enlever la publicitéFermé

Question

Bonjour, 

Je souhaiterais savoir comment enlever les publicité (casino, porno, etc), car ca fait déja plusieur jour que j'essaie mais sans succès.

Merci de votre aide.

Guigui91300 · Answer

L'enlever d'où? Des sites sur internet?

odin · Answer

non en fait, losque j'allume mon pc des fenêtres publicitaires s'ouvrent, quand je vais sur internet, des page de pub s'ouvrent toute seul.

Guigui91300 · Answer

Des pop'ups! Il faut que tu télécharges un bloqueur de pop'up. Par exemple, tu peux télécharger la barre d'outils Google sur Firefox et Internet Explorer.

odin · Answer

j'ai déja la barre d'outil google vous ne voulez pas un raport hijack pour y voir plus claire

Guigui91300 · Answer

Euh ça ne me donnera rien. Les fenêtres ne s'ouvrent que lorsque que tu es sur Internet? Sinon prend Mozilla Firefox, aucun soucis avec! Regarde bien sur la barre d'outils Google si l'option pour bloquer les pop'ups est enclenché.

odin · Answer

j'ai déja tenté firfox, c'est pareil. la barre d'outil google est bien configuré.

Utilisateur anonyme · Answer

Salut,


Fais un clic droit sur ce lien : (IL-MAFIOSO) 
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe 
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau. 
Ensuite double clique sur navilog1.exe pour lancer l'installation. 
Une fois l'installation terminée, le fix s'exécutera automatiquement. 
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau). 

Laisse-toi guider. Au menu principal, choisis 1 et valides. 
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord) 

Patiente jusqu'au message : 
*** Analyse Termine le ..... *** 
Appuie sur une touche comme demandé, le blocnote va s'ouvrir. 
Copie-colle l'intégralité dans une réponse. Referme le blocnote. 
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt) 


Tuto: http://www.malekal.com/Adware.Magic_Control.php

Guigui91300 · Answer

Bon alors, autre chose. Essaye de télécharger Spybot S&D et supprime tous les spywares (logiciels espions avec un but souvent commercial).

odin · Answer

j'ai déja spybot search and destroy, j'ai suprimé touts les spyware, je vais essayer la technique de chiquetine29

odin · Answer

Search Navipromo version 3.6.7 commencé le 28/10/2008 à 18:09:40,65

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "PATTY" 

Mise à jour le 22.10.2008 à 20h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11 
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit

*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\PATTY\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\PATTY\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\PATTY\menudm~1\progra~1" *** 


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\PATTY\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" * 



*** Recherche fichiers *** 



*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé ! 

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\PATTY\locals~1\applic~1" : 

ecoaq.dat trouvé !
ecoaq.exe trouvé !
ecoaq_nav.dat trouvé !
ecoaq_navps.dat trouvé !

* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" : 


3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :

C:\WINDOWS\system32\RsDdcfii.ini2 trouvé ! infection Vundo possible non traitée par cet outil !


*** Analyse terminée le 28/10/2008 à 18:13:09,29 ***

Utilisateur anonyme · Answer

Double cliques sur le raccourci Navilog1 présent sur le bureau et laisse-toi guider. 
Au menu principal, choisis 2 et valides. 
(ne fais pas le choix 3 ou 4 sans notre avis/accord) 

Le fix va t'informer qu'il va alors redémarrer ton PC 
Fermes toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts 
Appuies sur une touche comme demandé. 
(si ton Pc ne redémarre pas automatiquement, fais le toi même) 
Au redémarrage de ton PC, choisis ta session habituelle. 

Patiente jusqu'au message : 
*** Nettoyage Termine le ..... *** 
Le bloc-notes va s'ouvrir. 
Sauvegarde le rapport de manière à le retrouver 
Referme le bloc-notes. Ton bureau va réapparaitre 

PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches. 
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter" 
Tape explorer et valide. Celà te fera apparaitre ton bureau. 

Postes le rapport içi.

odin · Answer

Search Navipromo version 3.6.7 commencé le 28/10/2008 à 18:09:40,65

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "PATTY" 

Mise à jour le 22.10.2008 à 20h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11 
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit

*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\PATTY\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\PATTY\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\PATTY\menudm~1\progra~1" *** 


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\PATTY\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" * 



*** Recherche fichiers *** 



*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé ! 

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\PATTY\locals~1\applic~1" : 

ecoaq.dat trouvé !
ecoaq.exe trouvé !
ecoaq_nav.dat trouvé !
ecoaq_navps.dat trouvé !

* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" : 


3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :

C:\WINDOWS\system32\RsDdcfii.ini2 trouvé ! infection Vundo possible non traitée par cet outil !


*** Analyse terminée le 28/10/2008 à 18:13:09,29 ***

Utilisateur anonyme · Answer

reste sur ce topic merci;


Double cliques sur le raccourci Navilog1 présent sur le bureau et laisse-toi guider. 
Au menu principal, choisis 2 et valides. 
(ne fais pas le choix 3 ou 4 sans notre avis/accord) 

Le fix va t'informer qu'il va alors redémarrer ton PC 
Fermes toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts 
Appuies sur une touche comme demandé. 
(si ton Pc ne redémarre pas automatiquement, fais le toi même) 
Au redémarrage de ton PC, choisis ta session habituelle. 

Patiente jusqu'au message : 
*** Nettoyage Termine le ..... *** 
Le bloc-notes va s'ouvrir. 
Sauvegarde le rapport de manière à le retrouver 
Referme le bloc-notes. Ton bureau va réapparaitre 

PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches. 
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter" 
Tape explorer et valide. Celà te fera apparaitre ton bureau. 

Postes le rapport içi.

odin · Answer

Clean Navipromo version 3.6.7 commencé le 28/10/2008 à 18:20:06,71

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "PATTY" 

Mise à jour le 22.10.2008 à 20h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : NTFS

Mode suppression automatique 
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur

 
*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)
 

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *


* Suppression dans "C:\Documents and Settings\PATTY\locals~1\applic~1" * 


* Suppression dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" * 


*** Suppression dossiers dans "C:\WINDOWS" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\PATTY\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" *** 


*** Suppression dossiers dans "C:\Documents and Settings\PATTY\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\Documents and Settings\PATTY\menudm~1\progra~1" *** 



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\PATTY\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS\system32" *


* Dans "C:\Documents and Settings\PATTY\locals~1\applic~1" * 


ecoaq.exe trouvé ! 
Copie ecoaq.exe réalisée avec succès !
ecoaq.exe supprimé !

ecoaq.dat trouvé ! 
Copie ecoaq.dat réalisée avec succès !
ecoaq.dat supprimé !

ecoaq_nav.dat trouvé ! 
Copie ecoaq_nav.dat réalisée avec succès !
ecoaq_nav.dat supprimé !

ecoaq_navps.dat trouvé ! 
Copie ecoaq_navps.dat réalisée avec succès !
ecoaq_navps.dat supprimé !

C:\WINDOWS\prefetch\ecoaq*.pf trouvé ! 
Copie C:\WINDOWS\prefetch\ecoaq*.pf réalisée avec succès !
C:\WINDOWS\prefetch\ecoaq*.pf supprimé !


* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" * 


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup supprimé !
Certificat Electronic-Group supprimé !
Certificat Montorgueil absent !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 28/10/2008 à 18:24:24,48 ***

Utilisateur anonyme · Answer

télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2 

* Double-clique dessus pour lancer l'installation 
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau 
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche) 
* Patiente jusqu'à la fin du scan 
* Poste le rapport généré (C:\lopR.txt)

odin · Answer

--------------------\ Lop S&D 4.2.4-8 XP/Vista Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3 X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz ) BIOS : Phoenix - AwardBIOS v6.00PG USER : PATTY ( Administrator ) BOOT : Normal boot Antivirus : ESET Smart Security 3.0 3.0 (Activated) Firewall : ESET Personal firewall 3.0.551.0 (Activated) C:\ (Local Disk) - NTFS - Total:364 Go (Free:232 Go) D:\ (CD or DVD) "C:\Lop SD" ( MAJ : 27-10-2008|09:15 ) Option : [1] ( 28/10/2008|18:27 ) --------------------\ Listing des dossiers dans APPLIC~1 [22/11/2006|05:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\ATI [22/11/2006|05:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities [22/11/2006|05:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia [22/11/2006|05:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft [22/11/2006|05:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver [15/02/2008|14:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe [02/07/2007|01:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems [17/01/2008|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Aliasworlds [14/02/2007|19:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL [16/04/2007|22:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer [21/03/2008|23:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Awem [22/05/2007|21:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY [23/06/2008|11:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software [29/01/2007|13:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ciel [05/02/2008|16:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CR2007 [14/02/2007|18:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink [28/10/2008|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ESET [10/03/2008|09:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Farm Frenzy [21/05/2008|19:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fashion Solitaire 1.2 [25/09/2008|11:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GameHouse [12/09/2008|08:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Gogii [07/10/2007|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google [18/01/2008|23:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft [22/11/2006|05:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield [16/10/2007|13:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\JollyBear [28/10/2008|17:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes [28/10/2008|11:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [04/09/2008|12:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo [01/03/2008|23:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\My Games [23/10/2008|16:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MythPeople [21/05/2007|10:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1 7-89-o9-3r-4t-r9 [10/10/2007|23:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania [04/07/2008|14:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA [22/11/2006|05:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2 [02/09/2008|10:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst [29/05/2008|11:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayPond [13/09/2008|00:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\POPWWPROFILES [22/11/2006|05:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime [30/06/2007|09:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Samsung [17/09/2008|13:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games [22/01/2008|19:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecretsOfOlympus [13/05/2007|17:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype [27/03/2008|15:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpinTop Games [28/10/2008|13:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy [19/04/2007|14:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec [08/01/2008|17:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TERMINAL Studio [09/09/2007|22:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia [28/10/2008|16:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software [29/01/2007|13:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL [22/11/2006|05:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems [06/11/2007|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint [23/04/2007|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [29/01/2007|21:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\X10 Settings [21/05/2007|10:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom [22/11/2006|05:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ATI [22/11/2006|05:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities [22/11/2006|05:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia [22/11/2006|05:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [22/11/2006|05:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver [25/04/2007|10:22] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [22/11/2006|05:17] C:\DOCUME~1\LOCALS~1\APPLIC~1\X10 Commander [22/11/2006|05:15] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft [23/08/2008|14:16] C:\DOCUME~1\PATTY\APPLIC~1\Ace [27/10/2008|22:10] C:\DOCUME~1\PATTY\APPLIC~1\Adobe [16/04/2007|21:11] C:\DOCUME~1\PATTY\APPLIC~1\AdobeUM [04/10/2008|09:20] C:\DOCUME~1\PATTY\APPLIC~1\Anuman Interactive [01/02/2007|15:28] C:\DOCUME~1\PATTY\APPLIC~1\Atari [22/11/2006|05:15] C:\DOCUME~1\PATTY\APPLIC~1\ATI [16/09/2007|09:45] C:\DOCUME~1\PATTY\APPLIC~1\ConvertTemp [14/02/2007|18:47] C:\DOCUME~1\PATTY\APPLIC~1\CyberLink [27/08/2008|17:45] C:\DOCUME~1\PATTY\APPLIC~1\dvdcss [28/10/2008|02:34] C:\DOCUME~1\PATTY\APPLIC~1\EoRezo [29/01/2007|13:45] C:\DOCUME~1\PATTY\APPLIC~1\EPSON [28/10/2008|13:43] C:\DOCUME~1\PATTY\APPLIC~1\ESET [04/03/2008|22:51] C:\DOCUME~1\PATTY\APPLIC~1\FlySuite [23/02/2008|20:53] C:\DOCUME~1\PATTY\APPLIC~1\Fuzzy Games [21/05/2007|10:41] C:\DOCUME~1\PATTY\APPLIC~1\GameHouse [24/04/2008|09:10] C:\DOCUME~1\PATTY\APPLIC~1\Gamelab [14/10/2008|23:51] C:\DOCUME~1\PATTY\APPLIC~1\GamesCafe [13/05/2007|16:08] C:\DOCUME~1\PATTY\APPLIC~1\Google [29/01/2007|19:34] C:\DOCUME~1\PATTY\APPLIC~1\Help [07/09/2007|14:05] C:\DOCUME~1\PATTY\APPLIC~1\hidires [28/10/2008|17:21] C:\DOCUME~1\PATTY\APPLIC~1\Identities [08/06/2008|18:56] C:\DOCUME~1\PATTY\APPLIC~1\ItsLabel [15/05/2008|14:21] C:\DOCUME~1\PATTY\APPLIC~1\iWin [14/12/2007|13:25] C:\DOCUME~1\PATTY\APPLIC~1\Jane s Hotel [09/05/2008|11:49] C:\DOCUME~1\PATTY\APPLIC~1\Jane s Hotel Family Hero [29/01/2007|13:55] C:\DOCUME~1\PATTY\APPLIC~1\Leadertech [27/05/2008|17:43] C:\DOCUME~1\PATTY\APPLIC~1\LimeWire [28/09/2007|14:09] C:\DOCUME~1\PATTY\APPLIC~1\m [06/04/2007|15:28] C:\DOCUME~1\PATTY\APPLIC~1\Macromedia [28/10/2008|17:54] C:\DOCUME~1\PATTY\APPLIC~1\Malwarebytes [05/03/2008|12:16] C:\DOCUME~1\PATTY\APPLIC~1\Microsoft [28/10/2008|16:09] C:\DOCUME~1\PATTY\APPLIC~1\Mozilla [16/04/2007|22:11] C:\DOCUME~1\PATTY\APPLIC~1\MSNInstaller [08/01/2008|21:13] C:\DOCUME~1\PATTY\APPLIC~1\My Games [29/01/2007|13:55] C:\DOCUME~1\PATTY\APPLIC~1\OD2 [09/07/2007|16:12] C:\DOCUME~1\PATTY\APPLIC~1\OFFICE One v6 [13/05/2007|17:36] C:\DOCUME~1\PATTY\APPLIC~1\PC Tools [15/03/2008|17:54] C:\DOCUME~1\PATTY\APPLIC~1\Pirateville [04/10/2008|22:05] C:\DOCUME~1\PATTY\APPLIC~1\PlayFirst [23/09/2008|22:49] C:\DOCUME~1\PATTY\APPLIC~1\Playrix Entertainment [23/08/2008|14:12] C:\DOCUME~1\PATTY\APPLIC~1\Pro Cycling Manager 2008 - Demo [10/09/2008|09:56] C:\DOCUME~1\PATTY\APPLIC~1\Real [16/03/2007|18:53] C:\DOCUME~1\PATTY\APPLIC~1\Samsung [07/01/2008|15:04] C:\DOCUME~1\PATTY\APPLIC~1\Sandlot Games [19/10/2008|19:58] C:\DOCUME~1\PATTY\APPLIC~1\Shopping Blocks [09/06/2008|08:04] C:\DOCUME~1\PATTY\APPLIC~1\Skype [27/10/2008|14:49] C:\DOCUME~1\PATTY\APPLIC~1\SmartShopper [29/01/2007|13:56] C:\DOCUME~1\PATTY\APPLIC~1\Sonic [11/09/2008|21:54] C:\DOCUME~1\PATTY\APPLIC~1\SPAMfighter [29/01/2007|16:03] C:\DOCUME~1\PATTY\APPLIC~1\Sun [07/02/2008|09:59] C:\DOCUME~1\PATTY\APPLIC~1\Super-Cow [13/05/2007|17:58] C:\DOCUME~1\PATTY\APPLIC~1\Talkback [28/08/2008|00:19] C:\DOCUME~1\PATTY\APPLIC~1\Temporary [04/04/2008|10:47] C:\DOCUME~1\PATTY\APPLIC~1\TheScruffs [21/09/2007|20:02] C:\DOCUME~1\PATTY\APPLIC~1\THQ [28/05/2008|12:12] C:\DOCUME~1\PATTY\APPLIC~1\Total Eclipse [29/04/2007|11:16] C:\DOCUME~1\PATTY\APPLIC~1\TransRender [20/04/2007|18:40] C:\DOCUME~1\PATTY\APPLIC~1\TuneUp Software [29/01/2007|15:09] C:\DOCUME~1\PATTY\APPLIC~1\Ulead Systems [10/09/2008|08:08] C:\DOCUME~1\PATTY\APPLIC~1\Viewpoint [18/04/2007|15:26] C:\DOCUME~1\PATTY\APPLIC~1\vlc [09/09/2007|16:02] C:\DOCUME~1\PATTY\APPLIC~1\Wildfire [14/06/2008|08:06] C:\DOCUME~1\PATTY\APPLIC~1\WinRAR [22/11/2006|05:15] C:\DOCUME~1\PATTY\APPLIC~1\You've Got Pictures Screensaver [28/10/2008|17:21] C:\DOCUME~1\PATTY\APPLIC~1\Zylom --------------------\ Tâches planifiées dans C:\WINDOWS asks [28/10/2008 18:23][--a------] C:\WINDOWS asks\Maintenance en 1 clic.job [28/10/2008 18:22][--ah-----] C:\WINDOWS asks\SA.DAT [10/08/2004 14:00][-rah-----] C:\WINDOWS asks\desktop.ini --------------------\ Listing des dossiers dans C:\Program Files [28/10/2008|02:38] C:\Program Files\Adobe [19/04/2007|14:29] C:\Program Files\Alwil Software [04/10/2008|21:11] C:\Program Files\Anuman Interactive [16/04/2007|22:01] C:\Program Files\Blender Foundation [27/08/2007|07:38] C:\Program Files\Boonty [23/05/2007|00:16] C:\Program Files\BoontyGames [18/09/2007|15:58] C:\Program Files\Cake Mania 2 [26/10/2008|16:42] C:\Program Files\CCleaner [03/08/2007|17:27] C:\Program Files\Chaoscope [29/01/2007|13:54] C:\Program Files\Ciel [04/10/2008|21:11] C:\Program Files\Codemasters [22/11/2006|05:15] C:\Program Files\Common Files [22/11/2006|05:15] C:\Program Files\ComPlus Applications [08/02/2008|17:00] C:\Program Files\Creative [23/08/2008|14:03] C:\Program Files\Cyanide [22/11/2006|05:15] C:\Program Files\CyberLink [22/10/2008|13:16] C:\Program Files\DD PlayCam [15/06/2008|08:21] C:\Program Files\DevGuru [22/05/2007|11:22] C:\Program Files\directx [01/07/2007|16:20] C:\Program Files\Egypte [04/10/2008|13:51] C:\Program Files\Eidos [22/05/2007|11:21] C:\Program Files\Eidos Interactive [26/10/2008|21:19] C:\Program Files\eMule [28/10/2008|01:27] C:\Program Files\EoRezo [29/01/2007|13:38] C:\Program Files\EPSON [28/10/2008|13:27] C:\Program Files\ESET [28/10/2008|16:27] C:\Program Files\Fichiers communs [15/10/2007|11:48] C:\Program Files\Flower Shop - Big City Break [16/04/2007|20:29] C:\Program Files\Free [16/04/2007|21:35] C:\Program Files\FreeBot [10/12/2007|19:09] C:\Program Files\GameHouse [21/06/2007|11:14] C:\Program Files\Gamenext [05/10/2008|13:25] C:\Program Files\GameSpy Arcade [08/10/2007|08:18] C:\Program Files\Google [06/10/2007|08:19] C:\Program Files\Hammer Heads Deluxe [08/06/2008|19:41] C:\Program Files\hxupdate [20/09/2007|11:24] C:\Program Files\Insaniquarium Deluxe [28/10/2008|02:34] C:\Program Files\InstallShield Installation Information [17/10/2008|02:10] C:\Program Files\Internet Explorer [29/01/2007|13:54] C:\Program Files\ISSENDIS [09/03/2008|16:45] C:\Program Files\Java [22/11/2006|05:15] C:\Program Files\Learn2.com [01/07/2007|14:00] C:\Program Files\LEGO Media [08/09/2007|11:41] C:\Program Files\LimeWire [22/10/2008|22:52] C:\Program Files\Look 312P [28/10/2008|17:54] C:\Program Files\Malwarebytes' Anti-Malware [08/05/2007|08:21] C:\Program Files\Managed DirectX (0900) [07/09/2008|13:01] C:\Program Files\Maxis [07/09/2008|01:21] C:\Program Files\Messenger [26/05/2008|13:05] C:\Program Files\Micro Application [05/03/2008|11:39] C:\Program Files\Microsoft ActiveSync [22/11/2006|05:15] C:\Program Files\microsoft frontpage [05/03/2008|11:39] C:\Program Files\Microsoft Office [15/06/2008|11:38] C:\Program Files\Mio Technology [09/03/2007|17:50] C:\Program Files\Monte Cristo [07/09/2008|01:18] C:\Program Files\Movie Maker [28/10/2008|16:10] C:\Program Files\Mozilla Firefox [19/04/2007|12:21] C:\Program Files\MSN [22/11/2006|05:15] C:\Program Files\MSN Gaming Zone [07/09/2008|12:08] C:\Program Files\MSN Messenger [28/10/2008|18:24] C:\Program Files\Navilog1 [07/09/2008|01:16] C:\Program Files\NetMeeting [09/07/2007|16:10] C:\Program Files\OFFICE One6.5 [22/11/2006|05:18] C:\Program Files\Online Services [07/09/2008|01:16] C:\Program Files\Outlook Express [22/11/2006|05:18] C:\Program Files\Packard Bell [13/05/2007|17:29] C:\Program Files\Picasa2 [10/12/2007|19:10] C:\Program Files\PopCap Games [11/10/2007|13:59] C:\Program Files\Profitville [04/05/2007|21:35] C:\Program Files\Real [22/11/2006|05:15] C:\Program Files\Realtek [26/04/2007|11:58] C:\Program Files\ReflexiveArcade [30/06/2007|10:12] C:\Program Files\Samsung [04/09/2007|08:15] C:\Program Files\SDLL [22/11/2006|05:18] C:\Program Files\Services en ligne [23/10/2008|14:46] C:\Program Files\SmartShopper [12/02/2007|15:22] C:\Program Files\Sonic [28/10/2008|14:19] C:\Program Files\Spybot - Search & Destroy [09/05/2007|11:36] C:\Program Files\SurfRobot [27/10/2008|22:37] C:\Program Files rend micro [26/04/2007|15:51] C:\Program Files\Trymedia [28/10/2008|16:33] C:\Program Files\TuneUp Utilities 2008 [04/10/2008|21:11] C:\Program Files\Ubisoft [22/11/2006|05:15] C:\Program Files\Ulead Systems [22/11/2006|05:15] C:\Program Files\Uninstall Information [18/04/2007|15:25] C:\Program Files\VideoLAN [06/11/2007|14:59] C:\Program Files\Viewpoint [22/11/2006|05:15] C:\Program Files\Windows Media Components [10/02/2008|19:01] C:\Program Files\Windows Media Connect 2 [10/02/2008|20:56] C:\Program Files\Windows Media Player [07/09/2008|01:16] C:\Program Files\Windows NT [22/11/2006|05:15] C:\Program Files\Windows Plus [22/11/2006|05:15] C:\Program Files\WindowsUpdate [14/06/2008|08:06] C:\Program Files\WinRAR [09/05/2007|11:36] C:\Program Files\WinZip [27/10/2008|22:23] C:\Program Files\WiPen [22/11/2006|05:19] C:\Program Files\X10 Hardware [22/11/2006|05:15] C:\Program Files\xerox [26/10/2008|16:41] C:\Program Files\Yahoo! [28/10/2008|17:31] C:\Program Files\Zylom Games [28/10/2008|16:11] C:\Program Files\Zylom Games2 --------------------\ Listing des dossiers dans C:\Program Files\Fichiers communs [27/10/2008|22:11] C:\Program Files\Fichiers communs\Adobe [08/06/2008|16:18] C:\Program Files\Fichiers communs\Adobe Systems Shared [22/11/2006|05:18] C:\Program Files\Fichiers communs\AOL [19/02/2008|18:30] C:\Program Files\Fichiers communs\aolshare [08/06/2008|16:19] C:\Program Files\Fichiers communs\BOONTY Shared [19/02/2008|18:30] C:\Program Files\Fichiers communs\Borland Shared [29/01/2007|13:54] C:\Program Files\Fichiers communs\Ciel [05/03/2008|11:39] C:\Program Files\Fichiers communs\Designer [09/03/2007|18:32] C:\Program Files\Fichiers communs\DirectX [09/02/2008|17:33] C:\Program Files\Fichiers communs\GIS [22/11/2006|05:15] C:\Program Files\Fichiers communs\InstallShield [22/11/2006|05:15] C:\Program Files\Fichiers communs\Java [22/10/2008|13:15] C:\Program Files\Fichiers communs\Look312P [09/02/2008|17:33] C:\Program Files\Fichiers communs\mapserv [23/08/2008|14:06] C:\Program Files\Fichiers communs\Microsoft Shared [22/11/2006|05:15] C:\Program Files\Fichiers communs\MSSoap [22/11/2006|05:15] C:\Program Files\Fichiers communs\Nullsoft [22/11/2006|05:15] C:\Program Files\Fichiers communs\ODBC [13/05/2007|17:34] C:\Program Files\Fichiers communs\Real [19/02/2008|18:30] C:\Program Files\Fichiers communs\Sandlot Shared [22/11/2006|05:18] C:\Program Files\Fichiers communs\Services [02/06/2007|20:01] C:\Program Files\Fichiers communs\Skype [08/06/2008|16:21] C:\Program Files\Fichiers communs\Sonic Shared [22/11/2006|05:15] C:\Program Files\Fichiers communs\SpeechEngines [19/02/2008|18:30] C:\Program Files\Fichiers communs\SureThing Shared [28/10/2008|02:35] C:\Program Files\Fichiers communs\Symantec Shared [07/09/2008|01:16] C:\Program Files\Fichiers communs\System [19/02/2008|18:30] C:\Program Files\Fichiers communs\TiVo Shared [22/11/2006|05:18] C:\Program Files\Fichiers communs\Ulead Systems [28/10/2008|16:27] C:\Program Files\Fichiers communs\Wise Installation Wizard [19/02/2008|18:30] C:\Program Files\Fichiers communs\xing shared --------------------\ Process ( 41 Processes ) iexplore.exe ~ [PID:2852] --------------------\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\ Recherche de Fichiers / Dossiers Lop C:\DOCUME~1\PATTY\Cookies\patty@advertising[1].txt C:\DOCUME~1\PATTY\Cookies\patty@bigpoint[1].txt C:\DOCUME~1\PATTY\Cookies\patty@fr.thepimps.bigpoint[1].txt C:\DOCUME~1\PATTY\Cookies\patty@adopt.euroclick[1].txt --------------------\ Verification du Registre ..... OK ! --------------------\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\ Recherche de fichiers avec Catchme --------------------\ Recherche d'autres infections C:\WINDOWS\system32\RsDdcfii.ini C:\WINDOWS\system32\RsDdcfii.ini2 [b]==> VUNDO <==/b C:\DOCUME~1\PATTY\APPLIC~1\hidires [b]==> BAGLE <==/b [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\..\{7CBF3E7B-A8C4-47D4-A4FB-D54A15821649}] NameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\..\{7CBF3E7B-A8C4-47D4-A4FB-D54A15821649}] DhcpNameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\..\{7F743B1F-C87E-47DA-8992-77277543662C}] NameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\..\{7CBF3E7B-A8C4-47D4-A4FB-D54A15821649}] NameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\..\{7CBF3E7B-A8C4-47D4-A4FB-D54A15821649}] DhcpNameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\..\{7F743B1F-C87E-47DA-8992-77277543662C}] NameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\..\{7CBF3E7B-A8C4-47D4-A4FB-D54A15821649}] NameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\..\{7CBF3E7B-A8C4-47D4-A4FB-D54A15821649}] DhcpNameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\..\{7F743B1F-C87E-47DA-8992-77277543662C}] NameServer REG_SZ 85.255.112.155;85.255.112.135 [b]==> WAREOUT <==/b --------------------\ Cracks & Keygens .. C:\DOCUME~1\PATTY\Application Data\LimeWire\.AppSpecialShare\ESET Smart Security Keygen.rar.torrent C:\DOCUME~1\PATTY\Application Data\m\shared\Advanced Office Password Breaker 1.40 (KeyGen).zip C:\DOCUME~1\PATTY\Application Data\m\shared\Apex iPod Video Converter 4.19 With Crack.zip C:\DOCUME~1\PATTY\Application Data\m\shared\AVG.AntiVirus.v7.1.371.Multilangages.Incl-Keygen.par.eMule-Paradise.com.zip C:\DOCUME~1\PATTY\Application Data\m\shared\AVG.AntivÇðrus.7.0.322.em.portuguÇ¦s.+.Keygen.&.Serial.zip C:\DOCUME~1\PATTY\Application Data\m\shared\Batch It! Ultra 3.978 KeyGen.zip C:\DOCUME~1\PATTY\Application Data\m\shared\Bitdefender.v8.Keygen.zip C:\DOCUME~1\PATTY\Application Data\m\shared\CarryDVD 4.5.0 Crack.zip C:\DOCUME~1\PATTY\Application Data\m\shared\FRS Clocks and Time 1.8 [KeyGen].zip C:\DOCUME~1\PATTY\Application Data\m\shared\GoToMeeting 3.0 [KeyGen].zip C:\DOCUME~1\PATTY\Application Data\m\shared\iPod Audio Studio 6.4.2 [With Crack].zip C:\DOCUME~1\PATTY\Application Data\m\shared\MP3DJ Broadcast 3.7 (With Crack).zip C:\DOCUME~1\PATTY\Application Data\m\shared\Paint Shop Photo Album 5.01 (Crack).zip C:\DOCUME~1\PATTY\Application Data\m\shared\PM Master 2.8 [Crack].zip C:\DOCUME~1\PATTY\Application Data\m\shared\PopSurfer 1.1 (With Crack).zip C:\DOCUME~1\PATTY\Application Data\m\shared\SmartFormFiller 5.1 With Crack.zip C:\DOCUME~1\PATTY\Application Data\m\shared\The Business OpsCenter 3.5.0 KeyGen.zip C:\DOCUME~1\PATTY\Application Data\m\shared\Titanium Checkbook 3.2 With Crack.zip C:\DOCUME~1\PATTY\Application Data\m\shared\Vegetarian Cookery 1.0 (With Crack).zip C:\DOCUME~1\PATTY\Application Data\m\shared\WordCaptureX 2.2 KeyGen.zip C:\DOCUME~1\PATTY\Bureau\fun pass\crack all Zylom games.exe C:\DOCUME~1\PATTY\Bureau\patty\musique\vari‚t‚\ferrer & dutronc\jacques dutronc\Crack Boum Hue.mp3 C:\DOCUME~1\PATTY\Incomplete\5HSIKNO2O6243RMRCGHSWTW63DVNVVHF\.datESET Smart Security Keygen.rar C:\DOCUME~1\PATTY\Incomplete\5HSIKNO2O6243RMRCGHSWTW63DVNVVHF\ESET Smart Security Keygen.rar [F:6][D:3]-> C:\DOCUME~1\PATTY\LOCALS~1\Temp [F:69][D:0]-> C:\DOCUME~1\PATTY\Cookies [F:2395][D:4]-> C:\DOCUME~1\PATTY\LOCALS~1\TEMPOR~1\content.IE5 1 - "C:\Lop SD\LopR_1.txt" - 28/10/2008|18:37 - Option : [1] --------------------\ Fin du rapport a 18:37:18

Utilisateur anonyme · Answer

ok...

Relance Lop S&D 


* Choisis cette fois ci l'Option 2 (Suppression) 
* Ne ferme pas la fenêtre lors de la suppression ! 
* Poste le rapport généré (C:\lopR.txt)

odin · Answer

--------------------\ Lop S&D 4.2.4-8 XP/Vista Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3 X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz ) BIOS : Phoenix - AwardBIOS v6.00PG USER : PATTY ( Administrator ) BOOT : Normal boot Antivirus : ESET Smart Security 3.0 3.0 (Activated) Firewall : ESET Personal firewall 3.0.551.0 (Activated) C:\ (Local Disk) - NTFS - Total:364 Go (Free:232 Go) D:\ (CD or DVD) "C:\Lop SD" ( MAJ : 27-10-2008|09:15 ) Option : [2] ( 28/10/2008|18:41 ) \\\\\\\\\\\\\\\ SUPPRESSION Supprime! - C:\DOCUME~1\PATTY\Cookies\patty@advertising[1].txt Supprime! - C:\DOCUME~1\PATTY\Cookies\patty@bigpoint[1].txt Supprime! - C:\DOCUME~1\PATTY\Cookies\patty@fr.thepimps.bigpoint[1].txt Supprime! - C:\DOCUME~1\PATTY\Cookies\patty@adopt.euroclick[1].txt - [ Fichier Hosts ] .. Restaure! \\\\\\\\\\\\\\\ Supprime! - C:\Program Files\Viewpoint Supprime! - C:\DOCUME~1\PATTY\APPLIC~1\Viewpoint Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint \\\\\\\\\\\\\\\ --------------------\ Listing des dossiers dans APPLIC~1 [22/11/2006|05:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\ATI [22/11/2006|05:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities [22/11/2006|05:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia [22/11/2006|05:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft [22/11/2006|05:15] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver [15/02/2008|14:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe [02/07/2007|01:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems [17/01/2008|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Aliasworlds [14/02/2007|19:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL [16/04/2007|22:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer [21/03/2008|23:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Awem [22/05/2007|21:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY [23/06/2008|11:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software [29/01/2007|13:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ciel [05/02/2008|16:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CR2007 [14/02/2007|18:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink [28/10/2008|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ESET [10/03/2008|09:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Farm Frenzy [21/05/2008|19:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fashion Solitaire 1.2 [25/09/2008|11:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GameHouse [12/09/2008|08:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Gogii [07/10/2007|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google [18/01/2008|23:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HipSoft [22/11/2006|05:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield [16/10/2007|13:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\JollyBear [28/10/2008|17:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes [28/10/2008|11:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [04/09/2008|12:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo [01/03/2008|23:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\My Games [23/10/2008|16:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MythPeople [21/05/2007|10:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1 7-89-o9-3r-4t-r9 [10/10/2007|23:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NannyMania [04/07/2008|14:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA [22/11/2006|05:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2 [02/09/2008|10:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst [29/05/2008|11:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayPond [13/09/2008|00:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\POPWWPROFILES [22/11/2006|05:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime [30/06/2007|09:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Samsung [17/09/2008|13:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games [22/01/2008|19:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecretsOfOlympus [13/05/2007|17:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype [27/03/2008|15:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SpinTop Games [28/10/2008|13:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy [19/04/2007|14:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec [08/01/2008|17:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TERMINAL Studio [09/09/2007|22:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia [28/10/2008|16:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software [29/01/2007|13:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL [22/11/2006|05:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems [23/04/2007|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [29/01/2007|21:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\X10 Settings [21/05/2007|10:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom [22/11/2006|05:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ATI [22/11/2006|05:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities [22/11/2006|05:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia [22/11/2006|05:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [22/11/2006|05:15] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver [25/04/2007|10:22] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [22/11/2006|05:17] C:\DOCUME~1\LOCALS~1\APPLIC~1\X10 Commander [22/11/2006|05:15] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft [23/08/2008|14:16] C:\DOCUME~1\PATTY\APPLIC~1\Ace [27/10/2008|22:10] C:\DOCUME~1\PATTY\APPLIC~1\Adobe [16/04/2007|21:11] C:\DOCUME~1\PATTY\APPLIC~1\AdobeUM [04/10/2008|09:20] C:\DOCUME~1\PATTY\APPLIC~1\Anuman Interactive [01/02/2007|15:28] C:\DOCUME~1\PATTY\APPLIC~1\Atari [22/11/2006|05:15] C:\DOCUME~1\PATTY\APPLIC~1\ATI [16/09/2007|09:45] C:\DOCUME~1\PATTY\APPLIC~1\ConvertTemp [14/02/2007|18:47] C:\DOCUME~1\PATTY\APPLIC~1\CyberLink [27/08/2008|17:45] C:\DOCUME~1\PATTY\APPLIC~1\dvdcss [28/10/2008|02:34] C:\DOCUME~1\PATTY\APPLIC~1\EoRezo [29/01/2007|13:45] C:\DOCUME~1\PATTY\APPLIC~1\EPSON [28/10/2008|13:43] C:\DOCUME~1\PATTY\APPLIC~1\ESET [04/03/2008|22:51] C:\DOCUME~1\PATTY\APPLIC~1\FlySuite [23/02/2008|20:53] C:\DOCUME~1\PATTY\APPLIC~1\Fuzzy Games [21/05/2007|10:41] C:\DOCUME~1\PATTY\APPLIC~1\GameHouse [24/04/2008|09:10] C:\DOCUME~1\PATTY\APPLIC~1\Gamelab [14/10/2008|23:51] C:\DOCUME~1\PATTY\APPLIC~1\GamesCafe [13/05/2007|16:08] C:\DOCUME~1\PATTY\APPLIC~1\Google [29/01/2007|19:34] C:\DOCUME~1\PATTY\APPLIC~1\Help [07/09/2007|14:05] C:\DOCUME~1\PATTY\APPLIC~1\hidires [28/10/2008|17:21] C:\DOCUME~1\PATTY\APPLIC~1\Identities [08/06/2008|18:56] C:\DOCUME~1\PATTY\APPLIC~1\ItsLabel [15/05/2008|14:21] C:\DOCUME~1\PATTY\APPLIC~1\iWin [14/12/2007|13:25] C:\DOCUME~1\PATTY\APPLIC~1\Jane s Hotel [09/05/2008|11:49] C:\DOCUME~1\PATTY\APPLIC~1\Jane s Hotel Family Hero [29/01/2007|13:55] C:\DOCUME~1\PATTY\APPLIC~1\Leadertech [27/05/2008|17:43] C:\DOCUME~1\PATTY\APPLIC~1\LimeWire [28/09/2007|14:09] C:\DOCUME~1\PATTY\APPLIC~1\m [06/04/2007|15:28] C:\DOCUME~1\PATTY\APPLIC~1\Macromedia [28/10/2008|17:54] C:\DOCUME~1\PATTY\APPLIC~1\Malwarebytes [05/03/2008|12:16] C:\DOCUME~1\PATTY\APPLIC~1\Microsoft [28/10/2008|16:09] C:\DOCUME~1\PATTY\APPLIC~1\Mozilla [16/04/2007|22:11] C:\DOCUME~1\PATTY\APPLIC~1\MSNInstaller [08/01/2008|21:13] C:\DOCUME~1\PATTY\APPLIC~1\My Games [29/01/2007|13:55] C:\DOCUME~1\PATTY\APPLIC~1\OD2 [09/07/2007|16:12] C:\DOCUME~1\PATTY\APPLIC~1\OFFICE One v6 [13/05/2007|17:36] C:\DOCUME~1\PATTY\APPLIC~1\PC Tools [15/03/2008|17:54] C:\DOCUME~1\PATTY\APPLIC~1\Pirateville [04/10/2008|22:05] C:\DOCUME~1\PATTY\APPLIC~1\PlayFirst [23/09/2008|22:49] C:\DOCUME~1\PATTY\APPLIC~1\Playrix Entertainment [23/08/2008|14:12] C:\DOCUME~1\PATTY\APPLIC~1\Pro Cycling Manager 2008 - Demo [10/09/2008|09:56] C:\DOCUME~1\PATTY\APPLIC~1\Real [16/03/2007|18:53] C:\DOCUME~1\PATTY\APPLIC~1\Samsung [07/01/2008|15:04] C:\DOCUME~1\PATTY\APPLIC~1\Sandlot Games [19/10/2008|19:58] C:\DOCUME~1\PATTY\APPLIC~1\Shopping Blocks [09/06/2008|08:04] C:\DOCUME~1\PATTY\APPLIC~1\Skype [27/10/2008|14:49] C:\DOCUME~1\PATTY\APPLIC~1\SmartShopper [29/01/2007|13:56] C:\DOCUME~1\PATTY\APPLIC~1\Sonic [11/09/2008|21:54] C:\DOCUME~1\PATTY\APPLIC~1\SPAMfighter [29/01/2007|16:03] C:\DOCUME~1\PATTY\APPLIC~1\Sun [07/02/2008|09:59] C:\DOCUME~1\PATTY\APPLIC~1\Super-Cow [13/05/2007|17:58] C:\DOCUME~1\PATTY\APPLIC~1\Talkback [28/08/2008|00:19] C:\DOCUME~1\PATTY\APPLIC~1\Temporary [04/04/2008|10:47] C:\DOCUME~1\PATTY\APPLIC~1\TheScruffs [21/09/2007|20:02] C:\DOCUME~1\PATTY\APPLIC~1\THQ [28/05/2008|12:12] C:\DOCUME~1\PATTY\APPLIC~1\Total Eclipse [29/04/2007|11:16] C:\DOCUME~1\PATTY\APPLIC~1\TransRender [20/04/2007|18:40] C:\DOCUME~1\PATTY\APPLIC~1\TuneUp Software [29/01/2007|15:09] C:\DOCUME~1\PATTY\APPLIC~1\Ulead Systems [18/04/2007|15:26] C:\DOCUME~1\PATTY\APPLIC~1\vlc [09/09/2007|16:02] C:\DOCUME~1\PATTY\APPLIC~1\Wildfire [14/06/2008|08:06] C:\DOCUME~1\PATTY\APPLIC~1\WinRAR [22/11/2006|05:15] C:\DOCUME~1\PATTY\APPLIC~1\You've Got Pictures Screensaver [28/10/2008|17:21] C:\DOCUME~1\PATTY\APPLIC~1\Zylom --------------------\ Tâches planifiées dans C:\WINDOWS asks [28/10/2008 18:23][--a------] C:\WINDOWS asks\Maintenance en 1 clic.job [28/10/2008 18:22][--ah-----] C:\WINDOWS asks\SA.DAT [10/08/2004 14:00][-rah-----] C:\WINDOWS asks\desktop.ini --------------------\ Listing des dossiers dans C:\Program Files [28/10/2008|02:38] C:\Program Files\Adobe [19/04/2007|14:29] C:\Program Files\Alwil Software [04/10/2008|21:11] C:\Program Files\Anuman Interactive [16/04/2007|22:01] C:\Program Files\Blender Foundation [27/08/2007|07:38] C:\Program Files\Boonty [23/05/2007|00:16] C:\Program Files\BoontyGames [18/09/2007|15:58] C:\Program Files\Cake Mania 2 [26/10/2008|16:42] C:\Program Files\CCleaner [03/08/2007|17:27] C:\Program Files\Chaoscope [29/01/2007|13:54] C:\Program Files\Ciel [04/10/2008|21:11] C:\Program Files\Codemasters [22/11/2006|05:15] C:\Program Files\Common Files [22/11/2006|05:15] C:\Program Files\ComPlus Applications [08/02/2008|17:00] C:\Program Files\Creative [23/08/2008|14:03] C:\Program Files\Cyanide [22/11/2006|05:15] C:\Program Files\CyberLink [22/10/2008|13:16] C:\Program Files\DD PlayCam [15/06/2008|08:21] C:\Program Files\DevGuru [22/05/2007|11:22] C:\Program Files\directx [01/07/2007|16:20] C:\Program Files\Egypte [04/10/2008|13:51] C:\Program Files\Eidos [22/05/2007|11:21] C:\Program Files\Eidos Interactive [26/10/2008|21:19] C:\Program Files\eMule [28/10/2008|01:27] C:\Program Files\EoRezo [29/01/2007|13:38] C:\Program Files\EPSON [28/10/2008|13:27] C:\Program Files\ESET [28/10/2008|16:27] C:\Program Files\Fichiers communs [15/10/2007|11:48] C:\Program Files\Flower Shop - Big City Break [16/04/2007|20:29] C:\Program Files\Free [16/04/2007|21:35] C:\Program Files\FreeBot [10/12/2007|19:09] C:\Program Files\GameHouse [21/06/2007|11:14] C:\Program Files\Gamenext [05/10/2008|13:25] C:\Program Files\GameSpy Arcade [08/10/2007|08:18] C:\Program Files\Google [06/10/2007|08:19] C:\Program Files\Hammer Heads Deluxe [08/06/2008|19:41] C:\Program Files\hxupdate [20/09/2007|11:24] C:\Program Files\Insaniquarium Deluxe [28/10/2008|02:34] C:\Program Files\InstallShield Installation Information [17/10/2008|02:10] C:\Program Files\Internet Explorer [29/01/2007|13:54] C:\Program Files\ISSENDIS [09/03/2008|16:45] C:\Program Files\Java [22/11/2006|05:15] C:\Program Files\Learn2.com [01/07/2007|14:00] C:\Program Files\LEGO Media [08/09/2007|11:41] C:\Program Files\LimeWire [22/10/2008|22:52] C:\Program Files\Look 312P [28/10/2008|17:54] C:\Program Files\Malwarebytes' Anti-Malware [08/05/2007|08:21] C:\Program Files\Managed DirectX (0900) [07/09/2008|13:01] C:\Program Files\Maxis [07/09/2008|01:21] C:\Program Files\Messenger [26/05/2008|13:05] C:\Program Files\Micro Application [05/03/2008|11:39] C:\Program Files\Microsoft ActiveSync [22/11/2006|05:15] C:\Program Files\microsoft frontpage [05/03/2008|11:39] C:\Program Files\Microsoft Office [15/06/2008|11:38] C:\Program Files\Mio Technology [09/03/2007|17:50] C:\Program Files\Monte Cristo [07/09/2008|01:18] C:\Program Files\Movie Maker [28/10/2008|16:10] C:\Program Files\Mozilla Firefox [19/04/2007|12:21] C:\Program Files\MSN [22/11/2006|05:15] C:\Program Files\MSN Gaming Zone [07/09/2008|12:08] C:\Program Files\MSN Messenger [28/10/2008|18:24] C:\Program Files\Navilog1 [07/09/2008|01:16] C:\Program Files\NetMeeting [09/07/2007|16:10] C:\Program Files\OFFICE One6.5 [22/11/2006|05:18] C:\Program Files\Online Services [07/09/2008|01:16] C:\Program Files\Outlook Express [22/11/2006|05:18] C:\Program Files\Packard Bell [13/05/2007|17:29] C:\Program Files\Picasa2 [10/12/2007|19:10] C:\Program Files\PopCap Games [11/10/2007|13:59] C:\Program Files\Profitville [04/05/2007|21:35] C:\Program Files\Real [22/11/2006|05:15] C:\Program Files\Realtek [26/04/2007|11:58] C:\Program Files\ReflexiveArcade [30/06/2007|10:12] C:\Program Files\Samsung [04/09/2007|08:15] C:\Program Files\SDLL [22/11/2006|05:18] C:\Program Files\Services en ligne [23/10/2008|14:46] C:\Program Files\SmartShopper [12/02/2007|15:22] C:\Program Files\Sonic [28/10/2008|14:19] C:\Program Files\Spybot - Search & Destroy [09/05/2007|11:36] C:\Program Files\SurfRobot [27/10/2008|22:37] C:\Program Files rend micro [26/04/2007|15:51] C:\Program Files\Trymedia [28/10/2008|16:33] C:\Program Files\TuneUp Utilities 2008 [04/10/2008|21:11] C:\Program Files\Ubisoft [22/11/2006|05:15] C:\Program Files\Ulead Systems [22/11/2006|05:15] C:\Program Files\Uninstall Information [18/04/2007|15:25] C:\Program Files\VideoLAN [22/11/2006|05:15] C:\Program Files\Windows Media Components [10/02/2008|19:01] C:\Program Files\Windows Media Connect 2 [10/02/2008|20:56] C:\Program Files\Windows Media Player [07/09/2008|01:16] C:\Program Files\Windows NT [22/11/2006|05:15] C:\Program Files\Windows Plus [22/11/2006|05:15] C:\Program Files\WindowsUpdate [14/06/2008|08:06] C:\Program Files\WinRAR [09/05/2007|11:36] C:\Program Files\WinZip [27/10/2008|22:23] C:\Program Files\WiPen [22/11/2006|05:19] C:\Program Files\X10 Hardware [22/11/2006|05:15] C:\Program Files\xerox [26/10/2008|16:41] C:\Program Files\Yahoo! [28/10/2008|17:31] C:\Program Files\Zylom Games [28/10/2008|16:11] C:\Program Files\Zylom Games2 --------------------\ Listing des dossiers dans C:\Program Files\Fichiers communs [27/10/2008|22:11] C:\Program Files\Fichiers communs\Adobe [08/06/2008|16:18] C:\Program Files\Fichiers communs\Adobe Systems Shared [22/11/2006|05:18] C:\Program Files\Fichiers communs\AOL [19/02/2008|18:30] C:\Program Files\Fichiers communs\aolshare [08/06/2008|16:19] C:\Program Files\Fichiers communs\BOONTY Shared [19/02/2008|18:30] C:\Program Files\Fichiers communs\Borland Shared [29/01/2007|13:54] C:\Program Files\Fichiers communs\Ciel [05/03/2008|11:39] C:\Program Files\Fichiers communs\Designer [09/03/2007|18:32] C:\Program Files\Fichiers communs\DirectX [09/02/2008|17:33] C:\Program Files\Fichiers communs\GIS [22/11/2006|05:15] C:\Program Files\Fichiers communs\InstallShield [22/11/2006|05:15] C:\Program Files\Fichiers communs\Java [22/10/2008|13:15] C:\Program Files\Fichiers communs\Look312P [09/02/2008|17:33] C:\Program Files\Fichiers communs\mapserv [23/08/2008|14:06] C:\Program Files\Fichiers communs\Microsoft Shared [22/11/2006|05:15] C:\Program Files\Fichiers communs\MSSoap [22/11/2006|05:15] C:\Program Files\Fichiers communs\Nullsoft [22/11/2006|05:15] C:\Program Files\Fichiers communs\ODBC [13/05/2007|17:34] C:\Program Files\Fichiers communs\Real [19/02/2008|18:30] C:\Program Files\Fichiers communs\Sandlot Shared [22/11/2006|05:18] C:\Program Files\Fichiers communs\Services [02/06/2007|20:01] C:\Program Files\Fichiers communs\Skype [08/06/2008|16:21] C:\Program Files\Fichiers communs\Sonic Shared [22/11/2006|05:15] C:\Program Files\Fichiers communs\SpeechEngines [19/02/2008|18:30] C:\Program Files\Fichiers communs\SureThing Shared [28/10/2008|02:35] C:\Program Files\Fichiers communs\Symantec Shared [07/09/2008|01:16] C:\Program Files\Fichiers communs\System [19/02/2008|18:30] C:\Program Files\Fichiers communs\TiVo Shared [22/11/2006|05:18] C:\Program Files\Fichiers communs\Ulead Systems [28/10/2008|16:27] C:\Program Files\Fichiers communs\Wise Installation Wizard [19/02/2008|18:30] C:\Program Files\Fichiers communs\xing shared --------------------\ Process ( 40 Processes ) ... OK ! --------------------\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\ Recherche de Fichiers / Dossiers Lop Aucun fichier / dossier Lop trouvé ! --------------------\ Verification du Registre ..... OK ! --------------------\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\ Recherche de fichiers avec Catchme --------------------\ Recherche d'autres infections C:\WINDOWS\system32\RsDdcfii.ini C:\WINDOWS\system32\RsDdcfii.ini2 [b]==> VUNDO <==/b C:\DOCUME~1\PATTY\APPLIC~1\hidires [b]==> BAGLE <==/b [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\..\{7CBF3E7B-A8C4-47D4-A4FB-D54A15821649}] NameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\..\{7CBF3E7B-A8C4-47D4-A4FB-D54A15821649}] DhcpNameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\..\{7F743B1F-C87E-47DA-8992-77277543662C}] NameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\..\{7CBF3E7B-A8C4-47D4-A4FB-D54A15821649}] NameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\..\{7CBF3E7B-A8C4-47D4-A4FB-D54A15821649}] DhcpNameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\..\{7F743B1F-C87E-47DA-8992-77277543662C}] NameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\..\{7CBF3E7B-A8C4-47D4-A4FB-D54A15821649}] NameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\..\{7CBF3E7B-A8C4-47D4-A4FB-D54A15821649}] DhcpNameServer REG_SZ 85.255.112.155;85.255.112.135 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\..\{7F743B1F-C87E-47DA-8992-77277543662C}] NameServer REG_SZ 85.255.112.155;85.255.112.135 [b]==> WAREOUT <==/b --------------------\ Cracks & Keygens .. C:\DOCUME~1\PATTY\Application Data\LimeWire\.AppSpecialShare\ESET Smart Security Keygen.rar.torrent C:\DOCUME~1\PATTY\Application Data\m\shared\Advanced Office Password Breaker 1.40 (KeyGen).zip C:\DOCUME~1\PATTY\Application Data\m\shared\Apex iPod Video Converter 4.19 With Crack.zip C:\DOCUME~1\PATTY\Application Data\m\shared\AVG.AntiVirus.v7.1.371.Multilangages.Incl-Keygen.par.eMule-Paradise.com.zip C:\DOCUME~1\PATTY\Application Data\m\shared\AVG.AntivÇðrus.7.0.322.em.portuguÇ¦s.+.Keygen.&.Serial.zip C:\DOCUME~1\PATTY\Application Data\m\shared\Batch It! Ultra 3.978 KeyGen.zip C:\DOCUME~1\PATTY\Application Data\m\shared\Bitdefender.v8.Keygen.zip C:\DOCUME~1\PATTY\Application Data\m\shared\CarryDVD 4.5.0 Crack.zip C:\DOCUME~1\PATTY\Application Data\m\shared\FRS Clocks and Time 1.8 [KeyGen].zip C:\DOCUME~1\PATTY\Application Data\m\shared\GoToMeeting 3.0 [KeyGen].zip C:\DOCUME~1\PATTY\Application Data\m\shared\iPod Audio Studio 6.4.2 [With Crack].zip C:\DOCUME~1\PATTY\Application Data\m\shared\MP3DJ Broadcast 3.7 (With Crack).zip C:\DOCUME~1\PATTY\Application Data\m\shared\Paint Shop Photo Album 5.01 (Crack).zip C:\DOCUME~1\PATTY\Application Data\m\shared\PM Master 2.8 [Crack].zip C:\DOCUME~1\PATTY\Application Data\m\shared\PopSurfer 1.1 (With Crack).zip C:\DOCUME~1\PATTY\Application Data\m\shared\SmartFormFiller 5.1 With Crack.zip C:\DOCUME~1\PATTY\Application Data\m\shared\The Business OpsCenter 3.5.0 KeyGen.zip C:\DOCUME~1\PATTY\Application Data\m\shared\Titanium Checkbook 3.2 With Crack.zip C:\DOCUME~1\PATTY\Application Data\m\shared\Vegetarian Cookery 1.0 (With Crack).zip C:\DOCUME~1\PATTY\Application Data\m\shared\WordCaptureX 2.2 KeyGen.zip C:\DOCUME~1\PATTY\Bureau\fun pass\crack all Zylom games.exe C:\DOCUME~1\PATTY\Bureau\patty\musique\vari‚t‚\ferrer & dutronc\jacques dutronc\Crack Boum Hue.mp3 C:\DOCUME~1\PATTY\Incomplete\5HSIKNO2O6243RMRCGHSWTW63DVNVVHF\.datESET Smart Security Keygen.rar C:\DOCUME~1\PATTY\Incomplete\5HSIKNO2O6243RMRCGHSWTW63DVNVVHF\ESET Smart Security Keygen.rar [F:6][D:3]-> C:\DOCUME~1\PATTY\LOCALS~1\Temp [F:65][D:0]-> C:\DOCUME~1\PATTY\Cookies [F:2456][D:4]-> C:\DOCUME~1\PATTY\LOCALS~1\TEMPOR~1\content.IE5 1 - "C:\Lop SD\LopR_1.txt" - 28/10/2008|18:37 - Option : [1] 2 - "C:\Lop SD\LopR_2.txt" - 28/10/2008|18:51 - Option : [2] --------------------\ Fin du rapport a 18:51:17

Utilisateur anonyme · Answer

Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe 




-> Double clique sur combofix.exe. 
-> Tape sur la touche 1 (Yes) pour démarrer le scan. 
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt 

Avant d'utiliser ComboFix : 

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours. 

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil. 

Une fois fait, sur ton bureau double-clic sur Combofix.exe. 

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc. 

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes. 

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

chimay8 · Answer

wareout,bagle,vundo,...bonjour le foutoir

odin · Answer

rapport : ComboFix 08-10-28.01 - PATTY 2008-10-28 19:04:44.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1530 [GMT 1:00] Lancé depuis: C:\Documents and Settings\PATTY\Bureau\ComboFix.exe * Un nouveau point de restauration a été créé . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Autorun.inf C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML C:\Documents and Settings\PATTY\Application Data\hidires C:\Documents and Settings\PATTY\Application Data\m C:\Documents and Settings\PATTY\Application Data\m\list.oct C:\Documents and Settings\PATTY\Application Data\m\shared\[Programmi.-.ITA].Sicurezza.AVG.6(antivirus).Spyware.e.SpyBot.AdAware.il.tutto.con.seriali.zip C:\Documents and Settings\PATTY\Application Data\m\shared\A Fantasy Journey Screensaver 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Aare AVI to VCD DVD SVCD MPEG Converter 6.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AbNote 1.7.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AbsolutePrivacy 2.02.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Access Password Recovery Master 1.0.0.5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AccessPatrol 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Active@ ISO File Manager 2.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\activePrinter 1.4.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Advanced MP3 Converter 2.63 [Patch].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Advanced Office Password Breaker 1.40 (KeyGen).zip C:\Documents and Settings\PATTY\Application Data\m\shared\AmIAScreenSaverOrNot 1.0.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Antiquity Riddles 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AnVir Virus Destroyer 3.7 [Serial].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Apdsoft Web Mailer 3.03.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Apex iPod Video Converter 4.19 With Crack.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ArcaMagica Packaging Templates 2.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ARulesXL 2.0.6.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ASPlayer 3.00f.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Atomic PST Password Recovery 1.60.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Atomic RAR Password Recovery 1.20 Patch.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AV Bros. Colorist 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AVG.AntivÃrus.7.0.322.em.portuguÃªs.+.Keygen.&.Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AVG.AntiVirus.v7.1.371.Multilangages.Incl-Keygen.par.eMule-Paradise.com.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Banner Maker Pro 6.0.8.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Basenjinn Desktop Buddy 1.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Batch It! Ultra 3.978 KeyGen.zip C:\Documents and Settings\PATTY\Application Data\m\shared\BatchOutput 1.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Battlefield 1942 BiTurbo Mod.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Bay Area Diving RSS feed 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Big Faceless Report Generator 1.1.34.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Bigeye Network Manager 3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Birthdays 2.3 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Bitdefender.v8.Keygen.zip C:\Documents and Settings\PATTY\Application Data\m\shared\BpmChecker 3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\BRICKLETTER 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CarryDVD 4.5.0 Crack.zip C:\Documents and Settings\PATTY\Application Data\m\shared\celum IMAGINE 3.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CHP Incident Information 1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CoCoMiner 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ColorPickUp 1.1.0.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Command & Conquer Generals Train map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Coollector 1.13.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CTC 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CTMailer 2.20.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Customized Windows Logon 1.0 (Key+Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\Dealership Director 3.01 Patch.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Deleted Digital Photo Pictures Retrieval 2.0.1.5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Dramatica Pro 4.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\DVD Base Lite 5.530.zip C:\Documents and Settings\PATTY\Application Data\m\shared\DVD to VCD AVI DivX Converter 3.2 build 069 Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\DVD X IMAGER 2.0.0.1 (Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\Dynomite 2.01.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Easy SMTP Server 2.7 [Key].zip C:\Documents and Settings\PATTY\Application Data\m\shared\EasyTVA V1.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Email Spy Pro 5.1.6.zip C:\Documents and Settings\PATTY\Application Data\m\shared\EnergySaver 2.31.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ESXManager 7.5.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Excel Password Recovery Key 6.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Exe Password 2004 7.114.zip C:\Documents and Settings\PATTY\Application Data\m\shared\F-Album 1.8.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Falling Icons 3D Screensaver 1.2 (Key+Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\FastChords 3.6 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\FileMenu 1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Flashback 1.5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Flippin' Switcheroo 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Folder Iconizer 1.4.zip C:\Documents and Settings\PATTY\Application Data\m\shared\FRS Clocks and Time 1.8 [KeyGen].zip C:\Documents and Settings\PATTY\Application Data\m\shared\GalleryView 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\GAMP Candy 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Generador2.0.Para.Actualizaciones.Del.Antivirus.Nod32.zip C:\Documents and Settings\PATTY\Application Data\m\shared\GetAnonymous Professional 2.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\GoToMeeting 3.0 [KeyGen].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Grass Roots 1.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Hadi Farsi Builder 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\HandyRec Professional 4.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\HD Workbench 1.1.31 Cracked.zip C:\Documents and Settings\PATTY\Application Data\m\shared\HidePro 0.5.1.70 (beta 3).zip C:\Documents and Settings\PATTY\Application Data\m\shared\High--Low 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\HotDog Junior 1.51.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Hours Manager 1.1 (Key+Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\HumanityThunder 3.1.1028 (Key).zip C:\Documents and Settings\PATTY\Application Data\m\shared\iDump 1.1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\IESnap 1.2 (Key+Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\InsideCAT Lite Edition 4.00 [Key].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Insider 3.02 [Key+Serial].zip C:\Documents and Settings\PATTY\Application Data\m\shared\iPod Audio Studio 6.4.2 [With Crack].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Itookia Free Icon Set.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Jerrycan 6.28.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Keyspan USB Twin Serial Adapter Software 1.9.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Landscape 1.2.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Lemonade Tycoon 2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\LingvoSoft Dictionary 2007 German - French 4.0.22 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\LingvoSoft Suite 2006 Turkish-Russian for Windows 3.1.29.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Logic Builder - VBA Runtime Demo 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Lunar Colongitude 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MagiName 1.2 Build 30 Patch.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MasterBlaster Deluxe 2.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MCAFEE.ANTISPYWARE.V1.0.2005.zip C:\Documents and Settings\PATTY\Application Data\m\shared\McAfee.Internet.Security.Suite.V7.0.2005.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Medianet 1.0.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MonoCalendar 0.7.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Morovia Royal Mail RM4SCC Fontware 3.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MorphVOX 2.9.8.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MP3DJ Broadcast 3.7 (With Crack).zip C:\Documents and Settings\PATTY\Application Data\m\shared\MSDict Professional Dictionary Bundle (Symbian Series 80) 2.40.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Muon 1.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MYquery Analyzer 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\N-Ball 2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Net Snippets Standard 3.3 [Key].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Network Traffic Generator and Monitor 1.7.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Nuclear Clock 2.24.zip C:\Documents and Settings\PATTY\Application Data\m\shared\OGM to AVI Converter 3.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\OpenOffice IFilter 1.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PacRush 1.42.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Paint Shop Photo Album 5.01 (Crack).zip C:\Documents and Settings\PATTY\Application Data\m\shared\Paquet Builder 2.9.5.0 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Password generator 1.0 beta.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Password Inventory 1.1.0.2 (Key).zip C:\Documents and Settings\PATTY\Application Data\m\shared\PC-Com Basic 8.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PDF Conversion Series - PDF2TXT 1.1 build 1115.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PDF Security and Privacy Audit 2.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Perfect Day C:\Documents and Settings\PATTY\Application Data\m\shared\Phyllotaxis Screensaver 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PictMatch 2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Pink Calendar and Day Planner 6.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Planetary Dreamscapes 1 1.0 [Serial].zip C:\Documents and Settings\PATTY\Application Data\m\shared\PM Master 2.8 [Crack].zip C:\Documents and Settings\PATTY\Application Data\m\shared\PopSurfer 1.1 (With Crack).zip C:\Documents and Settings\PATTY\Application Data\m\shared\Portals of Arnak 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Power Siphon 1.9.6.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PowerPoint Slide Show Converter 2.3.0.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ProcView32 2.01.zip C:\Documents and Settings\PATTY\Application Data\m\shared\QuidProQuo 1.04 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\r.a.d.ajax 1.62 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Radio Max toolbar for IE 4.5.129.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Rapid Backup Beta 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\RAR IFilter 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\RC Converter 2.0 [Cracked].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Remote Software Installation Utility 2007 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Renamer 5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\RGS-ADSLBoost 1.0.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\RSS Content Generator Enterprise 3.1.58 Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\San Francisco 49ers screensaver.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Scenic Drive - Welsh Hills to Chestnut Hills 1.0 [Cracked].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Sense Remote Control 1.4.0.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Sfx-Factory 2.6.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Sideways Screensaver 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Slawdog Smart Shutdown 1.4.zip C:\Documents and Settings\PATTY\Application Data\m\shared\SmartFormFiller 5.1 With Crack.zip C:\Documents and Settings\PATTY\Application Data\m\shared\SMB iCRM 4.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Soft193 Password Manager 1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Softdiv Audio Converter 3.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Space War Online 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Spamihilator 0.9.9.31.zip C:\Documents and Settings\PATTY\Application Data\m\shared\SQLeonardo 2006.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Starlines INC 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\swBatchPrint 1.5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Symantec.Norton.Antivirus.2007.Full.+.Symantec.Norton.Internet.Security.2007.Full.part1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\TestLAB 3.0.3 [Serial].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Text Converter 2.1.3.21.zip C:\Documents and Settings\PATTY\Application Data\m\shared\TextPad 5.0.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\The Business OpsCenter 3.5.0 KeyGen.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Thunder Batch 2.1.2 [Cracked].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Titanium Checkbook 3.2 With Crack.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Trade Empires 1.01 patch.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Traffic Scotland Cameras 1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Trojan Guarder 5.54.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Twinsen's Odyssey demo.zip C:\Documents and Settings\PATTY\Application Data\m\shared\uCertify PrepKit for test 70-300 8.02.5 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Unreal Tournament 2003 - Fire Pitt v1.1 deathmatch map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Unreal Tournament 2003 - Knallert45 deathmatch map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\UrVirtualDesktops 1.0.0.31.zip C:\Documents and Settings\PATTY\Application Data\m\shared\VAS Free System Tools 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\VB Doodle 5.0.0.68.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Vegetarian Cookery 1.0 (With Crack).zip C:\Documents and Settings\PATTY\Application Data\m\shared\VerMan's Art Converter 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Visual Catalogues Lite 4.16.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Voice Tracker 1.3 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\VOKATOR 1.0.2 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Volt 1.301.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Warcraft III - Lt. Bronx's Assault map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Warcraft III - The Death Sheep map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Warhammer 40,000 Dawn of War The Canyon map 2.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\WGP FolderLock 2006 1.0.4 (Patch).zip C:\Documents and Settings\PATTY\Application Data\m\shared\When Clones Attack 1.04.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Wincry 1.6.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\WinLog Assist 2.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\WOA Custom Document Properties 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Woize 2.5.0.32959.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Word Password Recovery Key 8.0 build 2514.zip C:\Documents and Settings\PATTY\Application Data\m\shared\WordCaptureX 2.2 KeyGen.zip C:\Documents and Settings\PATTY\Application Data\m\shared\X-Copy Professional 1.6.50.zip C:\Documents and Settings\PATTY\Application Data\m\shared\YASA VOB to iPod Converter 4.0 Cracked.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Zarafa Outlook Sharing 4.22 [Key+Serial].zip C:\Documents and Settings\PATTY\Application Data\m\srvlist.oct C:\Documents and Settings\PATTY\ravmonlog C:\resycled C:\resycled\boot.com C:\WINDOWS\cnsinfo.dat C:\WINDOWS\cookies.ini C:\WINDOWS\system32\_000009_.tmp.dll C:\WINDOWS\system32\fxtslgsw.ini C:\WINDOWS\system32\kdpuf.exe C:\WINDOWS\system32\mcrh.tmp C:\WINDOWS\system32\MSINET.oca C:\WINDOWS\system32\plpgbsvi.ini C:\WINDOWS\system32\RsDdcfii.ini C:\WINDOWS\system32\RsDdcfii.ini2 C:\xcrashdump.dat . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_BOONTY_GAMES -------\Legacy_CNSMINKP -------\Service_Boonty Games ((((((((((((((((((((((((((((( Fichiers créés du 2008-09-28 au 2008-10-28 )))))))))))))))))))))))))))))))))))) . 2008-10-28 18:27 . 2008-10-28 18:51 d-------- C:\Lop SD 2008-10-28 18:07 . 2008-10-28 18:24 d-------- C:\Program Files\Navilog1 2008-10-28 17:54 . 2008-10-28 17:54 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-10-28 17:54 . 2008-10-28 17:54 d-------- C:\Documents and Settings\PATTY\Application Data\Malwarebytes 2008-10-28 17:54 . 2008-10-28 17:54 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-10-28 17:54 . 2008-10-22 16:10 38,496 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-10-28 17:54 . 2008-10-22 16:10 15,504 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-10-28 16:27 . 2008-10-28 16:33 d-------- C:\Program Files\TuneUp Utilities 2008 2008-10-28 16:27 . 2008-10-28 16:27 d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-10-28 16:27 . 2008-10-28 16:27 355,584 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-10-28 16:27 . 2008-05-29 09:28 28,416 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-10-28 16:11 . 2008-10-28 16:11 d-------- C:\Program Files\Zylom Games2 2008-10-28 13:43 . 2008-10-28 13:43 d-------- C:\Documents and Settings\PATTY\Application Data\ESET 2008-10-28 13:27 . 2008-10-28 13:27 d-------- C:\Program Files\ESET 2008-10-28 13:27 . 2008-10-28 13:27 d-------- C:\Documents and Settings\All Users\Application Data\ESET 2008-10-28 13:07 . 2008-10-28 13:07 144 --a------ C:\WINDOWS\wininit.ini 2008-10-27 22:40 . 2008-10-27 22:40 d-------- C:\VundoFix Backups 2008-10-27 22:36 . 2008-10-27 22:37 d-------- C:\rsit 2008-10-27 22:36 . 2008-10-27 22:37 d-------- C:\Program Files\trend micro 2008-10-26 16:41 . 2008-10-26 16:41 d-------- C:\Program Files\Yahoo! 2008-10-26 16:41 . 2008-10-26 16:42 d-------- C:\Program Files\CCleaner 2008-10-24 06:59 . 2008-10-15 17:35 337,408 --------- C:\WINDOWS\system32\dllcache\netapi32.dll 2008-10-23 14:46 . 2008-10-23 14:46 d-------- C:\Program Files\SmartShopper 2008-10-23 14:46 . 2008-10-27 14:49 d-------- C:\Documents and Settings\PATTY\Application Data\SmartShopper 2008-10-23 14:46 . 2008-10-23 14:46 0 --a------ C:\WINDOWS\_MSI5166._IS 2008-10-22 15:51 . 2006-11-13 14:30 106,496 --a------ C:\WINDOWS\system32\ssPlantasia.scr 2008-10-22 13:16 . 2008-10-22 13:16 d-------- C:\Program Files\DD PlayCam 2008-10-22 13:15 . 2008-10-22 13:15 d-------- C:\Program Files\Fichiers communs\Look312P 2008-10-22 13:15 . 2004-03-19 17:11 90,968 --a------ C:\WINDOWS\system32\drivers\usbVM31b.sys 2008-10-22 13:15 . 2003-05-15 16:17 61,440 --a------ C:\WINDOWS\system32\VM31bSTI.dll 2008-10-21 23:44 . 2008-10-22 18:40 d-------- C:\WINDOWS\Album 2008-10-21 23:43 . 2008-10-22 22:52 d-------- C:\Program Files\Look 312P 2008-10-21 23:43 . 2005-06-27 17:24 184,392 --------- C:\WINDOWS\system32\VM31bPrp.Ax 2008-10-21 23:32 . 2008-04-13 19:45 60,032 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys 2008-10-21 23:32 . 2008-04-13 19:45 60,032 --a------ C:\WINDOWS\system32\dllcache\usbaudio.sys 2008-10-16 21:13 . 2008-08-14 14:23 2,191,232 --------- C:\WINDOWS\system32\dllcache\ntoskrnl.exe 2008-10-16 21:13 . 2008-08-14 14:23 2,147,328 --------- C:\WINDOWS\system32\dllcache\ntkrnlmp.exe 2008-10-16 21:13 . 2008-08-14 14:23 2,068,096 --------- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe 2008-10-16 21:13 . 2008-08-14 14:23 2,025,984 --------- C:\WINDOWS\system32\dllcache\ntkrpamp.exe 2008-10-16 13:01 . 2008-09-15 16:26 1,846,528 --------- C:\WINDOWS\system32\dllcache\win32k.sys 2008-10-16 12:15 . 2008-09-08 11:41 333,824 --------- C:\WINDOWS\system32\dllcache\srv.sys 2008-10-14 23:51 . 2008-10-14 23:51 d-------- C:\Documents and Settings\PATTY\Application Data\GamesCafe 2008-10-10 23:21 . 2008-10-19 19:58 d-------- C:\Documents and Settings\PATTY\Application Data\Shopping Blocks 2008-10-04 13:51 . 2008-10-04 13:51 d-------- C:\Program Files\Eidos 2008-10-04 09:20 . 2008-10-04 09:20 d-------- C:\Documents and Settings\PATTY\Application Data\Anuman Interactive . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-28 16:31 --------- d-----w C:\Program Files\Zylom Games 2008-10-28 16:21 --------- d-----w C:\Documents and Settings\PATTY\Application Data\Zylom 2008-10-28 15:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-10-28 13:19 --------- d-----w C:\Program Files\Spybot - Search & Destroy 2008-10-28 12:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-10-28 01:35 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared 2008-10-28 01:34 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-10-28 01:34 --------- d-----w C:\Documents and Settings\PATTY\Application Data\EoRezo 2008-10-28 00:27 --------- d-----w C:\Program Files\EoRezo 2008-10-27 21:23 --------- d-----w C:\Program Files\WiPen 2008-10-27 21:11 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-10-26 20:19 --------- d-----w C:\Program Files\eMule 2008-10-23 15:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\MythPeople 2008-10-05 12:25 --------- d-----w C:\Program Files\GameSpy Arcade 2008-10-04 21:05 --------- d-----w C:\Documents and Settings\PATTY\Application Data\PlayFirst 2008-10-04 20:11 --------- d-----w C:\Program Files\Ubisoft 2008-10-04 20:11 --------- d-----w C:\Program Files\Codemasters 2008-10-04 20:11 --------- d-----w C:\Program Files\Anuman Interactive 2008-10-04 08:26 278,984 ----a-w C:\WINDOWS\system32\drivers\atksgt.sys 2008-09-25 10:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\GameHouse 2008-09-23 21:49 --------- d-----w C:\Documents and Settings\PATTY\Application Data\Playrix Entertainment 2008-09-19 12:07 18,048 ----a-w C:\WINDOWS\system32\drivers\lirsgt.sys 2008-09-17 12:26 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sandlot Games 2008-09-12 23:25 --------- d-----w C:\Documents and Settings\All Users\Application Data\POPWWPROFILES 2008-09-12 07:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Gogii 2008-09-11 20:54 --------- d-----w C:\Documents and Settings\PATTY\Application Data\SPAMfighter 2008-09-08 10:41 333,824 ----a-w C:\WINDOWS\system32\drivers\srv.sys 2008-09-07 12:01 --------- d-----w C:\Program Files\Maxis 2008-09-07 11:08 --------- d-----w C:\Program Files\MSN Messenger 2008-09-04 11:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\MumboJumbo 2008-09-02 09:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\PlayFirst 2008-04-01 16:46 212,368 ----a-w C:\Documents and Settings\PATTY\Application Data\GDIPFONTCACHEV1.DAT 2007-04-25 14:08 774,144 ----a-w C:\Program Files\RngInterstitial.dll 2003-03-21 11:37 16,056 ----a-w C:\Program Files\owcstp16.dll . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SmpcSys"="C:\APPS\SMP\SmpSys.exe" [2005-11-17 975360] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-09 68856] "AnumanLive"="C:\Documents and Settings\PATTY\Application Data\Anuman Interactive\AnumanLive\AnumanLive.exe" [2008-07-01 347648] "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "egui"="C:\Program Files\ESET\ESET Smart Security\egui.exe" [2007-10-25 1410304] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 7700480] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360] C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\ FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440] C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\ FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440] C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\ FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "vidc.iv31"= C:\WINDOWS\system32\ir32_32.dll "vidc.iv32"= C:\WINDOWS\system32\ir32_32.dll "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm "msacm.mpegacm"= mpegacm.acm "msacm.ulmp3acm"= ulmp3acm.acm [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Authentication Packages REG_MULTI_SZ msv1_0 nwprovau [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe"= "C:\WINDOWS\system32\mmc.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "C:\Program Files\LimeWire\LimeWire.exe"= "C:\WINDOWS\system32\sessmgr.exe"= "C:\Program Files\eMule\emule.exe"= "C:\Program Files\GameSpy Arcade\Aphex.exe"= "%windir%\system32\sessmgr.exe"= "C:\Program Files\MSN Messenger\msnmsgr.exe"= "C:\Program Files\MSN Messenger\livecall.exe"= "C:\WINDOWS\system32\dpvsetup.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009 "13789:TCP"= 13789:TCP:NortonAV "16158:TCP"= 16158:TCP:NortonAV "16502:TCP"= 16502:TCP:NortonAV "16499:TCP"= 16499:TCP:NortonAV "15187:TCP"= 15187:TCP:NortonAV "56586:TCP"= 56586:TCP:Pando P2P TCP Listening Port "56586:UDP"= 56586:UDP:Pando P2P UDP Listening Port R2 ithsgt;ithsgt;C:\WINDOWS\system32\DRIVERS\ithsgt.sys [2007-02-10 162432] R2 lilsgt;lilsgt;C:\WINDOWS\system32\DRIVERS\lilsgt.sys [2007-02-10 12032] R2 NwSapAgent;Agent SAP;C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] R2 SrvCDEject;SrvCDEject;C:\Program Files\Packard Bell\SrvCDEject.exe [2006-07-25 613376] R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2008-04-14 14336] R3 3xHybrid;ASUSTek SAA713x PCI Card;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2006-04-28 882688] R3 RTSTOR;USB Mass Stroage Device;C:\WINDOWS\system32\drivers\RTSTOR.SYS [2005-12-21 20096] R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 7040] S2 AbyssWebServer;Abyss Web Server;F:\abyssws.exe [ ] S3 DIGIRPS;Pilote PortServer Digi;C:\WINDOWS\system32\DRIVERS\digirlpt.sys [2001-08-23 42656] S3 gAGP440p;gAGP440p;C:\DOCUME~1\PATTY\LOCALS~1\Temp\gAGP440p.sys [ ] S3 MBAMSwissArmy;MBAMSwissArmy;C:\WINDOWS\system32\drivers\mbamswissarmy.sys [2008-10-22 38496] S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2004-05-17 17536] S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-10-28 355584] S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8b7aeaa1-6abb-11dd-8174-00038a000015}] \Shell\AutoRun\command - F:\Setup.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a5e536d2-4688-11dc-bfed-00038a000015}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe \Shell\Open(&0)\command - Recycled\ctfmon.exe . Contenu du dossier 'Tâches planifiées' 2008-10-28 C:\WINDOWS\Tasks\Maintenance en 1 clic.job - C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe [2008-06-20 09:23] . - - - - ORPHELINS SUPPRIMES - - - - BHO-{32341E7E-C319-46DE-91D0-E30BB1A3CABA} - (no file) BHO-{6A511CCC-E0F0-4A27-A70A-664C11A4F999} - (no file) HKLM-Run-C:\WINDOWS\system32\kdpuf.exe - C:\WINDOWS\system32\kdpuf.exe Notify-__c008EED6 - C:\WINDOWS\system32\__c008EED6.dat Notify-cbXooMcY - cbXooMcY.dll . ------- Examen supplémentaire ------- . R0 -: HKCU-Main,Start Page = hxxp://www.lo.st R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/search?q=%s O8 -: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 -: {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - {BCEB373D-A35A-4200-BD43-8586CD9DFAE7} - O16 -: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} - hxxp://zylom.king.com/ctl/kingcomie.cab C:\WINDOWS\Downloaded Program Files\KingComIE.inf C:\WINDOWS\KingComIE.dll O16 -: {48DF87EE-F2DE-11D8-BE7F-302050C10811} - hxxp://www.flysuite.com/flyword/loaderword_win_fr.cab C:\WINDOWS\Downloaded Program Files\FlyLoader.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-10-28 19:20:32 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\WINDOWS\ehome\ehrecvr.exe C:\WINDOWS\ehome\ehSched.exe C:\Program Files\ESET\ESET Smart Security\ekrn.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe C:\PROGRA~1\COMMON~1\X10\Common\X10nets.exe C:\WINDOWS\ehome\mcrdsvc.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\wscntfy.exe . ************************************************************************** . Heure de fin: 2008-10-28 19:29:13 - La machine a redémarré ComboFix-quarantined-files.txt 2008-10-28 18:29:10 Avant-CF: 249 614 553 088 octets libres Après-CF: 249,048,584,192 octets libres 450 --- E O F --- 2008-10-25 12:13:51

odin · Answer

rapport : ComboFix 08-10-28.01 - PATTY 2008-10-28 19:04:44.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1530 [GMT 1:00] Lancé depuis: C:\Documents and Settings\PATTY\Bureau\ComboFix.exe * Un nouveau point de restauration a été créé . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Autorun.inf C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML C:\Documents and Settings\PATTY\Application Data\hidires C:\Documents and Settings\PATTY\Application Data\m C:\Documents and Settings\PATTY\Application Data\m\list.oct C:\Documents and Settings\PATTY\Application Data\m\shared\[Programmi.-.ITA].Sicurezza.AVG.6(antivirus).Spyware.e.SpyBot.AdAware.il.tutto.con.seriali.zip C:\Documents and Settings\PATTY\Application Data\m\shared\A Fantasy Journey Screensaver 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Aare AVI to VCD DVD SVCD MPEG Converter 6.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AbNote 1.7.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AbsolutePrivacy 2.02.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Access Password Recovery Master 1.0.0.5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AccessPatrol 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Active@ ISO File Manager 2.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\activePrinter 1.4.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Advanced MP3 Converter 2.63 [Patch].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Advanced Office Password Breaker 1.40 (KeyGen).zip C:\Documents and Settings\PATTY\Application Data\m\shared\AmIAScreenSaverOrNot 1.0.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Antiquity Riddles 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AnVir Virus Destroyer 3.7 [Serial].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Apdsoft Web Mailer 3.03.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Apex iPod Video Converter 4.19 With Crack.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ArcaMagica Packaging Templates 2.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ARulesXL 2.0.6.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ASPlayer 3.00f.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Atomic PST Password Recovery 1.60.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Atomic RAR Password Recovery 1.20 Patch.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AV Bros. Colorist 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AVG.AntivÃrus.7.0.322.em.portuguÃªs.+.Keygen.&.Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AVG.AntiVirus.v7.1.371.Multilangages.Incl-Keygen.par.eMule-Paradise.com.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Banner Maker Pro 6.0.8.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Basenjinn Desktop Buddy 1.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Batch It! Ultra 3.978 KeyGen.zip C:\Documents and Settings\PATTY\Application Data\m\shared\BatchOutput 1.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Battlefield 1942 BiTurbo Mod.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Bay Area Diving RSS feed 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Big Faceless Report Generator 1.1.34.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Bigeye Network Manager 3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Birthdays 2.3 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Bitdefender.v8.Keygen.zip C:\Documents and Settings\PATTY\Application Data\m\shared\BpmChecker 3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\BRICKLETTER 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CarryDVD 4.5.0 Crack.zip C:\Documents and Settings\PATTY\Application Data\m\shared\celum IMAGINE 3.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CHP Incident Information 1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CoCoMiner 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ColorPickUp 1.1.0.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Command & Conquer Generals Train map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Coollector 1.13.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CTC 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CTMailer 2.20.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Customized Windows Logon 1.0 (Key+Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\Dealership Director 3.01 Patch.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Deleted Digital Photo Pictures Retrieval 2.0.1.5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Dramatica Pro 4.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\DVD Base Lite 5.530.zip C:\Documents and Settings\PATTY\Application Data\m\shared\DVD to VCD AVI DivX Converter 3.2 build 069 Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\DVD X IMAGER 2.0.0.1 (Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\Dynomite 2.01.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Easy SMTP Server 2.7 [Key].zip C:\Documents and Settings\PATTY\Application Data\m\shared\EasyTVA V1.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Email Spy Pro 5.1.6.zip C:\Documents and Settings\PATTY\Application Data\m\shared\EnergySaver 2.31.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ESXManager 7.5.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Excel Password Recovery Key 6.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Exe Password 2004 7.114.zip C:\Documents and Settings\PATTY\Application Data\m\shared\F-Album 1.8.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Falling Icons 3D Screensaver 1.2 (Key+Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\FastChords 3.6 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\FileMenu 1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Flashback 1.5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Flippin' Switcheroo 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Folder Iconizer 1.4.zip C:\Documents and Settings\PATTY\Application Data\m\shared\FRS Clocks and Time 1.8 [KeyGen].zip C:\Documents and Settings\PATTY\Application Data\m\shared\GalleryView 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\GAMP Candy 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Generador2.0.Para.Actualizaciones.Del.Antivirus.Nod32.zip C:\Documents and Settings\PATTY\Application Data\m\shared\GetAnonymous Professional 2.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\GoToMeeting 3.0 [KeyGen].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Grass Roots 1.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Hadi Farsi Builder 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\HandyRec Professional 4.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\HD Workbench 1.1.31 Cracked.zip C:\Documents and Settings\PATTY\Application Data\m\shared\HidePro 0.5.1.70 (beta 3).zip C:\Documents and Settings\PATTY\Application Data\m\shared\High--Low 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\HotDog Junior 1.51.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Hours Manager 1.1 (Key+Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\HumanityThunder 3.1.1028 (Key).zip C:\Documents and Settings\PATTY\Application Data\m\shared\iDump 1.1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\IESnap 1.2 (Key+Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\InsideCAT Lite Edition 4.00 [Key].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Insider 3.02 [Key+Serial].zip C:\Documents and Settings\PATTY\Application Data\m\shared\iPod Audio Studio 6.4.2 [With Crack].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Itookia Free Icon Set.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Jerrycan 6.28.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Keyspan USB Twin Serial Adapter Software 1.9.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Landscape 1.2.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Lemonade Tycoon 2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\LingvoSoft Dictionary 2007 German - French 4.0.22 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\LingvoSoft Suite 2006 Turkish-Russian for Windows 3.1.29.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Logic Builder - VBA Runtime Demo 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Lunar Colongitude 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MagiName 1.2 Build 30 Patch.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MasterBlaster Deluxe 2.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MCAFEE.ANTISPYWARE.V1.0.2005.zip C:\Documents and Settings\PATTY\Application Data\m\shared\McAfee.Internet.Security.Suite.V7.0.2005.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Medianet 1.0.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MonoCalendar 0.7.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Morovia Royal Mail RM4SCC Fontware 3.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MorphVOX 2.9.8.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MP3DJ Broadcast 3.7 (With Crack).zip C:\Documents and Settings\PATTY\Application Data\m\shared\MSDict Professional Dictionary Bundle (Symbian Series 80) 2.40.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Muon 1.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MYquery Analyzer 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\N-Ball 2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Net Snippets Standard 3.3 [Key].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Network Traffic Generator and Monitor 1.7.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Nuclear Clock 2.24.zip C:\Documents and Settings\PATTY\Application Data\m\shared\OGM to AVI Converter 3.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\OpenOffice IFilter 1.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PacRush 1.42.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Paint Shop Photo Album 5.01 (Crack).zip C:\Documents and Settings\PATTY\Application Data\m\shared\Paquet Builder 2.9.5.0 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Password generator 1.0 beta.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Password Inventory 1.1.0.2 (Key).zip C:\Documents and Settings\PATTY\Application Data\m\shared\PC-Com Basic 8.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PDF Conversion Series - PDF2TXT 1.1 build 1115.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PDF Security and Privacy Audit 2.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Perfect Day C:\Documents and Settings\PATTY\Application Data\m\shared\Phyllotaxis Screensaver 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PictMatch 2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Pink Calendar and Day Planner 6.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Planetary Dreamscapes 1 1.0 [Serial].zip C:\Documents and Settings\PATTY\Application Data\m\shared\PM Master 2.8 [Crack].zip C:\Documents and Settings\PATTY\Application Data\m\shared\PopSurfer 1.1 (With Crack).zip C:\Documents and Settings\PATTY\Application Data\m\shared\Portals of Arnak 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Power Siphon 1.9.6.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PowerPoint Slide Show Converter 2.3.0.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ProcView32 2.01.zip C:\Documents and Settings\PATTY\Application Data\m\shared\QuidProQuo 1.04 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\r.a.d.ajax 1.62 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Radio Max toolbar for IE 4.5.129.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Rapid Backup Beta 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\RAR IFilter 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\RC Converter 2.0 [Cracked].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Remote Software Installation Utility 2007 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Renamer 5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\RGS-ADSLBoost 1.0.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\RSS Content Generator Enterprise 3.1.58 Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\San Francisco 49ers screensaver.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Scenic Drive - Welsh Hills to Chestnut Hills 1.0 [Cracked].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Sense Remote Control 1.4.0.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Sfx-Factory 2.6.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Sideways Screensaver 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Slawdog Smart Shutdown 1.4.zip C:\Documents and Settings\PATTY\Application Data\m\shared\SmartFormFiller 5.1 With Crack.zip C:\Documents and Settings\PATTY\Application Data\m\shared\SMB iCRM 4.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Soft193 Password Manager 1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Softdiv Audio Converter 3.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Space War Online 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Spamihilator 0.9.9.31.zip C:\Documents and Settings\PATTY\Application Data\m\shared\SQLeonardo 2006.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Starlines INC 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\swBatchPrint 1.5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Symantec.Norton.Antivirus.2007.Full.+.Symantec.Norton.Internet.Security.2007.Full.part1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\TestLAB 3.0.3 [Serial].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Text Converter 2.1.3.21.zip C:\Documents and Settings\PATTY\Application Data\m\shared\TextPad 5.0.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\The Business OpsCenter 3.5.0 KeyGen.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Thunder Batch 2.1.2 [Cracked].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Titanium Checkbook 3.2 With Crack.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Trade Empires 1.01 patch.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Traffic Scotland Cameras 1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Trojan Guarder 5.54.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Twinsen's Odyssey demo.zip C:\Documents and Settings\PATTY\Application Data\m\shared\uCertify PrepKit for test 70-300 8.02.5 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Unreal Tournament 2003 - Fire Pitt v1.1 deathmatch map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Unreal Tournament 2003 - Knallert45 deathmatch map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\UrVirtualDesktops 1.0.0.31.zip C:\Documents and Settings\PATTY\Application Data\m\shared\VAS Free System Tools 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\VB Doodle 5.0.0.68.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Vegetarian Cookery 1.0 (With Crack).zip C:\Documents and Settings\PATTY\Application Data\m\shared\VerMan's Art Converter 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Visual Catalogues Lite 4.16.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Voice Tracker 1.3 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\VOKATOR 1.0.2 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Volt 1.301.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Warcraft III - Lt. Bronx's Assault map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Warcraft III - The Death Sheep map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Warhammer 40,000 Dawn of War The Canyon map 2.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\WGP FolderLock 2006 1.0.4 (Patch).zip C:\Documents and Settings\PATTY\Application Data\m\shared\When Clones Attack 1.04.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Wincry 1.6.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\WinLog Assist 2.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\WOA Custom Document Properties 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Woize 2.5.0.32959.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Word Password Recovery Key 8.0 build 2514.zip C:\Documents and Settings\PATTY\Application Data\m\shared\WordCaptureX 2.2 KeyGen.zip C:\Documents and Settings\PATTY\Application Data\m\shared\X-Copy Professional 1.6.50.zip C:\Documents and Settings\PATTY\Application Data\m\shared\YASA VOB to iPod Converter 4.0 Cracked.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Zarafa Outlook Sharing 4.22 [Key+Serial].zip C:\Documents and Settings\PATTY\Application Data\m\srvlist.oct C:\Documents and Settings\PATTY\ravmonlog C:\resycled C:\resycled\boot.com C:\WINDOWS\cnsinfo.dat C:\WINDOWS\cookies.ini C:\WINDOWS\system32\_000009_.tmp.dll C:\WINDOWS\system32\fxtslgsw.ini C:\WINDOWS\system32\kdpuf.exe C:\WINDOWS\system32\mcrh.tmp C:\WINDOWS\system32\MSINET.oca C:\WINDOWS\system32\plpgbsvi.ini C:\WINDOWS\system32\RsDdcfii.ini C:\WINDOWS\system32\RsDdcfii.ini2 C:\xcrashdump.dat . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_BOONTY_GAMES -------\Legacy_CNSMINKP -------\Service_Boonty Games ((((((((((((((((((((((((((((( Fichiers créés du 2008-09-28 au 2008-10-28 )))))))))))))))))))))))))))))))))))) . 2008-10-28 18:27 . 2008-10-28 18:51 d-------- C:\Lop SD 2008-10-28 18:07 . 2008-10-28 18:24 d-------- C:\Program Files\Navilog1 2008-10-28 17:54 . 2008-10-28 17:54 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-10-28 17:54 . 2008-10-28 17:54 d-------- C:\Documents and Settings\PATTY\Application Data\Malwarebytes 2008-10-28 17:54 . 2008-10-28 17:54 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-10-28 17:54 . 2008-10-22 16:10 38,496 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-10-28 17:54 . 2008-10-22 16:10 15,504 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-10-28 16:27 . 2008-10-28 16:33 d-------- C:\Program Files\TuneUp Utilities 2008 2008-10-28 16:27 . 2008-10-28 16:27 d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-10-28 16:27 . 2008-10-28 16:27 355,584 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-10-28 16:27 . 2008-05-29 09:28 28,416 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-10-28 16:11 . 2008-10-28 16:11 d-------- C:\Program Files\Zylom Games2 2008-10-28 13:43 . 2008-10-28 13:43 d-------- C:\Documents and Settings\PATTY\Application Data\ESET 2008-10-28 13:27 . 2008-10-28 13:27 d-------- C:\Program Files\ESET 2008-10-28 13:27 . 2008-10-28 13:27 d-------- C:\Documents and Settings\All Users\Application Data\ESET 2008-10-28 13:07 . 2008-10-28 13:07 144 --a------ C:\WINDOWS\wininit.ini 2008-10-27 22:40 . 2008-10-27 22:40 d-------- C:\VundoFix Backups 2008-10-27 22:36 . 2008-10-27 22:37 d-------- C:\rsit 2008-10-27 22:36 . 2008-10-27 22:37 d-------- C:\Program Files\trend micro 2008-10-26 16:41 . 2008-10-26 16:41 d-------- C:\Program Files\Yahoo! 2008-10-26 16:41 . 2008-10-26 16:42 d-------- C:\Program Files\CCleaner 2008-10-24 06:59 . 2008-10-15 17:35 337,408 --------- C:\WINDOWS\system32\dllcache\netapi32.dll 2008-10-23 14:46 . 2008-10-23 14:46 d-------- C:\Program Files\SmartShopper 2008-10-23 14:46 . 2008-10-27 14:49 d-------- C:\Documents and Settings\PATTY\Application Data\SmartShopper 2008-10-23 14:46 . 2008-10-23 14:46 0 --a------ C:\WINDOWS\_MSI5166._IS 2008-10-22 15:51 . 2006-11-13 14:30 106,496 --a------ C:\WINDOWS\system32\ssPlantasia.scr 2008-10-22 13:16 . 2008-10-22 13:16 d-------- C:\Program Files\DD PlayCam 2008-10-22 13:15 . 2008-10-22 13:15 d-------- C:\Program Files\Fichiers communs\Look312P 2008-10-22 13:15 . 2004-03-19 17:11 90,968 --a------ C:\WINDOWS\system32\drivers\usbVM31b.sys 2008-10-22 13:15 . 2003-05-15 16:17 61,440 --a------ C:\WINDOWS\system32\VM31bSTI.dll 2008-10-21 23:44 . 2008-10-22 18:40 d-------- C:\WINDOWS\Album 2008-10-21 23:43 . 2008-10-22 22:52 d-------- C:\Program Files\Look 312P 2008-10-21 23:43 . 2005-06-27 17:24 184,392 --------- C:\WINDOWS\system32\VM31bPrp.Ax 2008-10-21 23:32 . 2008-04-13 19:45 60,032 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys 2008-10-21 23:32 . 2008-04-13 19:45 60,032 --a------ C:\WINDOWS\system32\dllcache\usbaudio.sys 2008-10-16 21:13 . 2008-08-14 14:23 2,191,232 --------- C:\WINDOWS\system32\dllcache\ntoskrnl.exe 2008-10-16 21:13 . 2008-08-14 14:23 2,147,328 --------- C:\WINDOWS\system32\dllcache\ntkrnlmp.exe 2008-10-16 21:13 . 2008-08-14 14:23 2,068,096 --------- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe 2008-10-16 21:13 . 2008-08-14 14:23 2,025,984 --------- C:\WINDOWS\system32\dllcache\ntkrpamp.exe 2008-10-16 13:01 . 2008-09-15 16:26 1,846,528 --------- C:\WINDOWS\system32\dllcache\win32k.sys 2008-10-16 12:15 . 2008-09-08 11:41 333,824 --------- C:\WINDOWS\system32\dllcache\srv.sys 2008-10-14 23:51 . 2008-10-14 23:51 d-------- C:\Documents and Settings\PATTY\Application Data\GamesCafe 2008-10-10 23:21 . 2008-10-19 19:58 d-------- C:\Documents and Settings\PATTY\Application Data\Shopping Blocks 2008-10-04 13:51 . 2008-10-04 13:51 d-------- C:\Program Files\Eidos 2008-10-04 09:20 . 2008-10-04 09:20 d-------- C:\Documents and Settings\PATTY\Application Data\Anuman Interactive . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-28 16:31 --------- d-----w C:\Program Files\Zylom Games 2008-10-28 16:21 --------- d-----w C:\Documents and Settings\PATTY\Application Data\Zylom 2008-10-28 15:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-10-28 13:19 --------- d-----w C:\Program Files\Spybot - Search & Destroy 2008-10-28 12:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-10-28 01:35 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared 2008-10-28 01:34 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-10-28 01:34 --------- d-----w C:\Documents and Settings\PATTY\Application Data\EoRezo 2008-10-28 00:27 --------- d-----w C:\Program Files\EoRezo 2008-10-27 21:23 --------- d-----w C:\Program Files\WiPen 2008-10-27 21:11 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-10-26 20:19 --------- d-----w C:\Program Files\eMule 2008-10-23 15:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\MythPeople 2008-10-05 12:25 --------- d-----w C:\Program Files\GameSpy Arcade 2008-10-04 21:05 --------- d-----w C:\Documents and Settings\PATTY\Application Data\PlayFirst 2008-10-04 20:11 --------- d-----w C:\Program Files\Ubisoft 2008-10-04 20:11 --------- d-----w C:\Program Files\Codemasters 2008-10-04 20:11 --------- d-----w C:\Program Files\Anuman Interactive 2008-10-04 08:26 278,984 ----a-w C:\WINDOWS\system32\drivers\atksgt.sys 2008-09-25 10:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\GameHouse 2008-09-23 21:49 --------- d-----w C:\Documents and Settings\PATTY\Application Data\Playrix Entertainment 2008-09-19 12:07 18,048 ----a-w C:\WINDOWS\system32\drivers\lirsgt.sys 2008-09-17 12:26 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sandlot Games 2008-09-12 23:25 --------- d-----w C:\Documents and Settings\All Users\Application Data\POPWWPROFILES 2008-09-12 07:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Gogii 2008-09-11 20:54 --------- d-----w C:\Documents and Settings\PATTY\Application Data\SPAMfighter 2008-09-08 10:41 333,824 ----a-w C:\WINDOWS\system32\drivers\srv.sys 2008-09-07 12:01 --------- d-----w C:\Program Files\Maxis 2008-09-07 11:08 --------- d-----w C:\Program Files\MSN Messenger 2008-09-04 11:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\MumboJumbo 2008-09-02 09:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\PlayFirst 2008-04-01 16:46 212,368 ----a-w C:\Documents and Settings\PATTY\Application Data\GDIPFONTCACHEV1.DAT 2007-04-25 14:08 774,144 ----a-w C:\Program Files\RngInterstitial.dll 2003-03-21 11:37 16,056 ----a-w C:\Program Files\owcstp16.dll . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SmpcSys"="C:\APPS\SMP\SmpSys.exe" [2005-11-17 975360] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-09 68856] "AnumanLive"="C:\Documents and Settings\PATTY\Application Data\Anuman Interactive\AnumanLive\AnumanLive.exe" [2008-07-01 347648] "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "egui"="C:\Program Files\ESET\ESET Smart Security\egui.exe" [2007-10-25 1410304] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 7700480] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360] C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\ FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440] C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\ FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440] C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\ FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "vidc.iv31"= C:\WINDOWS\system32\ir32_32.dll "vidc.iv32"= C:\WINDOWS\system32\ir32_32.dll "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm "msacm.mpegacm"= mpegacm.acm "msacm.ulmp3acm"= ulmp3acm.acm [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Authentication Packages REG_MULTI_SZ msv1_0 nwprovau [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe"= "C:\WINDOWS\system32\mmc.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "C:\Program Files\LimeWire\LimeWire.exe"= "C:\WINDOWS\system32\sessmgr.exe"= "C:\Program Files\eMule\emule.exe"= "C:\Program Files\GameSpy Arcade\Aphex.exe"= "%windir%\system32\sessmgr.exe"= "C:\Program Files\MSN Messenger\msnmsgr.exe"= "C:\Program Files\MSN Messenger\livecall.exe"= "C:\WINDOWS\system32\dpvsetup.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009 "13789:TCP"= 13789:TCP:NortonAV "16158:TCP"= 16158:TCP:NortonAV "16502:TCP"= 16502:TCP:NortonAV "16499:TCP"= 16499:TCP:NortonAV "15187:TCP"= 15187:TCP:NortonAV "56586:TCP"= 56586:TCP:Pando P2P TCP Listening Port "56586:UDP"= 56586:UDP:Pando P2P UDP Listening Port R2 ithsgt;ithsgt;C:\WINDOWS\system32\DRIVERS\ithsgt.sys [2007-02-10 162432] R2 lilsgt;lilsgt;C:\WINDOWS\system32\DRIVERS\lilsgt.sys [2007-02-10 12032] R2 NwSapAgent;Agent SAP;C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] R2 SrvCDEject;SrvCDEject;C:\Program Files\Packard Bell\SrvCDEject.exe [2006-07-25 613376] R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2008-04-14 14336] R3 3xHybrid;ASUSTek SAA713x PCI Card;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2006-04-28 882688] R3 RTSTOR;USB Mass Stroage Device;C:\WINDOWS\system32\drivers\RTSTOR.SYS [2005-12-21 20096] R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 7040] S2 AbyssWebServer;Abyss Web Server;F:\abyssws.exe [ ] S3 DIGIRPS;Pilote PortServer Digi;C:\WINDOWS\system32\DRIVERS\digirlpt.sys [2001-08-23 42656] S3 gAGP440p;gAGP440p;C:\DOCUME~1\PATTY\LOCALS~1\Temp\gAGP440p.sys [ ] S3 MBAMSwissArmy;MBAMSwissArmy;C:\WINDOWS\system32\drivers\mbamswissarmy.sys [2008-10-22 38496] S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2004-05-17 17536] S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-10-28 355584] S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8b7aeaa1-6abb-11dd-8174-00038a000015}] \Shell\AutoRun\command - F:\Setup.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a5e536d2-4688-11dc-bfed-00038a000015}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe \Shell\Open(&0)\command - Recycled\ctfmon.exe . Contenu du dossier 'Tâches planifiées' 2008-10-28 C:\WINDOWS\Tasks\Maintenance en 1 clic.job - C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe [2008-06-20 09:23] . - - - - ORPHELINS SUPPRIMES - - - - BHO-{32341E7E-C319-46DE-91D0-E30BB1A3CABA} - (no file) BHO-{6A511CCC-E0F0-4A27-A70A-664C11A4F999} - (no file) HKLM-Run-C:\WINDOWS\system32\kdpuf.exe - C:\WINDOWS\system32\kdpuf.exe Notify-__c008EED6 - C:\WINDOWS\system32\__c008EED6.dat Notify-cbXooMcY - cbXooMcY.dll . ------- Examen supplémentaire ------- . R0 -: HKCU-Main,Start Page = hxxp://www.lo.st R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/search?q=%s O8 -: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 -: {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - {BCEB373D-A35A-4200-BD43-8586CD9DFAE7} - O16 -: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} - hxxp://zylom.king.com/ctl/kingcomie.cab C:\WINDOWS\Downloaded Program Files\KingComIE.inf C:\WINDOWS\KingComIE.dll O16 -: {48DF87EE-F2DE-11D8-BE7F-302050C10811} - hxxp://www.flysuite.com/flyword/loaderword_win_fr.cab C:\WINDOWS\Downloaded Program Files\FlyLoader.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-10-28 19:20:32 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\WINDOWS\ehome\ehrecvr.exe C:\WINDOWS\ehome\ehSched.exe C:\Program Files\ESET\ESET Smart Security\ekrn.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe C:\PROGRA~1\COMMON~1\X10\Common\X10nets.exe C:\WINDOWS\ehome\mcrdsvc.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\wscntfy.exe . ************************************************************************** . Heure de fin: 2008-10-28 19:29:13 - La machine a redémarré ComboFix-quarantined-files.txt 2008-10-28 18:29:10 Avant-CF: 249 614 553 088 octets libres Après-CF: 249,048,584,192 octets libres 450 --- E O F --- 2008-10-25 12:13:51

odin · Answer

rapport : ComboFix 08-10-28.01 - PATTY 2008-10-28 19:04:44.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1530 [GMT 1:00] Lancé depuis: C:\Documents and Settings\PATTY\Bureau\ComboFix.exe * Un nouveau point de restauration a été créé . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Autorun.inf C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML C:\Documents and Settings\PATTY\Application Data\hidires C:\Documents and Settings\PATTY\Application Data\m C:\Documents and Settings\PATTY\Application Data\m\list.oct C:\Documents and Settings\PATTY\Application Data\m\shared\[Programmi.-.ITA].Sicurezza.AVG.6(antivirus).Spyware.e.SpyBot.AdAware.il.tutto.con.seriali.zip C:\Documents and Settings\PATTY\Application Data\m\shared\A Fantasy Journey Screensaver 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Aare AVI to VCD DVD SVCD MPEG Converter 6.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AbNote 1.7.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AbsolutePrivacy 2.02.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Access Password Recovery Master 1.0.0.5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AccessPatrol 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Active@ ISO File Manager 2.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\activePrinter 1.4.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Advanced MP3 Converter 2.63 [Patch].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Advanced Office Password Breaker 1.40 (KeyGen).zip C:\Documents and Settings\PATTY\Application Data\m\shared\AmIAScreenSaverOrNot 1.0.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Antiquity Riddles 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AnVir Virus Destroyer 3.7 [Serial].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Apdsoft Web Mailer 3.03.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Apex iPod Video Converter 4.19 With Crack.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ArcaMagica Packaging Templates 2.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ARulesXL 2.0.6.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ASPlayer 3.00f.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Atomic PST Password Recovery 1.60.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Atomic RAR Password Recovery 1.20 Patch.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AV Bros. Colorist 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AVG.AntivÃrus.7.0.322.em.portuguÃªs.+.Keygen.&.Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\AVG.AntiVirus.v7.1.371.Multilangages.Incl-Keygen.par.eMule-Paradise.com.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Banner Maker Pro 6.0.8.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Basenjinn Desktop Buddy 1.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Batch It! Ultra 3.978 KeyGen.zip C:\Documents and Settings\PATTY\Application Data\m\shared\BatchOutput 1.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Battlefield 1942 BiTurbo Mod.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Bay Area Diving RSS feed 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Big Faceless Report Generator 1.1.34.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Bigeye Network Manager 3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Birthdays 2.3 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Bitdefender.v8.Keygen.zip C:\Documents and Settings\PATTY\Application Data\m\shared\BpmChecker 3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\BRICKLETTER 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CarryDVD 4.5.0 Crack.zip C:\Documents and Settings\PATTY\Application Data\m\shared\celum IMAGINE 3.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CHP Incident Information 1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CoCoMiner 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ColorPickUp 1.1.0.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Command & Conquer Generals Train map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Coollector 1.13.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CTC 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\CTMailer 2.20.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Customized Windows Logon 1.0 (Key+Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\Dealership Director 3.01 Patch.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Deleted Digital Photo Pictures Retrieval 2.0.1.5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Dramatica Pro 4.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\DVD Base Lite 5.530.zip C:\Documents and Settings\PATTY\Application Data\m\shared\DVD to VCD AVI DivX Converter 3.2 build 069 Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\DVD X IMAGER 2.0.0.1 (Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\Dynomite 2.01.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Easy SMTP Server 2.7 [Key].zip C:\Documents and Settings\PATTY\Application Data\m\shared\EasyTVA V1.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Email Spy Pro 5.1.6.zip C:\Documents and Settings\PATTY\Application Data\m\shared\EnergySaver 2.31.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ESXManager 7.5.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Excel Password Recovery Key 6.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Exe Password 2004 7.114.zip C:\Documents and Settings\PATTY\Application Data\m\shared\F-Album 1.8.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Falling Icons 3D Screensaver 1.2 (Key+Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\FastChords 3.6 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\FileMenu 1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Flashback 1.5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Flippin' Switcheroo 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Folder Iconizer 1.4.zip C:\Documents and Settings\PATTY\Application Data\m\shared\FRS Clocks and Time 1.8 [KeyGen].zip C:\Documents and Settings\PATTY\Application Data\m\shared\GalleryView 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\GAMP Candy 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Generador2.0.Para.Actualizaciones.Del.Antivirus.Nod32.zip C:\Documents and Settings\PATTY\Application Data\m\shared\GetAnonymous Professional 2.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\GoToMeeting 3.0 [KeyGen].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Grass Roots 1.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Hadi Farsi Builder 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\HandyRec Professional 4.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\HD Workbench 1.1.31 Cracked.zip C:\Documents and Settings\PATTY\Application Data\m\shared\HidePro 0.5.1.70 (beta 3).zip C:\Documents and Settings\PATTY\Application Data\m\shared\High--Low 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\HotDog Junior 1.51.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Hours Manager 1.1 (Key+Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\HumanityThunder 3.1.1028 (Key).zip C:\Documents and Settings\PATTY\Application Data\m\shared\iDump 1.1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\IESnap 1.2 (Key+Serial).zip C:\Documents and Settings\PATTY\Application Data\m\shared\InsideCAT Lite Edition 4.00 [Key].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Insider 3.02 [Key+Serial].zip C:\Documents and Settings\PATTY\Application Data\m\shared\iPod Audio Studio 6.4.2 [With Crack].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Itookia Free Icon Set.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Jerrycan 6.28.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Keyspan USB Twin Serial Adapter Software 1.9.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Landscape 1.2.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Lemonade Tycoon 2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\LingvoSoft Dictionary 2007 German - French 4.0.22 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\LingvoSoft Suite 2006 Turkish-Russian for Windows 3.1.29.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Logic Builder - VBA Runtime Demo 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Lunar Colongitude 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MagiName 1.2 Build 30 Patch.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MasterBlaster Deluxe 2.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MCAFEE.ANTISPYWARE.V1.0.2005.zip C:\Documents and Settings\PATTY\Application Data\m\shared\McAfee.Internet.Security.Suite.V7.0.2005.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Medianet 1.0.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MonoCalendar 0.7.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Morovia Royal Mail RM4SCC Fontware 3.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MorphVOX 2.9.8.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MP3DJ Broadcast 3.7 (With Crack).zip C:\Documents and Settings\PATTY\Application Data\m\shared\MSDict Professional Dictionary Bundle (Symbian Series 80) 2.40.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Muon 1.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\MYquery Analyzer 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\N-Ball 2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Net Snippets Standard 3.3 [Key].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Network Traffic Generator and Monitor 1.7.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Nuclear Clock 2.24.zip C:\Documents and Settings\PATTY\Application Data\m\shared\OGM to AVI Converter 3.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\OpenOffice IFilter 1.2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PacRush 1.42.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Paint Shop Photo Album 5.01 (Crack).zip C:\Documents and Settings\PATTY\Application Data\m\shared\Paquet Builder 2.9.5.0 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Password generator 1.0 beta.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Password Inventory 1.1.0.2 (Key).zip C:\Documents and Settings\PATTY\Application Data\m\shared\PC-Com Basic 8.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PDF Conversion Series - PDF2TXT 1.1 build 1115.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PDF Security and Privacy Audit 2.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Perfect Day C:\Documents and Settings\PATTY\Application Data\m\shared\Phyllotaxis Screensaver 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PictMatch 2.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Pink Calendar and Day Planner 6.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Planetary Dreamscapes 1 1.0 [Serial].zip C:\Documents and Settings\PATTY\Application Data\m\shared\PM Master 2.8 [Crack].zip C:\Documents and Settings\PATTY\Application Data\m\shared\PopSurfer 1.1 (With Crack).zip C:\Documents and Settings\PATTY\Application Data\m\shared\Portals of Arnak 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Power Siphon 1.9.6.zip C:\Documents and Settings\PATTY\Application Data\m\shared\PowerPoint Slide Show Converter 2.3.0.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\ProcView32 2.01.zip C:\Documents and Settings\PATTY\Application Data\m\shared\QuidProQuo 1.04 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\r.a.d.ajax 1.62 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Radio Max toolbar for IE 4.5.129.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Rapid Backup Beta 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\RAR IFilter 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\RC Converter 2.0 [Cracked].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Remote Software Installation Utility 2007 Key+Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Renamer 5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\RGS-ADSLBoost 1.0.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\RSS Content Generator Enterprise 3.1.58 Serial.zip C:\Documents and Settings\PATTY\Application Data\m\shared\San Francisco 49ers screensaver.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Scenic Drive - Welsh Hills to Chestnut Hills 1.0 [Cracked].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Sense Remote Control 1.4.0.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Sfx-Factory 2.6.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Sideways Screensaver 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Slawdog Smart Shutdown 1.4.zip C:\Documents and Settings\PATTY\Application Data\m\shared\SmartFormFiller 5.1 With Crack.zip C:\Documents and Settings\PATTY\Application Data\m\shared\SMB iCRM 4.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Soft193 Password Manager 1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Softdiv Audio Converter 3.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Space War Online 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Spamihilator 0.9.9.31.zip C:\Documents and Settings\PATTY\Application Data\m\shared\SQLeonardo 2006.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Starlines INC 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\swBatchPrint 1.5.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Symantec.Norton.Antivirus.2007.Full.+.Symantec.Norton.Internet.Security.2007.Full.part1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\TestLAB 3.0.3 [Serial].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Text Converter 2.1.3.21.zip C:\Documents and Settings\PATTY\Application Data\m\shared\TextPad 5.0.3.zip C:\Documents and Settings\PATTY\Application Data\m\shared\The Business OpsCenter 3.5.0 KeyGen.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Thunder Batch 2.1.2 [Cracked].zip C:\Documents and Settings\PATTY\Application Data\m\shared\Titanium Checkbook 3.2 With Crack.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Trade Empires 1.01 patch.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Traffic Scotland Cameras 1.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Trojan Guarder 5.54.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Twinsen's Odyssey demo.zip C:\Documents and Settings\PATTY\Application Data\m\shared\uCertify PrepKit for test 70-300 8.02.5 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Unreal Tournament 2003 - Fire Pitt v1.1 deathmatch map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Unreal Tournament 2003 - Knallert45 deathmatch map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\UrVirtualDesktops 1.0.0.31.zip C:\Documents and Settings\PATTY\Application Data\m\shared\VAS Free System Tools 1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\VB Doodle 5.0.0.68.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Vegetarian Cookery 1.0 (With Crack).zip C:\Documents and Settings\PATTY\Application Data\m\shared\VerMan's Art Converter 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Visual Catalogues Lite 4.16.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Voice Tracker 1.3 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\VOKATOR 1.0.2 Key.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Volt 1.301.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Warcraft III - Lt. Bronx's Assault map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Warcraft III - The Death Sheep map.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Warhammer 40,000 Dawn of War The Canyon map 2.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\WGP FolderLock 2006 1.0.4 (Patch).zip C:\Documents and Settings\PATTY\Application Data\m\shared\When Clones Attack 1.04.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Wincry 1.6.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\WinLog Assist 2.1.zip C:\Documents and Settings\PATTY\Application Data\m\shared\WOA Custom Document Properties 1.0.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Woize 2.5.0.32959.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Word Password Recovery Key 8.0 build 2514.zip C:\Documents and Settings\PATTY\Application Data\m\shared\WordCaptureX 2.2 KeyGen.zip C:\Documents and Settings\PATTY\Application Data\m\shared\X-Copy Professional 1.6.50.zip C:\Documents and Settings\PATTY\Application Data\m\shared\YASA VOB to iPod Converter 4.0 Cracked.zip C:\Documents and Settings\PATTY\Application Data\m\shared\Zarafa Outlook Sharing 4.22 [Key+Serial].zip C:\Documents and Settings\PATTY\Application Data\m\srvlist.oct C:\Documents and Settings\PATTY\ravmonlog C:\resycled C:\resycled\boot.com C:\WINDOWS\cnsinfo.dat C:\WINDOWS\cookies.ini C:\WINDOWS\system32\_000009_.tmp.dll C:\WINDOWS\system32\fxtslgsw.ini C:\WINDOWS\system32\kdpuf.exe C:\WINDOWS\system32\mcrh.tmp C:\WINDOWS\system32\MSINET.oca C:\WINDOWS\system32\plpgbsvi.ini C:\WINDOWS\system32\RsDdcfii.ini C:\WINDOWS\system32\RsDdcfii.ini2 C:\xcrashdump.dat . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_BOONTY_GAMES -------\Legacy_CNSMINKP -------\Service_Boonty Games ((((((((((((((((((((((((((((( Fichiers créés du 2008-09-28 au 2008-10-28 )))))))))))))))))))))))))))))))))))) . 2008-10-28 18:27 . 2008-10-28 18:51 d-------- C:\Lop SD 2008-10-28 18:07 . 2008-10-28 18:24 d-------- C:\Program Files\Navilog1 2008-10-28 17:54 . 2008-10-28 17:54 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-10-28 17:54 . 2008-10-28 17:54 d-------- C:\Documents and Settings\PATTY\Application Data\Malwarebytes 2008-10-28 17:54 . 2008-10-28 17:54 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-10-28 17:54 . 2008-10-22 16:10 38,496 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-10-28 17:54 . 2008-10-22 16:10 15,504 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-10-28 16:27 . 2008-10-28 16:33 d-------- C:\Program Files\TuneUp Utilities 2008 2008-10-28 16:27 . 2008-10-28 16:27 d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-10-28 16:27 . 2008-10-28 16:27 355,584 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-10-28 16:27 . 2008-05-29 09:28 28,416 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-10-28 16:11 . 2008-10-28 16:11 d-------- C:\Program Files\Zylom Games2 2008-10-28 13:43 . 2008-10-28 13:43 d-------- C:\Documents and Settings\PATTY\Application Data\ESET 2008-10-28 13:27 . 2008-10-28 13:27 d-------- C:\Program Files\ESET 2008-10-28 13:27 . 2008-10-28 13:27 d-------- C:\Documents and Settings\All Users\Application Data\ESET 2008-10-28 13:07 . 2008-10-28 13:07 144 --a------ C:\WINDOWS\wininit.ini 2008-10-27 22:40 . 2008-10-27 22:40 d-------- C:\VundoFix Backups 2008-10-27 22:36 . 2008-10-27 22:37 d-------- C:\rsit 2008-10-27 22:36 . 2008-10-27 22:37 d-------- C:\Program Files\trend micro 2008-10-26 16:41 . 2008-10-26 16:41 d-------- C:\Program Files\Yahoo! 2008-10-26 16:41 . 2008-10-26 16:42 d-------- C:\Program Files\CCleaner 2008-10-24 06:59 . 2008-10-15 17:35 337,408 --------- C:\WINDOWS\system32\dllcache\netapi32.dll 2008-10-23 14:46 . 2008-10-23 14:46 d-------- C:\Program Files\SmartShopper 2008-10-23 14:46 . 2008-10-27 14:49 d-------- C:\Documents and Settings\PATTY\Application Data\SmartShopper 2008-10-23 14:46 . 2008-10-23 14:46 0 --a------ C:\WINDOWS\_MSI5166._IS 2008-10-22 15:51 . 2006-11-13 14:30 106,496 --a------ C:\WINDOWS\system32\ssPlantasia.scr 2008-10-22 13:16 . 2008-10-22 13:16 d-------- C:\Program Files\DD PlayCam 2008-10-22 13:15 . 2008-10-22 13:15 d-------- C:\Program Files\Fichiers communs\Look312P 2008-10-22 13:15 . 2004-03-19 17:11 90,968 --a------ C:\WINDOWS\system32\drivers\usbVM31b.sys 2008-10-22 13:15 . 2003-05-15 16:17 61,440 --a------ C:\WINDOWS\system32\VM31bSTI.dll 2008-10-21 23:44 . 2008-10-22 18:40 d-------- C:\WINDOWS\Album 2008-10-21 23:43 . 2008-10-22 22:52 d-------- C:\Program Files\Look 312P 2008-10-21 23:43 . 2005-06-27 17:24 184,392 --------- C:\WINDOWS\system32\VM31bPrp.Ax 2008-10-21 23:32 . 2008-04-13 19:45 60,032 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys 2008-10-21 23:32 . 2008-04-13 19:45 60,032 --a------ C:\WINDOWS\system32\dllcache\usbaudio.sys 2008-10-16 21:13 . 2008-08-14 14:23 2,191,232 --------- C:\WINDOWS\system32\dllcache\ntoskrnl.exe 2008-10-16 21:13 . 2008-08-14 14:23 2,147,328 --------- C:\WINDOWS\system32\dllcache\ntkrnlmp.exe 2008-10-16 21:13 . 2008-08-14 14:23 2,068,096 --------- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe 2008-10-16 21:13 . 2008-08-14 14:23 2,025,984 --------- C:\WINDOWS\system32\dllcache\ntkrpamp.exe 2008-10-16 13:01 . 2008-09-15 16:26 1,846,528 --------- C:\WINDOWS\system32\dllcache\win32k.sys 2008-10-16 12:15 . 2008-09-08 11:41 333,824 --------- C:\WINDOWS\system32\dllcache\srv.sys 2008-10-14 23:51 . 2008-10-14 23:51 d-------- C:\Documents and Settings\PATTY\Application Data\GamesCafe 2008-10-10 23:21 . 2008-10-19 19:58 d-------- C:\Documents and Settings\PATTY\Application Data\Shopping Blocks 2008-10-04 13:51 . 2008-10-04 13:51 d-------- C:\Program Files\Eidos 2008-10-04 09:20 . 2008-10-04 09:20 d-------- C:\Documents and Settings\PATTY\Application Data\Anuman Interactive . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-28 16:31 --------- d-----w C:\Program Files\Zylom Games 2008-10-28 16:21 --------- d-----w C:\Documents and Settings\PATTY\Application Data\Zylom 2008-10-28 15:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-10-28 13:19 --------- d-----w C:\Program Files\Spybot - Search & Destroy 2008-10-28 12:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-10-28 01:35 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared 2008-10-28 01:34 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-10-28 01:34 --------- d-----w C:\Documents and Settings\PATTY\Application Data\EoRezo 2008-10-28 00:27 --------- d-----w C:\Program Files\EoRezo 2008-10-27 21:23 --------- d-----w C:\Program Files\WiPen 2008-10-27 21:11 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-10-26 20:19 --------- d-----w C:\Program Files\eMule 2008-10-23 15:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\MythPeople 2008-10-05 12:25 --------- d-----w C:\Program Files\GameSpy Arcade 2008-10-04 21:05 --------- d-----w C:\Documents and Settings\PATTY\Application Data\PlayFirst 2008-10-04 20:11 --------- d-----w C:\Program Files\Ubisoft 2008-10-04 20:11 --------- d-----w C:\Program Files\Codemasters 2008-10-04 20:11 --------- d-----w C:\Program Files\Anuman Interactive 2008-10-04 08:26 278,984 ----a-w C:\WINDOWS\system32\drivers\atksgt.sys 2008-09-25 10:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\GameHouse 2008-09-23 21:49 --------- d-----w C:\Documents and Settings\PATTY\Application Data\Playrix Entertainment 2008-09-19 12:07 18,048 ----a-w C:\WINDOWS\system32\drivers\lirsgt.sys 2008-09-17 12:26 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sandlot Games 2008-09-12 23:25 --------- d-----w C:\Documents and Settings\All Users\Application Data\POPWWPROFILES 2008-09-12 07:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Gogii 2008-09-11 20:54 --------- d-----w C:\Documents and Settings\PATTY\Application Data\SPAMfighter 2008-09-08 10:41 333,824 ----a-w C:\WINDOWS\system32\drivers\srv.sys 2008-09-07 12:01 --------- d-----w C:\Program Files\Maxis 2008-09-07 11:08 --------- d-----w C:\Program Files\MSN Messenger 2008-09-04 11:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\MumboJumbo 2008-09-02 09:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\PlayFirst 2008-04-01 16:46 212,368 ----a-w C:\Documents and Settings\PATTY\Application Data\GDIPFONTCACHEV1.DAT 2007-04-25 14:08 774,144 ----a-w C:\Program Files\RngInterstitial.dll 2003-03-21 11:37 16,056 ----a-w C:\Program Files\owcstp16.dll . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SmpcSys"="C:\APPS\SMP\SmpSys.exe" [2005-11-17 975360] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-09 68856] "AnumanLive"="C:\Documents and Settings\PATTY\Application Data\Anuman Interactive\AnumanLive\AnumanLive.exe" [2008-07-01 347648] "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "egui"="C:\Program Files\ESET\ESET Smart Security\egui.exe" [2007-10-25 1410304] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 7700480] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360] C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\ FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440] C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\ FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440] C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\ FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "vidc.iv31"= C:\WINDOWS\system32\ir32_32.dll "vidc.iv32"= C:\WINDOWS\system32\ir32_32.dll "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm "msacm.mpegacm"= mpegacm.acm "msacm.ulmp3acm"= ulmp3acm.acm [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Authentication Packages REG_MULTI_SZ msv1_0 nwprovau [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe"= "C:\WINDOWS\system32\mmc.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "C:\Program Files\LimeWire\LimeWire.exe"= "C:\WINDOWS\system32\sessmgr.exe"= "C:\Program Files\eMule\emule.exe"= "C:\Program Files\GameSpy Arcade\Aphex.exe"= "%windir%\system32\sessmgr.exe"= "C:\Program Files\MSN Messenger\msnmsgr.exe"= "C:\Program Files\MSN Messenger\livecall.exe"= "C:\WINDOWS\system32\dpvsetup.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009 "13789:TCP"= 13789:TCP:NortonAV "16158:TCP"= 16158:TCP:NortonAV "16502:TCP"= 16502:TCP:NortonAV "16499:TCP"= 16499:TCP:NortonAV "15187:TCP"= 15187:TCP:NortonAV "56586:TCP"= 56586:TCP:Pando P2P TCP Listening Port "56586:UDP"= 56586:UDP:Pando P2P UDP Listening Port R2 ithsgt;ithsgt;C:\WINDOWS\system32\DRIVERS\ithsgt.sys [2007-02-10 162432] R2 lilsgt;lilsgt;C:\WINDOWS\system32\DRIVERS\lilsgt.sys [2007-02-10 12032] R2 NwSapAgent;Agent SAP;C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] R2 SrvCDEject;SrvCDEject;C:\Program Files\Packard Bell\SrvCDEject.exe [2006-07-25 613376] R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2008-04-14 14336] R3 3xHybrid;ASUSTek SAA713x PCI Card;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2006-04-28 882688] R3 RTSTOR;USB Mass Stroage Device;C:\WINDOWS\system32\drivers\RTSTOR.SYS [2005-12-21 20096] R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 7040] S2 AbyssWebServer;Abyss Web Server;F:\abyssws.exe [ ] S3 DIGIRPS;Pilote PortServer Digi;C:\WINDOWS\system32\DRIVERS\digirlpt.sys [2001-08-23 42656] S3 gAGP440p;gAGP440p;C:\DOCUME~1\PATTY\LOCALS~1\Temp\gAGP440p.sys [ ] S3 MBAMSwissArmy;MBAMSwissArmy;C:\WINDOWS\system32\drivers\mbamswissarmy.sys [2008-10-22 38496] S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2004-05-17 17536] S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-10-28 355584] S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8b7aeaa1-6abb-11dd-8174-00038a000015}] \Shell\AutoRun\command - F:\Setup.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a5e536d2-4688-11dc-bfed-00038a000015}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe \Shell\Open(&0)\command - Recycled\ctfmon.exe . Contenu du dossier 'Tâches planifiées' 2008-10-28 C:\WINDOWS\Tasks\Maintenance en 1 clic.job - C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe [2008-06-20 09:23] . - - - - ORPHELINS SUPPRIMES - - - - BHO-{32341E7E-C319-46DE-91D0-E30BB1A3CABA} - (no file) BHO-{6A511CCC-E0F0-4A27-A70A-664C11A4F999} - (no file) HKLM-Run-C:\WINDOWS\system32\kdpuf.exe - C:\WINDOWS\system32\kdpuf.exe Notify-__c008EED6 - C:\WINDOWS\system32\__c008EED6.dat Notify-cbXooMcY - cbXooMcY.dll . ------- Examen supplémentaire ------- . R0 -: HKCU-Main,Start Page = hxxp://www.lo.st R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/search?q=%s O8 -: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 -: {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - {BCEB373D-A35A-4200-BD43-8586CD9DFAE7} - O16 -: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} - hxxp://zylom.king.com/ctl/kingcomie.cab C:\WINDOWS\Downloaded Program Files\KingComIE.inf C:\WINDOWS\KingComIE.dll O16 -: {48DF87EE-F2DE-11D8-BE7F-302050C10811} - hxxp://www.flysuite.com/flyword/loaderword_win_fr.cab C:\WINDOWS\Downloaded Program Files\FlyLoader.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-10-28 19:20:32 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\WINDOWS\ehome\ehrecvr.exe C:\WINDOWS\ehome\ehSched.exe C:\Program Files\ESET\ESET Smart Security\ekrn.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe C:\PROGRA~1\COMMON~1\X10\Common\X10nets.exe C:\WINDOWS\ehome\mcrdsvc.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\wscntfy.exe . ************************************************************************** . Heure de fin: 2008-10-28 19:29:13 - La machine a redémarré ComboFix-quarantined-files.txt 2008-10-28 18:29:10 Avant-CF: 249 614 553 088 octets libres Après-CF: 249,048,584,192 octets libres 450 --- E O F --- 2008-10-25 12:13:51

odin · Answer

euh dsl j'ai pas fait gaffe, j'ai envoyer 3 fois le mm rapport....

odin · Answer

quelqu'un peut continuer ce poste svp?

odin · Answer

s'il vous plais, le membre qui s'occupait de moi est parti, pouvez vous le relayer svp

odin · Answer

svp...

odin · Answer

Quelqu'un peut me dire ce que je dis faire après combofix s'il vous plais

Psycotix · Answer

à l'aide svp, HELP

Psycotix · Answer

S'IL VOUS PLAIT

Psycotix · Answer

qu'est ce que je dois faire ensuite?

Psycotix · Answer

bon j'ai contacter un de tes collègue chiquetine, il m'a conseillé de faire avancer le poste avec un rapport hijack
donc en voila un:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:37:19, on 28/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\APPS\SMP\SmpSys.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Documents and Settings\PATTY\Application Data\Anuman Interactive\AnumanLive\AnumanLive.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Packard Bell\SrvCDEject.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\explorer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Documents and Settings\PATTY\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lo.st
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [AnumanLive] C:\Documents and Settings\PATTY\Application Data\Anuman Interactive\AnumanLive\AnumanLive.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: FreeBot.lnk = C:\Program Files\FreeBot\freebot.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: FreeBot.lnk = C:\Program Files\FreeBot\freebot.exe (User 'Default user')
O4 - Startup: FreeBot.lnk = C:\Program Files\FreeBot\freebot.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: SmartShopper - Compare travel rates - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} (king.com) - https://www.king.com/
O16 - DPF: {48DF87EE-F2DE-11D8-BE7F-302050C10811} (FlyLoader Class) - http://www.flysuite.com/flyword/loaderword_win_fr.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Abyss Web Server (AbyssWebServer) - Unknown owner - F:\abyssws.exe (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: SrvCDEject - Unknown owner - C:\Program Files\Packard Bell\SrvCDEject.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
O24 - Desktop Component 0: (no name) - https://image.jeuxvideo.com/pics/logo1.gif

Psycotix · Answer

moi je m'en vais donc c'est ma soeur qui prend le relai alors essay de détailer un peut plus les explications voila a+ et merci

ric025 · Answer

Il faut patienter. Le rapport que tu lui a envoyé------->>>COMBOFIX nécessite une grande prudence et il est long à analyser. Il faut prendre ton mal en patience! Chiquitine ne laissera pas tomber. Tu peux compter sur elle. Tu auras une réponse sous peu!!! N'envoie pas de MP à tout le monde pour prendre la suite....cela ne sert à rien!

De plus, les helpeurs, tout comme toi je suppose ont une vie privée.

Ca va arriver, pas de panique! A++ :))

Bonne chance et bonne continuation.

Utilisateur anonyme · Answer

re désolé


Telecharge UsbFix sur ton bureau

--> Lance l installation avec les parametres par default

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

--> Double clic sur le raccourci UsbFix sur ton bureau

--> Le pc va redémarer

-->Apres redémarrage post le rapport UsbFix.txt 

Note : le rapport UsbFix.txt est sauvegardé a la racine du disque

pat · Answer

-------------- UsbFix V2.395 ---------------

* User : PATTY - 121888950314
* Outils mis a jours le 01/11/2008 par Chiquitine29 et Chimay8
* Recherche effectuée à 14:12:11 le 03/11/2008
* Windows Xp - Internet Explorer 7.0.5730.11 
  
  
--------------- [ Processus actifs ] ----------------   
  
 
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\userinit.exe
C:\DOCUME~1\PATTY\LOCALS~1\Temp\1.tmp\b2e.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\eHome\ehRec.exe
C:\Program Files\Packard Bell\SrvCDEject.exe
  
--------------- [ Informations lecteurs ] ----------------   
  
C: - Lecteur fixe

  
--------------- [ Registre / Startup ] ----------------   
 

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    NvCplDaemon	REG_SZ	RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    TkBellExe	REG_SZ	"C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
    AVP	REG_SZ	"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\avp6_post_uninstall

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    SmpcSys	REG_SZ	C:\APPS\SMP\SmpSys.exe
    ctfmon.exe	REG_SZ	C:\WINDOWS\system32\ctfmon.exe
    swg	REG_SZ	C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
  
--------------- [ Registre / Mountpoint2 ] ----------------   
  
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8b7aeaa1-6abb-11dd-8174-00038a000015}\Shell\AutoRun\command  
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a5e536d2-4688-11dc-bfed-00038a000015}\Shell\AutoRun\command  
  
--------------- [ Nettoyage des disques ] ----------------   
   
  
--------------- [ Listing des fichiers présents ] ----------------   
  
 -> /!\ Le resultat doit etre interprété par un spécialiste  /!\   
  
[10/08/2004 14:00][--ah-----] C:\NTDETECT.COM   
[09/05/2007 21:16][--ah-----] C:\Google Updater.exe   
[09/05/2007 21:16][--ah-----] C:\UNWISE.EXE   
[12/02/2007 13:51][--ahs----] C:\BOOT.INI   
 
--------------- ! Fin du rapport ! ----------------

Utilisateur anonyme · Answer

Telecharge malwarebytes 

Tu l´instale; le programme va se mettre automatiquement a jour. 

Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression". 

Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet". 

Puis click sur "rechercher". 

Laisse le scanner le pc... 

Si des elements on ete trouvés > click sur supprimer la selection. 

si il t´es demandé de redemarrer > click sur "yes". 

A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum. 

Copie et colle le rapport stp.

PS : les rapport sont aussi rangé dans l onglet rapport/log

pat · Answer

Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1358
Windows 5.1.2600 Service Pack 3

03/11/2008 16:44:22
mbam-log-2008-11-03 (16-44-13).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 245736
Temps écoulé: 1 hour(s), 12 minute(s), 29 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 5
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{32341e7e-c319-46de-91d0-e30bb1a3caba} (Trojan.Vundo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{32341e7e-c319-46de-91d0-e30bb1a3caba} (Trojan.Vundo) -> No action taken.
HKEY_CLASSES_ROOT\sexvid (Trojan.DNSChanger) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\__c008eed6 (Trojan.Vundo) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\ (Trojan.Vundo) -> No action taken.
C:\Program Files\EoRezo (Rogue.Eorezo) -> No action taken.

Utilisateur anonyme · Answer

No action taken

tu as supprimé la selection ?

pat · Answer

oui

Utilisateur anonyme · Answer

Réouvre malewarebyte
va sur quarantaine
supprime tout

Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :


/!\ Déconnectes toi et fermes toutes applications en cours

&#9679; Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files ) 
&#9679; Double clique sur l'icône Ad-removersituée sur ton bureau 
&#9679; Au menu principal choisi l'option "A"
&#9679; Postes le rapport qui apparait à la fin . 

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log ) 

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) 

Note :

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

pat · Answer

F --------- Logfile of AD-Remover 1.0.2.1 by C_XX ---------    

START at: 17:06:38 | 03/11/2008 
ON: Microsoft Windows XP [version 5.1.2600] ( Windows XP ) 
OPTION: Scan
EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
USER: PATTY | PC: 121888950314
BOOT MODE: Normal  
DRIVE(S): C:\ 
 
--------- [ PROCESSES ] ---------

 C:\WINDOWS\System32\smss.exe  
 C:\WINDOWS\system32\winlogon.exe  
 C:\WINDOWS\system32\services.exe  
 C:\WINDOWS\system32\lsass.exe  
 C:\WINDOWS\system32\svchost.exe  
 C:\WINDOWS\System32\svchost.exe  
 C:\WINDOWS\system32\svchost.exe  
 C:\WINDOWS\system32\spoolsv.exe  
 C:\Program Files\AlienGUIse\wbload.exe  
 C:\WINDOWS\Explorer.EXE  
 C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe  
 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe  
 C:\APPS\SMP\SmpSys.exe  
 C:\WINDOWS\system32\ctfmon.exe  
 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe  
 C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe  
 C:\Program Files\FreeBot\freebot.exe  
 C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe  
 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe  
 C:\WINDOWS\eHome\ehRecvr.exe  
 C:\WINDOWS\eHome\ehSched.exe  
 C:\WINDOWS\system32
vsvc32.exe  
 C:\Program Files\Packard Bell\SrvCDEject.exe  
 C:\WINDOWS\system32\svchost.exe  
 C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe  
 C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe  
 C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe  
 C:\WINDOWS\system32\dllhost.exe  
 C:\Program Files\MSN Messenger\msnmsgr.exe  
 C:\WINDOWS\system32\cmd.exe  
 C:\WINDOWS\System32\WScript.exe  
 
---------------------------- [ 31 ] 
 

+---------------------------------------------------------------------------+
+-------------------------------  CHECKING SERVICES
+---------------------------------------------------------------------------+ 


+---------------------------------------------------------------------------+
+-------------------------------  REGISTRY  
+---------------------------------------------------------------------------+ 

FOUND - "HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo" 
FOUND - "HKEY_LOCAL_MACHINE\Software\Boonty" 
FOUND - "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1" 
FOUND - "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}" 
FOUND - "HKEY_LOCAL_MACHINE\Software\Classes\boontybox" 
FOUND - "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Boonty Games" 
FOUND - "HKEY_CURRENT_USER\SOFTWARE\EoRezo" 
FOUND - "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}" 
FOUND - "HKEY_CLASSES_ROOT\boontybox" 
FOUND - "HKEY_CLASSES_ROOT\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}" 
FOUND - "HKEY_CLASSES_ROOT\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}" 

+---------------------------------------------------------------------------+
+-------------------------------  FILES\FOLDERS  
+---------------------------------------------------------------------------+ 

FOUND - [29/10/2008 02:53|d--------] C:\Program Files\EoRezo 
FOUND - [27/08/2007 07:38|d--------] C:\Program Files\Boonty 
FOUND - [23/05/2007 00:16|d--------] C:\Program Files\BoontyGames 
FOUND - [08/06/2008 16:19|d--------] C:\Program Files\Fichiers communs\BOONTY Shared 
FOUND - [28/10/2008 02:34|d--------] C:\Documents and Settings\PATTY\Application Data\EoRezo 
FOUND - [22/05/2007 21:52|d--------] C:\Documents and Settings\All Users\Application Data\BOONTY 

+---- Temp files found.. ( Elements found aren't necessarily harmful )

FOUND - [31/10/2008 01:33|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\.zylomisrtemp1225413188 
FOUND - [29/10/2008 18:10|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\.zylomtemp1225300252funpass 
FOUND - [31/10/2008 23:32|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\.zylomtemp1225492350 
FOUND - [01/11/2008 19:46|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\.zylomtemp1225565188 
FOUND - [29/10/2008 16:59|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\100Ewrd.~lk 
FOUND - [03/11/2008 16:53|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\100Fwrd.~lk 
FOUND - [01/11/2008 12:16|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\1011wrd.~lk 
FOUND - [02/11/2008 00:19|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\1012wrd.~lk 
FOUND - [01/11/2008 00:40|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\1013wrd.~lk 
FOUND - [02/11/2008 11:59|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\1015wrd.~lk 
FOUND - [29/10/2008 04:21|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\1019wrd.~lk 
FOUND - [29/10/2008 14:42|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\101Awrd.~lk 
FOUND - [29/10/2008 15:43|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\101Bwrd.~lk 
FOUND - [29/10/2008 02:48|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\1048wrd.~lk 
FOUND - [29/10/2008 11:32|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\2022wrd.~lk 
FOUND - [29/10/2008 05:21|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\6025wrd.~lk 
FOUND - [29/10/2008 05:20|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\9013wrd.~lk 
FOUND - [02/11/2008 00:48|--a------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\AC41.tmp 
FOUND - [29/10/2008 16:50|--a------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\caevents.log 
FOUND - [29/10/2008 05:05|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\D016wrd.~lk 
FOUND - [29/10/2008 16:42|--a------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\dd_netfx20UI7532.txt 
FOUND - [29/10/2008 01:28|--a------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\drm_dialogs.dll 
FOUND - [29/10/2008 02:48|--a------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\e1ce_appcompat.txt 
FOUND - [03/11/2008 14:08|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\EB.tmp 
FOUND - [03/11/2008 14:08|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\EC.tmp 
FOUND - [03/11/2008 14:08|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\ED.tmp 
FOUND - [01/11/2008 00:38|--ah---t-] C:\DOCUME~1\PATTY\LOCALS~1\Temp\etilqs_6fmGiZXKsl9tnLHqPkzj 
FOUND - [29/10/2008 14:19|--ah---t-] C:\DOCUME~1\PATTY\LOCALS~1\Temp\etilqs_MycXclflrODEMCfgp0u3 
FOUND - [29/10/2008 02:05|--a------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\GLB2794.tmp 
FOUND - [29/10/2008 13:16|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\Google Toolbar 
FOUND - [29/10/2008 23:40|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\hsperfdata_PATTY 
FOUND - [29/10/2008 23:34|--a------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\java_install_reg.log

Utilisateur anonyme · Answer

! Déconnectes toi et fermes toutes applications en cours ! 

* Relances "Ad-remover" : au menu principal choisi l'option "B" . 

--> le programme va travailler ... 

* Postes le rapport qui apparait à la fin + un nouvel Hijackthis pour analyse ... 

( le rapport est sauvegardé aussi sous C:\Ad-report.log ) 

/!\ Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides) /!\

pat · Answer

F --------- Logfile of AD-Remover 1.0.2.1 by C_XX ---------    

START at: 17:22:41 | 03/11/2008 
ON: Microsoft Windows XP [version 5.1.2600] ( Windows XP )
OPTION: Clean
EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
USER: PATTY | PC: 121888950314
BOOT MODE: Normal  
DRIVE(S): C:\ 
 
 
--------- [ PROCESSES ] ---------

 C:\WINDOWS\System32\smss.exe  
 C:\WINDOWS\system32\winlogon.exe  
 C:\WINDOWS\system32\services.exe  
 C:\WINDOWS\system32\lsass.exe  
 C:\WINDOWS\system32\svchost.exe  
 C:\WINDOWS\System32\svchost.exe  
 C:\WINDOWS\system32\svchost.exe  
 C:\WINDOWS\system32\spoolsv.exe  
 C:\Program Files\AlienGUIse\wbload.exe  
 C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe  
 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe  
 C:\APPS\SMP\SmpSys.exe  
 C:\WINDOWS\system32\ctfmon.exe  
 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe  
 C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe  
 C:\Program Files\FreeBot\freebot.exe  
 C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe  
 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe  
 C:\WINDOWS\eHome\ehRecvr.exe  
 C:\WINDOWS\eHome\ehSched.exe  
 C:\WINDOWS\system32
vsvc32.exe  
 C:\Program Files\Packard Bell\SrvCDEject.exe  
 C:\WINDOWS\system32\svchost.exe  
 C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe  
 C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe  
 C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe  
 C:\WINDOWS\system32\dllhost.exe  
 C:\WINDOWS\system32\cmd.exe  
 C:\WINDOWS\System32\WScript.exe  
 
---------------------------- [ 29 ] 
 

+---------------------------------------------------------------------------+
+-------------------------------  CHECKING SERVICES
+---------------------------------------------------------------------------+ 


+---------------------------------------------------------------------------+
+-------------------------------  REGISTRY  
+---------------------------------------------------------------------------+ 

DELETED - "HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo"
DELETED - "HKEY_LOCAL_MACHINE\Software\Boonty"
DELETED - "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1"
DELETED - "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}"
DELETED - "HKEY_LOCAL_MACHINE\Software\Classes\boontybox"
DELETED - "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Boonty Games"
DELETED - "HKEY_CURRENT_USER\SOFTWARE\EoRezo"
DELETED - "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}"
DELETED - "HKEY_CLASSES_ROOT\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}"
DELETED - "HKEY_CLASSES_ROOT\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}"

+---------------------------------------------------------------------------+
+-------------------------------  FILES\FOLDERS  
+---------------------------------------------------------------------------+ 

DELETED - [29/10/2008 02:53|d--------] C:\Program Files\EoRezo  
DELETED - [27/08/2007 07:38|d--------] C:\Program Files\Boonty  
DELETED - [23/05/2007 00:16|d--------] C:\Program Files\BoontyGames  
DELETED - [08/06/2008 16:19|d--------] C:\Program Files\Fichiers communs\BOONTY Shared  
DELETED - [28/10/2008 02:34|d--------] C:\Documents and Settings\PATTY\Application Data\EoRezo  
DELETED - [22/05/2007 21:52|d--------] C:\Documents and Settings\All Users\Application Data\BOONTY  

+---- Temp files deleted.. ( Elements deleted was not necessarily harmful )

DELETED - [31/10/2008 01:33|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\.zylomisrtemp1225413188  
DELETED - [29/10/2008 18:10|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\.zylomtemp1225300252funpass  
DELETED - [31/10/2008 23:32|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\.zylomtemp1225492350  
DELETED - [01/11/2008 19:46|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\.zylomtemp1225565188  
DELETED - [29/10/2008 16:59|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\100Ewrd.~lk  
/!\ - [03/11/2008 17:26|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\100Fwrd.~lk  
DELETED - [01/11/2008 12:16|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\1011wrd.~lk  
DELETED - [02/11/2008 00:19|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\1012wrd.~lk  
DELETED - [01/11/2008 00:40|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\1013wrd.~lk  
DELETED - [02/11/2008 11:59|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\1015wrd.~lk  
DELETED - [29/10/2008 04:21|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\1019wrd.~lk  
DELETED - [29/10/2008 14:42|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\101Awrd.~lk  
DELETED - [29/10/2008 15:43|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\101Bwrd.~lk  
DELETED - [29/10/2008 02:48|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\1048wrd.~lk  
DELETED - [29/10/2008 11:32|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\2022wrd.~lk  
DELETED - [29/10/2008 05:21|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\6025wrd.~lk  
DELETED - [29/10/2008 05:20|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\9013wrd.~lk  
DELETED - [02/11/2008 00:48|--a------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\AC41.tmp  
DELETED - [29/10/2008 16:50|--a------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\caevents.log  
DELETED - [29/10/2008 05:05|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\D016wrd.~lk  
DELETED - [29/10/2008 16:42|--a------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\dd_netfx20UI7532.txt  
DELETED - [29/10/2008 01:28|--a------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\drm_dialogs.dll  
DELETED - [29/10/2008 02:48|--a------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\e1ce_appcompat.txt  
DELETED - [03/11/2008 14:08|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\EB.tmp  
DELETED - [03/11/2008 14:08|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\EC.tmp  
DELETED - [03/11/2008 14:08|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\ED.tmp  
DELETED - [01/11/2008 00:38|--ah---t-] C:\DOCUME~1\PATTY\LOCALS~1\Temp\etilqs_6fmGiZXKsl9tnLHqPkzj  
DELETED - [29/10/2008 14:19|--ah---t-] C:\DOCUME~1\PATTY\LOCALS~1\Temp\etilqs_MycXclflrODEMCfgp0u3  
DELETED - [29/10/2008 02:05|--a------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\GLB2794.tmp  
DELETED - [29/10/2008 13:16|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\Google Toolbar  
DELETED - [29/10/2008 23:40|d--------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\hsperfdata_PATTY  
DELETED - [29/10/2008 23:34|--a------] C:\DOCUME~1\PATTY\LOCALS~1\Temp\java_install_reg.log

Utilisateur anonyme · Answer

refais un scan hijackthis et post le rapport stp

schummy · Answer

peut eus svp me rendre service pour supprimer lse pubs en te remerciant paravance de ta gentillesse

Enlever la publicité

46 réponses

Discussions similaires

Newsletters