A voir également:
- Ordinaeur qui redémarre tout seul
- Jeux qui s'installe tout seul android ✓ - Forum Téléphones & tablettes Android
- Écouteur jbl sans fil un seul fonctionne - Forum Casque et écouteurs
- Mon téléphone envoie des sms tout seul - Forum Samsung
- Un seul écouteur bluetooth fonctionne ✓ - Forum Casque et écouteurs
- Assistant google se lance tout seul avec écouteurs - Forum Accessoires & objets connectés
12 réponses
Utilisateur anonyme
17 janv. 2010 à 11:40
17 janv. 2010 à 11:40
bonjour,
on est tous des bénévole ici, on a aussi une vie privée !
tu n'as pas donné de nouvelles depuis le 14 janvier non plus !
patience mon ami, je ne laisse jamais un topic en plein ;-)
Télécharge Malwarebytes' Anti-Malware:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
ou ici : http://www.malwarebytes.org/mbam/program/mbam-setup.exe
. sur la page cliques sur Télécharger Malwarebyte's Anti-Malware
. enregistres le sur le bureau
. Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
. si le pare-feu demande l'autorisation de se connecter pour malwarebytes, acceptes
. Une fois la mise à jour terminé
. rend-toi dans l'onglet, Recherche
. Sélectionnes Exécuter un examen complet
. Cliques sur Rechercher
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, cliques sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. rends toi dans l'onglet rapport/log
. tu cliques dessus pour l'afficher une fois affiché
. tu cliques sur edition en haut du boc notes,et puis sur sélectionner tous
. tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
. Tu cliques droit dans le cadre de la réponse et coller
. À la fin du scan, il se peut que MBAM ait besoin de redémarrer le pc pour finaliser la suppression, donc pas de panique, redemarre ton pc !!!
Si tu as besoin d'aide regarde ce tutoriel :
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
on est tous des bénévole ici, on a aussi une vie privée !
tu n'as pas donné de nouvelles depuis le 14 janvier non plus !
patience mon ami, je ne laisse jamais un topic en plein ;-)
Télécharge Malwarebytes' Anti-Malware:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
ou ici : http://www.malwarebytes.org/mbam/program/mbam-setup.exe
. sur la page cliques sur Télécharger Malwarebyte's Anti-Malware
. enregistres le sur le bureau
. Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
. si le pare-feu demande l'autorisation de se connecter pour malwarebytes, acceptes
. Une fois la mise à jour terminé
. rend-toi dans l'onglet, Recherche
. Sélectionnes Exécuter un examen complet
. Cliques sur Rechercher
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, cliques sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. rends toi dans l'onglet rapport/log
. tu cliques dessus pour l'afficher une fois affiché
. tu cliques sur edition en haut du boc notes,et puis sur sélectionner tous
. tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
. Tu cliques droit dans le cadre de la réponse et coller
. À la fin du scan, il se peut que MBAM ait besoin de redémarrer le pc pour finaliser la suppression, donc pas de panique, redemarre ton pc !!!
Si tu as besoin d'aide regarde ce tutoriel :
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Utilisateur anonyme
18 janv. 2010 à 13:09
18 janv. 2010 à 13:09
bonjour,
tu n'as pas suivi ce que j'ai noté sur le poste 11 :
. Si des malwares ont été détectés, cliques sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
No action taken. => Aucune action = rien supprimé
MBAM n'a rien supprimé, tu as oublié de les cocher :-(
on recommence
tu n'as pas suivi ce que j'ai noté sur le poste 11 :
. Si des malwares ont été détectés, cliques sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
No action taken. => Aucune action = rien supprimé
MBAM n'a rien supprimé, tu as oublié de les cocher :-(
on recommence
Utilisateur anonyme
13 janv. 2010 à 23:29
13 janv. 2010 à 23:29
bonsoir,
on va regarder ça de près :
• Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.
http://images.malwareremoval.com/random/RSIT.exe
Tuto : https://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm
Double clique sur RSIT.exe pour lancer l'outil.
Clique sur ' continue ' à l'écran Disclaimer.
Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
Une fois le scan fini, 2 rapports vont apparaître. Poste le contenu des 2 rapports séparément. Ils se trouvent sur c :
(log.txt & info.txt)
(CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
on va regarder ça de près :
• Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.
http://images.malwareremoval.com/random/RSIT.exe
Tuto : https://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm
Double clique sur RSIT.exe pour lancer l'outil.
Clique sur ' continue ' à l'écran Disclaimer.
Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
Une fois le scan fini, 2 rapports vont apparaître. Poste le contenu des 2 rapports séparément. Ils se trouvent sur c :
(log.txt & info.txt)
(CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
Bonjour!!
voici donc les deux rapports.
merci beaucoup pour votre aide.
Logfile of random's system information tool 1.06 (written by random/random)
Run by dan at 2010-01-14 09:21:44
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 148 GB (78%) free of 191 GB
Total RAM: 1023 MB (35% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:22:24, on 14/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\crypserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\vsnpstd.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\Documents and Settings\dan\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\System32\svchost.exe
C:\bureau\PC Auto Shutdown\ShutdownService.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\dan\Bureau\RSIT.exe
C:\Program Files\trend micro\dan.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://y.lo.st
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://y.lo.st
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = C:\Program Files\AOL Toolbar\welcome.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: (no name) - {0285BD5B-463B-47BE-99F9-D1ABB6F4BA06} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: (no name) - {0A16F56C-463B-47BE-99F9-D1ABB6F4BA06} - (no file)
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {96F8931D-BB55-41DE-9AF7-257A7EB43D2A} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: (no name) - {E1A764F5-F788-4B2D-9FC2-A9D06A073526} - c:\windows\system32\hmtkqlc.dll (file missing)
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O3 - Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\dan\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [NoIE4StubProcessing] C:\WINDOWS\system32\reg.exe DELETE "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" /v "NoIE4StubProcessing" /f
O4 - HKCU\..\Run: [fsc-reminder.exe] C:\windows\reminder\fsc-reminder.exe 2453624 10
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\dan\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D96F71-87C6-11D3-9BE4-00902742D6E0} (QuickPlace Class) - http://www2.ac-nancy-metz.fr/qp2.cab
O16 - DPF: {26FCCDF9-A7E1-452A-A73D-7BF7B4D0BA6C} - http://pictures.aol.com/ap/Resources/2.0.4.69/cab/aolpPlugins.10.4.0.4.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.1.0.53.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = dan.dns
O17 - HKLM\Software\..\Telephony: DomainName = dan.dns
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = dan.dns
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS4\Services\Tcpip\Parameters: Domain = dan.dns
O17 - HKLM\System\CS4\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O20 - Winlogon Notify: zjsaqdgz - hmtkqlc.dll (file missing)
O22 - SharedTaskScheduler: IE Component Categories cache daemon - {553858A7-4922-4e7e-B1C1-97140C1C16EF} - C:\WINDOWS\system32\ieframe.dll
O23 - Service: Avira AntiVir Planificateur (antivirschedulerservice) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (antivirservice) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service de transfert intelligent en arrière-plan (BITS) - Unknown owner - C:\WINDOWS\
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: .NET Runtime Optimization Service v2.0.50215_X86 (clr_optimization_v2.0.50215_32) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50215\mscorsvw.exe (file missing)
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Service Google Update (gupdate1c9aaa4b08cf5da) (gupdate1c9aaa4b08cf5da) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: PCAutoShutdown_Service - GoldSolution Software, Inc. - C:\bureau\PC Auto Shutdown\ShutdownService.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Fichiers communs\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: Mises à jour automatiques (wuauserv) - Unknown owner - C:\WINDOWS\
O24 - Desktop Component 0: (no name) - https://upload.wikimedia.org/wikipedia/commons/thumb/4/42/Tour-chariotage-couteau.jpg/400px-Tour-chariotage-couteau.jpg
voici donc les deux rapports.
merci beaucoup pour votre aide.
Logfile of random's system information tool 1.06 (written by random/random)
Run by dan at 2010-01-14 09:21:44
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 148 GB (78%) free of 191 GB
Total RAM: 1023 MB (35% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:22:24, on 14/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\crypserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\vsnpstd.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\Documents and Settings\dan\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\System32\svchost.exe
C:\bureau\PC Auto Shutdown\ShutdownService.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\dan\Bureau\RSIT.exe
C:\Program Files\trend micro\dan.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://y.lo.st
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://y.lo.st
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = C:\Program Files\AOL Toolbar\welcome.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: (no name) - {0285BD5B-463B-47BE-99F9-D1ABB6F4BA06} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: (no name) - {0A16F56C-463B-47BE-99F9-D1ABB6F4BA06} - (no file)
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {96F8931D-BB55-41DE-9AF7-257A7EB43D2A} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: (no name) - {E1A764F5-F788-4B2D-9FC2-A9D06A073526} - c:\windows\system32\hmtkqlc.dll (file missing)
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O3 - Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\dan\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [NoIE4StubProcessing] C:\WINDOWS\system32\reg.exe DELETE "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" /v "NoIE4StubProcessing" /f
O4 - HKCU\..\Run: [fsc-reminder.exe] C:\windows\reminder\fsc-reminder.exe 2453624 10
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\dan\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D96F71-87C6-11D3-9BE4-00902742D6E0} (QuickPlace Class) - http://www2.ac-nancy-metz.fr/qp2.cab
O16 - DPF: {26FCCDF9-A7E1-452A-A73D-7BF7B4D0BA6C} - http://pictures.aol.com/ap/Resources/2.0.4.69/cab/aolpPlugins.10.4.0.4.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.1.0.53.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = dan.dns
O17 - HKLM\Software\..\Telephony: DomainName = dan.dns
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = dan.dns
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS4\Services\Tcpip\Parameters: Domain = dan.dns
O17 - HKLM\System\CS4\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O20 - Winlogon Notify: zjsaqdgz - hmtkqlc.dll (file missing)
O22 - SharedTaskScheduler: IE Component Categories cache daemon - {553858A7-4922-4e7e-B1C1-97140C1C16EF} - C:\WINDOWS\system32\ieframe.dll
O23 - Service: Avira AntiVir Planificateur (antivirschedulerservice) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (antivirservice) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service de transfert intelligent en arrière-plan (BITS) - Unknown owner - C:\WINDOWS\
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: .NET Runtime Optimization Service v2.0.50215_X86 (clr_optimization_v2.0.50215_32) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50215\mscorsvw.exe (file missing)
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Service Google Update (gupdate1c9aaa4b08cf5da) (gupdate1c9aaa4b08cf5da) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: PCAutoShutdown_Service - GoldSolution Software, Inc. - C:\bureau\PC Auto Shutdown\ShutdownService.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Fichiers communs\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: Mises à jour automatiques (wuauserv) - Unknown owner - C:\WINDOWS\
O24 - Desktop Component 0: (no name) - https://upload.wikimedia.org/wikipedia/commons/thumb/4/42/Tour-chariotage-couteau.jpg/400px-Tour-chariotage-couteau.jpg
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
et le second
info.txt logfile of random's system information tool 1.06 2010-01-14 09:22:28
======Uninstall list======
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
32 Bit HP CIO Components Installer-->MsiExec.exe /I{F7B0E599-C114-4493-BC4D-D8FC7CBBABBB}
Adobe Acrobat 4.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.dll"
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Shockwave Player 11.5-->"C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe"
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
AVG Anti-Spyware 7.5-->C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
BzTarot 1.02-->"C:\Program Files\BzTarot\unins000.exe"
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CodeStuff Starter-->"C:\Program Files\CodeStuff\Starter\unStarter.exe"
Consolas Font Family-->MsiExec.exe /I{6AE22174-4FFA-4572-B692-31F0C386ED38}
Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
DebugMode Wink-->"C:\Program Files\Wink\uninst.exe"
DWGeditor-->MsiExec.exe /X{F5125699-C01A-4ED8-BD3A-265DF29859FE}
EasyPHP 1.8-->"C:\Program Files\EasyPHP1-8\unins000.exe"
eDrawings 2007-->MsiExec.exe /I{10197522-9082-440E-8E1E-B970986DF60E}
eoEngine 9.1-->"C:\Program Files\EoRezo\unins000.exe"
EZface ActiveX 204-->C:\PROGRA~1\EZFace\ActiveX\uninst.bat 204 C:\PROGRA~1\EZFace\ActiveX
Flash Player Pro V3.7-->"C:\Program Files\Flash Player Pro\unins000.exe"
Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
GOélan Solid Importer 2004-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{861672A2-DD00-4799-8C40-B4D853032A6E}\setup.exe" -l0x40c anything
GOelanV4 (4.5)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F8FDA4F5-3000-452E-8C4D-68C1ABABB7D4}\setup.exe" uninstall
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0E996B068B56FCA2.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{9509674F-3972-11DE-806D-005056806466}
Google Earth-->MsiExec.exe /X{C084BC61-E537-11DE-8616-005056806466}
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
HP Imaging Device Functions 11.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart C4500 All-In-One Driver Software 11.0 Rel .4-->C:\Program Files\HP\Digital Imaging\{BED1705F-7558-40f7-9F52-6C6FBD58EA2E}\setup\hpzscr01.exe -datfile hposcr30.dat -onestop
HP Smart Web Printing-->C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpzscr01.exe -datfile hpqbud15.dat
HP Solution Center 11.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat -forcereboot
HP Update-->MsiExec.exe /X{818ABC3C-635C-4651-8183-D0E9640B7DD1}
Image Resizer Powertoy for Windows XP-->MsiExec.exe /I{1CB92574-96F2-467B-B793-5CEB35C40C29}
Ink-->MsiExec.exe /I{9FCB2876-554D-491D-A2CD-58F8252D6C64}
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
InterVideo WinDVD-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
J2SE Runtime Environment 5.0 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150070}
J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Learn2 Player (Uninstall Only)-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Ma-Config.com-->MsiExec.exe /X{18754BA4-4F0C-4E6E-888B-9496AFA05F43}
Mes Polices version 1.0-->"C:\Program Files\MesPolices10\unins000.exe"
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft MSDN 2005 Express - FRA-->C:\Program Files\Microsoft Visual Studio 8\Microsoft MSDN 2005 Express Edition - FRA\install.exe
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0122-040C-0000-0000000FF1CE}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)-->MsiExec.exe /I{480DBB60-F0B6-45F2-B26F-1A2E11197791}
Microsoft SQL Server 2005 Tools Express Edition-->MsiExec.exe /I{3F59A7E0-BC01-4435-9E93-C7D7015C21DA}
Microsoft SQL Server Compact 3.5 Design Tools ENU-->MsiExec.exe /X{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}
Microsoft SQL Server Compact 3.5 Design Tools FRA-->MsiExec.exe /X{043ECF7B-4724-4F7B-8A9D-BC22719E95F7}
Microsoft SQL Server Compact 3.5 ENU-->MsiExec.exe /I{BCC899FE-2DAA-460C-A5FB-60291E73D9C3}
Microsoft SQL Server Compact 3.5 FRA-->MsiExec.exe /I{BE361597-42AC-4513-9BA6-FFAB310038FB}
Microsoft SQL Server Native Client-->MsiExec.exe /I{A3DAD26A-8CEA-44C2-8077-CE53239A56B3}
Microsoft SQL Server VSS Writer-->MsiExec.exe /I{335EE0D1-CBF2-499A-8830-7DA4ADDD60F8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft Visual Basic 2005 Express - FRA-->C:\Program Files\Microsoft Visual Studio 8\Microsoft Visual Basic 2005 Express Edition - FRA\setup.exe
Microsoft Visual Basic 2008 Express - Français-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual Basic 2008 Express Edition - FRA\setup.exe
Microsoft Visual Basic 2008 Express Edition - ENU-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual Basic 2008 Express Edition - ENU\setup.exe
Microsoft Visual Basic 2008 Express Edition - ENU-->MsiExec.exe /X{9C2DC81B-8114-37D9-A922-95E460A1FAFB}
Microsoft Visual Basic 2008 Express Edition - FRA-->MsiExec.exe /X{ACC61C04-48C5-3F6F-977B-AD33E94E5F40}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework-->MsiExec.exe /X{AB47EEE8-507B-331F-AA28-B7C7257F014C}
Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32-->MsiExec.exe /X{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}
Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
MicroStaff WINASPI NT-->C:\MWASPINT\uninst.exe
Mise à Jour de FX-INTERFACE 1.9.6-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{48FED4F7-BB25-44A0-A281-A592CFA1EBE3}\setup.exe" -norepairmode
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB969497)-->"C:\WINDOWS\ie8updates\KB969497-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Motamo 4.22-->"C:\Program Files\Motamo\unins000.exe"
Mozilla Firefox (3.5.7)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{1787603C-E6E3-42D4-8034-55F358486F1D}
Multi Player v0.86.5-->MsiExec.exe /I{05E0B37D-BAB3-427F-ABB7-2FE49356A5E9}
Nero OEM-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
NeroVision Express 3 SE-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
NeroVision Express Content-->C:\WINDOWS\UNNVEContent.exe /UNINSTALL
Norton Security Scan-->C:\Program Files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.3.0.44\InstStub.exe /X
Norton WMI Update-->MsiExec.exe /X{E85FA9A1-C241-4698-893B-DD99509B8DB0}
Norton WMI Update-->MsiExec.exe /X{F64306A5-4C32-41bb-B153-53986527FAB4}
Notepad++-->C:\Program Files\Notepad++\uninstall.exe
OCR Software by I.R.I.S. 11.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
ODS-->C:\Program Files\ODS\Uninstal.exe
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
Pianonimo-->C:\Program Files\metronimo\pianonimo\Uninstal.exe
programme-->C:\Techno-Flash\ConstElec1-0\DésinstallerConstElec.exe
QuickTime-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
SafeCast Shared Components-->C:\Program Files\Fichiers communs\Macrovision Shared\SafeCast\Install\CDAC13BA.EXE /uninstall
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Shop for HP Supplies-->C:\Program Files\HP\Digital Imaging\HPSSupply\hpzscr01.exe -datfile hpqbud16.dat
Soft Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200014F1\HXFSETUP.EXE -U -IPDRSLSM5K.inf
SoftwareUpdate 1.0-->"C:\Documents and Settings\dan\Application Data\eoRezo\SoftwareUpdate\unins000.exe"
SolidWorks 2007 SP0-->MsiExec.exe /I{D0B5FD6D-F787-4D40-BB8F-7EDD73DD523E}
SolidWorks Explorer 2007 sp0-->MsiExec.exe /I{559FAB96-A0CD-4105-A02F-1C21DEBCEF89}
SolidWorks Installation Manager-->MsiExec.exe /X{26621E14-A45B-45CD-9ED9-7A0A9B585DB4}
SPBBC-->MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
SpinFire Viewer 5.0-->C:\PROGRA~1\Actify\UNWISE.EXE C:\PROGRA~1\Actify\SFVIEW~1.LOG
Spybot - Search & Destroy 1.5.2.20-->"C:\WINDOWS\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe"
Stellar Phoenix NTFS Data Recovery V3.0-->"C:\Program Files\Stellar Phoenix NTFS Data Recovery\unins000.exe"
SweetIM Toolbar for Internet Explorer 3.2-->MsiExec.exe /X{36D6A89E-C39F-4EE8-9181-C13E9BC739A5}
TerraExplorer-->C:\Program Files\Skyline\TerraExplorer\Setup.exe [OP]/U
VB101SamplesAll-->MsiExec.exe /I{DCECEA3F-26D5-4A7D-9E43-D76380F16B99}
VideoCAM Trek-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F3220F3E-3B12-4B65-861D-B8EFCCA44A39}\Setup.exe" -l0x40c
ViewletACE 2006-->MsiExec.exe /I{86A6AB32-97C9-44CE-AB42-2C81E3A9D7DF}
Visual Studio 2005 Extensions for Windows Workflow Foundation-->"C:\Program Files\Microsoft Visual Studio 2005 Extensions for Windows Workflow Foundation\Setup.exe" /SetupXML "C:\Program Files\Microsoft Visual Studio 2005 Extensions for Windows Workflow Foundation\\x86\Setup.xml"
Visual Studio 2005 Extensions for Windows Workflow Foundation-->MsiExec.exe /I{C8A7718A-FF6D-4DDC-AE36-BBF968D6799B}
WebTarot 1.15-->C:\WINDOWS\Taroteam\unins000.exe
Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
WJChess2D-->C:\PROGRA~1\JeffProd\WJCHES~1\UNWISE.EXE C:\PROGRA~1\JeffProd\WJCHES~1\INSTALL.LOG
WordBiz version 1.8-->"C:\Program Files\WordBiz\unins000.exe"
xbarre-->C:\Program Files\xbarre\uninstall.exe -uninstall -prompt
======Hosts File======
127.0.0.1 localhost
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
======Security center information======
AV: AntiVir Desktop
======System event log======
Computer Name: NOM-7CDEC717282
Event Code: 7036
Message: Le service NLA (Network Location Awareness) est entré dans l'état : en cours d'exécution.
Record Number: 16202
Source Name: Service Control Manager
Time Written: 20100112000351.000000+060
Event Type: Informations
User:
Computer Name: NOM-7CDEC717282
Event Code: 10005
Message: DCOM a reçu l'erreur "%2" lors de la mise en route du service BITS avec les arguments ""
pour démarrer le serveur :
{4991D34B-80A1-4291-83B6-3328366B9097}
Record Number: 16201
Source Name: DCOM
Time Written: 20100112000351.000000+060
Event Type: erreur
User: AUTORITE NT\SYSTEM
Computer Name: NOM-7CDEC717282
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service NLA (Network Location Awareness).
Record Number: 16200
Source Name: Service Control Manager
Time Written: 20100112000350.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: NOM-7CDEC717282
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Gestionnaire de connexions d'accès distant.
Record Number: 16199
Source Name: Service Control Manager
Time Written: 20100112000350.000000+060
Event Type: Informations
User: NOM-7CDEC717282\dan
Computer Name: NOM-7CDEC717282
Event Code: 7036
Message: Le service Service HP CUE DeviceDiscovery est entré dans l'état : en cours d'exécution.
Record Number: 16198
Source Name: Service Control Manager
Time Written: 20100112000350.000000+060
Event Type: Informations
User:
=====Application event log=====
Computer Name: NOM-7CDEC717282
Event Code: 17049
Message: Impossible d'effectuer une itération dans le fichier journal des erreurs à partir de 'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\ERRORLOG.4' jusqu'à 'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\ERRORLOG.5' en raison de l'erreur système '5(Accès refusé.)'. Un processus extérieur à SQL Server empêche peut-être SQL Server de lire les fichiers. Par conséquent, des entrées du journal des erreurs sont peut-être perdues et il n'est peut-être pas possible d'afficher certains journaux des erreurs SQL Server. Vérifiez qu'aucun autre processus n'a verrouillé le fichier en lecture seule."
Record Number: 5
Source Name: MSSQL$SQLEXPRESS
Time Written: 20100112150601.000000+060
Event Type: erreur
User:
Computer Name: NOM-7CDEC717282
Event Code: 17049
Message: Impossible d'effectuer une itération dans le fichier journal des erreurs à partir de 'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\ERRORLOG.5' jusqu'à 'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\ERRORLOG.6' en raison de l'erreur système '5(Accès refusé.)'. Un processus extérieur à SQL Server empêche peut-être SQL Server de lire les fichiers. Par conséquent, des entrées du journal des erreurs sont peut-être perdues et il n'est peut-être pas possible d'afficher certains journaux des erreurs SQL Server. Vérifiez qu'aucun autre processus n'a verrouillé le fichier en lecture seule."
Record Number: 4
Source Name: MSSQL$SQLEXPRESS
Time Written: 20100112150601.000000+060
Event Type: erreur
User:
Computer Name: NOM-7CDEC717282
Event Code: 15268
Message: Le mode d'authentification est WINDOWS-ONLY.
Record Number: 3
Source Name: MSSQL$SQLEXPRESS
Time Written: 20100112150600.000000+060
Event Type: Informations
User:
Computer Name: NOM-7CDEC717282
Event Code: 0
Message:
Record Number: 2
Source Name: HPSLPSVC
Time Written: 20100112150556.000000+060
Event Type: Informations
User:
Computer Name: NOM-7CDEC717282
Event Code: 0
Message:
Record Number: 1
Source Name: gupdate1c9aaa4b08cf5da
Time Written: 20100112150548.000000+060
Event Type: Informations
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"NUMBER_OF_PROCESSORS"=2
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\WBEM;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Microsoft SQL Server\90\Tools\binn\;C:\Program Files\Actify\Kernel;C:\Program Files\Actify\Importers
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 3, GenuineIntel
"PROCESSOR_LEVEL"=15
"PROCESSOR_REVISION"=0403
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"windir"=%SystemRoot%
-----------------EOF-----------------
info.txt logfile of random's system information tool 1.06 2010-01-14 09:22:28
======Uninstall list======
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
32 Bit HP CIO Components Installer-->MsiExec.exe /I{F7B0E599-C114-4493-BC4D-D8FC7CBBABBB}
Adobe Acrobat 4.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.dll"
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Shockwave Player 11.5-->"C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe"
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
AVG Anti-Spyware 7.5-->C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
BzTarot 1.02-->"C:\Program Files\BzTarot\unins000.exe"
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CodeStuff Starter-->"C:\Program Files\CodeStuff\Starter\unStarter.exe"
Consolas Font Family-->MsiExec.exe /I{6AE22174-4FFA-4572-B692-31F0C386ED38}
Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
DebugMode Wink-->"C:\Program Files\Wink\uninst.exe"
DWGeditor-->MsiExec.exe /X{F5125699-C01A-4ED8-BD3A-265DF29859FE}
EasyPHP 1.8-->"C:\Program Files\EasyPHP1-8\unins000.exe"
eDrawings 2007-->MsiExec.exe /I{10197522-9082-440E-8E1E-B970986DF60E}
eoEngine 9.1-->"C:\Program Files\EoRezo\unins000.exe"
EZface ActiveX 204-->C:\PROGRA~1\EZFace\ActiveX\uninst.bat 204 C:\PROGRA~1\EZFace\ActiveX
Flash Player Pro V3.7-->"C:\Program Files\Flash Player Pro\unins000.exe"
Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
GOélan Solid Importer 2004-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{861672A2-DD00-4799-8C40-B4D853032A6E}\setup.exe" -l0x40c anything
GOelanV4 (4.5)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F8FDA4F5-3000-452E-8C4D-68C1ABABB7D4}\setup.exe" uninstall
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0E996B068B56FCA2.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{9509674F-3972-11DE-806D-005056806466}
Google Earth-->MsiExec.exe /X{C084BC61-E537-11DE-8616-005056806466}
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
HP Imaging Device Functions 11.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart C4500 All-In-One Driver Software 11.0 Rel .4-->C:\Program Files\HP\Digital Imaging\{BED1705F-7558-40f7-9F52-6C6FBD58EA2E}\setup\hpzscr01.exe -datfile hposcr30.dat -onestop
HP Smart Web Printing-->C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpzscr01.exe -datfile hpqbud15.dat
HP Solution Center 11.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat -forcereboot
HP Update-->MsiExec.exe /X{818ABC3C-635C-4651-8183-D0E9640B7DD1}
Image Resizer Powertoy for Windows XP-->MsiExec.exe /I{1CB92574-96F2-467B-B793-5CEB35C40C29}
Ink-->MsiExec.exe /I{9FCB2876-554D-491D-A2CD-58F8252D6C64}
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
InterVideo WinDVD-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
J2SE Runtime Environment 5.0 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150070}
J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Learn2 Player (Uninstall Only)-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Ma-Config.com-->MsiExec.exe /X{18754BA4-4F0C-4E6E-888B-9496AFA05F43}
Mes Polices version 1.0-->"C:\Program Files\MesPolices10\unins000.exe"
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft MSDN 2005 Express - FRA-->C:\Program Files\Microsoft Visual Studio 8\Microsoft MSDN 2005 Express Edition - FRA\install.exe
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0122-040C-0000-0000000FF1CE}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)-->MsiExec.exe /I{480DBB60-F0B6-45F2-B26F-1A2E11197791}
Microsoft SQL Server 2005 Tools Express Edition-->MsiExec.exe /I{3F59A7E0-BC01-4435-9E93-C7D7015C21DA}
Microsoft SQL Server Compact 3.5 Design Tools ENU-->MsiExec.exe /X{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}
Microsoft SQL Server Compact 3.5 Design Tools FRA-->MsiExec.exe /X{043ECF7B-4724-4F7B-8A9D-BC22719E95F7}
Microsoft SQL Server Compact 3.5 ENU-->MsiExec.exe /I{BCC899FE-2DAA-460C-A5FB-60291E73D9C3}
Microsoft SQL Server Compact 3.5 FRA-->MsiExec.exe /I{BE361597-42AC-4513-9BA6-FFAB310038FB}
Microsoft SQL Server Native Client-->MsiExec.exe /I{A3DAD26A-8CEA-44C2-8077-CE53239A56B3}
Microsoft SQL Server VSS Writer-->MsiExec.exe /I{335EE0D1-CBF2-499A-8830-7DA4ADDD60F8}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft Visual Basic 2005 Express - FRA-->C:\Program Files\Microsoft Visual Studio 8\Microsoft Visual Basic 2005 Express Edition - FRA\setup.exe
Microsoft Visual Basic 2008 Express - Français-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual Basic 2008 Express Edition - FRA\setup.exe
Microsoft Visual Basic 2008 Express Edition - ENU-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual Basic 2008 Express Edition - ENU\setup.exe
Microsoft Visual Basic 2008 Express Edition - ENU-->MsiExec.exe /X{9C2DC81B-8114-37D9-A922-95E460A1FAFB}
Microsoft Visual Basic 2008 Express Edition - FRA-->MsiExec.exe /X{ACC61C04-48C5-3F6F-977B-AD33E94E5F40}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework-->MsiExec.exe /X{AB47EEE8-507B-331F-AA28-B7C7257F014C}
Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32-->MsiExec.exe /X{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}
Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
MicroStaff WINASPI NT-->C:\MWASPINT\uninst.exe
Mise à Jour de FX-INTERFACE 1.9.6-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{48FED4F7-BB25-44A0-A281-A592CFA1EBE3}\setup.exe" -norepairmode
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB969497)-->"C:\WINDOWS\ie8updates\KB969497-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Motamo 4.22-->"C:\Program Files\Motamo\unins000.exe"
Mozilla Firefox (3.5.7)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{1787603C-E6E3-42D4-8034-55F358486F1D}
Multi Player v0.86.5-->MsiExec.exe /I{05E0B37D-BAB3-427F-ABB7-2FE49356A5E9}
Nero OEM-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
NeroVision Express 3 SE-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
NeroVision Express Content-->C:\WINDOWS\UNNVEContent.exe /UNINSTALL
Norton Security Scan-->C:\Program Files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.3.0.44\InstStub.exe /X
Norton WMI Update-->MsiExec.exe /X{E85FA9A1-C241-4698-893B-DD99509B8DB0}
Norton WMI Update-->MsiExec.exe /X{F64306A5-4C32-41bb-B153-53986527FAB4}
Notepad++-->C:\Program Files\Notepad++\uninstall.exe
OCR Software by I.R.I.S. 11.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
ODS-->C:\Program Files\ODS\Uninstal.exe
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
Pianonimo-->C:\Program Files\metronimo\pianonimo\Uninstal.exe
programme-->C:\Techno-Flash\ConstElec1-0\DésinstallerConstElec.exe
QuickTime-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
SafeCast Shared Components-->C:\Program Files\Fichiers communs\Macrovision Shared\SafeCast\Install\CDAC13BA.EXE /uninstall
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Shop for HP Supplies-->C:\Program Files\HP\Digital Imaging\HPSSupply\hpzscr01.exe -datfile hpqbud16.dat
Soft Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200014F1\HXFSETUP.EXE -U -IPDRSLSM5K.inf
SoftwareUpdate 1.0-->"C:\Documents and Settings\dan\Application Data\eoRezo\SoftwareUpdate\unins000.exe"
SolidWorks 2007 SP0-->MsiExec.exe /I{D0B5FD6D-F787-4D40-BB8F-7EDD73DD523E}
SolidWorks Explorer 2007 sp0-->MsiExec.exe /I{559FAB96-A0CD-4105-A02F-1C21DEBCEF89}
SolidWorks Installation Manager-->MsiExec.exe /X{26621E14-A45B-45CD-9ED9-7A0A9B585DB4}
SPBBC-->MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
SpinFire Viewer 5.0-->C:\PROGRA~1\Actify\UNWISE.EXE C:\PROGRA~1\Actify\SFVIEW~1.LOG
Spybot - Search & Destroy 1.5.2.20-->"C:\WINDOWS\unins000.exe"
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe"
Stellar Phoenix NTFS Data Recovery V3.0-->"C:\Program Files\Stellar Phoenix NTFS Data Recovery\unins000.exe"
SweetIM Toolbar for Internet Explorer 3.2-->MsiExec.exe /X{36D6A89E-C39F-4EE8-9181-C13E9BC739A5}
TerraExplorer-->C:\Program Files\Skyline\TerraExplorer\Setup.exe [OP]/U
VB101SamplesAll-->MsiExec.exe /I{DCECEA3F-26D5-4A7D-9E43-D76380F16B99}
VideoCAM Trek-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F3220F3E-3B12-4B65-861D-B8EFCCA44A39}\Setup.exe" -l0x40c
ViewletACE 2006-->MsiExec.exe /I{86A6AB32-97C9-44CE-AB42-2C81E3A9D7DF}
Visual Studio 2005 Extensions for Windows Workflow Foundation-->"C:\Program Files\Microsoft Visual Studio 2005 Extensions for Windows Workflow Foundation\Setup.exe" /SetupXML "C:\Program Files\Microsoft Visual Studio 2005 Extensions for Windows Workflow Foundation\\x86\Setup.xml"
Visual Studio 2005 Extensions for Windows Workflow Foundation-->MsiExec.exe /I{C8A7718A-FF6D-4DDC-AE36-BBF968D6799B}
WebTarot 1.15-->C:\WINDOWS\Taroteam\unins000.exe
Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
WJChess2D-->C:\PROGRA~1\JeffProd\WJCHES~1\UNWISE.EXE C:\PROGRA~1\JeffProd\WJCHES~1\INSTALL.LOG
WordBiz version 1.8-->"C:\Program Files\WordBiz\unins000.exe"
xbarre-->C:\Program Files\xbarre\uninstall.exe -uninstall -prompt
======Hosts File======
127.0.0.1 localhost
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
======Security center information======
AV: AntiVir Desktop
======System event log======
Computer Name: NOM-7CDEC717282
Event Code: 7036
Message: Le service NLA (Network Location Awareness) est entré dans l'état : en cours d'exécution.
Record Number: 16202
Source Name: Service Control Manager
Time Written: 20100112000351.000000+060
Event Type: Informations
User:
Computer Name: NOM-7CDEC717282
Event Code: 10005
Message: DCOM a reçu l'erreur "%2" lors de la mise en route du service BITS avec les arguments ""
pour démarrer le serveur :
{4991D34B-80A1-4291-83B6-3328366B9097}
Record Number: 16201
Source Name: DCOM
Time Written: 20100112000351.000000+060
Event Type: erreur
User: AUTORITE NT\SYSTEM
Computer Name: NOM-7CDEC717282
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service NLA (Network Location Awareness).
Record Number: 16200
Source Name: Service Control Manager
Time Written: 20100112000350.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: NOM-7CDEC717282
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Gestionnaire de connexions d'accès distant.
Record Number: 16199
Source Name: Service Control Manager
Time Written: 20100112000350.000000+060
Event Type: Informations
User: NOM-7CDEC717282\dan
Computer Name: NOM-7CDEC717282
Event Code: 7036
Message: Le service Service HP CUE DeviceDiscovery est entré dans l'état : en cours d'exécution.
Record Number: 16198
Source Name: Service Control Manager
Time Written: 20100112000350.000000+060
Event Type: Informations
User:
=====Application event log=====
Computer Name: NOM-7CDEC717282
Event Code: 17049
Message: Impossible d'effectuer une itération dans le fichier journal des erreurs à partir de 'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\ERRORLOG.4' jusqu'à 'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\ERRORLOG.5' en raison de l'erreur système '5(Accès refusé.)'. Un processus extérieur à SQL Server empêche peut-être SQL Server de lire les fichiers. Par conséquent, des entrées du journal des erreurs sont peut-être perdues et il n'est peut-être pas possible d'afficher certains journaux des erreurs SQL Server. Vérifiez qu'aucun autre processus n'a verrouillé le fichier en lecture seule."
Record Number: 5
Source Name: MSSQL$SQLEXPRESS
Time Written: 20100112150601.000000+060
Event Type: erreur
User:
Computer Name: NOM-7CDEC717282
Event Code: 17049
Message: Impossible d'effectuer une itération dans le fichier journal des erreurs à partir de 'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\ERRORLOG.5' jusqu'à 'C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\ERRORLOG.6' en raison de l'erreur système '5(Accès refusé.)'. Un processus extérieur à SQL Server empêche peut-être SQL Server de lire les fichiers. Par conséquent, des entrées du journal des erreurs sont peut-être perdues et il n'est peut-être pas possible d'afficher certains journaux des erreurs SQL Server. Vérifiez qu'aucun autre processus n'a verrouillé le fichier en lecture seule."
Record Number: 4
Source Name: MSSQL$SQLEXPRESS
Time Written: 20100112150601.000000+060
Event Type: erreur
User:
Computer Name: NOM-7CDEC717282
Event Code: 15268
Message: Le mode d'authentification est WINDOWS-ONLY.
Record Number: 3
Source Name: MSSQL$SQLEXPRESS
Time Written: 20100112150600.000000+060
Event Type: Informations
User:
Computer Name: NOM-7CDEC717282
Event Code: 0
Message:
Record Number: 2
Source Name: HPSLPSVC
Time Written: 20100112150556.000000+060
Event Type: Informations
User:
Computer Name: NOM-7CDEC717282
Event Code: 0
Message:
Record Number: 1
Source Name: gupdate1c9aaa4b08cf5da
Time Written: 20100112150548.000000+060
Event Type: Informations
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"NUMBER_OF_PROCESSORS"=2
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\WBEM;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Microsoft SQL Server\90\Tools\binn\;C:\Program Files\Actify\Kernel;C:\Program Files\Actify\Importers
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 3, GenuineIntel
"PROCESSOR_LEVEL"=15
"PROCESSOR_REVISION"=0403
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"windir"=%SystemRoot%
-----------------EOF-----------------
Utilisateur anonyme
14 janv. 2010 à 14:59
14 janv. 2010 à 14:59
bonjour,
tu a été rootkité, en plus tu es l'hereux déteneur de EOREZO !
pas mal de boulot à faire, mais on va tout nettoyer :-)
• /!\Avertissement :
Ce logiciel n'est à utiliser que prescrit par un helper qualifié et formé à l'outil.
Ne pas utiliser en dehors de ce cas de figure : dangereux!
Télécharges ComboFix à partir de ce lien :
https://forum.pcastuces.com/combofix_renomme_au_telechargement-f31s22.htm
ou ici :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
A lire
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
► Et important, enregistre le sur le bureau.
Avant d'utiliser ComboFix :
► Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.
► Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
Une fois fait, sur ton bureau double-clic sur Combofix.exe.
- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.
/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.
- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.
- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)
► Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.
► Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.
Si ça ne marche pas, tu vires combofix de sur ton bureau et tu télécharge depuis ce lien jacombo qui est combofix renommé cela permet de contrer certaine infection, tu le mets sur ton bureau et tu suis les explications données dans la procédure de combofix
http://sd-1.archive-host.com/membres/up/89820622056365782/jacombo.exe
tu a été rootkité, en plus tu es l'hereux déteneur de EOREZO !
pas mal de boulot à faire, mais on va tout nettoyer :-)
• /!\Avertissement :
Ce logiciel n'est à utiliser que prescrit par un helper qualifié et formé à l'outil.
Ne pas utiliser en dehors de ce cas de figure : dangereux!
Télécharges ComboFix à partir de ce lien :
https://forum.pcastuces.com/combofix_renomme_au_telechargement-f31s22.htm
ou ici :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
A lire
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
► Et important, enregistre le sur le bureau.
Avant d'utiliser ComboFix :
► Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.
► Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
Une fois fait, sur ton bureau double-clic sur Combofix.exe.
- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.
/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.
- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.
- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)
► Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.
► Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.
Si ça ne marche pas, tu vires combofix de sur ton bureau et tu télécharge depuis ce lien jacombo qui est combofix renommé cela permet de contrer certaine infection, tu le mets sur ton bureau et tu suis les explications données dans la procédure de combofix
http://sd-1.archive-host.com/membres/up/89820622056365782/jacombo.exe
bonjour
voici donc le rapport combofix.
en vous remerciant.
ComboFix 10-01-13.0C - dan 14/01/2010 15:42:37.2.2 - x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.502 [GMT 1:00]
Lancé depuis: c:\documents and settings\dan\Bureau\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{402c769d-acde-42e5-86e6-25bda5bffd6e}
c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{402c769d-acde-42e5-86e6-25bda5bffd6e}\chrome.manifest
c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{402c769d-acde-42e5-86e6-25bda5bffd6e}\chrome\xulcache.jar
c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{402c769d-acde-42e5-86e6-25bda5bffd6e}\defaults\preferences\xulcache.js
c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{402c769d-acde-42e5-86e6-25bda5bffd6e}\install.rdf
c:\documents and settings\dan\Application Data\wiaserva.log
c:\documents and settings\dan\Local Settings\Application Data\suiwquw.dat
c:\documents and settings\dan\Local Settings\Application Data\suiwquw_nav.dat
c:\documents and settings\dan\Local Settings\Application Data\suiwquw_navps.dat
c:\program files\sFX
c:\recycler\S-1-5-21-2920691689-476926393-1501995116-1003
C:\Thumbs.db
c:\windows\1002zworm2059.exe
c:\windows\10091s956ze.dll
c:\windows\10095hazktool39.bin
c:\windows\102at5iz9456.cpl
c:\windows\1046ste5z3119.dll
c:\windows\10855h9ck5ool7eez.exe
c:\windows\1099spyware1z58.exe
c:\windows\11549hackz9ol594.dll
c:\windows\1155spazse18975.exe
c:\windows\116zaddw9re586.ocx
c:\windows\11889viruz2175.bin
c:\windows\11a5th9ezt9642.exe
c:\windows\12439hreat845z.exe
c:\windows\1296not-azviru96465.dll
c:\windows\13057troz9d5.exe
c:\windows\1355zspambot495.exe
c:\windows\1359downloader9z53.exe
c:\windows\13749s9amz5t456.exe
c:\windows\1401threat159z3.dll
c:\windows\14245spam5ot9z.ocx
c:\windows\143et59ez1397.ocx
c:\windows\14825hac5to9l1z6.ocx
c:\windows\14beback9oor259z.exe
c:\windows\15542h9ck5zol720.dll
c:\windows\15543vi9zs5c7.exe
c:\windows\15590trzj4d55.bin
c:\windows\1565zsp95bot54d.bin
c:\windows\156backdzor1978.ocx
c:\windows\15bbviz59969.dll
c:\windows\15c5do5z9oader1986.dll
c:\windows\15f0doznload9r19415.cpl
c:\windows\16205nzt-a-virus69f.cpl
c:\windows\16335ot-a9virus1z0.cpl
c:\windows\16495iz9918.dll
c:\windows\16776worm395z.exe
c:\windows\1690haz5tool2b5.bin
c:\windows\16fzdownlo5der902.dll
c:\windows\17534not-a-vzrus9c6.ocx
c:\windows\17575spam9ot294z.dll
c:\windows\17592tr9j5zd.ocx
c:\windows\17766v9ruz5b85.dll
c:\windows\17795wor951z5.exe
c:\windows\1858downl5ade975z.ocx
c:\windows\18638h95ktooz5a9.bin
c:\windows\18789notza-9irus5c3.dll
c:\windows\18805trzj5e9.ocx
c:\windows\18982vi5uz17a9.exe
c:\windows\18c7thief295z5.cpl
c:\windows\18d5threatz9953.exe
c:\windows\19474hacktool5a5z.cpl
c:\windows\19522z5oj95c.bin
c:\windows\19627zackto5l1f9.ocx
c:\windows\19945virz5809.cpl
c:\windows\19azthief25319.exe
c:\windows\19f9bzck9oor2512.cpl
c:\windows\1b95zhief1859.ocx
c:\windows\1bd5steal119z9.ocx
c:\windows\1c5fsp5warz2199.ocx
c:\windows\1c65baz5door9999.cpl
c:\windows\1ec7a5dware39z2.dll
c:\windows\1ee0zhreat252529.ocx
c:\windows\1z5049irus558.exe
c:\windows\1z5cthreat90340.cpl
c:\windows\1z96steal3155.dll
c:\windows\1z975vi5us2f.ocx
c:\windows\1za7downlo5de9134.cpl
c:\windows\20592nzt-a-virus474.cpl
c:\windows\21052wo9520z.bin
c:\windows\2115thiez98.exe
c:\windows\21514not-a-zirus49b.bin
c:\windows\21605s5zmbot5a9.ocx
c:\windows\2218azdwa5e2945.cpl
c:\windows\22987troz9905.bin
c:\windows\233z9parse756.dll
c:\windows\23547trzj930.dll
c:\windows\242cz5dware955.exe
c:\windows\24645s5zmb9t2ef.ocx
c:\windows\246ebazkdoor5918.ocx
c:\windows\2477zt5al1590.ocx
c:\windows\24854zr9j577.exe
c:\windows\248dbackd9or1985z.cpl
c:\windows\252785o9-a-viruz15f.dll
c:\windows\254t59eaz25241.cpl
c:\windows\25582tzoj1229.exe
c:\windows\25701troj95z.dll
c:\windows\25829spz3315.exe
c:\windows\25842not-z9vir5s5b9.ocx
c:\windows\258tzief1519.ocx
c:\windows\25957trz529f.exe
c:\windows\25b4back9ozr5729.bin
c:\windows\2651zvir9s4d2.dll
c:\windows\2652zspy99.exe
c:\windows\26759spazbo9551.ocx
c:\windows\26771hacktoo577z9.cpl
c:\windows\27955not-z-v9r5s31c.ocx
c:\windows\27964hazkt5ol6c9.dll
c:\windows\27c3azd95re891.cpl
c:\windows\27ecspar5e3z99.exe
c:\windows\28232zackt5ol7cc9.dll
c:\windows\285bst5al26z59.dll
c:\windows\28837szamb5t927.ocx
c:\windows\29215trojz775.dll
c:\windows\2925zs5y490.bin
c:\windows\29459spamz5t794.bin
c:\windows\29749hreat21510z.cpl
c:\windows\2978spars5z053.exe
c:\windows\298195orm224z.ocx
c:\windows\29950hacktozl725.exe
c:\windows\29z2t9ief18395.cpl
c:\windows\2b95s5ywaze3254.cpl
c:\windows\2c49dow9loaz5r2532.cpl
c:\windows\2f18vzr14955.cpl
c:\windows\2fz8sp5r9e588.dll
c:\windows\2z111virus1579.bin
c:\windows\2z1915acktoo9462.exe
c:\windows\2z292troj519.dll
c:\windows\2z572sp97ea5.dll
c:\windows\2za5stea51509.ocx
c:\windows\301z1no9-a-v5rusfa.dll
c:\windows\303929p54e1z.cpl
c:\windows\30569not9a-zirus165.dll
c:\windows\31135virz93f1.bin
c:\windows\3159t9izf2305.exe
c:\windows\3195zackdoo91090.cpl
c:\windows\31z89ddware5302.cpl
c:\windows\3218159y92z.bin
c:\windows\325585or97b5z.dll
c:\windows\325zth9ef1469.dll
c:\windows\32742not-a-9iruz658.cpl
c:\windows\327znot-a9virus515.dll
c:\windows\3389spywar52042z.exe
c:\windows\33a5ste9lz755.ocx
c:\windows\33e8ad9wa5z1550.exe
c:\windows\3506dow95oader30z5.dll
c:\windows\35093spy29az.ocx
c:\windows\3559viru94z7.ocx
c:\windows\3562tzo948c.dll
c:\windows\35z0thief25619.exe
c:\windows\3607th5e9z919.dll
c:\windows\3711zpa5se219.cpl
c:\windows\3782z95ef331.exe
c:\windows\382edownzo9de5450.bin
c:\windows\38e9parze21605.dll
c:\windows\3904worm29z5.exe
c:\windows\394bspar952483z.bin
c:\windows\39801viru5z89.cpl
c:\windows\399zspyware2851.cpl
c:\windows\39a0downlo5d9r1z04.exe
c:\windows\3b89sp5rse11z3.exe
c:\windows\3be79te5l5z6.ocx
c:\windows\3cdeaddwa9ez85.dll
c:\windows\3z49t9reat20531.dll
c:\windows\3z99s5eal1748.dll
c:\windows\4044wor93ze5.cpl
c:\windows\40549pamzot6c65.dll
c:\windows\4055backdooz2996.exe
c:\windows\4094thr5at136z0.ocx
c:\windows\415dv5r29z0.ocx
c:\windows\4196troj75z.bin
c:\windows\43z6thief27905.cpl
c:\windows\4475addw5rez94.cpl
c:\windows\447ethrea92675z.cpl
c:\windows\448daddz5re296.bin
c:\windows\4518vir31z69.cpl
c:\windows\453zvir5229.exe
c:\windows\45c3baczd5or30509.cpl
c:\windows\47z1spywa5e1919.cpl
c:\windows\4813ha5ktooz690.ocx
c:\windows\485not-a-virzs73a9.bin
c:\windows\490tr5954z.ocx
c:\windows\4931hazkt5ol58d.bin
c:\windows\495fspyware5851z.ocx
c:\windows\4a91thief2025z.exe
c:\windows\4b67dow9lo5der26z4.dll
c:\windows\4f29zpywar5405.cpl
c:\windows\4fba9pzware5075.exe
c:\windows\4fccth5ez9198.cpl
c:\windows\4z9cspars52092.ocx
c:\windows\50018zorm49e.exe
c:\windows\508cthie92523z.exe
c:\windows\509z49py574.dll
c:\windows\50a4vi9195z.bin
c:\windows\50e69ownload5z2373.cpl
c:\windows\51979spy1dez.exe
c:\windows\51e95hzeat9414.dll
c:\windows\5258bac9dozr330.ocx
c:\windows\52746vizus90.cpl
c:\windows\527f5t9al236z.cpl
c:\windows\5295threat6981z.dll
c:\windows\5295zj1d.exe
c:\windows\53335spambzt9b5.cpl
c:\windows\5352a9dwzre265.cpl
c:\windows\53619not-a-virzs49f.dll
c:\windows\53728wzr93ba.cpl
c:\windows\5376zroj795.ocx
c:\windows\5379tzrea57174.bin
c:\windows\5387ba5kd9or11z3.bin
c:\windows\539z5py42d.exe
c:\windows\53z21troj3879.exe
c:\windows\54a5azdwa591258.ocx
c:\windows\54f6downlo9der2584z.cpl
c:\windows\5532hacktoo95za.exe
c:\windows\555adow9lo5dez1745.exe
c:\windows\55639szy329.ocx
c:\windows\5579ownlozder3259.dll
c:\windows\55925orm2za.exe
c:\windows\55c5vir19z29.bin
c:\windows\55e5thi9f19z5.exe
c:\windows\55fzspywar9845.bin
c:\windows\55z9pyware2149.exe
c:\windows\55z9vir32139.exe
c:\windows\5613s5arsz18279.cpl
c:\windows\5639sp9ware1954z.dll
c:\windows\564steaz9925.exe
c:\windows\5659tro51z.bin
c:\windows\5665zparse2639.dll
c:\windows\569fthreaz30142.cpl
c:\windows\5759spyz98.dll
c:\windows\5764viru9578z.cpl
c:\windows\588zsparse2929.ocx
c:\windows\5920zpar9e3655.cpl
c:\windows\5939s5yware319z.bin
c:\windows\5969hack9oo55z8.ocx
c:\windows\5973add5a9e169z.ocx
c:\windows\59783virusz92.bin
c:\windows\598caddware242z.cpl
c:\windows\598eth59z294.cpl
c:\windows\5995stezl3165.dll
c:\windows\599zs5arse908.bin
c:\windows\59d9spazs53055.cpl
c:\windows\59ftzreat18844.bin
c:\windows\59z6spy3589.cpl
c:\windows\5a05dow5loaderz19.cpl
c:\windows\5a629pz5se12.bin
c:\windows\5b1z9teal2272.cpl
c:\windows\5b5zbac9door1639.exe
c:\windows\5b86zp9ware1552.cpl
c:\windows\5b9ezhief12985.cpl
c:\windows\5b9ownloader301z.dll
c:\windows\5c99zyware20145.bin
c:\windows\5d48sz59are2361.cpl
c:\windows\5db4addware23z59.ocx
c:\windows\5e1ast9zl523.cpl
c:\windows\5e3d9zr351.cpl
c:\windows\5e89zh5ef1402.bin
c:\windows\5f9zsparse1594.bin
c:\windows\5z98troj539.cpl
c:\windows\5zb3t9re5t4788.exe
c:\windows\6015szeal20549.dll
c:\windows\601fba9zd5or350.cpl
c:\windows\61b9zir17185.exe
c:\windows\626zt9rea54607.dll
c:\windows\6292s597z8.dll
c:\windows\63655ot-a-virzs6bf9.dll
c:\windows\6477spam9oz2735.dll
c:\windows\650czteal1999.bin
c:\windows\6542addwa9z2554.cpl
c:\windows\655cszyware659.dll
c:\windows\6597hacktz9l591.cpl
c:\windows\659zthreat20072.bin
c:\windows\6674vir55z9.ocx
c:\windows\67b8tzi951953.bin
c:\windows\6959notza5viru9105.bin
c:\windows\6963spam5ot4z2.dll
c:\windows\6966th5zat17218.ocx
c:\windows\69b6ste5z480.ocx
c:\windows\69ccvir8z5.exe
c:\windows\69etzr5at17919.exe
c:\windows\69f8bac9door209z5.exe
c:\windows\6bbdspyw9re2853z.exe
c:\windows\6de95zeal3197.exe
c:\windows\6dzab9ckd5or246.bin
c:\windows\6fz9vir1252.exe
c:\windows\6fzathre5t92480.dll
c:\windows\6zbcs9e5l235.ocx
c:\windows\6zddbackdoo91855.bin
c:\windows\7095spyw5rz1222.ocx
c:\windows\71e2downloa9er2053z.cpl
c:\windows\7215spa9zot2d8.exe
c:\windows\7292a5dwzre5859.cpl
c:\windows\738bspazse9556.ocx
c:\windows\752bsz5ware999.cpl
c:\windows\7566downzoade91128.bin
c:\windows\75a9adzw9re728.dll
c:\windows\761zspyware9585.exe
c:\windows\7629thzeat50993.dll
c:\windows\766aspazse9756.bin
c:\windows\77f9viz98915.ocx
c:\windows\799vi9zs570.ocx
c:\windows\79atzr5a924231.dll
c:\windows\79d6vir505z.dll
c:\windows\7a9dow5loazer1649.cpl
c:\windows\7b32szeal5913.dll
c:\windows\7b45vi9z161.cpl
c:\windows\7c00addw9rz2545.bin
c:\windows\7c95zackdoor2416.bin
c:\windows\7ce9s5zrse2932.ocx
c:\windows\7e93spywa5e47z.bin
c:\windows\863stza9511.exe
c:\windows\8a6t9rzat29657.ocx
c:\windows\8f9z5ckdoor9061.ocx
c:\windows\8zat5ief19159.exe
c:\windows\90155troj7z9.bin
c:\windows\905z9no5-a-virus7b7.cpl
c:\windows\9156v9rus3e6z.dll
c:\windows\915thief14z45.exe
c:\windows\91965hacktoo51d2z.exe
c:\windows\92969pyz535.ocx
c:\windows\93153h5cktooz135.bin
c:\windows\9343doznloa5er365.cpl
c:\windows\934fdfg34fgjf23
c:\windows\93z5virus122.cpl
c:\windows\9533thief624z.exe
c:\windows\957z0spambot34c.ocx
c:\windows\9652wo9m2z5.bin
c:\windows\96a5viz5645.bin
c:\windows\96z75troj422.cpl
c:\windows\9755za95tool271.bin
c:\windows\98044spambot50z5.dll
c:\windows\986s5amzot79d.ocx
c:\windows\99zr5j37e.ocx
c:\windows\9a34threat2z9365.bin
c:\windows\9czaddwar5741.ocx
c:\windows\9e52backdo5r90z.ocx
c:\windows\9edezddw5re2966.ocx
c:\windows\9zcsp9ware4485.ocx
c:\windows\a1esparse5391z.ocx
c:\windows\a63backdo5r7z9.bin
c:\windows\a9addware1z85.ocx
c:\windows\bf23567.dat
c:\windows\c88thi5f9429z.cpl
c:\windows\d52spywarez049.cpl
c:\windows\daz9tea52065.exe
c:\windows\f5fdownload9r26z8.exe
c:\windows\f5th9efz0275.dll
c:\windows\patch.exe
c:\windows\system\msvbvm60.dll
c:\windows\system32\1059ba9kdzor2221.bin
c:\windows\system32\10a9z5al2307.cpl
c:\windows\system32\10f1dow5loa9ez2221.dll
c:\windows\system32\11110t9oj32z5.exe
c:\windows\system32\11129spamz5t140.exe
c:\windows\system32\11359spamb5tzeb.exe
c:\windows\system32\1142959t-a-virusz5.bin
c:\windows\system32\1168ztr9j5d2.bin
c:\windows\system32\116z4s5y597.exe
c:\windows\system32\118zack9oor1615.dll
c:\windows\system32\119ethreat536z.ocx
c:\windows\system32\11b4thzea9277185.cpl
c:\windows\system32\120215roj9ez.ocx
c:\windows\system32\120f5hiefz962.dll
c:\windows\system32\12184not-z-vi9us5f.cpl
c:\windows\system32\12749v5rzs699.ocx
c:\windows\system32\12766zac9tool7b5.ocx
c:\windows\system32\12990szambot153.cpl
c:\windows\system32\12z19virus7519.dll
c:\windows\system32\12z95ir313.ocx
c:\windows\system32\13201noz5a-viru95dc.ocx
c:\windows\system32\13526v9rzs34c.dll
c:\windows\system32\135bth9e52z58.dll
c:\windows\system32\1399ztea51557.ocx
c:\windows\system32\13dczpyw5re9627.ocx
c:\windows\system32\13z6v5r9s72c.ocx
c:\windows\system32\13z75not-a-vi9us90.exe
c:\windows\system32\14006not-a9viruz125.ocx
c:\windows\system32\14129troz753.cpl
c:\windows\system32\143z3no9-a-5irus7c7.exe
c:\windows\system32\149985rojz5b.cpl
c:\windows\system32\15159troz7539.dll
c:\windows\system32\153225acz9ool656.exe
c:\windows\system32\1537vizu5992.ocx
c:\windows\system32\15469notza-9irus546.ocx
c:\windows\system32\15546tro955z.bin
c:\windows\system32\15595ha9ktz5l186.cpl
c:\windows\system32\15691z9ru59a.dll
c:\windows\system32\156fz9eal2334.bin
c:\windows\system32\15724hazkto591a0.cpl
c:\windows\system32\15956no9-a-virzs65d.cpl
c:\windows\system32\15972spa9bzt133.bin
c:\windows\system32\15z21wo59376.exe
c:\windows\system32\1654zhacktoo9793.bin
c:\windows\system32\16b0v5rz499.bin
c:\windows\system32\16z89v9rus85.bin
c:\windows\system32\1705ownloader3904z.ocx
c:\windows\system32\17292spzmbot6ce5.ocx
c:\windows\system32\17299spyz459.exe
c:\windows\system32\17373sp5mbo94z7.exe
c:\windows\system32\17456trz95dc.exe
c:\windows\system32\175th9eaz193545.exe
c:\windows\system32\1795z9ar5e3078.cpl
c:\windows\system32\17b6addwarz2594.ocx
c:\windows\system32\18358ha5k9oolz3e.ocx
c:\windows\system32\18609z5rm7c9.dll
c:\windows\system32\18899n5t-a-virus4zb.exe
c:\windows\system32\18995tzoj75f.exe
c:\windows\system32\189bbackdoo5z4009.cpl
c:\windows\system32\1911zhacktool50.cpl
c:\windows\system32\19197not-a-vi5u94bz.ocx
c:\windows\system32\19204wzrm59b.exe
c:\windows\system32\1954thief511z.dll
c:\windows\system32\1960addzare2415.ocx
c:\windows\system32\19698spy59ez.bin
c:\windows\system32\19926sp5zf9.cpl
c:\windows\system32\19959worz7cb.bin
c:\windows\system32\19979spy50fz.ocx
c:\windows\system32\19a0backdoo9z9005.dll
c:\windows\system32\19z05worm6575.bin
c:\windows\system32\19z50not-a-virus1a5.bin
c:\windows\system32\1a75zownload9r1797.bin
c:\windows\system32\1b95steal220z.cpl
c:\windows\system32\1bbczhreat19551.bin
c:\windows\system32\1bd5b9zkdoor71.cpl
c:\windows\system32\1c57thiz91434.cpl
c:\windows\system32\1c69b5ckdoorz633.dll
c:\windows\system32\1d74zackdoor5999.cpl
c:\windows\system32\1dcbthrea93z858.dll
c:\windows\system32\1e90sz5rse1747.exe
c:\windows\system32\1f4ea5dwzre11249.exe
c:\windows\system32\1f69zir5483.exe
c:\windows\system32\1f93th5e9z461.ocx
c:\windows\system32\1z379ha5k9ool84.dll
c:\windows\system32\1z450spy77d9.bin
c:\windows\system32\1z4545ir9s94.cpl
c:\windows\system32\1z590h5ckt9ol2e4.exe
c:\windows\system32\1z59backdoor1688.dll
c:\windows\system32\1z67t9ief595.dll
c:\windows\system32\1z870s9527d.ocx
c:\windows\system32\1z96th5ea95935.exe
c:\windows\system32\20097no9-a-vzru54e7.dll
c:\windows\system32\203addz5re9366.cpl
c:\windows\system32\205475pambz978e.bin
c:\windows\system32\20675tr9j3z4.bin
c:\windows\system32\208dadz9are1685.exe
c:\windows\system32\20903spam5o91bz.bin
c:\windows\system32\21085zpy92.dll
c:\windows\system32\21189h9czto5l1f4.dll
c:\windows\system32\2124tr9j7fz5.exe
c:\windows\system32\214z5h9ckt5ol5a1.dll
c:\windows\system32\21698sp53dz.dll
c:\windows\system32\21962ha9ktooz55b.dll
c:\windows\system32\21992s9am5oz6cb.ocx
c:\windows\system32\21d9sze5l3994.cpl
c:\windows\system32\225z9parse529.ocx
c:\windows\system32\22605tr9j50az.bin
c:\windows\system32\2296zh9cktool659.dll
c:\windows\system32\22z99troj3935.ocx
c:\windows\system32\23305w9r5d3z.cpl
c:\windows\system32\2395threz98677.bin
c:\windows\system32\2418z59oj301.dll
c:\windows\system32\24508hacktozl799.bin
c:\windows\system32\24519not-a-virzs49a.exe
c:\windows\system32\2476stealz9955.ocx
c:\windows\system32\249495r9j53z.ocx
c:\windows\system32\24ebdoznloade5191.cpl
c:\windows\system32\25252zirus595.dll
c:\windows\system32\254035o9z31.exe
c:\windows\system32\25551hacz9ool685.ocx
c:\windows\system32\25592spzmbo928a.ocx
c:\windows\system32\25597tzoj126.ocx
c:\windows\system32\255f9hizf3039.cpl
c:\windows\system32\25687spazb9t42c.cpl
c:\windows\system32\25793hacktozl9f5.cpl
c:\windows\system32\25905not-a-viru9b0z.dll
c:\windows\system32\25927zp59bot1be.cpl
c:\windows\system32\259995zrusa59.cpl
c:\windows\system32\260925py5z7.exe
c:\windows\system32\265z2spa9bot65b.bin
c:\windows\system32\26f4t5reat9993z.exe
c:\windows\system32\275eadd5zre935.ocx
c:\windows\system32\27z69py5d5.cpl
c:\windows\system32\282dsp5ware212z9.exe
c:\windows\system32\2854zhackto9l2d5.exe
c:\windows\system32\2899s9arse5z55.bin
c:\windows\system32\28bdzack9oor2584.dll
c:\windows\system32\2906zspy5a7.cpl
c:\windows\system32\290eaddware2z65.ocx
c:\windows\system32\2928downloazer5541.dll
c:\windows\system32\29299spamz5t216.ocx
c:\windows\system32\29369spzmbot5875.dll
c:\windows\system32\29503virus62z.cpl
c:\windows\system32\29517zot-a-v59us29a.ocx
c:\windows\system32\295z0troj98f5.bin
c:\windows\system32\296cthie51z359.ocx
c:\windows\system32\29715not-azv59us576.bin
c:\windows\system32\297fthz9at31315.cpl
c:\windows\system32\297z4hac9t5ol14d.ocx
c:\windows\system32\29z859orm703.exe
c:\windows\system32\2b41tz5eat91102.bin
c:\windows\system32\2b73a95ware8z3.bin
c:\windows\system32\2c9athrzat59757.cpl
c:\windows\system32\2d2ds5ealz295.cpl
c:\windows\system32\2e609o5nloaderz846.cpl
c:\windows\system32\2f9s5yware2z35.dll
c:\windows\system32\2z062not-a-9ir5s70b.cpl
c:\windows\system32\2z3dsparse5928.dll
c:\windows\system32\2z52spy769.dll
c:\windows\system32\3011zor5299.bin
c:\windows\system32\302z3hackt9ol65d.cpl
c:\windows\system32\303795roz958.cpl
c:\windows\system32\30565not-z-vi9us5e.exe
c:\windows\system32\31508n9t-a-zirus385.cpl
c:\windows\system32\3255v9rus52z.dll
c:\windows\system32\32699z5oj69f.exe
c:\windows\system32\32935hacktool4fcz.bin
c:\windows\system32\33dbsze5l14989.exe
c:\windows\system32\345dspars9321z.exe
c:\windows\system32\3465n5z-a-virus299.exe
c:\windows\system32\346zvir2955.bin
c:\windows\system32\34z0w5rm4809.bin
c:\windows\system32\3549s5eal2z73.ocx
c:\windows\system32\35507hacktoo9z1c.exe
c:\windows\system32\355esp9warz2921.ocx
c:\windows\system32\35dzth5eat28915.ocx
c:\windows\system32\35e0vzr5491.bin
c:\windows\system32\367c9dd5zre3031.exe
c:\windows\system32\36afad9wa5e1338z.dll
c:\windows\system32\37015t9al3z86.ocx
c:\windows\system32\3790spz5se579.ocx
c:\windows\system32\37a0zddwa9e5289.ocx
c:\windows\system32\37z95ir707.cpl
c:\windows\system32\37zcdownlo5der21299.dll
c:\windows\system32\3849backzoor9205.exe
c:\windows\system32\387z5yware1539.ocx
c:\windows\system32\38fe5hreat559z.bin
c:\windows\system32\395avir5z8.exe
c:\windows\system32\39a6zi51939.ocx
c:\windows\system32\39bfaddwaze259.exe
c:\windows\system32\39e4z5r1009.bin
c:\windows\system32\3a5aazdware11009.dll
c:\windows\system32\3b93zhreat12512.exe
c:\windows\system32\3c75thr9zt20988.bin
c:\windows\system32\3e6aazdw59e3272.dll
c:\windows\system32\3z090troj5c45.ocx
c:\windows\system32\3z795s5y229.exe
c:\windows\system32\3z7bst95l21.exe
c:\windows\system32\4241ste9z554.dll
c:\windows\system32\433btz59at20990.exe
c:\windows\system32\4396spywarz15045.exe
c:\windows\system32\43afbzc9door1526.bin
c:\windows\system32\43dzvi95219.dll
c:\windows\system32\445baddware288z9.ocx
c:\windows\system32\4498spambot1z95.ocx
c:\windows\system32\4529h5ckt9oz72d.ocx
c:\windows\system32\4669w95m9z.bin
c:\windows\system32\4845sp5rse19z.dll
c:\windows\system32\48z7backdoo9152.dll
c:\windows\system32\48zavi94615.bin
c:\windows\system32\4991t5iefz545.cpl
c:\windows\system32\49d6zir659.ocx
c:\windows\system32\49dcadd5a9e65z.exe
c:\windows\system32\49ztr95228.dll
c:\windows\system32\4az3spars94995.dll
c:\windows\system32\4c66zhief53729.exe
c:\windows\system32\4cf9pyw5re313z.dll
c:\windows\system32\4f50spa9sez715.cpl
c:\windows\system32\4z35spyware689.ocx
c:\windows\system32\4zad59r1337.bin
c:\windows\system32\4zafspywar519089.bin
c:\windows\system32\4zb5sp9ware1840.dll
c:\windows\system32\5017ha5kto9laz.bin
c:\windows\system32\502aspa9se784z.exe
c:\windows\system32\502d9pzware2562.dll
c:\windows\system32\504z2troj3b9.cpl
c:\windows\system32\50a9th5ez958.ocx
c:\windows\system32\50abaddwaze1994.cpl
c:\windows\system32\5121ha9k5ool2bz.exe
c:\windows\system32\5139ztroj9dc.exe
c:\windows\system32\51419sp9mboz1c3.cpl
c:\windows\system32\51ecad9wzre199.ocx
c:\windows\system32\5359worm65z9.bin
c:\windows\system32\53e4downzo9d5r984.ocx
c:\windows\system32\544ddo9nloazer3042.bin
c:\windows\system32\5457szam9ot5df.dll
c:\windows\system32\55175n9t-azvirus4ea.ocx
c:\windows\system32\5523n5t-a-9irus5z1.exe
c:\windows\system32\5533stea95z9.exe
c:\windows\system32\5539bazkdoor3665.dll
c:\windows\system32\5593bzck5oor371.bin
c:\windows\system32\55dszea9309.exe
c:\windows\system32\55z57hack9ool1d8.dll
c:\windows\system32\55zev9r2280.cpl
c:\windows\system32\56066zro9379.cpl
c:\windows\system32\563cthi9f835z.exe
c:\windows\system32\564backzoo9127.exe
c:\windows\system32\5675zpyware5966.dll
c:\windows\system32\5695addwarz2629.bin
c:\windows\system32\5698zpyware548.ocx
c:\windows\system32\579zvirus144.cpl
c:\windows\system32\5807s9ar5ez097.cpl
c:\windows\system32\58268worz293.cpl
c:\windows\system32\5940thzef15589.dll
c:\windows\system32\59544z9y256.ocx
c:\windows\system32\5959woz9555.exe
c:\windows\system32\5965s5arse7z4.bin
c:\windows\system32\59839spy56z.cpl
c:\windows\system32\598469ormzfb.ocx
c:\windows\system32\5992szy5are2507.exe
c:\windows\system32\5995spar9ez150.cpl
c:\windows\system32\5999thzeat2055.bin
c:\windows\system32\59fb5ir92z5.dll
c:\windows\system32\59fbvir134z.cpl
c:\windows\system32\59fzthief5913.exe
c:\windows\system32\59z0threat6756.ocx
c:\windows\system32\5a2ddownloa95r9z4.bin
c:\windows\system32\5b595teal1899z.bin
c:\windows\system32\5bb1downloazer1983.bin
c:\windows\system32\5c9z5hief2533.ocx
c:\windows\system32\5d8bz9rea529080.dll
c:\windows\system32\5efcth9efz73.bin
c:\windows\system32\5ez9steal5395.ocx
c:\windows\system32\5f0daddwaze5599.bin
c:\windows\system32\5f55thie9z512.bin
c:\windows\system32\5f975i968z.bin
c:\windows\system32\5fd5downloaderz499.bin
c:\windows\system32\5z781hack9ool462.dll
c:\windows\system32\5z92troj6a9.ocx
c:\windows\system32\5z945teal901.dll
c:\windows\system32\61a5sp5rs91445z.ocx
c:\windows\system32\6277spa5bot9z0.bin
c:\windows\system32\62b8th5zat17349.exe
c:\windows\system32\6355hackz9ol6f.ocx
c:\windows\system32\64c5spz9are2759.cpl
c:\windows\system32\64z2do5nloade93136.cpl
c:\windows\system32\6522tr5j2z9.ocx
c:\windows\system32\6562bzckdoor589.cpl
c:\windows\system32\65c2dow59oadez594.dll
c:\windows\system32\65d5th9ef252z.bin
c:\windows\system32\65f9thrz9t32456.dll
c:\windows\system32\6699spzmbot4b5.bin
c:\windows\system32\6719tzoj55c.ocx
c:\windows\system32\672zbackdoor9255.bin
c:\windows\system32\692zback5oor1679.ocx
c:\windows\system32\694ethreat158z9.bin
c:\windows\system32\6985zpyware1550.exe
c:\windows\system32\699b5pyware58z.cpl
c:\windows\system32\6a36spywar92354z.exe
c:\windows\system32\6a8bspyw9re195z.dll
c:\windows\system32\6bc9do5nloa9ez2166.cpl
c:\windows\system32\6bf79zdware5143.ocx
c:\windows\system32\6e31spzw5re1794.exe
c:\windows\system32\6fabspywa5e66z9.exe
c:\windows\system32\7015vi9us3a6z.exe
c:\windows\system32\704ad5wnl9adzr850.bin
c:\windows\system32\7139troj55z.exe
c:\windows\system32\723z9ir17685.bin
c:\windows\system32\736fzd5war91759.exe
c:\windows\system32\73z95ownloa9er1196.ocx
c:\windows\system32\74995zreat21289.cpl
c:\windows\system32\7559backdoor332z.cpl
c:\windows\system32\75c7threatz793.bin
c:\windows\system32\7715zro95cb.ocx
c:\windows\system32\7784zte5l2119.bin
c:\windows\system32\77925pywaze16919.cpl
c:\windows\system32\7809vir5309z.ocx
c:\windows\system32\7867no95a-zirus586.dll
c:\windows\system32\78805roz964.dll
c:\windows\system32\7909do5nlzader961.cpl
c:\windows\system32\79dbspy5are8z8.cpl
c:\windows\system32\7d0eaddwarez59.cpl
c:\windows\system32\7d8zaddw5re9047.ocx
c:\windows\system32\7e7e5pazse27219.exe
c:\windows\system32\7f3st9z5247.ocx
c:\windows\system32\7z2fadd9are1502.exe
c:\windows\system32\7z4fste5l21299.cpl
c:\windows\system32\86819acz5ool1f6.cpl
c:\windows\system32\9010addz5re1673.dll
c:\windows\system32\91566wzrm1655.ocx
c:\windows\system32\9205not-a9ziru54aa.bin
c:\windows\system32\92266not-a-vizus650.dll
c:\windows\system32\92evir19z75.ocx
c:\windows\system32\92z35ddware1204.cpl
c:\windows\system32\932ethze51558.bin
c:\windows\system32\9570sp965az.ocx
c:\windows\system32\957bbaczdoor5610.ocx
c:\windows\system32\95e3spywzre3077.dll
c:\windows\system32\95z4wo5m432.dll
c:\windows\system32\961z95ot-a-virus54c.exe
c:\windows\system32\96222worm5baz.dll
c:\windows\system32\97295ot-a-zirus38d.bin
c:\windows\system32\9778ha59tooldaz.ocx
c:\windows\system32\9814zspy752.dll
c:\windows\system32\9829zackt5ol6a7.cpl
c:\windows\system32\98zste5l9913.ocx
c:\windows\system32\9979trojz155.exe
c:\windows\system32\9b75stzal2575.exe
c:\windows\system32\9d02virz58.dll
c:\windows\system32\9dacbackdoor5737z.cpl
c:\windows\system32\9db0zhre5t15027.cpl
c:\windows\system32\9z621h5cktool77.exe
c:\windows\system32\9z9vi5911.ocx
c:\windows\system32\a57dzwnloa59r2087.ocx
c:\windows\system32\bb25ackdzor1987.cpl
c:\windows\system32\bdzad9ware1755.cpl
c:\windows\system32\bf3ad9wzre2959.cpl
c:\windows\system32\bzast5al4169.dll
c:\windows\system32\d08t5izf6109.cpl
c:\windows\system32\d58backz59r2165.dll
c:\windows\system32\drivers\jijopheh.sys
c:\windows\system32\drivers\yyeltoey.sys
c:\windows\system32\e2f5zreat254389.bin
c:\windows\system32\fedzackdo5r690.ocx
c:\windows\system32\hmtkqlc(2).dll
c:\windows\system32\hmtkqlc.dll
c:\windows\system32\SrchSTS.exe
c:\windows\system32\system.dat
c:\windows\system32\Thumbs.db
c:\windows\system32\vmnsetuz.dll
c:\windows\system32\z04sp5rse1293.bin
c:\windows\system32\z0794tro56529.ocx
c:\windows\system32\z1304tr9j5fe.bin
c:\windows\system32\z2594worm759.dll
c:\windows\system32\z3b9dow9l5ader2734.bin
c:\windows\system32\z5148hackto9l245.exe
c:\windows\system32\z52c9ackdoor2352.exe
c:\windows\system32\z58caddware955.exe
c:\windows\system32\z78csp95are296.cpl
c:\windows\system32\z81499or511a.cpl
c:\windows\system32\z9159hac5tool1d59.ocx
c:\windows\system32\z954spar5e1647.ocx
c:\windows\system32\z96bvi51644.dll
c:\windows\system32\zb0ethreat11925.ocx
c:\windows\system32\zc1as95ware636.cpl
c:\windows\system32\zca6th9ef5391.exe
c:\windows\system32\ze67spars91451.exe
c:\windows\system32\zf79down9oa5er1227.dll
c:\windows\system32\zzkjzcn.dll
c:\windows\unins000.dat
c:\windows\unins000.exe
c:\windows\z337vir590.exe
c:\windows\z4054vir5s695.cpl
c:\windows\z4648w5rm1329.exe
c:\windows\z5118v9rus81.ocx
c:\windows\z5169spy3d5.bin
c:\windows\z54319py13b.dll
c:\windows\z5507hack9ool706.bin
c:\windows\z585spyware7039.ocx
c:\windows\z59245orm1ce.exe
c:\windows\z595hacktoo96ac.exe
c:\windows\z5fbspar5e24849.dll
c:\windows\z6122sp5399.bin
c:\windows\z792s9ywar52272.cpl
c:\windows\z799threat26035.ocx
c:\windows\z9656viru5c89.exe
c:\windows\za5addware9814.bin
c:\windows\za5athie91186.bin
c:\windows\zc02addwa592841.cpl
c:\windows\zc079ddwar5999.cpl
c:\windows\zd39thi5f2793.dll
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_gaopdxserv.sys
-------\Legacy_jijopheh
-------\Legacy_ooistldv
-------\Legacy_sfx
-------\Legacy_sfxdrv
-------\Service_gaopdxserv.sys
-------\Service_jijopheh
-------\Service_ooistldv
-------\Service_sfx
-------\Service_sfxdrv
((((((((((((((((((((((((((((( Fichiers créés du 2009-12-14 au 2010-01-14 ))))))))))))))))))))))))))))))))))))
.
2010-01-14 08:21 . 2010-01-14 08:22 -------- d-----w- C:\rsit
2010-01-13 20:51 . 2010-01-14 08:30 -------- d-----w- c:\program files\ma-config.com
2010-01-13 20:51 . 2010-01-14 08:30 -------- d-----w- c:\documents and settings\All Users\Application Data\ma-config.com
2010-01-13 19:45 . 2010-01-13 23:14 -------- d-----w- c:\documents and settings\dan\Local Settings\Application Data\AnVir
2010-01-06 17:03 . 2010-01-06 17:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
2010-01-06 17:03 . 2010-01-06 17:03 -------- d-----w- c:\windows\system32\drivers\NSS
2010-01-06 17:02 . 2010-01-06 17:02 -------- d-----w- c:\program files\NortonInstaller
2010-01-06 17:02 . 2010-01-06 17:02 -------- d-----w- c:\documents and settings\All Users\Application Data\NortonInstaller
2009-12-28 02:24 . 2009-12-28 02:24 233472 ----a-w- c:\windows\system32\ILDA32.dll
2009-12-18 19:44 . 2010-01-06 17:03 -------- d-----w- c:\program files\Norton Security Scan
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-14 15:52 . 2009-05-18 13:12 -------- d-----w- c:\documents and settings\dan\Application Data\EoRezo
2010-01-14 15:52 . 2009-05-18 13:12 -------- d-----w- c:\program files\EoRezo
2010-01-14 14:37 . 2009-09-23 18:53 -------- d-----w- c:\documents and settings\dan\Application Data\HPAppData
2010-01-14 08:22 . 2008-04-06 09:55 -------- d-----w- c:\program files\Trend Micro
2010-01-13 18:03 . 2005-10-22 09:04 8 ----a-w- c:\documents and settings\dan\.bztarotcumul.dat
2010-01-13 17:00 . 2005-09-10 12:28 -------- d-----w- c:\program files\Fichiers communs\Symantec Shared
2010-01-13 02:41 . 2006-03-31 11:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-01-12 19:26 . 2007-08-07 10:21 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-01-11 00:30 . 2010-01-11 00:30 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.76\itstv.exe
2010-01-10 02:23 . 2010-01-10 02:23 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.75\itstv.exe
2010-01-09 09:26 . 2010-01-09 09:26 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.74\itstv.exe
2010-01-08 00:32 . 2010-01-08 00:32 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.73\itstv.exe
2010-01-07 02:26 . 2005-09-22 17:06 -------- d-----w- c:\program files\SolidWorks
2010-01-07 02:04 . 2010-01-07 02:04 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.72\itstv.exe
2010-01-06 17:48 . 2005-09-22 17:26 107087 ----a-w- c:\program files\SolidWorksswxJRNL.BAK
2010-01-06 17:02 . 2005-09-10 12:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
2010-01-06 05:45 . 2010-01-06 05:46 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.71\itstv.exe
2010-01-06 05:13 . 2008-05-02 22:47 -------- d-----w- c:\documents and settings\dan\Application Data\sldIM
2010-01-05 07:40 . 2010-01-05 07:40 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.70\itstv.exe
2010-01-04 01:52 . 2010-01-04 01:52 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.69\itstv.exe
2010-01-03 19:06 . 2010-01-03 19:06 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.68\itstv.exe
2010-01-02 13:13 . 2010-01-02 13:13 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.67\itstv.exe
2010-01-01 05:33 . 2010-01-01 05:33 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.66\itstv.exe
2009-12-31 03:01 . 2009-12-31 03:01 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.65\itstv.exe
2009-12-30 00:33 . 2009-12-30 00:33 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.64\itstv.exe
2009-12-29 22:49 . 2006-04-26 15:10 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-12-29 22:47 . 2006-04-26 15:10 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-12-28 23:48 . 2009-12-28 23:48 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.63\itstv.exe
2009-12-28 03:12 . 2006-03-28 21:36 -------- d-----w- c:\program files\Fichiers communs\Adobe
2009-12-28 00:50 . 2009-12-28 00:50 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.62\itstv.exe
2009-12-27 01:01 . 2009-12-27 01:01 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.61\itstv.exe
2009-12-26 07:08 . 2009-12-26 07:08 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.60\itstv.exe
2009-12-24 00:30 . 2009-12-24 00:30 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.58\itstv.exe
2009-12-22 20:03 . 2009-12-22 20:03 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.56\itstv.exe
2009-12-22 02:41 . 2006-09-30 19:13 -------- d-----w- c:\program files\Google
2009-12-21 10:33 . 2009-12-21 10:33 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.55\itstv.exe
2009-12-20 09:53 . 2009-12-05 00:01 -------- d-----w- c:\program files\Motamo
2009-12-20 02:24 . 2009-12-20 02:24 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.54\itstv.exe
2009-12-18 23:12 . 2009-12-18 23:12 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.53\itstv.exe
2009-12-18 11:24 . 2009-12-18 11:24 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.52\itstv.exe
2009-12-17 20:31 . 2005-09-10 22:20 -------- d-----w- c:\program files\Java
2009-12-17 20:31 . 2005-07-23 08:00 595260 ----a-w- c:\windows\system32\perfh00C.dat
2009-12-17 20:31 . 2005-07-23 08:00 124142 ----a-w- c:\windows\system32\perfc00C.dat
2009-12-17 20:30 . 2009-12-17 20:30 152576 ----a-w- c:\documents and settings\dan\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
2009-12-17 20:29 . 2009-12-17 20:29 79488 ----a-w- c:\documents and settings\dan\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2009-12-17 03:03 . 2009-12-17 03:03 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.51\itstv.exe
2009-12-15 23:24 . 2009-12-15 23:24 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.50\itstv.exe
2009-12-15 00:21 . 2009-12-15 00:21 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.49\itstv.exe
2009-12-13 23:57 . 2009-12-13 23:57 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.48\itstv.exe
2009-12-12 23:41 . 2009-12-12 23:41 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.47\itstv.exe
2009-12-11 23:16 . 2009-12-11 23:16 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.46\itstv.exe
2009-12-10 23:55 . 2009-12-10 23:55 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.45\itstv.exe
2009-12-10 19:28 . 2009-07-17 09:42 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-12-10 19:08 . 2009-12-10 19:08 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.44\itstv.exe
2009-12-07 21:59 . 2009-12-07 21:59 16821 ----a-w- c:\windows\system32\152z95py8.exe
2009-12-07 10:01 . 2009-12-07 10:01 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.43\itstv.exe
2009-12-07 03:09 . 2009-12-07 03:09 313472 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-12-05 23:34 . 2009-12-05 23:34 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.42\itstv.exe
2009-12-05 00:01 . 2009-12-05 00:01 -------- d-----w- c:\documents and settings\dan\Application Data\System
2009-12-02 23:27 . 2009-12-02 23:27 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.41\itstv.exe
2009-12-02 09:34 . 2009-12-02 09:34 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.40\itstv.exe
2009-11-29 17:16 . 2009-11-29 17:16 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.39\itstv.exe
2009-11-26 23:29 . 2009-11-26 23:29 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.38\itstv.exe
2009-11-26 01:28 . 2009-11-26 01:28 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.37\itstv.exe
2009-11-24 19:28 . 2009-11-24 19:28 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.36\itstv.exe
2009-11-19 23:17 . 2009-11-19 23:17 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.35\itstv.exe
2009-11-19 10:48 . 2009-11-26 23:42 872960 ----a-w- c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2009-11-19 10:48 . 2009-11-26 23:42 43008 ----a-w- c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2009-11-19 10:48 . 2009-11-26 23:42 340480 ----a-w- c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2009-11-19 10:48 . 2009-11-26 23:42 346624 ----a-w- c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2009-11-19 01:06 . 2009-11-19 01:06 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.34\itstv.exe
2009-11-18 09:06 . 2009-11-18 09:06 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.33\itstv.exe
2009-11-16 23:07 . 2009-11-16 23:07 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.32\itstv.exe
2009-11-16 02:32 . 2009-11-16 02:32 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.31\itstv.exe
2009-11-15 01:05 . 2009-11-15 01:05 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.30\itstv.exe
2009-11-12 01:29 . 2009-11-12 01:29 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.27\itstv.exe
2009-11-10 00:59 . 2009-11-10 00:59 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.26\itstv.exe
2009-11-08 20:58 . 2009-11-08 20:58 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.25\itstv.exe
2009-11-06 08:33 . 2009-11-06 08:33 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.24\itstv.exe
2009-11-04 23:33 . 2009-11-04 23:33 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.23\itstv.exe
2009-11-02 22:32 . 2009-11-02 22:32 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.22\itstv.exe
2009-10-31 00:56 . 2009-10-31 00:56 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.21\itstv.exe
2009-10-29 13:40 . 2009-10-29 13:40 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.20\itstv.exe
2009-10-27 02:00 . 2009-10-27 02:00 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.19\itstv.exe
2009-10-26 02:02 . 2009-10-26 02:02 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.18\itstv.exe
2009-10-22 22:20 . 2009-10-22 22:20 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.17\itstv.exe
2009-10-18 11:59 . 2009-10-18 11:59 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.16\itstv.exe
2008-05-17 06:31 . 2007-08-25 07:59 1717 -c--a-w- c:\program files\Mozilla FirefoxswxJRNL.BAK
2007-01-25 18:57 . 2006-05-12 15:39 278528 -c--a-w- c:\program files\Fichiers communs\FDEUnInstaller.exe
2006-09-30 19:09 . 2006-07-19 19:36 15895440 ----a-w- c:\program files\DivXPlay.exe
2006-08-15 09:22 . 2006-08-15 09:20 8867328 ----a-w- c:\program files\winhotpot60.exe
2006-07-25 17:09 . 2006-07-24 18:48 64428992 ----a-w- c:\program files\Visual Basic 5.0 Enterprise Edition.exe
2006-07-24 18:08 . 2006-07-24 18:08 228706 ----a-w- c:\program files\oc97eval.zip
2006-07-24 17:52 . 2006-07-24 17:52 992864 ----a-w- c:\program files\Msvbvm50.exe
2006-07-24 17:10 . 2006-07-24 16:40 1044168 ----a-w- c:\program files\Visual Basic 6.0 -Vb6- Runtime Sp5.exe
2006-07-20 01:39 . 2006-04-26 14:57 2990272 ----a-w- c:\program files\vbsetup.exe
2006-06-17 15:54 . 2006-06-17 15:54 12527920 ----a-w- c:\program files\IE7BETA2-WindowsXP-x86-enu.exe
2006-05-01 19:54 . 2006-05-01 19:54 1235711 ----a-w- c:\program files\egifan3.exe
2006-03-04 21:48 . 2006-03-04 21:48 1483616 ----a-w- c:\program files\Windows-KB890830-V1.13.exe
2005-09-15 08:21 . 2005-09-15 08:20 10913 ----a-w- c:\program files\Uninst.isu
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2008-09-07 173368]
[HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"fsc-reminder.exe"="c:\windows\reminder\fsc-reminder.exe" [2005-01-19 28672]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"Google Update"="c:\documents and settings\dan\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-07-07 133104]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-12-17 39408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UserFaultCheck"="c:\windows\system32\dumprep 0 -u" [X]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-04-15 180269]
"!AVG Anti-Spyware"="c:\program files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 6731312]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-02-26 98304]
"snpstd"="c:\windows\vsnpstd.exe" [2004-06-10 286720]
"mmtask"="c:\program files\MusicMatch\MusicMatch Jukebox\mmtask.exe" [2003-10-01 53248]
"EoEngine"="c:\program files\EoRezo\EoEngine.exe" [2009-02-23 472872]
"SoftwareHelper"="c:\documents and settings\dan\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe" [2008-12-09 368224]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2008-03-25 49152]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NoIE4StubProcessing"="c:\windows\system32\reg.exe DELETE HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" [X]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" [2007-02-25 437160]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-05 44544]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"<NO NAME>"= disabletaskmgr=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0?A\0stera
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Guard]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Reader 7.0.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Reader 7.0.lnk
backup=c:\windows\pss\Adobe Reader 7.0.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Exif Launcher.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Exif Launcher.lnk
backup=c:\windows\pss\Exif Launcher.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^dan^Menu Démarrer^Programmes^Démarrage^Aide mémoire.lnk]
path=c:\documents and settings\dan\Menu Démarrer\Programmes\Démarrage\Aide mémoire.lnk
backup=c:\windows\pss\Aide mémoire.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
2007-04-15 03:34 208941 ----a-w- c:\program files\Real\RealPlayer\realplay.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2005-05-17 16:48 77824 ----a-w- c:\windows\SOUNDMAN.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
"snpstd"=c:\windows\vsnpstd.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\eChanblard\\emule.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Documents and Settings\\dan\\Bureau\\Jeux\\Dames.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"427:UDP"= 427:UDP:SLP_Port(427)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
R2 antivirschedulerservice;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [17/07/2009 10:42 108289]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [15/09/2009 22:11 54752]
R2 PCAutoShutdown_Service;PCAutoShutdown_Service;c:\bureau\PC Auto Shutdown\ShutdownService.exe [28/11/2008 01:19 461928]
S1 736686df;736686df;c:\windows\system32\drivers\736686df.sys [07/07/2009 14:58 0]
S2 gupdate1c9aaa4b08cf5da;Service Google Update (gupdate1c9aaa4b08cf5da);c:\program files\Google\Update\GoogleUpdate.exe [22/03/2009 05:14 133104]
S3 ATWPKT;ATWPKT;c:\windows\system32\drivers\atwpkt.sys [24/09/2005 10:49 19140]
S3 fsssvc;Service Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [05/08/2009 21:48 704864]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contenu du dossier 'Tâches planifiées'
2010-01-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-22 04:14]
2010-01-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-22 04:14]
2010-01-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1758704099-1854936978-4219837892-1006Core.job
- c:\documents and settings\dan\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-07-07 16:48]
2010-01-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1758704099-1854936978-4219837892-1006UA.job
- c:\documents and settings\dan\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-07-07 16:48]
2010-01-13 c:\windows\Tasks\Norton Security Scan for dan.job
- c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.3.0.44\Nss.exe [2010-01-06 15:45]
2010-01-14 c:\windows\Tasks\User_Feed_Synchronization-{CC35DECA-5803-4AD0-B675-90C082CD2A14}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 02:31]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://y.lo.st
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uInternet Connection Wizard,ShellNext = iexplore
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - Live Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - component: c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - plugin: c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\OberonGameHost@OberonGames.com\platform\WINNT_x86-msvc\plugins\npOberonGameHost.dll
FF - plugin: c:\documents and settings\dan\Local Settings\Application Data\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
.
- - - - ORPHELINS SUPPRIMES - - - -
BHO-{0285BD5B-463B-47BE-99F9-D1ABB6F4BA06} - (no file)
BHO-{0A16F56C-463B-47BE-99F9-D1ABB6F4BA06} - (no file)
BHO-{96F8931D-BB55-41DE-9AF7-257A7EB43D2A} - (no file)
BHO-{E1A764F5-F788-4B2D-9FC2-A9D06A073526} - (no file)
Notify-zjsaqdgz - (no file)
SafeBoot-AVG Anti-Spyware Driver
AddRemove-Spybot - Search & Destroy_is1 - c:\windows\unins000.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-14 16:54
Windows 5.1.2600 Service Pack 3 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
Scan terminé avec succès
Fichiers cachés: 0
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•9~*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------
- - - - - - - > 'winlogon.exe'(728)
c:\windows\system32\Ati2evxx.dll
- - - - - - - > 'explorer.exe'(1972)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\eappprxy.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\windows\system32\drivers\CDAC11BA.EXE
c:\windows\system32\crypserv.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\System32\snmp.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Heure de fin: 2010-01-14 17:00:48 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-01-14 16:00
Avant-CF: 154 885 894 144 octets libres
Après-CF: 155 022 295 040 octets libres
Current=4 Default=4 Failed=0 LastKnownGood=2 Sets=1,2,3,4
- - End Of File - - C8B043E7672D2F7B088AC73F0C71B83B
voici donc le rapport combofix.
en vous remerciant.
ComboFix 10-01-13.0C - dan 14/01/2010 15:42:37.2.2 - x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.502 [GMT 1:00]
Lancé depuis: c:\documents and settings\dan\Bureau\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{402c769d-acde-42e5-86e6-25bda5bffd6e}
c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{402c769d-acde-42e5-86e6-25bda5bffd6e}\chrome.manifest
c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{402c769d-acde-42e5-86e6-25bda5bffd6e}\chrome\xulcache.jar
c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{402c769d-acde-42e5-86e6-25bda5bffd6e}\defaults\preferences\xulcache.js
c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{402c769d-acde-42e5-86e6-25bda5bffd6e}\install.rdf
c:\documents and settings\dan\Application Data\wiaserva.log
c:\documents and settings\dan\Local Settings\Application Data\suiwquw.dat
c:\documents and settings\dan\Local Settings\Application Data\suiwquw_nav.dat
c:\documents and settings\dan\Local Settings\Application Data\suiwquw_navps.dat
c:\program files\sFX
c:\recycler\S-1-5-21-2920691689-476926393-1501995116-1003
C:\Thumbs.db
c:\windows\1002zworm2059.exe
c:\windows\10091s956ze.dll
c:\windows\10095hazktool39.bin
c:\windows\102at5iz9456.cpl
c:\windows\1046ste5z3119.dll
c:\windows\10855h9ck5ool7eez.exe
c:\windows\1099spyware1z58.exe
c:\windows\11549hackz9ol594.dll
c:\windows\1155spazse18975.exe
c:\windows\116zaddw9re586.ocx
c:\windows\11889viruz2175.bin
c:\windows\11a5th9ezt9642.exe
c:\windows\12439hreat845z.exe
c:\windows\1296not-azviru96465.dll
c:\windows\13057troz9d5.exe
c:\windows\1355zspambot495.exe
c:\windows\1359downloader9z53.exe
c:\windows\13749s9amz5t456.exe
c:\windows\1401threat159z3.dll
c:\windows\14245spam5ot9z.ocx
c:\windows\143et59ez1397.ocx
c:\windows\14825hac5to9l1z6.ocx
c:\windows\14beback9oor259z.exe
c:\windows\15542h9ck5zol720.dll
c:\windows\15543vi9zs5c7.exe
c:\windows\15590trzj4d55.bin
c:\windows\1565zsp95bot54d.bin
c:\windows\156backdzor1978.ocx
c:\windows\15bbviz59969.dll
c:\windows\15c5do5z9oader1986.dll
c:\windows\15f0doznload9r19415.cpl
c:\windows\16205nzt-a-virus69f.cpl
c:\windows\16335ot-a9virus1z0.cpl
c:\windows\16495iz9918.dll
c:\windows\16776worm395z.exe
c:\windows\1690haz5tool2b5.bin
c:\windows\16fzdownlo5der902.dll
c:\windows\17534not-a-vzrus9c6.ocx
c:\windows\17575spam9ot294z.dll
c:\windows\17592tr9j5zd.ocx
c:\windows\17766v9ruz5b85.dll
c:\windows\17795wor951z5.exe
c:\windows\1858downl5ade975z.ocx
c:\windows\18638h95ktooz5a9.bin
c:\windows\18789notza-9irus5c3.dll
c:\windows\18805trzj5e9.ocx
c:\windows\18982vi5uz17a9.exe
c:\windows\18c7thief295z5.cpl
c:\windows\18d5threatz9953.exe
c:\windows\19474hacktool5a5z.cpl
c:\windows\19522z5oj95c.bin
c:\windows\19627zackto5l1f9.ocx
c:\windows\19945virz5809.cpl
c:\windows\19azthief25319.exe
c:\windows\19f9bzck9oor2512.cpl
c:\windows\1b95zhief1859.ocx
c:\windows\1bd5steal119z9.ocx
c:\windows\1c5fsp5warz2199.ocx
c:\windows\1c65baz5door9999.cpl
c:\windows\1ec7a5dware39z2.dll
c:\windows\1ee0zhreat252529.ocx
c:\windows\1z5049irus558.exe
c:\windows\1z5cthreat90340.cpl
c:\windows\1z96steal3155.dll
c:\windows\1z975vi5us2f.ocx
c:\windows\1za7downlo5de9134.cpl
c:\windows\20592nzt-a-virus474.cpl
c:\windows\21052wo9520z.bin
c:\windows\2115thiez98.exe
c:\windows\21514not-a-zirus49b.bin
c:\windows\21605s5zmbot5a9.ocx
c:\windows\2218azdwa5e2945.cpl
c:\windows\22987troz9905.bin
c:\windows\233z9parse756.dll
c:\windows\23547trzj930.dll
c:\windows\242cz5dware955.exe
c:\windows\24645s5zmb9t2ef.ocx
c:\windows\246ebazkdoor5918.ocx
c:\windows\2477zt5al1590.ocx
c:\windows\24854zr9j577.exe
c:\windows\248dbackd9or1985z.cpl
c:\windows\252785o9-a-viruz15f.dll
c:\windows\254t59eaz25241.cpl
c:\windows\25582tzoj1229.exe
c:\windows\25701troj95z.dll
c:\windows\25829spz3315.exe
c:\windows\25842not-z9vir5s5b9.ocx
c:\windows\258tzief1519.ocx
c:\windows\25957trz529f.exe
c:\windows\25b4back9ozr5729.bin
c:\windows\2651zvir9s4d2.dll
c:\windows\2652zspy99.exe
c:\windows\26759spazbo9551.ocx
c:\windows\26771hacktoo577z9.cpl
c:\windows\27955not-z-v9r5s31c.ocx
c:\windows\27964hazkt5ol6c9.dll
c:\windows\27c3azd95re891.cpl
c:\windows\27ecspar5e3z99.exe
c:\windows\28232zackt5ol7cc9.dll
c:\windows\285bst5al26z59.dll
c:\windows\28837szamb5t927.ocx
c:\windows\29215trojz775.dll
c:\windows\2925zs5y490.bin
c:\windows\29459spamz5t794.bin
c:\windows\29749hreat21510z.cpl
c:\windows\2978spars5z053.exe
c:\windows\298195orm224z.ocx
c:\windows\29950hacktozl725.exe
c:\windows\29z2t9ief18395.cpl
c:\windows\2b95s5ywaze3254.cpl
c:\windows\2c49dow9loaz5r2532.cpl
c:\windows\2f18vzr14955.cpl
c:\windows\2fz8sp5r9e588.dll
c:\windows\2z111virus1579.bin
c:\windows\2z1915acktoo9462.exe
c:\windows\2z292troj519.dll
c:\windows\2z572sp97ea5.dll
c:\windows\2za5stea51509.ocx
c:\windows\301z1no9-a-v5rusfa.dll
c:\windows\303929p54e1z.cpl
c:\windows\30569not9a-zirus165.dll
c:\windows\31135virz93f1.bin
c:\windows\3159t9izf2305.exe
c:\windows\3195zackdoo91090.cpl
c:\windows\31z89ddware5302.cpl
c:\windows\3218159y92z.bin
c:\windows\325585or97b5z.dll
c:\windows\325zth9ef1469.dll
c:\windows\32742not-a-9iruz658.cpl
c:\windows\327znot-a9virus515.dll
c:\windows\3389spywar52042z.exe
c:\windows\33a5ste9lz755.ocx
c:\windows\33e8ad9wa5z1550.exe
c:\windows\3506dow95oader30z5.dll
c:\windows\35093spy29az.ocx
c:\windows\3559viru94z7.ocx
c:\windows\3562tzo948c.dll
c:\windows\35z0thief25619.exe
c:\windows\3607th5e9z919.dll
c:\windows\3711zpa5se219.cpl
c:\windows\3782z95ef331.exe
c:\windows\382edownzo9de5450.bin
c:\windows\38e9parze21605.dll
c:\windows\3904worm29z5.exe
c:\windows\394bspar952483z.bin
c:\windows\39801viru5z89.cpl
c:\windows\399zspyware2851.cpl
c:\windows\39a0downlo5d9r1z04.exe
c:\windows\3b89sp5rse11z3.exe
c:\windows\3be79te5l5z6.ocx
c:\windows\3cdeaddwa9ez85.dll
c:\windows\3z49t9reat20531.dll
c:\windows\3z99s5eal1748.dll
c:\windows\4044wor93ze5.cpl
c:\windows\40549pamzot6c65.dll
c:\windows\4055backdooz2996.exe
c:\windows\4094thr5at136z0.ocx
c:\windows\415dv5r29z0.ocx
c:\windows\4196troj75z.bin
c:\windows\43z6thief27905.cpl
c:\windows\4475addw5rez94.cpl
c:\windows\447ethrea92675z.cpl
c:\windows\448daddz5re296.bin
c:\windows\4518vir31z69.cpl
c:\windows\453zvir5229.exe
c:\windows\45c3baczd5or30509.cpl
c:\windows\47z1spywa5e1919.cpl
c:\windows\4813ha5ktooz690.ocx
c:\windows\485not-a-virzs73a9.bin
c:\windows\490tr5954z.ocx
c:\windows\4931hazkt5ol58d.bin
c:\windows\495fspyware5851z.ocx
c:\windows\4a91thief2025z.exe
c:\windows\4b67dow9lo5der26z4.dll
c:\windows\4f29zpywar5405.cpl
c:\windows\4fba9pzware5075.exe
c:\windows\4fccth5ez9198.cpl
c:\windows\4z9cspars52092.ocx
c:\windows\50018zorm49e.exe
c:\windows\508cthie92523z.exe
c:\windows\509z49py574.dll
c:\windows\50a4vi9195z.bin
c:\windows\50e69ownload5z2373.cpl
c:\windows\51979spy1dez.exe
c:\windows\51e95hzeat9414.dll
c:\windows\5258bac9dozr330.ocx
c:\windows\52746vizus90.cpl
c:\windows\527f5t9al236z.cpl
c:\windows\5295threat6981z.dll
c:\windows\5295zj1d.exe
c:\windows\53335spambzt9b5.cpl
c:\windows\5352a9dwzre265.cpl
c:\windows\53619not-a-virzs49f.dll
c:\windows\53728wzr93ba.cpl
c:\windows\5376zroj795.ocx
c:\windows\5379tzrea57174.bin
c:\windows\5387ba5kd9or11z3.bin
c:\windows\539z5py42d.exe
c:\windows\53z21troj3879.exe
c:\windows\54a5azdwa591258.ocx
c:\windows\54f6downlo9der2584z.cpl
c:\windows\5532hacktoo95za.exe
c:\windows\555adow9lo5dez1745.exe
c:\windows\55639szy329.ocx
c:\windows\5579ownlozder3259.dll
c:\windows\55925orm2za.exe
c:\windows\55c5vir19z29.bin
c:\windows\55e5thi9f19z5.exe
c:\windows\55fzspywar9845.bin
c:\windows\55z9pyware2149.exe
c:\windows\55z9vir32139.exe
c:\windows\5613s5arsz18279.cpl
c:\windows\5639sp9ware1954z.dll
c:\windows\564steaz9925.exe
c:\windows\5659tro51z.bin
c:\windows\5665zparse2639.dll
c:\windows\569fthreaz30142.cpl
c:\windows\5759spyz98.dll
c:\windows\5764viru9578z.cpl
c:\windows\588zsparse2929.ocx
c:\windows\5920zpar9e3655.cpl
c:\windows\5939s5yware319z.bin
c:\windows\5969hack9oo55z8.ocx
c:\windows\5973add5a9e169z.ocx
c:\windows\59783virusz92.bin
c:\windows\598caddware242z.cpl
c:\windows\598eth59z294.cpl
c:\windows\5995stezl3165.dll
c:\windows\599zs5arse908.bin
c:\windows\59d9spazs53055.cpl
c:\windows\59ftzreat18844.bin
c:\windows\59z6spy3589.cpl
c:\windows\5a05dow5loaderz19.cpl
c:\windows\5a629pz5se12.bin
c:\windows\5b1z9teal2272.cpl
c:\windows\5b5zbac9door1639.exe
c:\windows\5b86zp9ware1552.cpl
c:\windows\5b9ezhief12985.cpl
c:\windows\5b9ownloader301z.dll
c:\windows\5c99zyware20145.bin
c:\windows\5d48sz59are2361.cpl
c:\windows\5db4addware23z59.ocx
c:\windows\5e1ast9zl523.cpl
c:\windows\5e3d9zr351.cpl
c:\windows\5e89zh5ef1402.bin
c:\windows\5f9zsparse1594.bin
c:\windows\5z98troj539.cpl
c:\windows\5zb3t9re5t4788.exe
c:\windows\6015szeal20549.dll
c:\windows\601fba9zd5or350.cpl
c:\windows\61b9zir17185.exe
c:\windows\626zt9rea54607.dll
c:\windows\6292s597z8.dll
c:\windows\63655ot-a-virzs6bf9.dll
c:\windows\6477spam9oz2735.dll
c:\windows\650czteal1999.bin
c:\windows\6542addwa9z2554.cpl
c:\windows\655cszyware659.dll
c:\windows\6597hacktz9l591.cpl
c:\windows\659zthreat20072.bin
c:\windows\6674vir55z9.ocx
c:\windows\67b8tzi951953.bin
c:\windows\6959notza5viru9105.bin
c:\windows\6963spam5ot4z2.dll
c:\windows\6966th5zat17218.ocx
c:\windows\69b6ste5z480.ocx
c:\windows\69ccvir8z5.exe
c:\windows\69etzr5at17919.exe
c:\windows\69f8bac9door209z5.exe
c:\windows\6bbdspyw9re2853z.exe
c:\windows\6de95zeal3197.exe
c:\windows\6dzab9ckd5or246.bin
c:\windows\6fz9vir1252.exe
c:\windows\6fzathre5t92480.dll
c:\windows\6zbcs9e5l235.ocx
c:\windows\6zddbackdoo91855.bin
c:\windows\7095spyw5rz1222.ocx
c:\windows\71e2downloa9er2053z.cpl
c:\windows\7215spa9zot2d8.exe
c:\windows\7292a5dwzre5859.cpl
c:\windows\738bspazse9556.ocx
c:\windows\752bsz5ware999.cpl
c:\windows\7566downzoade91128.bin
c:\windows\75a9adzw9re728.dll
c:\windows\761zspyware9585.exe
c:\windows\7629thzeat50993.dll
c:\windows\766aspazse9756.bin
c:\windows\77f9viz98915.ocx
c:\windows\799vi9zs570.ocx
c:\windows\79atzr5a924231.dll
c:\windows\79d6vir505z.dll
c:\windows\7a9dow5loazer1649.cpl
c:\windows\7b32szeal5913.dll
c:\windows\7b45vi9z161.cpl
c:\windows\7c00addw9rz2545.bin
c:\windows\7c95zackdoor2416.bin
c:\windows\7ce9s5zrse2932.ocx
c:\windows\7e93spywa5e47z.bin
c:\windows\863stza9511.exe
c:\windows\8a6t9rzat29657.ocx
c:\windows\8f9z5ckdoor9061.ocx
c:\windows\8zat5ief19159.exe
c:\windows\90155troj7z9.bin
c:\windows\905z9no5-a-virus7b7.cpl
c:\windows\9156v9rus3e6z.dll
c:\windows\915thief14z45.exe
c:\windows\91965hacktoo51d2z.exe
c:\windows\92969pyz535.ocx
c:\windows\93153h5cktooz135.bin
c:\windows\9343doznloa5er365.cpl
c:\windows\934fdfg34fgjf23
c:\windows\93z5virus122.cpl
c:\windows\9533thief624z.exe
c:\windows\957z0spambot34c.ocx
c:\windows\9652wo9m2z5.bin
c:\windows\96a5viz5645.bin
c:\windows\96z75troj422.cpl
c:\windows\9755za95tool271.bin
c:\windows\98044spambot50z5.dll
c:\windows\986s5amzot79d.ocx
c:\windows\99zr5j37e.ocx
c:\windows\9a34threat2z9365.bin
c:\windows\9czaddwar5741.ocx
c:\windows\9e52backdo5r90z.ocx
c:\windows\9edezddw5re2966.ocx
c:\windows\9zcsp9ware4485.ocx
c:\windows\a1esparse5391z.ocx
c:\windows\a63backdo5r7z9.bin
c:\windows\a9addware1z85.ocx
c:\windows\bf23567.dat
c:\windows\c88thi5f9429z.cpl
c:\windows\d52spywarez049.cpl
c:\windows\daz9tea52065.exe
c:\windows\f5fdownload9r26z8.exe
c:\windows\f5th9efz0275.dll
c:\windows\patch.exe
c:\windows\system\msvbvm60.dll
c:\windows\system32\1059ba9kdzor2221.bin
c:\windows\system32\10a9z5al2307.cpl
c:\windows\system32\10f1dow5loa9ez2221.dll
c:\windows\system32\11110t9oj32z5.exe
c:\windows\system32\11129spamz5t140.exe
c:\windows\system32\11359spamb5tzeb.exe
c:\windows\system32\1142959t-a-virusz5.bin
c:\windows\system32\1168ztr9j5d2.bin
c:\windows\system32\116z4s5y597.exe
c:\windows\system32\118zack9oor1615.dll
c:\windows\system32\119ethreat536z.ocx
c:\windows\system32\11b4thzea9277185.cpl
c:\windows\system32\120215roj9ez.ocx
c:\windows\system32\120f5hiefz962.dll
c:\windows\system32\12184not-z-vi9us5f.cpl
c:\windows\system32\12749v5rzs699.ocx
c:\windows\system32\12766zac9tool7b5.ocx
c:\windows\system32\12990szambot153.cpl
c:\windows\system32\12z19virus7519.dll
c:\windows\system32\12z95ir313.ocx
c:\windows\system32\13201noz5a-viru95dc.ocx
c:\windows\system32\13526v9rzs34c.dll
c:\windows\system32\135bth9e52z58.dll
c:\windows\system32\1399ztea51557.ocx
c:\windows\system32\13dczpyw5re9627.ocx
c:\windows\system32\13z6v5r9s72c.ocx
c:\windows\system32\13z75not-a-vi9us90.exe
c:\windows\system32\14006not-a9viruz125.ocx
c:\windows\system32\14129troz753.cpl
c:\windows\system32\143z3no9-a-5irus7c7.exe
c:\windows\system32\149985rojz5b.cpl
c:\windows\system32\15159troz7539.dll
c:\windows\system32\153225acz9ool656.exe
c:\windows\system32\1537vizu5992.ocx
c:\windows\system32\15469notza-9irus546.ocx
c:\windows\system32\15546tro955z.bin
c:\windows\system32\15595ha9ktz5l186.cpl
c:\windows\system32\15691z9ru59a.dll
c:\windows\system32\156fz9eal2334.bin
c:\windows\system32\15724hazkto591a0.cpl
c:\windows\system32\15956no9-a-virzs65d.cpl
c:\windows\system32\15972spa9bzt133.bin
c:\windows\system32\15z21wo59376.exe
c:\windows\system32\1654zhacktoo9793.bin
c:\windows\system32\16b0v5rz499.bin
c:\windows\system32\16z89v9rus85.bin
c:\windows\system32\1705ownloader3904z.ocx
c:\windows\system32\17292spzmbot6ce5.ocx
c:\windows\system32\17299spyz459.exe
c:\windows\system32\17373sp5mbo94z7.exe
c:\windows\system32\17456trz95dc.exe
c:\windows\system32\175th9eaz193545.exe
c:\windows\system32\1795z9ar5e3078.cpl
c:\windows\system32\17b6addwarz2594.ocx
c:\windows\system32\18358ha5k9oolz3e.ocx
c:\windows\system32\18609z5rm7c9.dll
c:\windows\system32\18899n5t-a-virus4zb.exe
c:\windows\system32\18995tzoj75f.exe
c:\windows\system32\189bbackdoo5z4009.cpl
c:\windows\system32\1911zhacktool50.cpl
c:\windows\system32\19197not-a-vi5u94bz.ocx
c:\windows\system32\19204wzrm59b.exe
c:\windows\system32\1954thief511z.dll
c:\windows\system32\1960addzare2415.ocx
c:\windows\system32\19698spy59ez.bin
c:\windows\system32\19926sp5zf9.cpl
c:\windows\system32\19959worz7cb.bin
c:\windows\system32\19979spy50fz.ocx
c:\windows\system32\19a0backdoo9z9005.dll
c:\windows\system32\19z05worm6575.bin
c:\windows\system32\19z50not-a-virus1a5.bin
c:\windows\system32\1a75zownload9r1797.bin
c:\windows\system32\1b95steal220z.cpl
c:\windows\system32\1bbczhreat19551.bin
c:\windows\system32\1bd5b9zkdoor71.cpl
c:\windows\system32\1c57thiz91434.cpl
c:\windows\system32\1c69b5ckdoorz633.dll
c:\windows\system32\1d74zackdoor5999.cpl
c:\windows\system32\1dcbthrea93z858.dll
c:\windows\system32\1e90sz5rse1747.exe
c:\windows\system32\1f4ea5dwzre11249.exe
c:\windows\system32\1f69zir5483.exe
c:\windows\system32\1f93th5e9z461.ocx
c:\windows\system32\1z379ha5k9ool84.dll
c:\windows\system32\1z450spy77d9.bin
c:\windows\system32\1z4545ir9s94.cpl
c:\windows\system32\1z590h5ckt9ol2e4.exe
c:\windows\system32\1z59backdoor1688.dll
c:\windows\system32\1z67t9ief595.dll
c:\windows\system32\1z870s9527d.ocx
c:\windows\system32\1z96th5ea95935.exe
c:\windows\system32\20097no9-a-vzru54e7.dll
c:\windows\system32\203addz5re9366.cpl
c:\windows\system32\205475pambz978e.bin
c:\windows\system32\20675tr9j3z4.bin
c:\windows\system32\208dadz9are1685.exe
c:\windows\system32\20903spam5o91bz.bin
c:\windows\system32\21085zpy92.dll
c:\windows\system32\21189h9czto5l1f4.dll
c:\windows\system32\2124tr9j7fz5.exe
c:\windows\system32\214z5h9ckt5ol5a1.dll
c:\windows\system32\21698sp53dz.dll
c:\windows\system32\21962ha9ktooz55b.dll
c:\windows\system32\21992s9am5oz6cb.ocx
c:\windows\system32\21d9sze5l3994.cpl
c:\windows\system32\225z9parse529.ocx
c:\windows\system32\22605tr9j50az.bin
c:\windows\system32\2296zh9cktool659.dll
c:\windows\system32\22z99troj3935.ocx
c:\windows\system32\23305w9r5d3z.cpl
c:\windows\system32\2395threz98677.bin
c:\windows\system32\2418z59oj301.dll
c:\windows\system32\24508hacktozl799.bin
c:\windows\system32\24519not-a-virzs49a.exe
c:\windows\system32\2476stealz9955.ocx
c:\windows\system32\249495r9j53z.ocx
c:\windows\system32\24ebdoznloade5191.cpl
c:\windows\system32\25252zirus595.dll
c:\windows\system32\254035o9z31.exe
c:\windows\system32\25551hacz9ool685.ocx
c:\windows\system32\25592spzmbo928a.ocx
c:\windows\system32\25597tzoj126.ocx
c:\windows\system32\255f9hizf3039.cpl
c:\windows\system32\25687spazb9t42c.cpl
c:\windows\system32\25793hacktozl9f5.cpl
c:\windows\system32\25905not-a-viru9b0z.dll
c:\windows\system32\25927zp59bot1be.cpl
c:\windows\system32\259995zrusa59.cpl
c:\windows\system32\260925py5z7.exe
c:\windows\system32\265z2spa9bot65b.bin
c:\windows\system32\26f4t5reat9993z.exe
c:\windows\system32\275eadd5zre935.ocx
c:\windows\system32\27z69py5d5.cpl
c:\windows\system32\282dsp5ware212z9.exe
c:\windows\system32\2854zhackto9l2d5.exe
c:\windows\system32\2899s9arse5z55.bin
c:\windows\system32\28bdzack9oor2584.dll
c:\windows\system32\2906zspy5a7.cpl
c:\windows\system32\290eaddware2z65.ocx
c:\windows\system32\2928downloazer5541.dll
c:\windows\system32\29299spamz5t216.ocx
c:\windows\system32\29369spzmbot5875.dll
c:\windows\system32\29503virus62z.cpl
c:\windows\system32\29517zot-a-v59us29a.ocx
c:\windows\system32\295z0troj98f5.bin
c:\windows\system32\296cthie51z359.ocx
c:\windows\system32\29715not-azv59us576.bin
c:\windows\system32\297fthz9at31315.cpl
c:\windows\system32\297z4hac9t5ol14d.ocx
c:\windows\system32\29z859orm703.exe
c:\windows\system32\2b41tz5eat91102.bin
c:\windows\system32\2b73a95ware8z3.bin
c:\windows\system32\2c9athrzat59757.cpl
c:\windows\system32\2d2ds5ealz295.cpl
c:\windows\system32\2e609o5nloaderz846.cpl
c:\windows\system32\2f9s5yware2z35.dll
c:\windows\system32\2z062not-a-9ir5s70b.cpl
c:\windows\system32\2z3dsparse5928.dll
c:\windows\system32\2z52spy769.dll
c:\windows\system32\3011zor5299.bin
c:\windows\system32\302z3hackt9ol65d.cpl
c:\windows\system32\303795roz958.cpl
c:\windows\system32\30565not-z-vi9us5e.exe
c:\windows\system32\31508n9t-a-zirus385.cpl
c:\windows\system32\3255v9rus52z.dll
c:\windows\system32\32699z5oj69f.exe
c:\windows\system32\32935hacktool4fcz.bin
c:\windows\system32\33dbsze5l14989.exe
c:\windows\system32\345dspars9321z.exe
c:\windows\system32\3465n5z-a-virus299.exe
c:\windows\system32\346zvir2955.bin
c:\windows\system32\34z0w5rm4809.bin
c:\windows\system32\3549s5eal2z73.ocx
c:\windows\system32\35507hacktoo9z1c.exe
c:\windows\system32\355esp9warz2921.ocx
c:\windows\system32\35dzth5eat28915.ocx
c:\windows\system32\35e0vzr5491.bin
c:\windows\system32\367c9dd5zre3031.exe
c:\windows\system32\36afad9wa5e1338z.dll
c:\windows\system32\37015t9al3z86.ocx
c:\windows\system32\3790spz5se579.ocx
c:\windows\system32\37a0zddwa9e5289.ocx
c:\windows\system32\37z95ir707.cpl
c:\windows\system32\37zcdownlo5der21299.dll
c:\windows\system32\3849backzoor9205.exe
c:\windows\system32\387z5yware1539.ocx
c:\windows\system32\38fe5hreat559z.bin
c:\windows\system32\395avir5z8.exe
c:\windows\system32\39a6zi51939.ocx
c:\windows\system32\39bfaddwaze259.exe
c:\windows\system32\39e4z5r1009.bin
c:\windows\system32\3a5aazdware11009.dll
c:\windows\system32\3b93zhreat12512.exe
c:\windows\system32\3c75thr9zt20988.bin
c:\windows\system32\3e6aazdw59e3272.dll
c:\windows\system32\3z090troj5c45.ocx
c:\windows\system32\3z795s5y229.exe
c:\windows\system32\3z7bst95l21.exe
c:\windows\system32\4241ste9z554.dll
c:\windows\system32\433btz59at20990.exe
c:\windows\system32\4396spywarz15045.exe
c:\windows\system32\43afbzc9door1526.bin
c:\windows\system32\43dzvi95219.dll
c:\windows\system32\445baddware288z9.ocx
c:\windows\system32\4498spambot1z95.ocx
c:\windows\system32\4529h5ckt9oz72d.ocx
c:\windows\system32\4669w95m9z.bin
c:\windows\system32\4845sp5rse19z.dll
c:\windows\system32\48z7backdoo9152.dll
c:\windows\system32\48zavi94615.bin
c:\windows\system32\4991t5iefz545.cpl
c:\windows\system32\49d6zir659.ocx
c:\windows\system32\49dcadd5a9e65z.exe
c:\windows\system32\49ztr95228.dll
c:\windows\system32\4az3spars94995.dll
c:\windows\system32\4c66zhief53729.exe
c:\windows\system32\4cf9pyw5re313z.dll
c:\windows\system32\4f50spa9sez715.cpl
c:\windows\system32\4z35spyware689.ocx
c:\windows\system32\4zad59r1337.bin
c:\windows\system32\4zafspywar519089.bin
c:\windows\system32\4zb5sp9ware1840.dll
c:\windows\system32\5017ha5kto9laz.bin
c:\windows\system32\502aspa9se784z.exe
c:\windows\system32\502d9pzware2562.dll
c:\windows\system32\504z2troj3b9.cpl
c:\windows\system32\50a9th5ez958.ocx
c:\windows\system32\50abaddwaze1994.cpl
c:\windows\system32\5121ha9k5ool2bz.exe
c:\windows\system32\5139ztroj9dc.exe
c:\windows\system32\51419sp9mboz1c3.cpl
c:\windows\system32\51ecad9wzre199.ocx
c:\windows\system32\5359worm65z9.bin
c:\windows\system32\53e4downzo9d5r984.ocx
c:\windows\system32\544ddo9nloazer3042.bin
c:\windows\system32\5457szam9ot5df.dll
c:\windows\system32\55175n9t-azvirus4ea.ocx
c:\windows\system32\5523n5t-a-9irus5z1.exe
c:\windows\system32\5533stea95z9.exe
c:\windows\system32\5539bazkdoor3665.dll
c:\windows\system32\5593bzck5oor371.bin
c:\windows\system32\55dszea9309.exe
c:\windows\system32\55z57hack9ool1d8.dll
c:\windows\system32\55zev9r2280.cpl
c:\windows\system32\56066zro9379.cpl
c:\windows\system32\563cthi9f835z.exe
c:\windows\system32\564backzoo9127.exe
c:\windows\system32\5675zpyware5966.dll
c:\windows\system32\5695addwarz2629.bin
c:\windows\system32\5698zpyware548.ocx
c:\windows\system32\579zvirus144.cpl
c:\windows\system32\5807s9ar5ez097.cpl
c:\windows\system32\58268worz293.cpl
c:\windows\system32\5940thzef15589.dll
c:\windows\system32\59544z9y256.ocx
c:\windows\system32\5959woz9555.exe
c:\windows\system32\5965s5arse7z4.bin
c:\windows\system32\59839spy56z.cpl
c:\windows\system32\598469ormzfb.ocx
c:\windows\system32\5992szy5are2507.exe
c:\windows\system32\5995spar9ez150.cpl
c:\windows\system32\5999thzeat2055.bin
c:\windows\system32\59fb5ir92z5.dll
c:\windows\system32\59fbvir134z.cpl
c:\windows\system32\59fzthief5913.exe
c:\windows\system32\59z0threat6756.ocx
c:\windows\system32\5a2ddownloa95r9z4.bin
c:\windows\system32\5b595teal1899z.bin
c:\windows\system32\5bb1downloazer1983.bin
c:\windows\system32\5c9z5hief2533.ocx
c:\windows\system32\5d8bz9rea529080.dll
c:\windows\system32\5efcth9efz73.bin
c:\windows\system32\5ez9steal5395.ocx
c:\windows\system32\5f0daddwaze5599.bin
c:\windows\system32\5f55thie9z512.bin
c:\windows\system32\5f975i968z.bin
c:\windows\system32\5fd5downloaderz499.bin
c:\windows\system32\5z781hack9ool462.dll
c:\windows\system32\5z92troj6a9.ocx
c:\windows\system32\5z945teal901.dll
c:\windows\system32\61a5sp5rs91445z.ocx
c:\windows\system32\6277spa5bot9z0.bin
c:\windows\system32\62b8th5zat17349.exe
c:\windows\system32\6355hackz9ol6f.ocx
c:\windows\system32\64c5spz9are2759.cpl
c:\windows\system32\64z2do5nloade93136.cpl
c:\windows\system32\6522tr5j2z9.ocx
c:\windows\system32\6562bzckdoor589.cpl
c:\windows\system32\65c2dow59oadez594.dll
c:\windows\system32\65d5th9ef252z.bin
c:\windows\system32\65f9thrz9t32456.dll
c:\windows\system32\6699spzmbot4b5.bin
c:\windows\system32\6719tzoj55c.ocx
c:\windows\system32\672zbackdoor9255.bin
c:\windows\system32\692zback5oor1679.ocx
c:\windows\system32\694ethreat158z9.bin
c:\windows\system32\6985zpyware1550.exe
c:\windows\system32\699b5pyware58z.cpl
c:\windows\system32\6a36spywar92354z.exe
c:\windows\system32\6a8bspyw9re195z.dll
c:\windows\system32\6bc9do5nloa9ez2166.cpl
c:\windows\system32\6bf79zdware5143.ocx
c:\windows\system32\6e31spzw5re1794.exe
c:\windows\system32\6fabspywa5e66z9.exe
c:\windows\system32\7015vi9us3a6z.exe
c:\windows\system32\704ad5wnl9adzr850.bin
c:\windows\system32\7139troj55z.exe
c:\windows\system32\723z9ir17685.bin
c:\windows\system32\736fzd5war91759.exe
c:\windows\system32\73z95ownloa9er1196.ocx
c:\windows\system32\74995zreat21289.cpl
c:\windows\system32\7559backdoor332z.cpl
c:\windows\system32\75c7threatz793.bin
c:\windows\system32\7715zro95cb.ocx
c:\windows\system32\7784zte5l2119.bin
c:\windows\system32\77925pywaze16919.cpl
c:\windows\system32\7809vir5309z.ocx
c:\windows\system32\7867no95a-zirus586.dll
c:\windows\system32\78805roz964.dll
c:\windows\system32\7909do5nlzader961.cpl
c:\windows\system32\79dbspy5are8z8.cpl
c:\windows\system32\7d0eaddwarez59.cpl
c:\windows\system32\7d8zaddw5re9047.ocx
c:\windows\system32\7e7e5pazse27219.exe
c:\windows\system32\7f3st9z5247.ocx
c:\windows\system32\7z2fadd9are1502.exe
c:\windows\system32\7z4fste5l21299.cpl
c:\windows\system32\86819acz5ool1f6.cpl
c:\windows\system32\9010addz5re1673.dll
c:\windows\system32\91566wzrm1655.ocx
c:\windows\system32\9205not-a9ziru54aa.bin
c:\windows\system32\92266not-a-vizus650.dll
c:\windows\system32\92evir19z75.ocx
c:\windows\system32\92z35ddware1204.cpl
c:\windows\system32\932ethze51558.bin
c:\windows\system32\9570sp965az.ocx
c:\windows\system32\957bbaczdoor5610.ocx
c:\windows\system32\95e3spywzre3077.dll
c:\windows\system32\95z4wo5m432.dll
c:\windows\system32\961z95ot-a-virus54c.exe
c:\windows\system32\96222worm5baz.dll
c:\windows\system32\97295ot-a-zirus38d.bin
c:\windows\system32\9778ha59tooldaz.ocx
c:\windows\system32\9814zspy752.dll
c:\windows\system32\9829zackt5ol6a7.cpl
c:\windows\system32\98zste5l9913.ocx
c:\windows\system32\9979trojz155.exe
c:\windows\system32\9b75stzal2575.exe
c:\windows\system32\9d02virz58.dll
c:\windows\system32\9dacbackdoor5737z.cpl
c:\windows\system32\9db0zhre5t15027.cpl
c:\windows\system32\9z621h5cktool77.exe
c:\windows\system32\9z9vi5911.ocx
c:\windows\system32\a57dzwnloa59r2087.ocx
c:\windows\system32\bb25ackdzor1987.cpl
c:\windows\system32\bdzad9ware1755.cpl
c:\windows\system32\bf3ad9wzre2959.cpl
c:\windows\system32\bzast5al4169.dll
c:\windows\system32\d08t5izf6109.cpl
c:\windows\system32\d58backz59r2165.dll
c:\windows\system32\drivers\jijopheh.sys
c:\windows\system32\drivers\yyeltoey.sys
c:\windows\system32\e2f5zreat254389.bin
c:\windows\system32\fedzackdo5r690.ocx
c:\windows\system32\hmtkqlc(2).dll
c:\windows\system32\hmtkqlc.dll
c:\windows\system32\SrchSTS.exe
c:\windows\system32\system.dat
c:\windows\system32\Thumbs.db
c:\windows\system32\vmnsetuz.dll
c:\windows\system32\z04sp5rse1293.bin
c:\windows\system32\z0794tro56529.ocx
c:\windows\system32\z1304tr9j5fe.bin
c:\windows\system32\z2594worm759.dll
c:\windows\system32\z3b9dow9l5ader2734.bin
c:\windows\system32\z5148hackto9l245.exe
c:\windows\system32\z52c9ackdoor2352.exe
c:\windows\system32\z58caddware955.exe
c:\windows\system32\z78csp95are296.cpl
c:\windows\system32\z81499or511a.cpl
c:\windows\system32\z9159hac5tool1d59.ocx
c:\windows\system32\z954spar5e1647.ocx
c:\windows\system32\z96bvi51644.dll
c:\windows\system32\zb0ethreat11925.ocx
c:\windows\system32\zc1as95ware636.cpl
c:\windows\system32\zca6th9ef5391.exe
c:\windows\system32\ze67spars91451.exe
c:\windows\system32\zf79down9oa5er1227.dll
c:\windows\system32\zzkjzcn.dll
c:\windows\unins000.dat
c:\windows\unins000.exe
c:\windows\z337vir590.exe
c:\windows\z4054vir5s695.cpl
c:\windows\z4648w5rm1329.exe
c:\windows\z5118v9rus81.ocx
c:\windows\z5169spy3d5.bin
c:\windows\z54319py13b.dll
c:\windows\z5507hack9ool706.bin
c:\windows\z585spyware7039.ocx
c:\windows\z59245orm1ce.exe
c:\windows\z595hacktoo96ac.exe
c:\windows\z5fbspar5e24849.dll
c:\windows\z6122sp5399.bin
c:\windows\z792s9ywar52272.cpl
c:\windows\z799threat26035.ocx
c:\windows\z9656viru5c89.exe
c:\windows\za5addware9814.bin
c:\windows\za5athie91186.bin
c:\windows\zc02addwa592841.cpl
c:\windows\zc079ddwar5999.cpl
c:\windows\zd39thi5f2793.dll
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_gaopdxserv.sys
-------\Legacy_jijopheh
-------\Legacy_ooistldv
-------\Legacy_sfx
-------\Legacy_sfxdrv
-------\Service_gaopdxserv.sys
-------\Service_jijopheh
-------\Service_ooistldv
-------\Service_sfx
-------\Service_sfxdrv
((((((((((((((((((((((((((((( Fichiers créés du 2009-12-14 au 2010-01-14 ))))))))))))))))))))))))))))))))))))
.
2010-01-14 08:21 . 2010-01-14 08:22 -------- d-----w- C:\rsit
2010-01-13 20:51 . 2010-01-14 08:30 -------- d-----w- c:\program files\ma-config.com
2010-01-13 20:51 . 2010-01-14 08:30 -------- d-----w- c:\documents and settings\All Users\Application Data\ma-config.com
2010-01-13 19:45 . 2010-01-13 23:14 -------- d-----w- c:\documents and settings\dan\Local Settings\Application Data\AnVir
2010-01-06 17:03 . 2010-01-06 17:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
2010-01-06 17:03 . 2010-01-06 17:03 -------- d-----w- c:\windows\system32\drivers\NSS
2010-01-06 17:02 . 2010-01-06 17:02 -------- d-----w- c:\program files\NortonInstaller
2010-01-06 17:02 . 2010-01-06 17:02 -------- d-----w- c:\documents and settings\All Users\Application Data\NortonInstaller
2009-12-28 02:24 . 2009-12-28 02:24 233472 ----a-w- c:\windows\system32\ILDA32.dll
2009-12-18 19:44 . 2010-01-06 17:03 -------- d-----w- c:\program files\Norton Security Scan
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-14 15:52 . 2009-05-18 13:12 -------- d-----w- c:\documents and settings\dan\Application Data\EoRezo
2010-01-14 15:52 . 2009-05-18 13:12 -------- d-----w- c:\program files\EoRezo
2010-01-14 14:37 . 2009-09-23 18:53 -------- d-----w- c:\documents and settings\dan\Application Data\HPAppData
2010-01-14 08:22 . 2008-04-06 09:55 -------- d-----w- c:\program files\Trend Micro
2010-01-13 18:03 . 2005-10-22 09:04 8 ----a-w- c:\documents and settings\dan\.bztarotcumul.dat
2010-01-13 17:00 . 2005-09-10 12:28 -------- d-----w- c:\program files\Fichiers communs\Symantec Shared
2010-01-13 02:41 . 2006-03-31 11:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-01-12 19:26 . 2007-08-07 10:21 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-01-11 00:30 . 2010-01-11 00:30 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.76\itstv.exe
2010-01-10 02:23 . 2010-01-10 02:23 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.75\itstv.exe
2010-01-09 09:26 . 2010-01-09 09:26 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.74\itstv.exe
2010-01-08 00:32 . 2010-01-08 00:32 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.73\itstv.exe
2010-01-07 02:26 . 2005-09-22 17:06 -------- d-----w- c:\program files\SolidWorks
2010-01-07 02:04 . 2010-01-07 02:04 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.72\itstv.exe
2010-01-06 17:48 . 2005-09-22 17:26 107087 ----a-w- c:\program files\SolidWorksswxJRNL.BAK
2010-01-06 17:02 . 2005-09-10 12:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
2010-01-06 05:45 . 2010-01-06 05:46 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.71\itstv.exe
2010-01-06 05:13 . 2008-05-02 22:47 -------- d-----w- c:\documents and settings\dan\Application Data\sldIM
2010-01-05 07:40 . 2010-01-05 07:40 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.70\itstv.exe
2010-01-04 01:52 . 2010-01-04 01:52 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.69\itstv.exe
2010-01-03 19:06 . 2010-01-03 19:06 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.68\itstv.exe
2010-01-02 13:13 . 2010-01-02 13:13 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.67\itstv.exe
2010-01-01 05:33 . 2010-01-01 05:33 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.66\itstv.exe
2009-12-31 03:01 . 2009-12-31 03:01 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.65\itstv.exe
2009-12-30 00:33 . 2009-12-30 00:33 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.64\itstv.exe
2009-12-29 22:49 . 2006-04-26 15:10 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-12-29 22:47 . 2006-04-26 15:10 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-12-28 23:48 . 2009-12-28 23:48 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.63\itstv.exe
2009-12-28 03:12 . 2006-03-28 21:36 -------- d-----w- c:\program files\Fichiers communs\Adobe
2009-12-28 00:50 . 2009-12-28 00:50 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.62\itstv.exe
2009-12-27 01:01 . 2009-12-27 01:01 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.61\itstv.exe
2009-12-26 07:08 . 2009-12-26 07:08 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.60\itstv.exe
2009-12-24 00:30 . 2009-12-24 00:30 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.58\itstv.exe
2009-12-22 20:03 . 2009-12-22 20:03 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.56\itstv.exe
2009-12-22 02:41 . 2006-09-30 19:13 -------- d-----w- c:\program files\Google
2009-12-21 10:33 . 2009-12-21 10:33 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.55\itstv.exe
2009-12-20 09:53 . 2009-12-05 00:01 -------- d-----w- c:\program files\Motamo
2009-12-20 02:24 . 2009-12-20 02:24 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.54\itstv.exe
2009-12-18 23:12 . 2009-12-18 23:12 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.53\itstv.exe
2009-12-18 11:24 . 2009-12-18 11:24 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.52\itstv.exe
2009-12-17 20:31 . 2005-09-10 22:20 -------- d-----w- c:\program files\Java
2009-12-17 20:31 . 2005-07-23 08:00 595260 ----a-w- c:\windows\system32\perfh00C.dat
2009-12-17 20:31 . 2005-07-23 08:00 124142 ----a-w- c:\windows\system32\perfc00C.dat
2009-12-17 20:30 . 2009-12-17 20:30 152576 ----a-w- c:\documents and settings\dan\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
2009-12-17 20:29 . 2009-12-17 20:29 79488 ----a-w- c:\documents and settings\dan\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2009-12-17 03:03 . 2009-12-17 03:03 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.51\itstv.exe
2009-12-15 23:24 . 2009-12-15 23:24 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.50\itstv.exe
2009-12-15 00:21 . 2009-12-15 00:21 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.49\itstv.exe
2009-12-13 23:57 . 2009-12-13 23:57 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.48\itstv.exe
2009-12-12 23:41 . 2009-12-12 23:41 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.47\itstv.exe
2009-12-11 23:16 . 2009-12-11 23:16 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.46\itstv.exe
2009-12-10 23:55 . 2009-12-10 23:55 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.45\itstv.exe
2009-12-10 19:28 . 2009-07-17 09:42 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-12-10 19:08 . 2009-12-10 19:08 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.44\itstv.exe
2009-12-07 21:59 . 2009-12-07 21:59 16821 ----a-w- c:\windows\system32\152z95py8.exe
2009-12-07 10:01 . 2009-12-07 10:01 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.43\itstv.exe
2009-12-07 03:09 . 2009-12-07 03:09 313472 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-12-05 23:34 . 2009-12-05 23:34 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.42\itstv.exe
2009-12-05 00:01 . 2009-12-05 00:01 -------- d-----w- c:\documents and settings\dan\Application Data\System
2009-12-02 23:27 . 2009-12-02 23:27 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.41\itstv.exe
2009-12-02 09:34 . 2009-12-02 09:34 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.40\itstv.exe
2009-11-29 17:16 . 2009-11-29 17:16 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.39\itstv.exe
2009-11-26 23:29 . 2009-11-26 23:29 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.38\itstv.exe
2009-11-26 01:28 . 2009-11-26 01:28 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.37\itstv.exe
2009-11-24 19:28 . 2009-11-24 19:28 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.36\itstv.exe
2009-11-19 23:17 . 2009-11-19 23:17 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.35\itstv.exe
2009-11-19 10:48 . 2009-11-26 23:42 872960 ----a-w- c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2009-11-19 10:48 . 2009-11-26 23:42 43008 ----a-w- c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2009-11-19 10:48 . 2009-11-26 23:42 340480 ----a-w- c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2009-11-19 10:48 . 2009-11-26 23:42 346624 ----a-w- c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2009-11-19 01:06 . 2009-11-19 01:06 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.34\itstv.exe
2009-11-18 09:06 . 2009-11-18 09:06 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.33\itstv.exe
2009-11-16 23:07 . 2009-11-16 23:07 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.32\itstv.exe
2009-11-16 02:32 . 2009-11-16 02:32 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.31\itstv.exe
2009-11-15 01:05 . 2009-11-15 01:05 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.30\itstv.exe
2009-11-12 01:29 . 2009-11-12 01:29 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.27\itstv.exe
2009-11-10 00:59 . 2009-11-10 00:59 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.26\itstv.exe
2009-11-08 20:58 . 2009-11-08 20:58 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.25\itstv.exe
2009-11-06 08:33 . 2009-11-06 08:33 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.24\itstv.exe
2009-11-04 23:33 . 2009-11-04 23:33 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.23\itstv.exe
2009-11-02 22:32 . 2009-11-02 22:32 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.22\itstv.exe
2009-10-31 00:56 . 2009-10-31 00:56 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.21\itstv.exe
2009-10-29 13:40 . 2009-10-29 13:40 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.20\itstv.exe
2009-10-27 02:00 . 2009-10-27 02:00 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.19\itstv.exe
2009-10-26 02:02 . 2009-10-26 02:02 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.18\itstv.exe
2009-10-22 22:20 . 2009-10-22 22:20 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.17\itstv.exe
2009-10-18 11:59 . 2009-10-18 11:59 20480 ----a-w- c:\documents and settings\dan\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.16\itstv.exe
2008-05-17 06:31 . 2007-08-25 07:59 1717 -c--a-w- c:\program files\Mozilla FirefoxswxJRNL.BAK
2007-01-25 18:57 . 2006-05-12 15:39 278528 -c--a-w- c:\program files\Fichiers communs\FDEUnInstaller.exe
2006-09-30 19:09 . 2006-07-19 19:36 15895440 ----a-w- c:\program files\DivXPlay.exe
2006-08-15 09:22 . 2006-08-15 09:20 8867328 ----a-w- c:\program files\winhotpot60.exe
2006-07-25 17:09 . 2006-07-24 18:48 64428992 ----a-w- c:\program files\Visual Basic 5.0 Enterprise Edition.exe
2006-07-24 18:08 . 2006-07-24 18:08 228706 ----a-w- c:\program files\oc97eval.zip
2006-07-24 17:52 . 2006-07-24 17:52 992864 ----a-w- c:\program files\Msvbvm50.exe
2006-07-24 17:10 . 2006-07-24 16:40 1044168 ----a-w- c:\program files\Visual Basic 6.0 -Vb6- Runtime Sp5.exe
2006-07-20 01:39 . 2006-04-26 14:57 2990272 ----a-w- c:\program files\vbsetup.exe
2006-06-17 15:54 . 2006-06-17 15:54 12527920 ----a-w- c:\program files\IE7BETA2-WindowsXP-x86-enu.exe
2006-05-01 19:54 . 2006-05-01 19:54 1235711 ----a-w- c:\program files\egifan3.exe
2006-03-04 21:48 . 2006-03-04 21:48 1483616 ----a-w- c:\program files\Windows-KB890830-V1.13.exe
2005-09-15 08:21 . 2005-09-15 08:20 10913 ----a-w- c:\program files\Uninst.isu
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2008-09-07 173368]
[HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"fsc-reminder.exe"="c:\windows\reminder\fsc-reminder.exe" [2005-01-19 28672]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"Google Update"="c:\documents and settings\dan\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-07-07 133104]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-12-17 39408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UserFaultCheck"="c:\windows\system32\dumprep 0 -u" [X]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-04-15 180269]
"!AVG Anti-Spyware"="c:\program files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 6731312]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-02-26 98304]
"snpstd"="c:\windows\vsnpstd.exe" [2004-06-10 286720]
"mmtask"="c:\program files\MusicMatch\MusicMatch Jukebox\mmtask.exe" [2003-10-01 53248]
"EoEngine"="c:\program files\EoRezo\EoEngine.exe" [2009-02-23 472872]
"SoftwareHelper"="c:\documents and settings\dan\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe" [2008-12-09 368224]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2008-03-25 49152]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NoIE4StubProcessing"="c:\windows\system32\reg.exe DELETE HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" [X]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" [2007-02-25 437160]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-05 44544]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"<NO NAME>"= disabletaskmgr=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0?A\0stera
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Guard]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Reader 7.0.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Reader 7.0.lnk
backup=c:\windows\pss\Adobe Reader 7.0.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Exif Launcher.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Exif Launcher.lnk
backup=c:\windows\pss\Exif Launcher.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^dan^Menu Démarrer^Programmes^Démarrage^Aide mémoire.lnk]
path=c:\documents and settings\dan\Menu Démarrer\Programmes\Démarrage\Aide mémoire.lnk
backup=c:\windows\pss\Aide mémoire.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
2007-04-15 03:34 208941 ----a-w- c:\program files\Real\RealPlayer\realplay.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2005-05-17 16:48 77824 ----a-w- c:\windows\SOUNDMAN.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
"snpstd"=c:\windows\vsnpstd.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\eChanblard\\emule.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Documents and Settings\\dan\\Bureau\\Jeux\\Dames.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"427:UDP"= 427:UDP:SLP_Port(427)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
R2 antivirschedulerservice;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [17/07/2009 10:42 108289]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [15/09/2009 22:11 54752]
R2 PCAutoShutdown_Service;PCAutoShutdown_Service;c:\bureau\PC Auto Shutdown\ShutdownService.exe [28/11/2008 01:19 461928]
S1 736686df;736686df;c:\windows\system32\drivers\736686df.sys [07/07/2009 14:58 0]
S2 gupdate1c9aaa4b08cf5da;Service Google Update (gupdate1c9aaa4b08cf5da);c:\program files\Google\Update\GoogleUpdate.exe [22/03/2009 05:14 133104]
S3 ATWPKT;ATWPKT;c:\windows\system32\drivers\atwpkt.sys [24/09/2005 10:49 19140]
S3 fsssvc;Service Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [05/08/2009 21:48 704864]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contenu du dossier 'Tâches planifiées'
2010-01-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-22 04:14]
2010-01-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-22 04:14]
2010-01-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1758704099-1854936978-4219837892-1006Core.job
- c:\documents and settings\dan\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-07-07 16:48]
2010-01-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1758704099-1854936978-4219837892-1006UA.job
- c:\documents and settings\dan\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-07-07 16:48]
2010-01-13 c:\windows\Tasks\Norton Security Scan for dan.job
- c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.3.0.44\Nss.exe [2010-01-06 15:45]
2010-01-14 c:\windows\Tasks\User_Feed_Synchronization-{CC35DECA-5803-4AD0-B675-90C082CD2A14}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 02:31]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://y.lo.st
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uInternet Connection Wizard,ShellNext = iexplore
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - Live Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - component: c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - plugin: c:\documents and settings\dan\Application Data\Mozilla\Firefox\Profiles\omr4dln1.default\extensions\OberonGameHost@OberonGames.com\platform\WINNT_x86-msvc\plugins\npOberonGameHost.dll
FF - plugin: c:\documents and settings\dan\Local Settings\Application Data\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
.
- - - - ORPHELINS SUPPRIMES - - - -
BHO-{0285BD5B-463B-47BE-99F9-D1ABB6F4BA06} - (no file)
BHO-{0A16F56C-463B-47BE-99F9-D1ABB6F4BA06} - (no file)
BHO-{96F8931D-BB55-41DE-9AF7-257A7EB43D2A} - (no file)
BHO-{E1A764F5-F788-4B2D-9FC2-A9D06A073526} - (no file)
Notify-zjsaqdgz - (no file)
SafeBoot-AVG Anti-Spyware Driver
AddRemove-Spybot - Search & Destroy_is1 - c:\windows\unins000.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-14 16:54
Windows 5.1.2600 Service Pack 3 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
Scan terminé avec succès
Fichiers cachés: 0
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•9~*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------
- - - - - - - > 'winlogon.exe'(728)
c:\windows\system32\Ati2evxx.dll
- - - - - - - > 'explorer.exe'(1972)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\eappprxy.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\windows\system32\drivers\CDAC11BA.EXE
c:\windows\system32\crypserv.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\System32\snmp.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Heure de fin: 2010-01-14 17:00:48 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-01-14 16:00
Avant-CF: 154 885 894 144 octets libres
Après-CF: 155 022 295 040 octets libres
Current=4 Default=4 Failed=0 LastKnownGood=2 Sets=1,2,3,4
- - End Of File - - C8B043E7672D2F7B088AC73F0C71B83B
Utilisateur anonyme
14 janv. 2010 à 18:55
14 janv. 2010 à 18:55
pas mal le rapport de commbofix ;-)
Télécharge de AD-Remover sur ton Bureau. (Merci à Cyrildu17 / C_XX)
http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe
Miroir:
https://www.androidworld.fr/
- Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
- Double-clique sur l'icône Ad-remover située sur ton Bureau.
- Au menu principal, choisis l'option « L ».
- Laisse travailler l’outil.
- Poste le rapport qui apparaît à la fin.
(Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)
(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
Note :
"Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Tuto : http://pagesperso-orange.fr/NosTools/tuto_adr_3.html
Télécharge de AD-Remover sur ton Bureau. (Merci à Cyrildu17 / C_XX)
http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe
Miroir:
https://www.androidworld.fr/
- Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
- Double-clique sur l'icône Ad-remover située sur ton Bureau.
- Au menu principal, choisis l'option « L ».
- Laisse travailler l’outil.
- Poste le rapport qui apparaît à la fin.
(Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)
(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
Note :
"Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Tuto : http://pagesperso-orange.fr/NosTools/tuto_adr_3.html
Voici la suite....
et il redémarre toujours tout seul... :(
.
======= RAPPORT D'AD-REMOVER 1.1.4.6_H | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 14.01.2010 à 18:40
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 19:00:05, 14/01/2010 | Mode Normal | Option: CLEAN
Exécuté de: C:\Ad-Remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: NOM-7CDEC717282 | Utilisateur actuel: dan
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
C:\DOCUME~1\dan\APPLIC~1\Mozilla\FireFox\Profiles\omr4dln1.default\searchplugins\sweetim.xml
C:\DOCUME~1\dan\APPLIC~1\Mozilla\FireFox\Profiles\omr4dln1.default\SweetIMToolbarData
C:\Program Files\EoRezo
C:\Program Files\Macrogaming
C:\Program Files\SweetIM
C:\DOCUME~1\dan\APPLIC~1\EoRezo
C:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
C:\Windows\Installer\385f3.msi
(!) -- Fichiers temporaires supprimés.
.
HKCU\software\EoRezo
HKCU\software\microsoft\internet explorer\searchscopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKCU\software\Poker 770
HKCU\software\SWEETIE
HKCU\software\SweetIM
HKCU\software\vmntoolbar
HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKLM\software\classes\appid\EoRezoBHO.DLL
HKLM\Software\Classes\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKLM\Software\Classes\CLSID\{E49F0B41-3322-11D4-AEFE-00C04F61025C}
HKLM\Software\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKLM\software\classes\EoRezoBHO.EoBHO
HKLM\software\classes\EoRezoBHO.EoBHO.1
HKLM\Software\Classes\Interface\{819DB72D-1C28-4387-9778-E2FF3DC86F74}
HKLM\software\classes\SWEETIE.SWEETIE.3
HKLM\software\classes\Toolbar3.SWEETIE
HKLM\software\classes\Toolbar3.SWEETIE.1
HKLM\Software\Classes\TypeLib\{7D3F5DE4-E980-4407-A10F-9AC771ABAAE6}
HKLM\Software\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
HKLM\Software\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
HKLM\software\EoRezo
HKLM\software\Macrogaming
HKLM\software\MetaStream
HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
HKLM\software\microsoft\internet explorer\searchscopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\02F47BF73B948514FAACADD8CBBDF37D
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\080D9F5E1E95FEE4794CE438E635239E
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\1E264E0A5959A1C46BA9175A878B12EA
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\2E6768B6932D112438F047C54D180635
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\305B09CE8C53A214DB58887F62F25536
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\351716A953E21214898904032EAE2E81
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\397C771A7BCAC904697C3EC629ED33ED
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\A189D17A469616C4688D23E192996267
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\D15DAF33C220F91468A1D7D57C31ACD7
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\D3BA76A44C779424889063D5098ED2D6
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\D6D0EB9FDBD90C04D92A7E729058F10D
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\E4748F9A4181FCE46A23C13B517B9420
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\EoEngine
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SoftwareHelper
HKLM\software\microsoft\windows\currentversion\uninstall\{36D6A89E-C39F-4EE8-9181-C13E9BC739A5}
HKLM\software\microsoft\windows\currentversion\uninstall\eoEngine_is1
HKLM\software\microsoft\windows\currentversion\uninstall\SoftwareUpdate_is1
HKLM\software\Poker 770
HKLM\software\SweetIM
HKLM\software\Viewpoint
.
============== Scan additionnel ==============
.
.
* Mozilla FireFox Version 3.5.7 [fr] *
.
Nom du profil: omr4dln1.default (dan)
.
(dan, Invalidprefs.js) Browser.download.dir, C:\fichiers téléchargés
(dan, Invalidprefs.js) Browser.download.lastDir, C:\Documents and Settings\dan\Bureau
(dan, Invalidprefs.js) Browser.search.defaultenginename, Live Search
(dan, Invalidprefs.js) Browser.search.defaulturl, hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
(dan, Invalidprefs.js) Browser.search.selectedEngine, Live Search
(dan, Invalidprefs.js) Browser.startup.homepage, hxxp://y.lo.st
(dan, Invalidprefs.js) Extensions.enabledItems, {3112ca9c-de6d-4884-a869-9855de68056c}:6.1.20091119W,{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07,{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11,{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14,jqs@sun.com:1.0,OberonGameHost@OberonGames.com:1.0.5.1344,{402c769d-acde-42e5-86e6-25bda5bffd6e}:1.0,{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.6
(dan, Invalidprefs.js) Keyword.URL, hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
.
(dan, Invalidprefs.js) EFFACE - Browser.startup.homepage, hxxp://y.lo.st
.
(dan, prefs.js) Browser.download.dir, C:\fichiers téléchargés
(dan, prefs.js) Browser.download.lastDir, C:\Documents and Settings\dan\Bureau
(dan, prefs.js) Browser.search.defaultenginename, Live Search
(dan, prefs.js) Browser.search.defaulturl, hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
(dan, prefs.js) Browser.search.selectedEngine, Live Search
(dan, prefs.js) Browser.startup.homepage, hxxp://www.google.fr/
(dan, prefs.js) Extensions.enabledItems, {3112ca9c-de6d-4884-a869-9855de68056c}:6.1.20091119W,{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07,{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11,{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14,{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,jqs@sun.com:1.0,OberonGameHost@OberonGames.com:1.0.5.1344,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.7
(dan, prefs.js) Keyword.URL, hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
.
.
* Internet Explorer Version 8.0.6001.18702 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Do404Search: 01000000
Local Page: C:\WINDOWS\system32\blank.htm
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Enable Browser Extensions: yes
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Use Search Asst: no
Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Start Page: hxxp://fr.msn.com/
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS\system32\blank.htm
First Home Page: C:\Program Files\AOL Toolbar\welcome.html
Search bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
============== Suspect (Cracks, Serials, ...) ==============
.
C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal Pro\5.0\Bases\Patches\patch_ppro_5.0.388_390_to_5.0.391.exe
C:\Documents and Settings\dan\Mes documents\SolidWorksUnzip\Program Files\SolidWorks 2004 SP0 Crack.exe
.
===================================
.
10146 Octet(s) - C:\Ad-Report-CLEAN[1].log
.
0 Fichier(s) - C:\DOCUME~1\dan\LOCALS~1\Temp
8 Fichier(s) - C:\WINDOWS\Temp
0 Fichier(s) - C:\WINDOWS\Prefetch
.
19 Fichier(s) - C:\Ad-Remover\BACKUP
434 Fichier(s) - C:\Ad-Remover\QUARANTINE
.
Fin à: 19:18:18 | 14/01/2010 - CLEAN[1]
.
============== E.O.F ==============
.
et il redémarre toujours tout seul... :(
.
======= RAPPORT D'AD-REMOVER 1.1.4.6_H | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 14.01.2010 à 18:40
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 19:00:05, 14/01/2010 | Mode Normal | Option: CLEAN
Exécuté de: C:\Ad-Remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: NOM-7CDEC717282 | Utilisateur actuel: dan
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
C:\DOCUME~1\dan\APPLIC~1\Mozilla\FireFox\Profiles\omr4dln1.default\searchplugins\sweetim.xml
C:\DOCUME~1\dan\APPLIC~1\Mozilla\FireFox\Profiles\omr4dln1.default\SweetIMToolbarData
C:\Program Files\EoRezo
C:\Program Files\Macrogaming
C:\Program Files\SweetIM
C:\DOCUME~1\dan\APPLIC~1\EoRezo
C:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
C:\Windows\Installer\385f3.msi
(!) -- Fichiers temporaires supprimés.
.
HKCU\software\EoRezo
HKCU\software\microsoft\internet explorer\searchscopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKCU\software\Poker 770
HKCU\software\SWEETIE
HKCU\software\SweetIM
HKCU\software\vmntoolbar
HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKLM\software\classes\appid\EoRezoBHO.DLL
HKLM\Software\Classes\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKLM\Software\Classes\CLSID\{E49F0B41-3322-11D4-AEFE-00C04F61025C}
HKLM\Software\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKLM\Software\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
HKLM\software\classes\EoRezoBHO.EoBHO
HKLM\software\classes\EoRezoBHO.EoBHO.1
HKLM\Software\Classes\Interface\{819DB72D-1C28-4387-9778-E2FF3DC86F74}
HKLM\software\classes\SWEETIE.SWEETIE.3
HKLM\software\classes\Toolbar3.SWEETIE
HKLM\software\classes\Toolbar3.SWEETIE.1
HKLM\Software\Classes\TypeLib\{7D3F5DE4-E980-4407-A10F-9AC771ABAAE6}
HKLM\Software\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
HKLM\Software\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
HKLM\software\EoRezo
HKLM\software\Macrogaming
HKLM\software\MetaStream
HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
HKLM\software\microsoft\internet explorer\searchscopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\02F47BF73B948514FAACADD8CBBDF37D
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\080D9F5E1E95FEE4794CE438E635239E
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\1E264E0A5959A1C46BA9175A878B12EA
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\2E6768B6932D112438F047C54D180635
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\305B09CE8C53A214DB58887F62F25536
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\351716A953E21214898904032EAE2E81
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\397C771A7BCAC904697C3EC629ED33ED
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\A189D17A469616C4688D23E192996267
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\D15DAF33C220F91468A1D7D57C31ACD7
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\D3BA76A44C779424889063D5098ED2D6
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\D6D0EB9FDBD90C04D92A7E729058F10D
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-21-1758704099-1854936978-4219837892-1006\Components\E4748F9A4181FCE46A23C13B517B9420
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\EoEngine
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SoftwareHelper
HKLM\software\microsoft\windows\currentversion\uninstall\{36D6A89E-C39F-4EE8-9181-C13E9BC739A5}
HKLM\software\microsoft\windows\currentversion\uninstall\eoEngine_is1
HKLM\software\microsoft\windows\currentversion\uninstall\SoftwareUpdate_is1
HKLM\software\Poker 770
HKLM\software\SweetIM
HKLM\software\Viewpoint
.
============== Scan additionnel ==============
.
.
* Mozilla FireFox Version 3.5.7 [fr] *
.
Nom du profil: omr4dln1.default (dan)
.
(dan, Invalidprefs.js) Browser.download.dir, C:\fichiers téléchargés
(dan, Invalidprefs.js) Browser.download.lastDir, C:\Documents and Settings\dan\Bureau
(dan, Invalidprefs.js) Browser.search.defaultenginename, Live Search
(dan, Invalidprefs.js) Browser.search.defaulturl, hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
(dan, Invalidprefs.js) Browser.search.selectedEngine, Live Search
(dan, Invalidprefs.js) Browser.startup.homepage, hxxp://y.lo.st
(dan, Invalidprefs.js) Extensions.enabledItems, {3112ca9c-de6d-4884-a869-9855de68056c}:6.1.20091119W,{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07,{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11,{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14,jqs@sun.com:1.0,OberonGameHost@OberonGames.com:1.0.5.1344,{402c769d-acde-42e5-86e6-25bda5bffd6e}:1.0,{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.6
(dan, Invalidprefs.js) Keyword.URL, hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
.
(dan, Invalidprefs.js) EFFACE - Browser.startup.homepage, hxxp://y.lo.st
.
(dan, prefs.js) Browser.download.dir, C:\fichiers téléchargés
(dan, prefs.js) Browser.download.lastDir, C:\Documents and Settings\dan\Bureau
(dan, prefs.js) Browser.search.defaultenginename, Live Search
(dan, prefs.js) Browser.search.defaulturl, hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
(dan, prefs.js) Browser.search.selectedEngine, Live Search
(dan, prefs.js) Browser.startup.homepage, hxxp://www.google.fr/
(dan, prefs.js) Extensions.enabledItems, {3112ca9c-de6d-4884-a869-9855de68056c}:6.1.20091119W,{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07,{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11,{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14,{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,jqs@sun.com:1.0,OberonGameHost@OberonGames.com:1.0.5.1344,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.7
(dan, prefs.js) Keyword.URL, hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
.
.
* Internet Explorer Version 8.0.6001.18702 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Do404Search: 01000000
Local Page: C:\WINDOWS\system32\blank.htm
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Enable Browser Extensions: yes
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Use Search Asst: no
Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Start Page: hxxp://fr.msn.com/
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS\system32\blank.htm
First Home Page: C:\Program Files\AOL Toolbar\welcome.html
Search bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
============== Suspect (Cracks, Serials, ...) ==============
.
C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal Pro\5.0\Bases\Patches\patch_ppro_5.0.388_390_to_5.0.391.exe
C:\Documents and Settings\dan\Mes documents\SolidWorksUnzip\Program Files\SolidWorks 2004 SP0 Crack.exe
.
===================================
.
10146 Octet(s) - C:\Ad-Report-CLEAN[1].log
.
0 Fichier(s) - C:\DOCUME~1\dan\LOCALS~1\Temp
8 Fichier(s) - C:\WINDOWS\Temp
0 Fichier(s) - C:\WINDOWS\Prefetch
.
19 Fichier(s) - C:\Ad-Remover\BACKUP
434 Fichier(s) - C:\Ad-Remover\QUARANTINE
.
Fin à: 19:18:18 | 14/01/2010 - CLEAN[1]
.
============== E.O.F ==============
.
Utilisateur anonyme
14 janv. 2010 à 19:57
14 janv. 2010 à 19:57
repasse un autre rsit et poste son rapport
note : tu n'auras qu'un seul rapport (log.txt)
note : tu n'auras qu'un seul rapport (log.txt)
La suite...
Logfile of random's system information tool 1.06 (written by random/random)
Run by dan at 2010-01-14 20:42:53
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 148 GB (77%) free of 191 GB
Total RAM: 1023 MB (41% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:43:17, on 14/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\vsnpstd.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\bureau\PC Auto Shutdown\ShutdownService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\dan\Bureau\RSIT.exe
C:\Program Files\trend micro\dan.exe
C:\Program Files\Mozilla Firefox\firefox.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = C:\Program Files\AOL Toolbar\welcome.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {0285BD5B-463B-47BE-99F9-D1ABB6F4BA06} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: (no name) - {0A16F56C-463B-47BE-99F9-D1ABB6F4BA06} - (no file)
O2 - BHO: (no name) - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {96F8931D-BB55-41DE-9AF7-257A7EB43D2A} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: (no name) - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: (no name) - {E1A764F5-F788-4B2D-9FC2-A9D06A073526} - (no file)
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [NoIE4StubProcessing] C:\WINDOWS\system32\reg.exe DELETE "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" /v "NoIE4StubProcessing" /f
O4 - HKCU\..\Run: [fsc-reminder.exe] C:\windows\reminder\fsc-reminder.exe 2453624 10
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\dan\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D96F71-87C6-11D3-9BE4-00902742D6E0} (QuickPlace Class) - http://www2.ac-nancy-metz.fr/qp2.cab
O16 - DPF: {26FCCDF9-A7E1-452A-A73D-7BF7B4D0BA6C} - http://pictures.aol.com/ap/Resources/2.0.4.69/cab/aolpPlugins.10.4.0.4.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/...
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.1.0.53.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = dan.dns
O17 - HKLM\Software\..\Telephony: DomainName = dan.dns
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = dan.dns
O17 - HKLM\System\CS4\Services\Tcpip\Parameters: Domain = dan.dns
O20 - Winlogon Notify: zjsaqdgz - C:\WINDOWS\
O22 - SharedTaskScheduler: IE Component Categories cache daemon - {553858A7-4922-4e7e-B1C1-97140C1C16EF} - C:\WINDOWS\system32\ieframe.dll
O23 - Service: Avira AntiVir Planificateur (antivirschedulerservice) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (antivirservice) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: .NET Runtime Optimization Service v2.0.50215_X86 (clr_optimization_v2.0.50215_32) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50215\mscorsvw.exe (file missing)
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Service Google Update (gupdate1c9aaa4b08cf5da) (gupdate1c9aaa4b08cf5da) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: PCAutoShutdown_Service - GoldSolution Software, Inc. - C:\bureau\PC Auto Shutdown\ShutdownService.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Fichiers communs\SolidWorks Shared\Service\SolidWorksLicensing.exe
O24 - Desktop Component 0: (no name) - http://upload.wikimedia.org/...
Logfile of random's system information tool 1.06 (written by random/random)
Run by dan at 2010-01-14 20:42:53
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 148 GB (77%) free of 191 GB
Total RAM: 1023 MB (41% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:43:17, on 14/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\vsnpstd.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\bureau\PC Auto Shutdown\ShutdownService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\dan\Bureau\RSIT.exe
C:\Program Files\trend micro\dan.exe
C:\Program Files\Mozilla Firefox\firefox.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = C:\Program Files\AOL Toolbar\welcome.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {0285BD5B-463B-47BE-99F9-D1ABB6F4BA06} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: (no name) - {0A16F56C-463B-47BE-99F9-D1ABB6F4BA06} - (no file)
O2 - BHO: (no name) - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {96F8931D-BB55-41DE-9AF7-257A7EB43D2A} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: (no name) - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: (no name) - {E1A764F5-F788-4B2D-9FC2-A9D06A073526} - (no file)
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [NoIE4StubProcessing] C:\WINDOWS\system32\reg.exe DELETE "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" /v "NoIE4StubProcessing" /f
O4 - HKCU\..\Run: [fsc-reminder.exe] C:\windows\reminder\fsc-reminder.exe 2453624 10
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\dan\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D96F71-87C6-11D3-9BE4-00902742D6E0} (QuickPlace Class) - http://www2.ac-nancy-metz.fr/qp2.cab
O16 - DPF: {26FCCDF9-A7E1-452A-A73D-7BF7B4D0BA6C} - http://pictures.aol.com/ap/Resources/2.0.4.69/cab/aolpPlugins.10.4.0.4.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/...
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.1.0.53.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = dan.dns
O17 - HKLM\Software\..\Telephony: DomainName = dan.dns
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = dan.dns
O17 - HKLM\System\CS4\Services\Tcpip\Parameters: Domain = dan.dns
O20 - Winlogon Notify: zjsaqdgz - C:\WINDOWS\
O22 - SharedTaskScheduler: IE Component Categories cache daemon - {553858A7-4922-4e7e-B1C1-97140C1C16EF} - C:\WINDOWS\system32\ieframe.dll
O23 - Service: Avira AntiVir Planificateur (antivirschedulerservice) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (antivirservice) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: .NET Runtime Optimization Service v2.0.50215_X86 (clr_optimization_v2.0.50215_32) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50215\mscorsvw.exe (file missing)
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Service Google Update (gupdate1c9aaa4b08cf5da) (gupdate1c9aaa4b08cf5da) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: PCAutoShutdown_Service - GoldSolution Software, Inc. - C:\bureau\PC Auto Shutdown\ShutdownService.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Fichiers communs\SolidWorks Shared\Service\SolidWorksLicensing.exe
O24 - Desktop Component 0: (no name) - http://upload.wikimedia.org/...
Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3584
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
17/01/2010 21:44:43
mbam-log-2010-01-17 (21-44-37).txt
Type de recherche: Examen complet (C:\|)
Eléments examinés: 311877
Temps écoulé: 1 hour(s), 39 minute(s), 51 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 20
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{d263b532-c528-49e5-8bb6-80fa67332c9a} (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\AppID\{96f8931d-bb55-41de-9af7-257a7eb43d2a} (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{7165223d-d2c9-422b-8126-411b11842b8b} (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{bfc08cff-c737-4433-bd5a-0ee7efcfee54} (Adware.Zango) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3aa42713-5c1e-48e2-b432-d8bf420dd31d} (Rogue.AntiVirus2008) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{96f8931d-bb55-41de-9af7-257a7eb43d2a} (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96f8931d-bb55-41de-9af7-257a7eb43d2a} (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\.fsharproj (Trojan.BHO) -> No action taken.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{f3175b35-99ce-4297-a7e1-292562dd7af3} (Rogue.DeusCleaner) -> No action taken.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
Dossier(s) infecté(s):
C:\Program Files\2M Games (Adware.WebHancer) -> No action taken.
C:\Program Files\2M Games\ABC Scrabble (Adware.WebHancer) -> No action taken.
C:\Program Files\2M Games\ABC Scrabble\help (Adware.WebHancer) -> No action taken.
Fichier(s) infecté(s):
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP139\A0207808.exe (Rogue.Installer) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0224820.sys (Malware.Trace) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225496.sys (Malware.Trace) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225497.sys (Malware.Trace) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225530.sys (Malware.Trace) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225617.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225640.dll (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225641.dll (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225659.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225660.exe (Rogue.Eorezo) -> No action taken.
C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\jijopheh.sys.vir (Malware.Trace) -> No action taken.
C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\yyeltoey.sys.vir (Malware.Trace) -> No action taken.
C:\Ad-Remover\QUARANTINE\DOCUME~1\dan\APPLIC~1\EoRezo\SOFTWA~1\SoftwareUpdate.exe.vir (Rogue.Eorezo) -> No action taken.
C:\Ad-Remover\QUARANTINE\DOCUME~1\dan\APPLIC~1\EoRezo\SOFTWA~1\SoftwareUpdateHP.exe.vir (Rogue.Eorezo) -> No action taken.
C:\Ad-Remover\QUARANTINE\PROGRA~1\EoRezo\EoEngine.exe.vir (Rogue.Eorezo) -> No action taken.
C:\Ad-Remover\QUARANTINE\PROGRA~1\EoRezo\EoAdv\EoAdv.dll.vir (Rogue.Eorezo) -> No action taken.
C:\Ad-Remover\QUARANTINE\PROGRA~1\EoRezo\EoAdv\EoRezoBHO.dll.vir (Rogue.Eorezo) -> No action taken.
C:\WINDOWS\system32\hmtkqlc.dll.bak (Trojan.Boaxxe) -> No action taken.
C:\xmp.bat (Trojan.Downloader) -> No action taken.
C:\WINDOWS\Prefetch\AntiCtrlEchap.exe (Trojan.Agent) -> No action taken.
Version de la base de données: 3584
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
17/01/2010 21:44:43
mbam-log-2010-01-17 (21-44-37).txt
Type de recherche: Examen complet (C:\|)
Eléments examinés: 311877
Temps écoulé: 1 hour(s), 39 minute(s), 51 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 20
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{d263b532-c528-49e5-8bb6-80fa67332c9a} (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\AppID\{96f8931d-bb55-41de-9af7-257a7eb43d2a} (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{7165223d-d2c9-422b-8126-411b11842b8b} (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{bfc08cff-c737-4433-bd5a-0ee7efcfee54} (Adware.Zango) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3aa42713-5c1e-48e2-b432-d8bf420dd31d} (Rogue.AntiVirus2008) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{96f8931d-bb55-41de-9af7-257a7eb43d2a} (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96f8931d-bb55-41de-9af7-257a7eb43d2a} (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\.fsharproj (Trojan.BHO) -> No action taken.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{f3175b35-99ce-4297-a7e1-292562dd7af3} (Rogue.DeusCleaner) -> No action taken.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
Dossier(s) infecté(s):
C:\Program Files\2M Games (Adware.WebHancer) -> No action taken.
C:\Program Files\2M Games\ABC Scrabble (Adware.WebHancer) -> No action taken.
C:\Program Files\2M Games\ABC Scrabble\help (Adware.WebHancer) -> No action taken.
Fichier(s) infecté(s):
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP139\A0207808.exe (Rogue.Installer) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0224820.sys (Malware.Trace) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225496.sys (Malware.Trace) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225497.sys (Malware.Trace) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225530.sys (Malware.Trace) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225617.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225640.dll (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225641.dll (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225659.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{DA7FD61A-8A4C-431C-8627-E9069FBA0753}\RP141\A0225660.exe (Rogue.Eorezo) -> No action taken.
C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\jijopheh.sys.vir (Malware.Trace) -> No action taken.
C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\yyeltoey.sys.vir (Malware.Trace) -> No action taken.
C:\Ad-Remover\QUARANTINE\DOCUME~1\dan\APPLIC~1\EoRezo\SOFTWA~1\SoftwareUpdate.exe.vir (Rogue.Eorezo) -> No action taken.
C:\Ad-Remover\QUARANTINE\DOCUME~1\dan\APPLIC~1\EoRezo\SOFTWA~1\SoftwareUpdateHP.exe.vir (Rogue.Eorezo) -> No action taken.
C:\Ad-Remover\QUARANTINE\PROGRA~1\EoRezo\EoEngine.exe.vir (Rogue.Eorezo) -> No action taken.
C:\Ad-Remover\QUARANTINE\PROGRA~1\EoRezo\EoAdv\EoAdv.dll.vir (Rogue.Eorezo) -> No action taken.
C:\Ad-Remover\QUARANTINE\PROGRA~1\EoRezo\EoAdv\EoRezoBHO.dll.vir (Rogue.Eorezo) -> No action taken.
C:\WINDOWS\system32\hmtkqlc.dll.bak (Trojan.Boaxxe) -> No action taken.
C:\xmp.bat (Trojan.Downloader) -> No action taken.
C:\WINDOWS\Prefetch\AntiCtrlEchap.exe (Trojan.Agent) -> No action taken.
