi!
:)) I LIKE SHAKA PONK!!!!

   
Répondre à chimay8

15

guillaume1976, le 13 jui 2009 à 21:30:02

Voilà le rapport de Malwarebytes :

Malwarebytes' Anti-Malware 1.38
Version de la base de données: 2420
Windows 5.1.2600 Service Pack 2

13/07/2009 21:25:13
mbam-log-2009-07-13 (21-25-12).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 191750
Temps écoulé: 38 minute(s), 2 second(s)

Processus mémoire infecté(s): 2
Module(s) mémoire infecté(s): 2
Clé(s) du Registre infectée(s): 29
Valeur(s) du Registre infectée(s): 20
Elément(s) de données du Registre infecté(s): 6
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 568

Processus mémoire infecté(s):
c:\WINDOWS\ld12.exe (Worm.Koobface) -> Unloaded process successfully.
C:\WINDOWS\Fonts\services.exe (Worm.Archive) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\gsf83iujid.dll (Trojan.Ertfor) -> Delete on reboot.
C:\WINDOWS\system32\MSWINSCK.OCX (Worm.Nyxem) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Zlob.H) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Ertfor) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Ertfor) -> Delete on reboot.
HKEY_CLASSES_ROOT\Typelib\{40196867-19f8-7157-c097-ecaff653c9ad} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sfx (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sfx (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sfx (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sfxdrv (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sfxdrv (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sfxdrv (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\6to4 (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\6to4 (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\6to4 (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{248dd896-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{248dd897-bb45-11cf-9abc-0080c7e7b78d} (Worm.Nyxem) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pcmstub (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\pcmstub (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pcmstub (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sopidkc (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sopidkc (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sopidkc (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Cognac (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009 (Rogue.SystemSecurity) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{d76ab2a1-00f3-42bd-f434-00bbc39c8953} (Trojan.Zlob.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\18914064 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysldtray (Worm.Koobface) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\exec (Spyware.Passwords) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\hsf7husjnfg98gi498aejhiugjkdg4 (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\idstrf (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\BuildW (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\FirstInstallFlag (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\guid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\i (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\mms (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\mso (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\udso (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\uid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Ulrn (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Update (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\UpdateNew (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\run (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\sfx (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\powermgr (Trojan.Agent) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Run (Spyware.Passwords) -> Data: c:\windows\system32\mseyozhm.exe -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Load (Spyware.Passwords) -> Data: c:\windows\system32\msgajbs.exe -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.bat\(default) (Hijacked.BatFile) -> Bad: (csfile) Good: (batfile) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.com\(default) (Hijacked.ComFile) -> Bad: (csfile) Good: (comfile) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.exe\(default) (Hijacked.exeFile) -> Bad: (csfile) Good: (exefile) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Documents and Settings\All Users\Application Data\18914064 (Rogue.Multiple.H) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\WINDOWS\system32\gsf83iujid.dll (Trojan.Zlob.H) -> Delete on reboot.
c:\documents and settings\all users\application data\18914064\18914064 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\18914064\18914064.exe (Rogue.Multiple.H) -> Quarantined and deleted successfully.
c:\WINDOWS\ld12.exe (Worm.Koobface) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\msocu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\derrk.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\localservice\local settings\temporary internet files\Content.IE5\CP2RSTIJ\w[1].bin (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\localservice\local settings\temporary internet files\Content.IE5\RJ2FIKC7\w[1].bin (Trojan.Agent) -> Quarantined and deleted successfully.
c:\program files\sFX\SfX.DlL (Trojan.Agent) -> Quarantined and deleted successfully.
c:\program files\sFX\sfX.sYs (Rootkit.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\msa.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Fonts\cooecp.tlb (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\Fonts\logcde.dll (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\Fonts\windef.dll (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\Fonts\windef.Log (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\Fonts\winpaged.ocx (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\6to4v32.dll (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscelern.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msceqyw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscjkocv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscjoyz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscjqk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscoboa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscom.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscpbqxd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscqa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscslzgd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscsms.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msctdcj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msctniv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscvvp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mscxuq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdap.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdarr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msddcf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msddkde.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msden.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdftp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdgbgkh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdhwqp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdirtg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdiz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdja.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdjzfth.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdkr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdkyuxa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdltzo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdqqo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdrgop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdsfn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdthdb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdtpzb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdugs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdvswx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdxb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdxya.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdyu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdzk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdzmlgv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msdzs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mseaszco.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mseebh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mseezx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msegizqj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msegosyj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msehiulp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msehwuv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mseibfra.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mseie.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msejylg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msekmdao.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msekxgek.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msemgn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msenj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msentd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msenwmv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msepom.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mserbr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mserxso.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msesef.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msesm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msesuc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msetmrjw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msetutm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msevty.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msevumdu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mseyozhm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msezcgr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msezfuu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfabke.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfaid.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfap.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfcpuo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfgp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfhxzq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfkfioh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfkozfm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfktaro.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfkw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfld.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msflef.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msflme.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msflq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfltbzm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msflv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfmj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfninh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfnl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfofg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfogrq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfpacdp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfstyra.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msftd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msftgc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfuukxj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfxasm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfxnwx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msfzu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgajbs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgchxbl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgdhtz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msggvu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msggwsb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msghvwp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgjfn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgjw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgmllx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgmnly.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgmnwg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgoxwwj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgpg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgpnod.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgqqur.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgqr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgrpeke.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgsfpns.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgsxjtr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgtl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgtujyx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgtun.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgvd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgwml.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgxvlwm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgxwd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msgzm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshaxold.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshbot.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshdct.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshfl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshfrxxg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshgoqhy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshhe.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshhtqy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshhxotu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshhzr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshih.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshjxw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshkk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshobbe.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshotuu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshqjm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshrbbpj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshsrw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshuy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshxm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshxxhg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mshzd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msibirjj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msidyip.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msikfg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msikhy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msikn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msilal.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msily.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msipcmq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msipthtq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msiuf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msivzxq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msiwf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msiwjcc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msizsmqd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjcn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjcttuv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjebdv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjegf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjfduh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjfzsoj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjgbw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjgpua.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjgtop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjhu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjhyxp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjirh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjis.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjknm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjmnmtz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjqo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjrkp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjrtqaa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjsuk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjuwpxh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjvglyo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjvog.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjwct.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjwgavi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjwjf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjyurf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msjzlqyn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskagk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskbo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskcefl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskdh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskeqq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskglug.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msklxt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskooxez.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskoqm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskpldam.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskqfhop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskqzuy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskrdot.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskryz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msktgxql.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskvv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskvwu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskxr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mskyk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msletyh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslfeo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslfo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msljaoml.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msljxodr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslkz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslovzrg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslpdd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslqcg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslqrggg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslrlh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msltzqn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslusxkx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslwq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslwtl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslxa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslxckna.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslxnh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslxz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mslyrn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmaj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmfkged.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmhyi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmini.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmjgnnd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmkqy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmluoty.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmnbu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmpqg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmqml.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmrgrsw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmrsaig.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmuerxw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmvg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmyke.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmyrpwl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msmzkaz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnave.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msncache.dll (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msneq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnhbkmc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnjibnt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnkvop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnme.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnnu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnoc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnoktur.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnousz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnrewl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnrr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnswjds.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnvo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnxim.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnyydow.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnzdfv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msnzrf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msoba.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msobsh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msocfqjo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msodnq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msofmybl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msohtduo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msojvtc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msomulq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msopu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msopyan.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msoqr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msorca.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msott.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msouyull.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msoww.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msoydsa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspacifa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspbtc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspbvd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspdd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspecb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspfvkh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspkxibw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msplr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msplxp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspneq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msppvij.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspsnu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msptoyc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspty.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msputg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspyfg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspytmu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mspyu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqakfyn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqbir.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqbs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqbt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqdgp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqdnbcr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqdo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqezy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqfy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqghmz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqhz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqixz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqjbyi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqjflng.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqkc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqksmpc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqmbn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqmr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqndmyn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqnqvo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqoralv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqplgtr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqplvdf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqpycyx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqrwbz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqspjum.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqsq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqsqxa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msquih.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqurql.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msqvntjy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msraiebi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msraiwqd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrazoft.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrbh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrcel.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrdr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrehf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrgi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrgk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msritywo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrixr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrjou.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrjrxn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrlx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrnut.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msroefmu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrqoyaa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrrnv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrsddgs.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrsnle.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrtebd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrustcz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrwv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrxedv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrxp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msrypefj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssaizx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssavyau.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssbbfv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssdj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssfbzoq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssfg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msshj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msshjqf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssibau.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssjsp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssjyl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssjzpr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msslhwm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssllbt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssnfj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssnwqlj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msspsqwm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mssskvw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msswop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstbjan.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstdaqxr.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstee.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msteuq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstfa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstgf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstglyh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstij.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstiwndd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstkds.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstkm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstlkkbw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstlred.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstmasq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstpy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstqa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstqd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstrpqif.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msttrt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstxhl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstzxfcl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mstzyyd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuakp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msufafu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msugsop.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuhnf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuip.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msujk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msujufjo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msukepbk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msulbbh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msulxp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msumk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msupai.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuqn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuqtgz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msurkw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msurovi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msusewru.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msusvb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuthqa.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuuqfyq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuwios.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuxobzt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuzu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msuzuqye.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvajdau.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvarmf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvay.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvcj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msveday.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvgd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvhhpme.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvjfhq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvjgg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvntyu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvoq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvor.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvphak.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvqubo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvsuxo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvsvb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvtcu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msvwuu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswbns.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswimsnm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\MSWINSCK.OCX (Worm.Nyxem) -> Delete on reboot.
c:\WINDOWS\system32\mswjrct.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswjttg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswkehhg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswmnu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswmwwf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswnja.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswqaf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswqcae.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswrz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswtc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswvrq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswwmn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswwqurc.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswxk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswxn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswxtef.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswydezt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswyk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswywhbm.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mswzwgvw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxavhxz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxbg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxbyzwk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxfcxx.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxgpe.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxii.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxjh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxjl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxjxxui.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxkb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxkvp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxodib.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxov.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxvlez.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxvq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxwh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxwkfjj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxxcj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxznjgp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msxzo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msybcsb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msycd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msychonq.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyckxh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyfjjvz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msygb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msygtrmn.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyhesp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyihp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyjalj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msylbzom.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msylfofy.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyltapu.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msynxz.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyoced.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyohi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msypiv.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msypo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyqobl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyrasf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msytfe.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msytp.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyub.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyunuh.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyvcht.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyvit.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyvw.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyvykye.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msywupo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msyyfi.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszat.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszatps.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszcacg.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszedezo.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszfkt.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszgix.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszjlb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszjqb.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszkky.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszkxgee.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszlsd.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszmf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\msznepun.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszpebk.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszqfl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszrgf.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszrlj.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszsko.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszstl.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszvcec.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszweic.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\mszxb.

   
Répondre à guillaume1976

16

guillaume1976, le 13 jui 2009 à 22:16:32

J'ai tenté de redémarrer en mode normal

Windows a mis 15 minutes pour s'ouvrir, je n'ai plus de fonds d'écran et je n'ai pas réussi à ouvrir la moinde application...

En revanche, le message "you're in danger..." a disparu et le logiciel system security 4.52 ne s'ouvre plus toutes les 2 minutes....

Voilà les symptomes Docteur.... ;)

   
Répondre à guillaume1976

17

chimay8, le 13 jui 2009 à 22:45:38

ça!
Fichier(s) infecté(s): 568
j'avais jamais vu...

bon,si il a détruit des fichiers infectés au reboot de la machine,c'est normal que windows est pris du temps pour se lancer!

tu as relancé ton pc pour voir si il prenais toujours autant de temps?
I LIKE SHAKA PONK!!!!

   
Répondre à chimay8

18

guillaume1976, le 13 jui 2009 à 22:47:42

Oui, il met toujours autant de temps.... le virus est supprimé?

   
Répondre à guillaume1976

19

chimay8, le 13 jui 2009 à 22:51:18
  • +1

le virus est supprimé?

bah...au vue de ce qu'a dégommé MBAM,je pense qu'une bonne partie de tes infections sont parties


tu as le cd de windows? I LIKE SHAKA PONK!!!!

   
Répondre à chimay8
39 réponses 12 Suivant
Posez votre question Répondre
Ils ont besoin de votre aide