nateco

Salut Charles, Je te remercie beaucoup pour ton aide. Le scann Kaspersky est OK @++++

bonjour, explorer.old -> je ne le trouve pas. Sinon le PC fonctionne très bien. Tu n'as pas répondu à ma question : " Peux ton cacher les infos des logiciels dispo sur mon PC dans les premiers postes, ça serrait super cool et là il n'y a plus d'utilité de les laisser postées! merci " @+++ David

Le rapport d'Antivir : AntiVir PersonalEdition Classic Report file date: dimanche 4 novembre 2007 19:56 Scanning for 914349 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: SYSTEM Computer name: Z6PO Version information: BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29 AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51 LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47 LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15 ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 14:26:55 ANTIVIR2.VDF : 7.0.0.140 940544 Bytes 26/10/2007 18:16:57 ANTIVIR3.VDF : 7.0.0.166 137728 Bytes 04/11/2007 18:36:35 AVEWIN32.DLL : 7.6.0.30 3056128 Bytes 03/11/2007 18:16:59 AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26 AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17 AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24 AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 08:46:00 AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06 AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18 NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13 RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37 SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: off Scan boot sector.................: on Boot sectors.....................: D:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: All files Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox, Macro heuristic..................: on File heuristic...................: medium Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR, Start of the scan: dimanche 4 novembre 2007 19:56 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'firefox.exe' - '1' Module(s) have been scanned Scan process 'thunderbird.exe' - '1' Module(s) have been scanned Scan process 'usnsvc.exe' - '1' Module(s) have been scanned Scan process 'skypePM.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'rapimgr.exe' - '1' Module(s) have been scanned Scan process 'mdm.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'wcescomm.exe' - '1' Module(s) have been scanned Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned Scan process 'Skype.exe' - '1' Module(s) have been scanned Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'zlclient.exe' - '0' Module(s) have been scanned Scan process 'TomTomHOME.exe' - '1' Module(s) have been scanned Scan process 'realsched.exe' - '1' Module(s) have been scanned Scan process 'winampa.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'vsmon.exe' - '0' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 33 processes with 33 modules were scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Boot sector 'D:\' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( '24' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! C:\System Volume Information\_restore{37D16EA9-7A05-4257-8F54-AAAA58BDF3D9}\RP343\A0077346.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.1 [iNFO] The file was moved to '475e2b3f.qua'! C:\System Volume Information\_restore{37D16EA9-7A05-4257-8F54-AAAA58BDF3D9}\RP344\A0077352.dll [DETECTION] Is the Trojan horse TR/Vundo.Gen [iNFO] The file was moved to '475e2b41.qua'! C:\System Volume Information\_restore{37D16EA9-7A05-4257-8F54-AAAA58BDF3D9}\RP344\A0077353.dll [DETECTION] Is the Trojan horse TR/Dldr.Agen.ZV.1.B [iNFO] The file was moved to '4622863a.qua'! C:\System Volume Information\_restore{37D16EA9-7A05-4257-8F54-AAAA58BDF3D9}\RP345\A0077830.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.1 [iNFO] The file was moved to '475e2b51.qua'! C:\System Volume Information\_restore{37D16EA9-7A05-4257-8F54-AAAA58BDF3D9}\RP346\A0077948.exe [DETECTION] Contains detection pattern of the application APPL/Webmediaplay.J [iNFO] The file was moved to '475e2b57.qua'! C:\System Volume Information\_restore{37D16EA9-7A05-4257-8F54-AAAA58BDF3D9}\RP346\A0078133.exe [0] Archive type: RAR SFX (self extracting) --> nircmd.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.1 --> nircmd.cfexe [DETECTION] Contains detection pattern of the application APPL/NirCmd.1 [iNFO] The file was moved to '475e2b60.qua'! C:\System Volume Information\_restore{37D16EA9-7A05-4257-8F54-AAAA58BDF3D9}\RP347\A0081233.EXE [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen [iNFO] The file was moved to '475e2b65.qua'! C:\System Volume Information\_restore{37D16EA9-7A05-4257-8F54-AAAA58BDF3D9}\RP347\A0081234.dll [DETECTION] Is the Trojan horse TR/Agent.bux.1 [iNFO] The file was moved to '4622861e.qua'! C:\System Volume Information\_restore{37D16EA9-7A05-4257-8F54-AAAA58BDF3D9}\RP347\A0081235.dll [DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738 [iNFO] The file was moved to '475e2b66.qua'! C:\System Volume Information\_restore{37D16EA9-7A05-4257-8F54-AAAA58BDF3D9}\RP347\A0081236.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.1 [iNFO] The file was moved to '4622861f.qua'! C:\WINDOWS\explorer.old [DETECTION] Contains code of the Windows virus W32/Virut.Gen [iNFO] The file was moved to '479e2bc1.qua'! Begin scan in 'D:\' D:\System Volume Information\_restore{37D16EA9-7A05-4257-8F54-AAAA58BDF3D9}\RP347\A0081237.exe [0] Archive type: RAR SFX (self extracting) --> nircmd.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.1 --> nircmd.cfexe [DETECTION] Contains detection pattern of the application APPL/NirCmd.1 [iNFO] The file was moved to '475e321c.qua'! End of the scan: dimanche 4 novembre 2007 21:56 Used time: 1:59:28 min The scan has been done completely. 6595 Scanning directories 290306 Files were scanned 14 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 12 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 290292 Files not concerned 11424 Archives were scanned 12 Warnings 1 Notes Antivir à de nouveau trouvé des virus... Je relance Kaspersky @++

Questions: Peux ton cacher les infos des logiciels dispo sur mon PC dans les premiers postes, ça serrait super cool et là il n'y a plus d'utilité de les laisser postées! merci Le rapport je te le poste quand il est fini @+++

Le rapport demandé : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:54:30, on 04/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Winamp\winampa.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\TomTom HOME\TomTomHOME.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Microsoft ActiveSync\Wcescomm.exe C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\PROGRA~1\MICROS~4\rapimgr.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Mozilla Thunderbird\thunderbird.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\DOCUME~1\FAMILL~1\LOCALS~1\Temp\Rar$EX02.485\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://accountservices.passport.net/reg.sr...egXPWizCredOnly R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\EoAdv\EoRezoBHO.dll O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll O2 - BHO: (no name) - {E5381C53-E62D-4358-9D35-DCE07B406F8B} - (no file) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe" O4 - HKCU\..\Run: [spamihilator] "C:\Program Files\Spamihilator\spamihilator.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab O16 - DPF: {A4069847-C342-48E2-9257-01A24E5C78EA} (F-Secure Online Scanner 3.2) - http://support.f-secure.com/ols3beta/fscax.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -- End of file - 8557 bytes

Encore une (deux-trois) chose(s), pourquoi Antivir ne va t'il pas se loger en bas dans la barre de tache, automatiquement? ou simplement il ne le fait pas??? il est actif tout en étant invisible???? En plus les mises à jour je dois les faire manuellement??? Existe t'il en français? @++

Pour l'instant rien, il ne détecte rien du tout, je suis en mode normal et jusqu'ici tout va bien!!!! Internet Explorer fonctionne de toute façon j'utilise FIREFOX et en plus je viens juste de faire une mise à jour windows alors le update fonctionne, c'est l'essentiel Je fait un scann Kaspersky, pour définitivement me rassurer... Sinon je commence à réinstaller les logiciels qui présente des dysfonctionnements, Firefox, Thunderbird.... @++

désolé de t'avoir fait attendre nateco icon_wink.gif = pas de problème Charles, et merci pour ton engagement et ta ténacité!!! @+ David PS: Peux ton cacher les infos des logiciels dispo sur mon PC dans les premiers postes, ça serrait super cool et là il n'y a plus d'utilité de les laisser postées! merci

Salut, Si joint le rapport demandé : Effectué le 04/11/2007 à 19:08:00,92. Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 702F-CBCF Répertoire de C:\WINDOWS 05/08/2004 13:00 1 036 288 explorer.exe 1 fichier(s) 1 036 288 octets Répertoire de C:\WINDOWS\$hf_mig$\KB938828\SP2QFE 13/06/2007 14:10 1 037 312 explorer.exe 1 fichier(s) 1 037 312 octets Répertoire de C:\WINDOWS\$NtUninstallKB938828$ 05/08/2004 13:00 1 036 288 explorer.exe 1 fichier(s) 1 036 288 octets Répertoire de C:\WINDOWS\system32\dllcache 13/06/2007 14:22 1 037 312 explorer.exe 1 fichier(s) 1 037 312 octets

. Je viens d'essayer en mode normal, c'est toujours bloqué. . Internet Explorer n'est utilisable que 10 min, après il ne fonctionne plus non plus en mode sans echec. .Ca devien très galère!!! @+

Bonjour, le rapport demandé : Effectué le 04/11/2007 à 8:44:34,34. Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 702F-CBCF Répertoire de C:\WINDOWS 13/06/2007 14:22 1 043 968 explorer.exe 1 fichier(s) 1 043 968 octets Répertoire de C:\WINDOWS\$hf_mig$\KB938828\SP2QFE 13/06/2007 14:10 1 037 312 explorer.exe 1 fichier(s) 1 037 312 octets Répertoire de C:\WINDOWS\$NtUninstallKB938828$ 05/08/2004 13:00 1 036 288 explorer.exe 1 fichier(s) 1 036 288 octets Répertoire de C:\WINDOWS\system32\dllcache 13/06/2007 14:22 1 037 312 explorer.exe 1 fichier(s) 1 037 312 octets

Rapport Virus total : Fichier explorer.exe reçu le 2007.11.04 00:02:07 (CET) Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE Résultat: 5/32 (15.63%) en train de charger les informations du serveur... Votre fichier est dans la file d'attente, en position: 4. L'heure estimée de démarrage est entre 52 et 75 secondes. Ne fermez pas la fenêtre avant la fin de l'analyse. L'analyseur qui traitait votre fichier est actuellement stoppé, nous allons attendre quelques secondes pour tenter de récupérer vos résultats. Si vous attendez depuis plus de cinq minutes, vous devez renvoyer votre fichier. Votre fichier est, en ce moment, en cours d'analyse par VirusTotal, les résultats seront affichés au fur et à mesure de leur génération. Formaté Impression des résultats Votre fichier a expiré ou n'existe pas. Le service est en ce moment, stoppé, votre fichier attend d'être analysé (position : ) depuis une durée indéfinie. Vous pouvez attendre une réponse du Web (re-chargement automatique) ou taper votre e-mail dans le formulaire ci-dessous et cliquer "Demande" pour que le système vous envoie une notification quand l'analyse sera terminée. Email: Antivirus Version Dernière mise à jour Résultat AhnLab-V3 2007.11.3.0 2007.11.02 - AntiVir 7.6.0.30 2007.11.02 W32/Virut.Gen Authentium 4.93.8 2007.11.03 - Avast 4.7.1074.0 2007.11.03 - AVG 7.5.0.503 2007.11.03 Win32/Virut BitDefender 7.2 2007.11.03 - CAT-QuickHeal 9.00 2007.11.03 - ClamAV 0.91.2 2007.11.03 - DrWeb 4.44.0.09170 2007.11.03 - eSafe 7.0.15.0 2007.10.28 - eTrust-Vet 31.2.5264 2007.11.02 - Ewido 4.0 2007.11.03 - FileAdvisor 1 2007.11.04 - Fortinet 3.11.0.0 2007.10.19 - F-Prot 4.4.2.54 2007.11.03 - F-Secure 6.70.13030.0 2007.11.02 - Ikarus T3.1.1.12 2007.11.03 Virus.Win32.Virut.q Kaspersky 7.0.0.125 2007.11.03 - McAfee 5155 2007.11.02 - Microsoft 1.2908 2007.11.03 - NOD32v2 2636 2007.11.03 - Norman 5.80.02 2007.11.02 - Panda 9.0.0.4 2007.11.03 - Prevx1 V2 2007.11.04 - Rising 20.16.52.00 2007.11.03 - Sophos 4.23.0 2007.11.03 - Sunbelt 2.2.907.0 2007.11.02 VIPRE.Suspicious Symantec 10 2007.11.03 - TheHacker 6.2.9.110 2007.10.27 - VBA32 3.12.2.4 2007.11.03 - VirusBuster 4.3.26:9 2007.11.03 - Webwasher-Gateway 6.6.1 2007.11.02 Win32.Virut.Gen Information additionnelle File size: 1043968 bytes MD5: d17442c38883253a50e7bd43466d0ad0 SHA1: 9ca16f1aecff0d7d5f56fc80f1b59b5f261433b7 Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

Pour info, En mode normal, cette fois tout se lance, mais passé zone alarm, tout est figé!!! Reboot manuel comme avant. @+

Rapport Dr.Web: Fport.exe D:\Mes documents\téléchargements\DiagHelp Program.FPort.20 Quarantaine. pslist.exe D:\Mes documents\téléchargements\DiagHelp Program.PsList.126 Quarantaine. je vais redémarrer en mode normal... pour voir si maintenant sa fonctionne @+

DrWebCuretIt ??? je ne sais plus ce que c'est? désolé un peu creuvé de la journée!!! @+ si c'est bon! cureit.com

Gros problème mon explorer est bloqué en mode normal: En mode normal, rien n'est exploitable, tout est bloqué, je doit rebouter le PC (appuie long sue marche/arrèt) et le faire fonctionner un mode sans echec, là j'ai au moins accès à internet et à tout le reste!!!

Le rapport d'antivir: AntiVir PersonalEdition Classic Report file date: samedi 3 novembre 2007 19:45 Scanning for 913479 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: Famille Mutz Computer name: Z6PO Version information: BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29 AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51 LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47 LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15 ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 14:26:55 ANTIVIR2.VDF : 7.0.0.140 940544 Bytes 26/10/2007 18:16:57 ANTIVIR3.VDF : 7.0.0.165 129536 Bytes 02/11/2007 18:16:57 AVEWIN32.DLL : 7.6.0.30 3056128 Bytes 03/11/2007 18:16:59 AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26 AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17 AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24 AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 08:46:00 AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06 AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18 NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13 RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37 SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21 Configuration settings for the scan: Jobname..........................: Manual Selection Configuration file...............: C:\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition Classic\PROFILES\folder.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: off Scan boot sector.................: on Boot sectors.....................: D:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: All files Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox, Macro heuristic..................: on File heuristic...................: medium Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR, Start of the scan: samedi 3 novembre 2007 19:45 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'iexplore.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Module is infected -> 'C:\WINDOWS\Explorer.EXE' Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned Process 'explorer.exe' has been terminated C:\WINDOWS\Explorer.EXE [DETECTION] Contains code of the Windows virus W32/Virut.Gen [WARNING] An error has occurred and the file was not deleted. ErrorID: 16003 [WARNING] The file could not be deleted! 15 processes with 14 modules were scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Boot sector 'D:\' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( '28' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\CyberLink\PowerDVD\HTML\start.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dc2a6.qua'! C:\Documents and Settings\Famille Mutz\Application Data\Mozilla\Firefox\Profiles\nq1e1cvy.default\chrome\unplug_drencrom.html [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479cc2f6.qua'! C:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store\Attachments\Carré rouge.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ecbe8.qua'! C:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store\Attachments\unnamed.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479acc10.qua'! C:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store old\Attachments\Carré rouge.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ecc21.qua'! C:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store old\Attachments\unnamed.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479acc36.qua'! C:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Signature\{7F9010B2-E930-4812-8870-5A003549C603}\Signature.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793cc38.qua'! C:\Program Files\Adobe\Reader 8.0\Reader\BeyondReader\ENU\Onramp\index.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4790ccdf.qua'! C:\Program Files\Adobe\Reader 8.0\Reader\BeyondReader\FRA\Onramp\index.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4790cce2.qua'! C:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\Reader_en-us_report-summary.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dcce0.qua'! C:\Program Files\Adobe\Reader 8.0\Reader\HowTo\ENU\srch_db.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478fccf1.qua'! C:\Program Files\Adobe\Reader 8.0\Reader\HowTo\FRA\srch_db.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478fccfa.qua'! C:\Program Files\Canon\CD-LabelPrint\Manual\TOP.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '477ccd3d.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F001.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '475ccdd4.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F002.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '46212125.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F003_1.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '475ccdd6.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F003_2.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '46212127.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F004.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '475ccdd5.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F005_1.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '46212126.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F005_2.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '475ccdd7.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F006.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '46212128.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F007.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '475ccdd8.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F008.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '46212129.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F009.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '475ccdda.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F010.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '475dcdd6.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F011.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '475dcdd7.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F012.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '46202128.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\F013.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '475dcdd9.qua'! C:\Program Files\EPSON\EPSON PhotoQuicker3.5\Manual\INDEX.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4770cdf5.qua'! C:\Program Files\EPSON\EPSON PRINT Image Framer Tool\Manual\INDEX.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4770cdfa.qua'! C:\Program Files\EPSON\PIF DESIGNER\Manual\INDEX.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4770cdff.qua'! C:\Program Files\EPSON\ScanToWeb\index.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4790ce2a.qua'! C:\Program Files\EPSON\TPMANUAL\PM\PQU_G\INDEX.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4770ce0a.qua'! C:\Program Files\EPSON\TPMANUAL\PM\REF_G\INDEX.HTM.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4770ce0e.qua'! C:\Program Files\eSpeak\docs\commands.html [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4799ce37.qua'! C:\Program Files\Fichiers communs\Adobe\Help\en_US\Adobe Reader\8.0\srch_db.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478fce3e.qua'! C:\Program Files\Fichiers communs\Adobe\Help\fr_FR\Adobe Reader\8.0\srch_db.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478fce49.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\MSInfo\OFFPRV10.EXE [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen [iNFO] The file was moved to '4772ce3f.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Belle journée.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4798ce74.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Camemberts.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4799ce70.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Céramique.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ecef8.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Feuilles.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '47a1ce74.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Fiesta.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4791ce79.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Glacier.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dce7c.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Lierre.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '46ec228a.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Nature.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '47a0ce71.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Punch aux agrumes.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ace86.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Réseau.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479fcefa.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Sucreries.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478fce86.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Technique.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478fce76.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Tournesol.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '47a1ce81.qua'! C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Vierge.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4791ce7b.qua'! C:\Program Files\Microsoft Office\Office10\1036\WDREAD10.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '477ed12c.qua'! C:\Program Files\Microsoft Office\Office10\Broadcast\EVENT.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4771d14b.qua'! C:\Program Files\Microsoft Office\Office10\Broadcast\LOBBY.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '476ed145.qua'! C:\Program Files\Microsoft Office\Office10\Broadcast\LOBBY0.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '46133db6.qua'! C:\Program Files\Mozilla Thunderbird\res\hiddenWindow.html [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4790d187.qua'! C:\Program Files\mp3DirectCut\FAQ.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '477dd160.qua'! C:\Program Files\mp3DirectCut\Manual.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad181.qua'! C:\Program Files\Panda Security\NanoScan\Engine\psnflg.dll [DETECTION] Is the Trojan horse TR/Agent.bux.1 [iNFO] The file was moved to '479ad19c.qua'! C:\Program Files\Panda Security\TotalScan\pskavs.dll [DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738 [iNFO] The file was moved to '4797d19e.qua'! C:\Program Files\Picasa2\web\templates\blackbg\frameset.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd1b8.qua'! C:\Program Files\Picasa2\web\templates\greybg\frameset.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd1b9.qua'! C:\Program Files\Picasa2\web\templates\whitebg\frameset.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd1ba.qua'! C:\Program Files\Radio Fr Solo\Aide_Realisation_de_Skins.html [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4790d1d0.qua'! C:\Program Files\Radio Fr Solo\html\index.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4790d1e1.qua'! C:\Program Files\Radio Fr Solo\html\TTV.htm [DETECTION] Contains detection pattern of the Phish-File/Email PHISH/Bankfraud [iNFO] The file was moved to '4782d1d9.qua'! C:\Program Files\Radio Fr Solo\html\TTV_TV_PopUp.htm [DETECTION] Contains detection pattern of the Phish-File/Email PHISH/Bankfraud [iNFO] The file was moved to '46fe36b2.qua'! C:\Program Files\Real\RealPlayer\DataCache\Login\cancel.html [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad209.qua'! C:\Program Files\Real\RealPlayer\Firstrun\localguide.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478fd219.qua'! C:\Program Files\TomTom HOME\help\ca_ES\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad251.qua'! C:\Program Files\TomTom HOME\help\ca_ES\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd254.qua'! C:\Program Files\TomTom HOME\help\ca_ES\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d244.qua'! C:\Program Files\TomTom HOME\help\ca_ES\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d25a.qua'! C:\Program Files\TomTom HOME\help\ca_ES\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d25b.qua'! C:\Program Files\TomTom HOME\help\cs\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad256.qua'! C:\Program Files\TomTom HOME\help\cs\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd259.qua'! C:\Program Files\TomTom HOME\help\cs\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d248.qua'! C:\Program Files\TomTom HOME\help\cs\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d25f.qua'! C:\Program Files\TomTom HOME\help\cs\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d260.qua'! C:\Program Files\TomTom HOME\help\da\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad25a.qua'! C:\Program Files\TomTom HOME\help\da\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd25e.qua'! C:\Program Files\TomTom HOME\help\da\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d24d.qua'! C:\Program Files\TomTom HOME\help\da\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d263.qua'! C:\Program Files\TomTom HOME\help\da\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d264.qua'! C:\Program Files\TomTom HOME\help\de\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad25e.qua'! C:\Program Files\TomTom HOME\help\de\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd261.qua'! C:\Program Files\TomTom HOME\help\de\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d251.qua'! C:\Program Files\TomTom HOME\help\de\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d267.qua'! C:\Program Files\TomTom HOME\help\de\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d268.qua'! C:\Program Files\TomTom HOME\help\en\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad262.qua'! C:\Program Files\TomTom HOME\help\en\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd266.qua'! C:\Program Files\TomTom HOME\help\en\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d255.qua'! C:\Program Files\TomTom HOME\help\en\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d26b.qua'! C:\Program Files\TomTom HOME\help\en\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d26c.qua'! C:\Program Files\TomTom HOME\help\en_US\backup-restore.8.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478fd257.qua'! C:\Program Files\TomTom HOME\help\en_US\ConnectHOMEtoPC.3.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad265.qua'! C:\Program Files\TomTom HOME\help\en_US\install.5.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479fd265.qua'! C:\Program Files\TomTom HOME\help\en_US\InstallingHOME.2.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '46e23e96.qua'! C:\Program Files\TomTom HOME\help\en_US\Introduction.1.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '47a0d265.qua'! C:\Program Files\TomTom HOME\help\en_US\JourneyPreparation.9.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '47a1d266.qua'! C:\Program Files\TomTom HOME\help\en_US\music.7.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479fd26d.qua'! C:\Program Files\TomTom HOME\help\en_US\photos.6.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479bd260.qua'! C:\Program Files\TomTom HOME\help\en_US\UserInterface.4.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4791d26b.qua'! C:\Program Files\TomTom HOME\help\en_US\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad268.qua'! C:\Program Files\TomTom HOME\help\en_US\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd26c.qua'! C:\Program Files\TomTom HOME\help\en_US\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d25b.qua'! C:\Program Files\TomTom HOME\help\en_US\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d271.qua'! C:\Program Files\TomTom HOME\help\en_US\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d272.qua'! C:\Program Files\TomTom HOME\help\es\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad26c.qua'! C:\Program Files\TomTom HOME\help\es\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd270.qua'! C:\Program Files\TomTom HOME\help\es\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d25f.qua'! C:\Program Files\TomTom HOME\help\es\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d275.qua'! C:\Program Files\TomTom HOME\help\es\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d276.qua'! C:\Program Files\TomTom HOME\help\et\ConnectHOMEtoPC.3.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad26f.qua'! C:\Program Files\TomTom HOME\help\et\install.5.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479fd26e.qua'! C:\Program Files\TomTom HOME\help\et\InstallingHOME.2.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479fd26f.qua'! C:\Program Files\TomTom HOME\help\et\Introduction.1.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '47a0d26f.qua'! C:\Program Files\TomTom HOME\help\et\JourneyPreparation.9.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '47a1d270.qua'! C:\Program Files\TomTom HOME\help\et\music.7.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479fd277.qua'! C:\Program Files\TomTom HOME\help\et\photos.6.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479bd26a.qua'! C:\Program Files\TomTom HOME\help\et\UserInterface.4.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4791d275.qua'! C:\Program Files\TomTom HOME\help\et\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad272.qua'! C:\Program Files\TomTom HOME\help\et\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd276.qua'! C:\Program Files\TomTom HOME\help\et\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d265.qua'! C:\Program Files\TomTom HOME\help\et\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d27b.qua'! C:\Program Files\TomTom HOME\help\et\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d27c.qua'! C:\Program Files\TomTom HOME\help\fi\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad277.qua'! C:\Program Files\TomTom HOME\help\fi\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd27a.qua'! C:\Program Files\TomTom HOME\help\fi\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d269.qua'! C:\Program Files\TomTom HOME\help\fi\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d280.qua'! C:\Program Files\TomTom HOME\help\fi\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d281.qua'! C:\Program Files\TomTom HOME\help\fr\backup-restore.8.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478fd26b.qua'! C:\Program Files\TomTom HOME\help\fr\ConnectHOMEtoPC.3.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad27a.qua'! C:\Program Files\TomTom HOME\help\fr\install.5.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479fd279.qua'! C:\Program Files\TomTom HOME\help\fr\InstallingHOME.2.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '46e23e8a.qua'! C:\Program Files\TomTom HOME\help\fr\Introduction.1.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '47a0d27a.qua'! C:\Program Files\TomTom HOME\help\fr\JourneyPreparation.9.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '47a1d27b.qua'! C:\Program Files\TomTom HOME\help\fr\music.7.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479fd281.qua'! C:\Program Files\TomTom HOME\help\fr\photos.6.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479bd274.qua'! C:\Program Files\TomTom HOME\help\fr\UserInterface.4.1.html.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4791d280.qua'! C:\Program Files\TomTom HOME\help\fr\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad27d.qua'! C:\Program Files\TomTom HOME\help\fr\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd280.qua'! C:\Program Files\TomTom HOME\help\fr\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d270.qua'! C:\Program Files\TomTom HOME\help\fr\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d286.qua'! C:\Program Files\TomTom HOME\help\fr\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d287.qua'! C:\Program Files\TomTom HOME\help\hu\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad281.qua'! C:\Program Files\TomTom HOME\help\hu\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd284.qua'! C:\Program Files\TomTom HOME\help\hu\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d274.qua'! C:\Program Files\TomTom HOME\help\hu\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d28a.qua'! C:\Program Files\TomTom HOME\help\hu\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d28b.qua'! C:\Program Files\TomTom HOME\help\it\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad285.qua'! C:\Program Files\TomTom HOME\help\it\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd289.qua'! C:\Program Files\TomTom HOME\help\it\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d278.qua'! C:\Program Files\TomTom HOME\help\it\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d28e.qua'! C:\Program Files\TomTom HOME\help\it\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d28f.qua'! C:\Program Files\TomTom HOME\help\lt\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad28a.qua'! C:\Program Files\TomTom HOME\help\lt\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd28d.qua'! C:\Program Files\TomTom HOME\help\lt\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d27d.qua'! C:\Program Files\TomTom HOME\help\lt\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d293.qua'! C:\Program Files\TomTom HOME\help\lt\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d294.qua'! C:\Program Files\TomTom HOME\help\lv\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad28e.qua'! C:\Program Files\TomTom HOME\help\lv\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd292.qua'! C:\Program Files\TomTom HOME\help\lv\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d281.qua'! C:\Program Files\TomTom HOME\help\lv\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d297.qua'! C:\Program Files\TomTom HOME\help\lv\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d298.qua'! C:\Program Files\TomTom HOME\help\nb_NO\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad292.qua'! C:\Program Files\TomTom HOME\help\nb_NO\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd296.qua'! C:\Program Files\TomTom HOME\help\nb_NO\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d285.qua'! C:\Program Files\TomTom HOME\help\nb_NO\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d29c.qua'! C:\Program Files\TomTom HOME\help\nb_NO\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4616d18d.qua'! C:\Program Files\TomTom HOME\help\nl\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad297.qua'! C:\Program Files\TomTom HOME\help\nl\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd29a.qua'! C:\Program Files\TomTom HOME\help\nl\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d289.qua'! C:\Program Files\TomTom HOME\help\nl\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d2a0.qua'! C:\Program Files\TomTom HOME\help\nl\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d2a1.qua'! C:\Program Files\TomTom HOME\help\pl\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad29b.qua'! C:\Program Files\TomTom HOME\help\pl\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd29e.qua'! C:\Program Files\TomTom HOME\help\pl\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d28e.qua'! C:\Program Files\TomTom HOME\help\pl\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d2a4.qua'! C:\Program Files\TomTom HOME\help\pl\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d2a5.qua'! C:\Program Files\TomTom HOME\help\pt\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad29f.qua'! C:\Program Files\TomTom HOME\help\pt\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd2a3.qua'! C:\Program Files\TomTom HOME\help\pt\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d292.qua'! C:\Program Files\TomTom HOME\help\pt\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d2a9.qua'! C:\Program Files\TomTom HOME\help\pt\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d2aa.qua'! C:\Program Files\TomTom HOME\help\sk\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad2a4.qua'! C:\Program Files\TomTom HOME\help\sk\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd2a7.qua'! C:\Program Files\TomTom HOME\help\sk\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d297.qua'! C:\Program Files\TomTom HOME\help\sk\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d2ad.qua'! C:\Program Files\TomTom HOME\help\sk\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d2ae.qua'! C:\Program Files\TomTom HOME\help\sv\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad2a8.qua'! C:\Program Files\TomTom HOME\help\sv\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd2ac.qua'! C:\Program Files\TomTom HOME\help\sv\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d29b.qua'! C:\Program Files\TomTom HOME\help\sv\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d2b1.qua'! C:\Program Files\TomTom HOME\help\sv\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d2b2.qua'! C:\Program Files\TomTom HOME\help\tr\wwhelp\wwhimpl\common\html\content.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad2ad.qua'! C:\Program Files\TomTom HOME\help\tr\wwhelp\wwhimpl\common\html\frameset.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd2b0.qua'! C:\Program Files\TomTom HOME\help\tr\wwhelp\wwhimpl\common\html\pagenav.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d2a0.qua'! C:\Program Files\TomTom HOME\help\tr\wwhelp\wwhimpl\common\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d2b6.qua'! C:\Program Files\TomTom HOME\help\tr\wwhelp\wwhimpl\js\html\wwhelp.htm.tmp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4794d2b8.qua'! C:\Program Files\Winamp\Plugins\Predixis MusicMagic\help.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4798d2c8.qua'! C:\WINDOWS\explorer.exe [DETECTION] Contains code of the Windows virus W32/Virut.Gen [WARNING] An error has occurred and the file was not deleted. ErrorID: 16003 [WARNING] The file could not be deleted! C:\WINDOWS\NirCmd.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.1 [iNFO] The file was moved to '479ed567.qua'! C:\WINDOWS\Help\ciquery.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479dd661.qua'! C:\WINDOWS\Help\ixqlang.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479dd681.qua'! C:\WINDOWS\Help\Tours\htmlTour\connected_fr.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad6a0.qua'! C:\WINDOWS\Help\Tours\htmlTour\safe_fr.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4792d694.qua'! C:\WINDOWS\Help\Tours\htmlTour\start_fr.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd6a8.qua'! C:\WINDOWS\Help\Tours\htmlTour\unlock_fr.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4798d6a2.qua'! C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\repairRedist.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479cd6d0.qua'! C:\WINDOWS\pchealth\helpctr\System\Headlines.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd6e5.qua'! C:\WINDOWS\pchealth\helpctr\System\HomePage__DESKTOP.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4799d6ef.qua'! C:\WINDOWS\pchealth\helpctr\System\HomePage__SERVER.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '46e43a00.qua'! C:\WINDOWS\pchealth\helpctr\System\blurbs\windows_newsgroups.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad6ea.qua'! C:\WINDOWS\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4790d6f7.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\AdvSearch.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '47a2d6e6.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\Context.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad6f1.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\firstpage.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ed6ec.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\HHWrapper.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4783d6cb.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\MiniNavBar.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479ad6ec.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\NavBar.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '47a2d6e4.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\Options.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '47a0d6f4.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\RemoteHelp.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4799d6e9.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\ShareHelp.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd6ec.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\Topics.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479cd6f3.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\subpanels\Channels.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd6ed.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\subpanels\Favorites.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '46dd2ee7.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\subpanels\History.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479fd6ee.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\subpanels\Index.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4790d6f3.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\subpanels\Options.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '47a0d6f6.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\subpanels\Search.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478dd6eb.qua'! C:\WINDOWS\pchealth\helpctr\System\panels\subpanels\Subsite.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '478ed6fb.qua'! C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\helpeeaccept.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4798d6ec.qua'! C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rcscreen6_head.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479fd6ea.qua'! C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineOptions.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4792d6ef.qua'! C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6_head.htm [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479fd6ed.qua'! C:\WINDOWS\Web\printers\ipp_0004.asp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '479cd839.qua'! C:\WINDOWS\Web\printers\page1.asp [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.K [iNFO] The file was moved to '4793d82b.qua'! Begin scan in 'D:\' D:\sauvgarde\Bureau\anti-virus\ComboFix.exe [0] Archive type: RAR SFX (self extracting) --> nircmd.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.1 --> nircmd.cfexe [DETECTION] Contains detection pattern of the application APPL/NirCmd.1 [iNFO] The file was moved to '4799da01.qua'! End of the scan: samedi 3 novembre 2007 21:27 Used time: 1:41:52 min The scan has been done completely. 6501 Scanning directories 285136 Files were scanned 243 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 239 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 284893 Files not concerned 11359 Archives were scanned 14 Warnings 1 Notes

salut, Depuis que j'ai mis Antivir et Zone Alarm, j'ai beaucoup de problème... Firefox ne fonctionne plus! La connection internet par Explorer est aléatoire... En mode normal, rien n'est exploitable, tout est bloqué, je doit rebouter le PC et le faire fonctionner un mode sans echec, là j'ai au moins accès à internet et à tout le reste!!! J'espère vraiment que ça va s'arranger... Sinon j'aimerai supprimer : webmediaplayer, mais il n'y a pas de solution proposé et il n'apparait même pas dans ajouter/supprimer. As-tu une solution? Pour info Antivir n'arrète pas de sonner.... Il m'en trouve des virus!!! (+ de 38 virus à 14% de scann) @++

Salut, le rapport demandé : ComboFix 07-10-26.4 - Famille Mutz 2007-11-03 17:36:49.9 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.109 [GMT 1:00] Running from: C:\Documents and Settings\Famille Mutz\Bureau\anti-virus\ComboFix.exe Command switches used :: C:\Documents and Settings\Famille Mutz\Bureau\anti-virus\CFScript.2txt.txt * Created a new restore point FILE:: C:\WINDOWS\System32\dtdidixu.ini C:\WINDOWS\System32\mcrh.tmp C:\WINDOWS\System32\spupdsvc.inf C:\WINDOWS\System32\wtakrvbk.ini . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\All Users\Bureau\webmediaplayer.lnk C:\Documents and Settings\All Users\Menu Démarrer\Programmes.\WebMediaPlayer C:\Documents and Settings\All Users\Menu Démarrer\Programmes.\WebMediaPlayer\Conditions générales.lnk C:\Documents and Settings\All Users\Menu Démarrer\Programmes.\WebMediaPlayer\Confidentialité.lnk C:\Documents and Settings\All Users\Menu Démarrer\Programmes.\WebMediaPlayer\WebMediaPlayer.lnk C:\Documents and Settings\All Users\Menu Démarrer\Programmes.\WebMediaPlayer\Website.lnk C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WebMediaPlayer\Conditions générales.lnk C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WebMediaPlayer\Confidentialité.lnk C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WebMediaPlayer\WebMediaPlayer.lnk C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WebMediaPlayer\Website.lnk c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\eoirbsdmdo.dat C:\Documents and Settings\Famille Mutz\Local Settings\Application Data\eoirbsdmdo.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\eoirbsdmdo_nav.dat c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\eoirbsdmdo_navps.dat C:\Downloads C:\Downloads\101_45095.klc C:\Downloads\102_4060.klc C:\Downloads\102_45097.klc C:\Downloads\125_45027.klc C:\Downloads\7_45097.klc C:\Downloads\avp.klb C:\Downloads\avp.set C:\Downloads\avp.vnd C:\Downloads\base001.avc C:\Downloads\base001c.avc C:\Downloads\base002.avc C:\Downloads\base002c.avc C:\Downloads\base003.avc C:\Downloads\base003c.avc C:\Downloads\base004.avc C:\Downloads\base004c.avc C:\Downloads\base005.avc C:\Downloads\base005c.avc C:\Downloads\base006.avc C:\Downloads\base006c.avc C:\Downloads\base007.avc C:\Downloads\base007c.avc C:\Downloads\base008.avc C:\Downloads\base008c.avc C:\Downloads\base009.avc C:\Downloads\base009c.avc C:\Downloads\base010.avc C:\Downloads\base010c.avc C:\Downloads\base011.avc C:\Downloads\base011c.avc C:\Downloads\base012.avc C:\Downloads\base012c.avc C:\Downloads\base013.avc C:\Downloads\base013c.avc C:\Downloads\base014.avc C:\Downloads\base014c.avc C:\Downloads\base015.avc C:\Downloads\base015c.avc C:\Downloads\base016.avc C:\Downloads\base016c.avc C:\Downloads\base017.avc C:\Downloads\base017c.avc C:\Downloads\base018.avc C:\Downloads\base018c.avc C:\Downloads\base019.avc C:\Downloads\base019c.avc C:\Downloads\base020.avc C:\Downloads\base020c.avc C:\Downloads\base021.avc C:\Downloads\base021c.avc C:\Downloads\base022.avc C:\Downloads\base022c.avc C:\Downloads\base023.avc C:\Downloads\base023c.avc C:\Downloads\base024.avc C:\Downloads\base024c.avc C:\Downloads\base025.avc C:\Downloads\base025c.avc C:\Downloads\base026.avc C:\Downloads\base026c.avc C:\Downloads\base027.avc C:\Downloads\base027c.avc C:\Downloads\base028.avc C:\Downloads\base028c.avc C:\Downloads\base029.avc C:\Downloads\base029c.avc C:\Downloads\base030.avc C:\Downloads\base030c.avc C:\Downloads\base031.avc C:\Downloads\base031c.avc C:\Downloads\base032.avc C:\Downloads\base032c.avc C:\Downloads\base033.avc C:\Downloads\base033c.avc C:\Downloads\base034.avc C:\Downloads\base034c.avc C:\Downloads\base035.avc C:\Downloads\base035c.avc C:\Downloads\base036.avc C:\Downloads\base036c.avc C:\Downloads\base037.avc C:\Downloads\base037c.avc C:\Downloads\base038.avc C:\Downloads\base038c.avc C:\Downloads\base039.avc C:\Downloads\base039c.avc C:\Downloads\base040.avc C:\Downloads\base040c.avc C:\Downloads\base041.avc C:\Downloads\base041c.avc C:\Downloads\base042.avc C:\Downloads\base042c.avc C:\Downloads\base043.avc C:\Downloads\base043c.avc C:\Downloads\base044.avc C:\Downloads\base044c.avc C:\Downloads\base045.avc C:\Downloads\base045c.avc C:\Downloads\base046.avc C:\Downloads\base046c.avc C:\Downloads\base047.avc C:\Downloads\base047c.avc C:\Downloads\base048.avc C:\Downloads\base048c.avc C:\Downloads\base049.avc C:\Downloads\base049c.avc C:\Downloads\base050.avc C:\Downloads\base050c.avc C:\Downloads\base051.avc C:\Downloads\base051c.avc C:\Downloads\base052.avc C:\Downloads\base052c.avc C:\Downloads\base053.avc C:\Downloads\base053c.avc C:\Downloads\base054.avc C:\Downloads\base054c.avc C:\Downloads\base055.avc C:\Downloads\base055c.avc C:\Downloads\base056.avc C:\Downloads\base056c.avc C:\Downloads\base057.avc C:\Downloads\base057c.avc C:\Downloads\base058.avc C:\Downloads\base058c.avc C:\Downloads\base059.avc C:\Downloads\base059c.avc C:\Downloads\base060.avc C:\Downloads\base060c.avc C:\Downloads\base061.avc C:\Downloads\base062.avc C:\Downloads\base063.avc C:\Downloads\base064.avc C:\Downloads\base065.avc C:\Downloads\base066.avc C:\Downloads\base067.avc C:\Downloads\base068.avc C:\Downloads\base069.avc C:\Downloads\base070.avc C:\Downloads\base071.avc C:\Downloads\base072.avc C:\Downloads\base073.avc C:\Downloads\base074.avc C:\Downloads\base075.avc C:\Downloads\base076.avc C:\Downloads\base077.avc C:\Downloads\base078.avc C:\Downloads\base079.avc C:\Downloads\base080.avc C:\Downloads\base081.avc C:\Downloads\base082.avc C:\Downloads\base083.avc C:\Downloads\base084.avc C:\Downloads\base085.avc C:\Downloads\base086.avc C:\Downloads\base087.avc C:\Downloads\base088.avc C:\Downloads\base089.avc C:\Downloads\base090.avc C:\Downloads\base091.avc C:\Downloads\base092.avc C:\Downloads\base093.avc C:\Downloads\base094.avc C:\Downloads\base095.avc C:\Downloads\base096.avc C:\Downloads\base097.avc C:\Downloads\base098.avc C:\Downloads\base099.avc C:\Downloads\base100.avc C:\Downloads\base101.avc C:\Downloads\base102.avc C:\Downloads\base103.avc C:\Downloads\base104.avc C:\Downloads\base105.avc C:\Downloads\base106.avc C:\Downloads\base107.avc C:\Downloads\base108.avc C:\Downloads\base109.avc C:\Downloads\base110.avc C:\Downloads\base111.avc C:\Downloads\base112.avc C:\Downloads\base113.avc C:\Downloads\base114.avc C:\Downloads\base115.avc C:\Downloads\base116.avc C:\Downloads\base117.avc C:\Downloads\base118.avc C:\Downloads\base119.avc C:\Downloads\base120.avc C:\Downloads\base121.avc C:\Downloads\base122.avc C:\Downloads\base123.avc C:\Downloads\base124.avc C:\Downloads\base125.avc C:\Downloads\base126.avc C:\Downloads\base127.avc C:\Downloads\base128.avc C:\Downloads\base129.avc C:\Downloads\base130.avc C:\Downloads\base131.avc C:\Downloads\base132.avc C:\Downloads\base133.avc C:\Downloads\base134.avc C:\Downloads\base135.avc C:\Downloads\base136.avc C:\Downloads\base137.avc C:\Downloads\base138.avc C:\Downloads\base139.avc C:\Downloads\base140.avc C:\Downloads\base141.avc C:\Downloads\base142.avc C:\Downloads\base143.avc C:\Downloads\base144.avc C:\Downloads\base145.avc C:\Downloads\base146.avc C:\Downloads\base147.avc C:\Downloads\base148.avc C:\Downloads\base149.avc C:\Downloads\base150.avc C:\Downloads\base151.avc C:\Downloads\base152.avc C:\Downloads\base153.avc C:\Downloads\base154.avc C:\Downloads\base155.avc C:\Downloads\base156.avc C:\Downloads\base157.avc C:\Downloads\base999.avc C:\Downloads\ca.avc C:\Downloads\chuka.avc C:\Downloads\daily-ec.avc C:\Downloads\daily-ex.avc C:\Downloads\daily.avc C:\Downloads\dailyc.avc C:\Downloads\eicar.avc C:\Downloads\engine.cfg C:\Downloads\engine.dt C:\Downloads\ext001.avc C:\Downloads\ext001c.avc C:\Downloads\ext002.avc C:\Downloads\ext002c.avc C:\Downloads\ext003.avc C:\Downloads\ext003c.avc C:\Downloads\ext004.avc C:\Downloads\ext004c.avc C:\Downloads\ext005.avc C:\Downloads\ext005c.avc C:\Downloads\ext006.avc C:\Downloads\ext007.avc C:\Downloads\ext008.avc C:\Downloads\ext009.avc C:\Downloads\ext999.avc C:\Downloads\fa.avc C:\Downloads\fa001.avc C:\Downloads\gen001.avc C:\Downloads\gen002.avc C:\Downloads\gen003.avc C:\Downloads\gen004.avc C:\Downloads\gen005.avc C:\Downloads\gen999.avc C:\Downloads\kernel.avc C:\Downloads\krn001.avc C:\Downloads\krn002.avc C:\Downloads\krn003.avc C:\Downloads\krn004.avc C:\Downloads\krn005.avc C:\Downloads\krndos.avc C:\Downloads\krnengn.avc C:\Downloads\krnexe.avc C:\Downloads\krnexe32.avc C:\Downloads\krnjava.avc C:\Downloads\krnmacro.avc C:\Downloads\krnunp.avc C:\Downloads\mail.avc C:\Downloads\ocr.avc C:\Downloads\smart.avc C:\Downloads\unp000.avc C:\Downloads\unp001.avc C:\Downloads\unp002.avc C:\Downloads\unp003.avc C:\Downloads\unp004.avc C:\Downloads\unp005.avc C:\Downloads\unp006.avc C:\Downloads\unp007.avc C:\Downloads\unp008.avc C:\Downloads\unp009.avc C:\Downloads\unp010.avc C:\Downloads\unp011.avc C:\Downloads\unp012.avc C:\Downloads\unp013.avc C:\Downloads\unp014.avc C:\Downloads\unp015.avc C:\Downloads\unp016.avc C:\Downloads\unp017.avc C:\Downloads\unp018.avc C:\Downloads\unp019.avc C:\Downloads\unp020.avc C:\Downloads\unp021.avc C:\Downloads\unp022.avc C:\Downloads\unp023.avc C:\Downloads\unp024.avc C:\Downloads\unp025.avc C:\Downloads\unp026.avc C:\Downloads\unp027.avc C:\Downloads\unp028.avc C:\Downloads\unp029.avc C:\Downloads\unp030.avc C:\Downloads\unp031.avc C:\Downloads\unp032.avc C:\Downloads\unp033.avc C:\Downloads\unp034.avc C:\Downloads\unp035.avc C:\Downloads\unp036.avc C:\Downloads\unp037.avc C:\Downloads\unp038.avc C:\Downloads\unp039.avc C:\Kaspersky C:\Kaspersky\0004960D.key C:\Kaspersky\0005DA77.key C:\Kaspersky\0006C9D5.key C:\Kaspersky\00184596.key C:\Kaspersky\00184597.key C:\Kaspersky\01FA0F93.key C:\Kaspersky\101_45095.klc C:\Kaspersky\102_4060.klc C:\Kaspersky\102_45097.klc C:\Kaspersky\125_45027.klc C:\Kaspersky\7_45097.klc C:\Kaspersky\advware.avc C:\Kaspersky\avp.klb C:\Kaspersky\avp.set C:\Kaspersky\avp.vnd C:\Kaspersky\avp0406.avc C:\Kaspersky\backdoor.avc C:\Kaspersky\base001.avc C:\Kaspersky\base001c.avc C:\Kaspersky\base002.avc C:\Kaspersky\base002c.avc C:\Kaspersky\base003.avc C:\Kaspersky\base003c.avc C:\Kaspersky\base004.avc C:\Kaspersky\base004c.avc C:\Kaspersky\base005.avc C:\Kaspersky\base005c.avc C:\Kaspersky\base006.avc C:\Kaspersky\base006c.avc C:\Kaspersky\base007.avc C:\Kaspersky\base007c.avc C:\Kaspersky\base008.avc C:\Kaspersky\base008c.avc C:\Kaspersky\base009.avc C:\Kaspersky\base009c.avc C:\Kaspersky\base010.avc C:\Kaspersky\base010c.avc C:\Kaspersky\base011.avc C:\Kaspersky\base011c.avc C:\Kaspersky\base012.avc C:\Kaspersky\base012c.avc C:\Kaspersky\base013.avc C:\Kaspersky\base013c.avc C:\Kaspersky\base014.avc C:\Kaspersky\base014c.avc C:\Kaspersky\base015.avc C:\Kaspersky\base015c.avc C:\Kaspersky\base016.avc C:\Kaspersky\base016c.avc C:\Kaspersky\base017.avc C:\Kaspersky\base017c.avc C:\Kaspersky\base018.avc C:\Kaspersky\base018c.avc C:\Kaspersky\base019.avc C:\Kaspersky\base019c.avc C:\Kaspersky\base020.avc C:\Kaspersky\base020c.avc C:\Kaspersky\base021.avc C:\Kaspersky\base021c.avc C:\Kaspersky\base022.avc C:\Kaspersky\base022c.avc C:\Kaspersky\base023.avc C:\Kaspersky\base023c.avc C:\Kaspersky\base024.avc C:\Kaspersky\base024c.avc C:\Kaspersky\base025.avc C:\Kaspersky\base025c.avc C:\Kaspersky\base026.avc C:\Kaspersky\base026c.avc C:\Kaspersky\base027.avc C:\Kaspersky\base027c.avc C:\Kaspersky\base028.avc C:\Kaspersky\base028c.avc C:\Kaspersky\base029.avc C:\Kaspersky\base029c.avc C:\Kaspersky\base030.avc C:\Kaspersky\base030c.avc C:\Kaspersky\base031.avc C:\Kaspersky\base031c.avc C:\Kaspersky\base032.avc C:\Kaspersky\base032c.avc C:\Kaspersky\base033.avc C:\Kaspersky\base033c.avc C:\Kaspersky\base034.avc C:\Kaspersky\base034c.avc C:\Kaspersky\base035.avc C:\Kaspersky\base035c.avc C:\Kaspersky\base036.avc C:\Kaspersky\base036c.avc C:\Kaspersky\base037.avc C:\Kaspersky\base037c.avc C:\Kaspersky\base038.avc C:\Kaspersky\base038c.avc C:\Kaspersky\base039.avc C:\Kaspersky\base039c.avc C:\Kaspersky\base040.avc C:\Kaspersky\base040c.avc C:\Kaspersky\base041.avc C:\Kaspersky\base041c.avc C:\Kaspersky\base042.avc C:\Kaspersky\base042c.avc C:\Kaspersky\base043.avc C:\Kaspersky\base043c.avc C:\Kaspersky\base044.avc C:\Kaspersky\base044c.avc C:\Kaspersky\base045.avc C:\Kaspersky\base045c.avc C:\Kaspersky\base046.avc C:\Kaspersky\base046c.avc C:\Kaspersky\base047.avc C:\Kaspersky\base047c.avc C:\Kaspersky\base048.avc C:\Kaspersky\base048c.avc C:\Kaspersky\base049.avc C:\Kaspersky\base049c.avc C:\Kaspersky\base050.avc C:\Kaspersky\base050c.avc C:\Kaspersky\base051.avc C:\Kaspersky\base051c.avc C:\Kaspersky\base052.avc C:\Kaspersky\base052c.avc C:\Kaspersky\base053.avc C:\Kaspersky\base053c.avc C:\Kaspersky\base054.avc C:\Kaspersky\base054c.avc C:\Kaspersky\base055.avc C:\Kaspersky\base055c.avc C:\Kaspersky\base056.avc C:\Kaspersky\base056c.avc C:\Kaspersky\base057.avc C:\Kaspersky\base057c.avc C:\Kaspersky\base058.avc C:\Kaspersky\base058c.avc C:\Kaspersky\base059.avc C:\Kaspersky\base059c.avc C:\Kaspersky\base060.avc C:\Kaspersky\base060c.avc C:\Kaspersky\base061.avc C:\Kaspersky\base062.avc C:\Kaspersky\base063.avc C:\Kaspersky\base064.avc C:\Kaspersky\base065.avc C:\Kaspersky\base066.avc C:\Kaspersky\base067.avc C:\Kaspersky\base068.avc C:\Kaspersky\base069.avc C:\Kaspersky\base070.avc C:\Kaspersky\base071.avc C:\Kaspersky\base072.avc C:\Kaspersky\base073.avc C:\Kaspersky\base074.avc C:\Kaspersky\base075.avc C:\Kaspersky\base076.avc C:\Kaspersky\base077.avc C:\Kaspersky\base078.avc C:\Kaspersky\base079.avc C:\Kaspersky\base080.avc C:\Kaspersky\base081.avc C:\Kaspersky\base082.avc C:\Kaspersky\base083.avc C:\Kaspersky\base084.avc C:\Kaspersky\base085.avc C:\Kaspersky\base086.avc C:\Kaspersky\base087.avc C:\Kaspersky\base088.avc C:\Kaspersky\base089.avc C:\Kaspersky\base090.avc C:\Kaspersky\base091.avc C:\Kaspersky\base092.avc C:\Kaspersky\base093.avc C:\Kaspersky\base094.avc C:\Kaspersky\base095.avc C:\Kaspersky\base096.avc C:\Kaspersky\base097.avc C:\Kaspersky\base098.avc C:\Kaspersky\base099.avc C:\Kaspersky\base100.avc C:\Kaspersky\base101.avc C:\Kaspersky\base102.avc C:\Kaspersky\base103.avc C:\Kaspersky\base104.avc C:\Kaspersky\base105.avc C:\Kaspersky\base106.avc C:\Kaspersky\base107.avc C:\Kaspersky\base108.avc C:\Kaspersky\base109.avc C:\Kaspersky\base110.avc C:\Kaspersky\base111.avc C:\Kaspersky\base112.avc C:\Kaspersky\base113.avc C:\Kaspersky\base114.avc C:\Kaspersky\base115.avc C:\Kaspersky\base116.avc C:\Kaspersky\base117.avc C:\Kaspersky\base118.avc C:\Kaspersky\base119.avc C:\Kaspersky\base120.avc C:\Kaspersky\base121.avc C:\Kaspersky\base122.avc C:\Kaspersky\base123.avc C:\Kaspersky\base124.avc C:\Kaspersky\base125.avc C:\Kaspersky\base126.avc C:\Kaspersky\base127.avc C:\Kaspersky\base128.avc C:\Kaspersky\base129.avc C:\Kaspersky\base130.avc C:\Kaspersky\base131.avc C:\Kaspersky\base132.avc C:\Kaspersky\base133.avc C:\Kaspersky\base134.avc C:\Kaspersky\base135.avc C:\Kaspersky\base136.avc C:\Kaspersky\base137.avc C:\Kaspersky\base138.avc C:\Kaspersky\base139.avc C:\Kaspersky\base140.avc C:\Kaspersky\base141.avc C:\Kaspersky\base142.avc C:\Kaspersky\base143.avc C:\Kaspersky\base144.avc C:\Kaspersky\base145.avc C:\Kaspersky\base146.avc C:\Kaspersky\base147.avc C:\Kaspersky\base148.avc C:\Kaspersky\base149.avc C:\Kaspersky\base150.avc C:\Kaspersky\base151.avc C:\Kaspersky\base152.avc C:\Kaspersky\base153.avc C:\Kaspersky\base154.avc C:\Kaspersky\base155.avc C:\Kaspersky\base156.avc C:\Kaspersky\base157.avc C:\Kaspersky\base999.avc C:\Kaspersky\bitmap1.bmp C:\Kaspersky\ca.avc C:\Kaspersky\chuka.avc C:\Kaspersky\config.lan C:\Kaspersky\config.old C:\Kaspersky\daily-ec.avc C:\Kaspersky\daily-ex.avc C:\Kaspersky\daily.avc C:\Kaspersky\dailyc.avc C:\Kaspersky\eicar.avc C:\Kaspersky\engine.cfg C:\Kaspersky\engine.dt C:\Kaspersky\ext001.avc C:\Kaspersky\ext001c.avc C:\Kaspersky\ext002.avc C:\Kaspersky\ext002c.avc C:\Kaspersky\ext003.avc C:\Kaspersky\ext003c.avc C:\Kaspersky\ext004.avc C:\Kaspersky\ext004c.avc C:\Kaspersky\ext005.avc C:\Kaspersky\ext005c.avc C:\Kaspersky\ext006.avc C:\Kaspersky\ext007.avc C:\Kaspersky\ext008.avc C:\Kaspersky\ext009.avc C:\Kaspersky\ext999.avc C:\Kaspersky\extr-cab.avc C:\Kaspersky\extract.avc C:\Kaspersky\fa.avc C:\Kaspersky\fa001.avc C:\Kaspersky\gen001.avc C:\Kaspersky\gen002.avc C:\Kaspersky\gen003.avc C:\Kaspersky\gen004.avc C:\Kaspersky\gen005.avc C:\Kaspersky\gen999.avc C:\Kaspersky\generic.avc C:\Kaspersky\Getvlist.exe C:\Kaspersky\ipc.dll C:\Kaspersky\kavss.dll C:\Kaspersky\kavss.exe C:\Kaspersky\kavssd.dll C:\Kaspersky\kavssdi.dll C:\Kaspersky\kavssi.dll C:\Kaspersky\KAVUpd.dll C:\Kaspersky\kavupd.exe C:\Kaspersky\kavvlg.dll C:\Kaspersky\kernel.avc C:\Kaspersky\keyid.dat C:\Kaspersky\krn001.avc C:\Kaspersky\krn002.avc C:\Kaspersky\krn003.avc C:\Kaspersky\krn004.avc C:\Kaspersky\krn005.avc C:\Kaspersky\krndos.avc C:\Kaspersky\krnengn.avc C:\Kaspersky\krnexe.avc C:\Kaspersky\krnexe32.avc C:\Kaspersky\krnjava.avc C:\Kaspersky\krnmacro.avc C:\Kaspersky\krnunp.avc C:\Kaspersky\macro.avc C:\Kaspersky\mail.avc C:\Kaspersky\main.avi C:\Kaspersky\malware.avc C:\Kaspersky\MicroWorld Toolkit Utility.txt C:\Kaspersky\msvlclnt.dll C:\Kaspersky\mwav.ini C:\Kaspersky\mwav.log C:\Kaspersky\mwavscan.com C:\Kaspersky\mwXface.log C:\Kaspersky\newexe.avc C:\Kaspersky\newexeg.avc C:\Kaspersky\ocr.avc C:\Kaspersky\pornware.avc C:\Kaspersky\product.bmp C:\Kaspersky\psapi.dll C:\Kaspersky\riched32.dll C:\Kaspersky\riskware.avc C:\Kaspersky\script.avc C:\Kaspersky\smart.avc C:\Kaspersky\trojan.avc C:\Kaspersky\unp000.avc C:\Kaspersky\unp001.avc C:\Kaspersky\unp002.avc C:\Kaspersky\unp003.avc C:\Kaspersky\unp004.avc C:\Kaspersky\unp005.avc C:\Kaspersky\unp006.avc C:\Kaspersky\unp007.avc C:\Kaspersky\unp008.avc C:\Kaspersky\unp009.avc C:\Kaspersky\unp010.avc C:\Kaspersky\unp011.avc C:\Kaspersky\unp012.avc C:\Kaspersky\unp013.avc C:\Kaspersky\unp014.avc C:\Kaspersky\unp015.avc C:\Kaspersky\unp016.avc C:\Kaspersky\unp017.avc C:\Kaspersky\unp018.avc C:\Kaspersky\unp019.avc C:\Kaspersky\unp020.avc C:\Kaspersky\unp021.avc C:\Kaspersky\unp022.avc C:\Kaspersky\unp023.avc C:\Kaspersky\unp024.avc C:\Kaspersky\unp025.avc C:\Kaspersky\unp026.avc C:\Kaspersky\unp027.avc C:\Kaspersky\unp028.avc C:\Kaspersky\unp029.avc C:\Kaspersky\unp030.avc C:\Kaspersky\unp031.avc C:\Kaspersky\unp032.avc C:\Kaspersky\unp033.avc C:\Kaspersky\unp034.avc C:\Kaspersky\unp035.avc C:\Kaspersky\unp036.avc C:\Kaspersky\unp037.avc C:\Kaspersky\unp038.avc C:\Kaspersky\unp039.avc C:\Kaspersky\unpack.avc C:\Kaspersky\up040702.avc C:\Kaspersky\up040709.avc C:\Kaspersky\up040716.avc C:\Kaspersky\up040723.avc C:\Kaspersky\up040730.avc C:\Kaspersky\up040806.avc C:\Kaspersky\up040813.avc C:\Kaspersky\up040820.avc C:\Kaspersky\up040827.avc C:\Kaspersky\up040903.avc C:\Kaspersky\virus.avi C:\Kaspersky\worm.avc C:\Kaspersky\x-files.avc C:\Program Files\webmediaplayer C:\Program Files\webmediaplayer\Conditions générales.url C:\Program Files\webmediaplayer\Confidentialité.url C:\Program Files\webmediaplayer\resources\languages_v2.xml C:\Program Files\webmediaplayer\resources\webmedias C:\Program Files\webmediaplayer\skins\classic.skn C:\Program Files\webmediaplayer\sqlite3.dll C:\Program Files\webmediaplayer\uninst.exe C:\Program Files\webmediaplayer\WebMediaPlayer.exe C:\Program Files\webmediaplayer\Website.url C:\WINDOWS\erdnt C:\WINDOWS\erdnt\CFrecovery.bat C:\WINDOWS\erdnt\subs\default C:\WINDOWS\erdnt\subs\ERDNT.CON C:\WINDOWS\erdnt\subs\ERDNT.EXE C:\WINDOWS\erdnt\subs\ERDNT.INF C:\WINDOWS\erdnt\subs\ERDNTDOS.LOC C:\WINDOWS\erdnt\subs\ERDNTWIN.LOC C:\WINDOWS\erdnt\subs\F3M\system C:\WINDOWS\erdnt\subs\SAM C:\WINDOWS\erdnt\subs\SECURITY C:\WINDOWS\erdnt\subs\software C:\WINDOWS\erdnt\subs\software.bak C:\WINDOWS\erdnt\subs\software.LOG C:\WINDOWS\erdnt\subs\system C:\WINDOWS\erdnt\subs\system.bak C:\WINDOWS\erdnt\subs\system.LOG C:\WINDOWS\System32\dtdidixu.ini C:\WINDOWS\System32\mcrh.tmp C:\WINDOWS\system32\nvs2.inf C:\WINDOWS\System32\spupdsvc.inf C:\WINDOWS\System32\wtakrvbk.ini . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\poof ((((((((((((((((((((((((((((( Fichiers créés 2007-10-03 to 2007-11-03 )))))))))))))))))))))))))))))))))))) . 2007-11-03 10:17 11,264 --a------ C:\WINDOWS\system32\SpOrder.dll 2007-11-03 09:50 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat 2007-11-03 09:48 <REP> d-------- C:\WINDOWS\Internet Logs 2007-11-03 09:39 <REP> d-------- C:\Program Files\PDFCreator Toolbar 2007-11-03 09:39 <REP> d-------- C:\Program Files\PDFCreator 2007-11-03 09:39 264,097 --a------ C:\WINDOWS\PDFCreator_Toolbar_Uninstaller_6578.exe 2007-11-03 09:39 59,904 --a------ C:\WINDOWS\system32\MSCC2FR.DLL 2007-11-03 09:39 23,552 --a------ C:\WINDOWS\system32\MSMPIDE.DLL 2007-11-03 07:42 <REP> d-------- C:\Program Files\Panda Security 2007-11-01 08:15 <REP> d-------- C:\Documents and Settings\Famille Mutz\DoctorWeb 2007-10-29 20:07 <REP> d---s---- C:\Documents and Settings\Famille Mutz\UserData 2007-10-28 07:41 <REP> d-------- C:\fsaua.data 2007-10-27 14:26 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple 2007-10-27 07:05 28,672 --a------ C:\WINDOWS\system32\drivers\CO_Mon.sys 2007-10-26 13:02 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab 2007-10-26 13:02 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab 2007-10-26 11:04 <REP> d-------- C:\Program Files\SUPERAntiSpyware 2007-10-26 11:04 <REP> d-------- C:\Documents and Settings\Famille Mutz\Application Data\SUPERAntiSpyware.com 2007-10-26 11:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com 2007-10-26 07:45 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-10-25 21:23 <REP> d-------- C:\Program Files\RegCleaner 2007-10-21 08:10 <REP> d-------- C:\Program Files\Stardock 2007-10-21 08:10 42,672 --------- C:\WINDOWS\system32\wbsys.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-03 16:43 --------- d-----w C:\Documents and Settings\Famille Mutz\Application Data\Skype 2007-11-02 05:43 --------- d-----w C:\Program Files\Spamihilator 2007-10-27 13:30 --------- d-----w C:\Program Files\QuickTime 2007-10-27 13:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer 2007-10-27 13:26 --------- d-----w C:\Program Files\Apple Software Update 2007-10-26 13:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-10-26 12:19 --------- d-----w C:\Program Files\Radio Fr Solo 2007-10-24 19:03 --------- d-----w C:\Program Files\IncrediMail 2007-10-24 18:51 --------- d-----w C:\Program Files\Windows Live Safety Center 2007-10-24 18:49 --------- d-----w C:\Program Files\Sony Handheld 2007-10-23 16:38 --------- d-----w C:\Program Files\Winamp 2007-10-23 16:36 --------- d-----w C:\Program Files\StreamRipper32 2007-10-23 16:33 --------- d-----w C:\Program Files\PhotoFiltre Studio 2007-10-23 16:33 --------- d-----w C:\Program Files\mp3DirectCut 2007-10-23 16:33 --------- d-----w C:\Program Files\Mozilla Thunderbird 2007-10-23 16:27 --------- d-----w C:\Program Files\AC3Filter 2007-10-05 18:13 --------- d-----w C:\Program Files\CartoExploreur 2007-09-27 07:28 --------- d-----w C:\Program Files\CopyRightLeft 2007-09-26 08:36 --------- d-----w C:\Program Files\YourWare Solutions 2007-09-26 08:27 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-09-05 16:21 --------- d-----w C:\Program Files\DivX 2007-08-29 09:56 28,728 ----a-w C:\Documents and Settings\Famille Mutz\Application Data\GDIPFONTCACHEV1.DAT 2007-08-21 16:46 75,776 ----a-w C:\WINDOWS\ST6UNST.EXE 2007-08-21 16:46 253,952 ------w C:\WINDOWS\Setup1.exe 2006-08-18 18:11 774,144 ----a-w C:\Program Files\RngInterstitial.dll . ((((((((((((((((((((((((((((( snapshot_2007-11-02_ 6.52.51,93 ))))))))))))))))))))))))))))))))))))))))) . - 2007-09-02 07:57:08 12,340 ----a-w C:\WINDOWS\mozver.dat + 2007-11-03 06:42:05 13,516 ----a-w C:\WINDOWS\mozver.dat - 2000-08-20 22:00:00 1,388,544 ----a-w C:\WINDOWS\system32\MSVBVM60.DLL + 2004-02-23 00:00:00 1,386,496 ----a-w C:\WINDOWS\system32\MSVBVM60.DLL - 2001-10-28 15:42:30 116,224 ----a-w C:\WINDOWS\system32\pdfcmnnt.dll + 2001-10-28 16:42:30 116,224 ----a-w C:\WINDOWS\system32\pdfcmnnt.dll - 2005-06-25 12:16:48 138,240 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\PS5UI.DLL + 2005-06-25 13:16:48 138,240 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\PS5UI.DLL - 2005-06-25 12:16:50 480,256 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\PSCRIPT5.DLL + 2005-06-25 13:16:50 480,256 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\PSCRIPT5.DLL + 2007-11-03 16:43:48 16,384 ----atw C:\WINDOWS\TEMP\Perflib_Perfdata_708.dat . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E5381C53-E62D-4358-9D35-DCE07B406F8B}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-05-14 23:22] "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-08-18 19:58] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 18:51] "TomTomHOME.exe"="C:\Program Files\TomTom HOME\TomTomHOME.exe" [2007-03-14 15:52] "Easy-PrintToolBox"="C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.exe" [2006-10-17 02:20] "NeroCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 05:24] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 13:00] "MessengerPlus3"="C:\Program Files\Messenger Plus! 3\MsgPlus.exe" [2006-06-20 17:08] "msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 12:55] "Magentic"="C:\PROGRA~1\Magentic\bin\Magentic.exe" [] "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-07-02 16:10] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-02 12:22] "H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\Wcescomm.exe" [2006-11-13 13:07] "Spamihilator"="C:\Program Files\Spamihilator\spamihilator.exe" [] C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\ Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 08:01:04] S3 AvFlt;Antivirus Filter Driver;C:\WINDOWS\system32\drivers\av5flt.sys S3 k600bus;Sony Ericsson 600i driver (WDM);C:\WINDOWS\system32\DRIVERS\k600bus.sys S3 k600mdfl;Sony Ericsson 600i USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\k600mdfl.sys S3 k600mdm;Sony Ericsson 600i USB WMC Modem Drivers;C:\WINDOWS\system32\DRIVERS\k600mdm.sys S3 k600mgmt;Sony Ericsson 600i USB WMC Device Management Drivers;C:\WINDOWS\system32\DRIVERS\k600mgmt.sys S3 k600obex;Sony Ericsson 600i USB WMC OBEX Interface Drivers;C:\WINDOWS\system32\DRIVERS\k600obex.sys . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-10-29 21:49:17 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" . ************************************************************************** catchme 0.3.1232 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-03 17:43:37 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-11-03 17:45:06 - machine was rebooted C:\ComboFix2.txt ... 2007-11-02 19:03 C:\ComboFix3.txt ... 2007-11-02 06:54 . --- E O F ---

Hello, Impossible d'envoyer le fichier su http://upload.malekal.com/, je fais comme préconisé dans le tutoriel, mais rien à faire toujours la même réponse : Vous n'avez pas choisi de fichier ! Retour (http://upload.malekal.com/upload.php) que se passe t'il? @+

Le rapport PANDA: ;*********************************************************************************************************************************************************************************** ANALYSIS: 2007-11-03 09:30:16 PROTECTIONS: 1 MALWARE: 9 SUSPECTS: 0 ;*********************************************************************************************************************************************************************************** PROTECTIONS Description Version Active Updated ;=================================================================================================================================================================================== avast! antivirus 4.7.1043 [VPS 071103-0] 4.7.1043 No Yes ;=================================================================================================================================================================================== MALWARE Id Description Type Active Severity Disinfectable Disinfected Location ;=================================================================================================================================================================================== 00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Famille Mutz\Cookies\famille mutz@atdmt[1].txt 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\Famille Mutz\Cookies\famille mutz@serving-sys[1].txt 00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\Famille Mutz\Cookies\famille mutz@bs.serving-sys[1].txt 00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Documents and Settings\Famille Mutz\Cookies\famille mutz@weborama[1].txt 00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Documents and Settings\Famille Mutz\Cookies\famille mutz@adtech[1].txt 00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Documents and Settings\Famille Mutz\Cookies\famille mutz@bluestreak[1].txt 00328284 Adware/NaviPromo Adware No 1 Yes No C:\upload_moi_Z6PO.tar.gz[upload_moi.tar][qoobox/Quarantine/C/WINDOWS/system32/cgafmimrfs.exe.vir] 00328284 Adware/NaviPromo Adware No 1 Yes No C:\qoobox\Quarantine\C\WINDOWS\system32\cgafmimrfs.exe.vir 01262593 Application/NirCmd.A HackTools No 0 No No D:\sauvgarde\Bureau\anti-virus\ComboFix.exe[nircmd.cfexe] 01262593 Application/NirCmd.A HackTools No 0 No No D:\sauvgarde\Bureau\anti-virus\ComboFix.exe[nircmd.exe] 01262593 Application/NirCmd.A HackTools No 0 Yes No C:\WINDOWS\NirCmd.exe 01262593 Application/NirCmd.A HackTools No 0 Yes No C:\System Volume Information\_restore{37D16EA9-7A05-4257-8F54-AAAA58BDF3D9}\RP343\A0077346.exe 01262593 Application/NirCmd.A HackTools No 0 No No C:\Documents and Settings\Famille Mutz\Bureau\anti-virus\ComboFix.exe[nircmd.exe] 01262593 Application/NirCmd.A HackTools No 0 No No C:\Documents and Settings\Famille Mutz\Bureau\anti-virus\ComboFix.exe[nircmd.cfexe] 02646028 Adware/PurityScan Adware No 0 Yes No C:\System Volume Information\_restore{37D16EA9-7A05-4257-8F54-AAAA58BDF3D9}\RP344\A0077353.dll 02646028 Adware/PurityScan Adware No 0 Yes No C:\qoobox\Quarantine\catchme2007-10-26_ 85518.73.zip[__c00A789E.dat] 02646028 Adware/PurityScan Adware No 0 Yes No C:\upload_moi_Z6PO.tar.gz[upload_moi.tar][qoobox/Quarantine/catchme2007-10-26_ 85518.73.zip][__c00A789E.dat] 02646028 Adware/PurityScan Adware No 0 Yes No C:\upload_moi_Z6PO.tar.gz[upload_moi.tar][qoobox/Quarantine/C/WINDOWS/system32/axjneecd.dll.vir] 02646028 Adware/PurityScan Adware No 0 Yes No C:\qoobox\Quarantine\C\WINDOWS\system32\axjneecd.dll.vir ;=================================================================================================================================================================================== SUSPECTS Location ;=================================================================================================================================================================================== ;=================================================================================================================================================================================== @+

Bonjour, juste pour info j'ai à l'ouverture de la première page internet (après le démarrage du PC), l'info suivante: Avast me met en garde contre une attaque et me demande de mettre fin à la connection. Il me dit : http://ntkrnlpa.info/rc/?i=1 et le logiciel malveillant serait : JS:Agent-Z [tjr] j'ai lancé le scann, @+

dans le tutorial : http://www.malekal.com/DiagHelp/DiagHelp.php apparait une fenêtre rouge, chez moi quand je lance, je ne la vois pas! En plus le rapport me donne un dossier dénommé : upload_moi_Z6PO.tar.gz au lieu de : C:\upload_moi.zip il y a quelque chose qui ne fonctionne pas, que faire? @+ PS: Par magie il y a un rapport qui vient de s'ouvrir : DiagHelp version v1.3 - http://www.malekal.com excute le 02/11/2007 à 20:23:34,15 Liste des derniers fichies modifies/crees dans windir\system32 et prefetch C:\WINDOWS\prefetch\CHCP.COM-18156052.pf -->02/11/2007 20:23:05 C:\WINDOWS\prefetch\WUAUCLT.EXE-399A8E72.pf -->02/11/2007 20:22:56 C:\WINDOWS\prefetch\GZIP.EXE-0EA7EE84.pf -->02/11/2007 20:22:12 C:\WINDOWS\prefetch\CMD.EXE-087B4001.pf -->02/11/2007 20:22:01 C:\WINDOWS\prefetch\NTVDM.EXE-1A10A423.pf -->02/11/2007 20:21:53 C:\WINDOWS\prefetch\SORT.EXE-194AE83C.pf -->02/11/2007 20:21:49 C:\WINDOWS\prefetch\KPROCCHECK.EXE-276494CA.pf -->02/11/2007 20:21:32 C:\WINDOWS\prefetch\CATCHME.EXE-051C5640.pf -->02/11/2007 20:21:32 C:\WINDOWS\prefetch\LISTDLLS.EXE-10149CC1.pf -->02/11/2007 20:21:16 C:\WINDOWS\prefetch\REG.EXE-0D2A95F7.pf -->02/11/2007 20:20:38 C:\WINDOWS\System32\drivers\CO_Mon.sys -->27/10/2007 07:05:40 C:\WINDOWS\System32\drivers\aswmon.sys -->06/09/2007 11:05:25 C:\WINDOWS\System32\drivers\aswmon2.sys -->06/09/2007 11:05:10 C:\WINDOWS\System32\drivers\aswRdr.sys -->06/09/2007 11:03:02 C:\WINDOWS\System32\drivers\aswTdi.sys -->06/09/2007 11:02:20 C:\WINDOWS\System32\drivers\aavmker4.sys -->06/09/2007 11:00:53 C:\WINDOWS\System32\drivers\pxhelp20.sys -->08/03/2007 00:51:00 C:\WINDOWS\System32\wpa.dbl -->02/11/2007 19:01:06 C:\WINDOWS\System32\CONFIG.NT -->01/11/2007 08:04:03 C:\WINDOWS\System32\perfh00C.dat -->28/10/2007 07:27:29 C:\WINDOWS\System32\perfh009.dat -->28/10/2007 07:27:28 C:\WINDOWS\System32\perfc00C.dat -->28/10/2007 07:27:28 C:\WINDOWS\System32\perfc009.dat -->28/10/2007 07:27:28 C:\WINDOWS\System32\PerfStringBackup.INI -->28/10/2007 07:27:27 C:\WINDOWS\System32\dtdidixu.ini -->25/10/2007 12:12:49 C:\WINDOWS\System32\mcrh.tmp -->24/10/2007 21:27:42 C:\WINDOWS\System32\spupdsvc.inf -->24/10/2007 20:08:39 C:\WINDOWS\System32\wtakrvbk.ini -->24/10/2007 12:18:05 C:\WINDOWS\System32\MRT.exe -->27/09/2007 22:19:40 C:\WINDOWS\System32\aswBoot.exe -->06/09/2007 11:09:49 C:\WINDOWS\System32\AvastSS.scr -->06/09/2007 11:00:07 C:\WINDOWS\System32\FNTCACHE.DAT -->30/08/2007 08:03:26 C:\WINDOWS\System32\TZLog.log -->29/08/2007 19:19:47 C:\WINDOWS\System32\setup.rpt -->23/08/2007 15:02:43 C:\WINDOWS\System32\setup.inf -->23/08/2007 15:02:43 C:\WINDOWS\System32\ASTULog.cab -->23/08/2007 15:02:43 C:\WINDOWS\System32\wininet.dll -->22/08/2007 13:57:30 C:\WINDOWS\System32\urlmon.dll -->22/08/2007 13:57:30 C:\WINDOWS\System32\shlwapi.dll -->22/08/2007 13:57:30 C:\WINDOWS\System32\shdocvw.dll -->22/08/2007 13:57:29 C:\WINDOWS\System32\pngfilt.dll -->22/08/2007 13:57:28 C:\WINDOWS\System32\mstime.dll -->22/08/2007 13:57:28 C:\WINDOWS\WindowsUpdate.log -->02/11/2007 20:22:47 C:\WINDOWS.log -->02/11/2007 19:01:01 C:\WINDOWS\wiaservc.log -->02/11/2007 19:01:00 C:\WINDOWS\wiadebug.log -->02/11/2007 19:01:00 C:\WINDOWS\bootstat.dat -->02/11/2007 19:00:45 C:\WINDOWS\SchedLgU.Txt -->02/11/2007 18:59:56 C:\WINDOWS\wmsetup.log -->02/11/2007 09:04:36 C:\WINDOWS\ntbtlog.txt -->01/11/2007 19:01:09 C:\WINDOWS\olsdbg.log -->01/11/2007 18:14:45 C:\WINDOWS\setupact.log -->29/10/2007 20:43:15 C:\WINDOWS\Radio_Fr.ini -->29/10/2007 18:29:01 C:\WINDOWS\QTFont.qfn -->29/10/2007 18:28:37 C:\WINDOWS\setupapi.log -->28/10/2007 11:50:53 C:\WINDOWS\QTFont.for -->27/10/2007 14:32:30 C:\WINDOWS\tsoc.log -->26/10/2007 22:37:22 MD5 des fichiers sensibles tcpip.sys 1dbf125862891817f374f407626967f4 ndis.sys 558635d3af1c7546d26067d5d9b6959e null.sys 73c1e1f395918bc2c6dd67af7591a3ad svchost.exe 1bd6c2f707a275cb7c16fd99fe0f31ca ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ explorer.exe pid: 1000 Command line: C:\WINDOWS\Explorer.EXE Base Size Version Path 0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x13420000 0x1a000 11.00.5721.5145 C:\PROGRA~1\WINDOW~2\wmpband.dll 0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x7d200000 0x2be000 3.01.4000.4039 C:\WINDOWS\system32\msi.dll 0x164a0000 0x23000 5.02.5721.5145 C:\WINDOWS\system32\WPDShServiceObj.dll 0x109c0000 0x2c000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceTypes.dll 0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll 0x78130000 0x9b000 8.00.50727.0163 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll 0x02550000 0x5b000 8.01.0000.0000 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.dll 0x02330000 0x4c000 8.00.0000.0000 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.FRA 0x748f0000 0x113000 8.90.1101.0000 C:\WINDOWS\system32\msxml3.dll 0x75be0000 0x6e000 5.06.0000.8831 C:\WINDOWS\system32\jscript.dll 0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll 0x04270000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll 0x79170000 0x26000 1.01.4322.0573 C:\WINDOWS\system32\mscoree.dll 0x796e0000 0x3e000 1.01.4322.0573 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Shfusion.dll 0x7c340000 0x56000 7.10.3052.0004 C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll 0x10000000 0x10000 8.00.0000.0456 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll 0x32520000 0x12000 10.00.2609.0000 C:\Program Files\Microsoft Office\Office10\msohev.dll 0x02980000 0x2c000 C:\Program Files\WinRAR\rarext.dll 0x02c50000 0x24000 4.42.0000.0000 C:\Program Files\7-Zip\7-zip.dll 0x64f00000 0x12000 4.07.1043.0000 C:\Program Files\Alwil Software\Avast4\ashShell.dll 0x02ea0000 0x3f000 4.05.5096.0000 C:\PROGRA~1\MICROS~4\Wcesview.dll 0x21000000 0x21000 4.05.5096.0000 C:\PROGRA~1\MICROS~4\pegconv.dll 0x22b00000 0x7000 4.05.5096.0000 C:\WINDOWS\system32\CEUTIL.dll 0x21300000 0x21000 4.05.5096.0000 C:\WINDOWS\system32\RAPI.dll 0x5a500000 0x4e000 8.01.0178.0000 C:\Program Files\MSN Messenger\fsshext.8.1.0178.00.dll 0x16210000 0x27e000 5.02.5721.5145 C:\WINDOWS\system32\wpdshext.dll 0x07160000 0x46000 5.02.5721.5145 C:\WINDOWS\system32\Audiodev.dll 0x15110000 0x25a000 11.00.5721.5145 C:\WINDOWS\system32\WMVCore.DLL 0x11c70000 0x39000 11.00.5721.5145 C:\WINDOWS\system32\WMASF.DLL ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ winlogon.exe pid: 480 Command line: winlogon.exe Base Size Version Path 0x01000000 0x81000 \??\C:\WINDOWS\system32\winlogon.exe 0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll 0x20000000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll 0x01150000 0x3b000 1.07.0017.0000 C:\WINDOWS\system32\WgaLogon.dll 0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 702F-CBCF Répertoire de C:\WINDOWS\system32 05/08/2004 13:00 6 144 csrss.exe 1 fichier(s) 6 144 octets 0 Rép(s) 10 553 655 296 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 702F-CBCF Répertoire de C:\WINDOWS\Downloaded Program Files 01/11/2007 15:20 <REP> . 01/11/2007 15:20 <REP> .. 28/08/2007 16:26 290 816 auc_lib.dll 17/05/2006 13:32 231 072 avsniff.dll 17/05/2006 13:29 878 avsniff.inf 17/05/2006 13:32 198 304 avsniffdlgs.dll 17/05/2006 13:26 537 704 AXXPEE.dll 28/08/2007 16:26 541 ca.pub 17/05/2006 13:29 241 CabSA.inf 17/10/2007 00:00 2 504 catalog.dat 01/11/2007 15:20 126 048 daas.log 28/08/2007 16:26 500 120 daas_s.dll 29/08/2005 11:34 65 desktop.ini 17/10/2007 00:00 6 899 ecbootil.vxd 17/05/2006 13:26 42 112 ecmldr32.dll 17/10/2007 00:00 284 016 ecmsvr32.dll 28/08/2007 16:28 286 720 fscax.dll 28/08/2007 16:26 496 fscax.inf 07/01/2007 11:55 2 305 kavwebscan.inf 17/05/2006 13:28 6 850 navapi.vxd 17/05/2006 13:28 201 896 navapi32.dll 17/10/2007 00:00 124 272 naveng32.dll 17/10/2007 00:00 914 800 navex32a.dll 29/06/2005 17:17 227 opuc.inf 17/05/2006 13:32 161 480 rufsi.dll 17/10/2007 00:00 97 776 scrauth.dat 09/11/2006 14:36 5 019 swflash.inf 17/10/2007 00:00 11 875 symaveng.cat 17/10/2007 00:00 1 061 symaveng.inf 17/10/2007 00:00 399 048 tcdefs.dat 17/10/2007 00:00 1 884 336 tcscan7.dat 17/10/2007 00:00 404 496 tcscan8.dat 17/10/2007 00:00 943 865 tcscan9.dat 17/10/2007 00:00 453 tinf.dat 17/10/2007 00:00 148 tinfidx.dat 17/10/2007 00:00 1 957 tinfl.dat 17/10/2007 00:00 67 815 tscan1.dat 17/10/2007 00:00 3 240 tscan1hd.dat 17/10/2007 00:00 4 778 v.grd 17/10/2007 00:00 2 267 v.sig 17/10/2007 00:00 106 244 virscan.inf 17/10/2007 00:00 995 007 virscan1.dat 17/10/2007 00:00 570 900 virscan2.dat 17/10/2007 00:00 150 392 virscan3.dat 17/10/2007 00:00 320 253 virscan4.dat 17/10/2007 00:00 4 746 945 virscan5.dat 17/10/2007 00:00 391 835 virscan6.dat 17/10/2007 00:00 12 813 258 virscan7.dat 17/10/2007 00:00 1 834 116 virscan8.dat 17/10/2007 00:00 5 140 808 virscan9.dat 17/10/2007 00:00 32 virscant.dat 27/10/2007 07:07 2 072 vscanmsx.dat 17/10/2007 00:00 224 zdone.dat 51 fichier(s) 34 820 586 octets Total des fichiers listés : 51 fichier(s) 34 820 586 octets 2 Rép(s) 10 553 651 200 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues Export des clefs sensibles.. Liste des fichiers en exception sur le pare-feu XP SP2 Export de la clef SharedTaskScheduler [sharedTaskScheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant" exports des policies REGEDIT4 [system] "dontdisplaylastusername"=dword:00000000 "legalnoticecaption"="" "legalnoticetext"="" "shutdownwithoutlogon"=dword:00000001 "undockwithoutlogon"=dword:00000001 Export des clefs sensibles.. Rechercher adresses sensibles dans le fichier HOSTS... KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg) Process list by traversal of KiWaitListHead 4 - System 120 - ashMaiSv.exe 148 - ashWebSv.exe 424 - alg.exe 456 - csrss.exe 480 - winlogon.exe 524 - services.exe 536 - lsass.exe 672 - wuauclt.exe 688 - svchost.exe 764 - svchost.exe 828 - svchost.exe 884 - svchost.exe 992 - svchost.exe 1000 - explorer.exe 1148 - ashServ.exe 1572 - mdm.exe 1796 - svchost.exe 2052 - usnsvc.exe 2780 - TomTomHOME.exe 2832 - ashDisp.exe 2852 - ctfmon.exe 2892 - msnmsgr.exe 3008 - GoogleToolbarNo 3064 - wcescomm.exe 3288 - cmd.exe 3664 - firefox.exe 3716 - thunderbird.exe Total number of processes = 28 NOTE: Under WinXP, this will not show all processes. KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg) Driver/Module list by traversal of PsLoadedModuleList 804D7000 - \WINDOWS\system32\ntoskrnl.exe 806EC000 - \WINDOWS\system32\hal.dll F8A35000 - \WINDOWS\system32\KDCOM.DLL F8945000 - \WINDOWS\system32\BOOTVID.dll F84E5000 - ACPI.sys F8A37000 - \WINDOWS\system32\DRIVERS\WMILIB.SYS F84D4000 - pci.sys F8535000 - isapnp.sys F8A39000 - viaide.sys F87B5000 - \WINDOWS\system32\DRIVERS\PCIIDEX.SYS F8545000 - MountMgr.sys F84B5000 - ftdisk.sys F87BD000 - PartMgr.sys F8555000 - VolSnap.sys F849D000 - atapi.sys F8565000 - disk.sys F8575000 - \WINDOWS\system32\DRIVERS\CLASSPNP.SYS F847D000 - fltMgr.sys F846B000 - sr.sys F8585000 - PxHelp20.sys F8454000 - KSecDD.sys F83C7000 - Ntfs.sys F839A000 - NDIS.sys F8595000 - viaagp.sys F837F000 - Mup.sys F7AF7000 - \SystemRoot\system32\DRIVERS\amdk7.sys F78E7000 - \SystemRoot\system32\DRIVERS\nv4_mini.sys F78D3000 - \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS F8865000 - \SystemRoot\system32\DRIVERS\fdc.sys F78C2000 - \SystemRoot\system32\DRIVERS\serial.sys F89E9000 - \SystemRoot\system32\DRIVERS\serenum.sys F78AE000 - \SystemRoot\system32\DRIVERS\parport.sys F7AE7000 - \SystemRoot\system32\DRIVERS\cdrom.sys F7AD7000 - \SystemRoot\system32\DRIVERS\redbook.sys F788B000 - \SystemRoot\system32\DRIVERS\ks.sys F7AC7000 - \SystemRoot\system32\DRIVERS\imapi.sys F886D000 - \SystemRoot\system32\DRIVERS\usbuhci.sys F7868000 - \SystemRoot\system32\DRIVERS\USBPORT.SYS F7853000 - \SystemRoot\system32\drivers\ac97via.sys F782F000 - \SystemRoot\system32\drivers\portcls.sys F7AB7000 - \SystemRoot\system32\drivers\drmk.sys F8875000 - \SystemRoot\system32\DRIVERS\RTL8139.SYS F8B9C000 - \SystemRoot\system32\DRIVERS\audstub.sys F85C5000 - \SystemRoot\system32\DRIVERS\rasl2tp.sys F89F5000 - \SystemRoot\system32\DRIVERS\ndistapi.sys F7818000 - \SystemRoot\system32\DRIVERS\ndiswan.sys F85D5000 - \SystemRoot\system32\DRIVERS\raspppoe.sys F85E5000 - \SystemRoot\system32\DRIVERS\raspptp.sys F887D000 - \SystemRoot\system32\DRIVERS\TDI.SYS F7807000 - \SystemRoot\system32\DRIVERS\psched.sys F85F5000 - \SystemRoot\system32\DRIVERS\msgpc.sys F8885000 - \SystemRoot\system32\DRIVERS\ptilink.sys F888D000 - \SystemRoot\system32\DRIVERS\raspti.sys F8605000 - \SystemRoot\system32\DRIVERS\termdd.sys F8895000 - \SystemRoot\system32\DRIVERS\kbdclass.sys F889D000 - \SystemRoot\system32\DRIVERS\mouclass.sys F8A59000 - \SystemRoot\system32\DRIVERS\swenum.sys F77D3000 - \SystemRoot\system32\DRIVERS\update.sys F8A05000 - \SystemRoot\system32\DRIVERS\mssmbios.sys F8615000 - \SystemRoot\System32\Drivers\NDProxy.SYS F88AD000 - \SystemRoot\system32\DRIVERS\flpydisk.sys F8A21000 - \SystemRoot\system32\DRIVERS\gameenum.sys F8635000 - \SystemRoot\system32\DRIVERS\usbhub.sys F8A5F000 - \SystemRoot\system32\DRIVERS\USBD.SYS F8A61000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS F8C69000 - \SystemRoot\System32\Drivers\Null.SYS F8A63000 - \SystemRoot\System32\Drivers\Beep.SYS F88BD000 - \SystemRoot\system32\DRIVERS\HIDPARSE.SYS F88C5000 - \SystemRoot\System32\drivers\vga.sys F8A65000 - \SystemRoot\System32\Drivers\mnmdd.SYS F8A67000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys F88CD000 - \SystemRoot\System32\Drivers\Msfs.SYS F88D5000 - \SystemRoot\System32\Drivers\Npfs.SYS F8A2D000 - \SystemRoot\system32\DRIVERS\rasacd.sys F6678000 - \SystemRoot\system32\DRIVERS\ipsec.sys F6620000 - \SystemRoot\system32\DRIVERS\tcpip.sys F8655000 - \SystemRoot\System32\Drivers\aswTdi.SYS F65F8000 - \SystemRoot\system32\DRIVERS\netbt.sys F65D6000 - \SystemRoot\System32\drivers\afd.sys F8665000 - \SystemRoot\system32\DRIVERS\netbios.sys F65AB000 - \SystemRoot\system32\DRIVERS\rdbss.sys F653C000 - \SystemRoot\system32\DRIVERS\mrxsmb.sys F8675000 - \SystemRoot\System32\Drivers\Fips.SYS F651B000 - \SystemRoot\system32\DRIVERS\ipnat.sys F8685000 - \SystemRoot\system32\DRIVERS\wanarp.sys F88ED000 - \SystemRoot\System32\Drivers\Aavmker4.SYS F88F5000 - \SystemRoot\system32\DRIVERS\usbprint.sys F88FD000 - \SystemRoot\system32\DRIVERS\usbccgp.sys F833F000 - \SystemRoot\system32\DRIVERS\hidusb.sys F86A5000 - \SystemRoot\system32\DRIVERS\HIDCLASS.SYS F833B000 - \SystemRoot\system32\DRIVERS\mouhid.sys F8337000 - \SystemRoot\system32\DRIVERS\kbdhid.sys F86C5000 - \SystemRoot\System32\Drivers\Cdfs.SYS F64DB000 - \SystemRoot\System32\Drivers\dump_atapi.sys F8A69000 - \SystemRoot\System32\Drivers\dump_WMILIB.SYS BF800000 - \SystemRoot\System32\win32k.sys F89E5000 - \SystemRoot\System32\drivers\Dxapi.sys F891D000 - \SystemRoot\System32\watchdog.sys BF000000 - \SystemRoot\System32\drivers\dxg.sys F8BA1000 - \SystemRoot\System32\drivers\dxgthk.sys BF012000 - \SystemRoot\System32\nv4_disp.dll F54E7000 - \SystemRoot\system32\DRIVERS\ndisuio.sys F4B65000 - \SystemRoot\System32\Drivers\aswMon2.SYS F49A8000 - \SystemRoot\system32\DRIVERS\mrxdav.sys F8AF5000 - \SystemRoot\System32\Drivers\ParVdm.SYS F488E000 - \SystemRoot\system32\DRIVERS\srv.sys F4001000 - \SystemRoot\system32\drivers\wdmaud.sys F4A25000 - \SystemRoot\system32\drivers\sysaudio.sys F3EE3000 - \SystemRoot\System32\Drivers\aswRdr.SYS F3B12000 - \SystemRoot\System32\Drivers\HTTP.sys F21DF000 - \??\C:\DOCUME~1\FAMILL~1\LOCALS~1\Temp\catchme.sys F8B2B000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys Total number of drivers = 112 Liste des programmes installes 7-Zip 4.42 AC3Filter (remove only) Adobe Flash Player 9 ActiveX Adobe Reader 8.1.1 - Français Adobe Shockwave Player Apple Software Update Archiveur WinRAR ArcSoft PhotoStudio 5.5 Audacity 1.2.6 avast! Antivirus BurningCD (plugin Winamp) Camera Support Core Library Camera Window DS Camera Window DVC Camera Window MC Canon Camera Support Core Library Canon Camera WIA Driver Canon Camera Window DS for ZoomBrowser EX Canon Camera Window DVC for ZoomBrowser EX Canon Camera Window for ZoomBrowser EX Canon EOS Kiss_N REBEL_XT 350D Pilote WIA Canon Internet Library for ZoomBrowser EX Canon iP4300 Canon PhotoRecord Canon RAW Image Task for ZoomBrowser EX Canon RemoteCapture Task for ZoomBrowser EX Canon Setup Utility 2.3 Canon Utilities Digital Photo Professional 1.6.1 Canon Utilities Digital Photo Professional 1.6.1 Canon Utilities Easy-PhotoPrint Canon Utilities Easy-PrintToolBox Canon Utilities EOS Capture 1.3 Canon Utilities PhotoStitch 3.1 Canon ZoomBrowser EX CartoExploreur CD-LabelPrint Cdiscount photos Combined Community Codec Pack 2007-02-22 Correctif pour Lecteur Windows Media 11 (KB939683) Correctif pour Windows XP (KB914440) Correctif Windows XP - KB873333 Correctif Windows XP - KB873339 Correctif Windows XP - KB885250 Correctif Windows XP - KB885835 Correctif Windows XP - KB885836 Correctif Windows XP - KB885884 Correctif Windows XP - KB886185 Correctif Windows XP - KB887472 Correctif Windows XP - KB887742 Correctif Windows XP - KB888113 Correctif Windows XP - KB888302 Correctif Windows XP - KB890859 Correctif Windows XP - KB891781 Correctif Windows XP - KB893086 DeepBurner v1.8.0.224 DivX Codec 3.1alpha release DivX Content Uploader DivX Pro Codec DivX Web Player Easy-WebPrint eMusic - 50 Free MP3 offer Encyclopédie Hachette Multimédia Enregistrement utilisateur de Canon iP4300 EOS Capture 1.3 EPSON CardMonitor EPSON Logiciel imprimante EPSON PhotoQuicker3.5 EPSON PhotoStarter3.1 EPSON PRINT Image Framer Tool2.1 eSpeak version 1.25 ffdshow FLV Player FW LiveUpdate Google Earth Google Toolbar for Internet Explorer Haali Media Splitter HijackThis 2.0.2 Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows XP (KB909394) Hotfix for Windows XP (KB915865) Hotfix for Windows XP (KB926239) Huffyuv AVI lossless video codec (Remove Only) Inkscape 0.45.1 Internet Library IsoBuster 1.9 J2SE Runtime Environment 5.0 Update 10 J2SE Runtime Environment 5.0 Update 11 J2SE Runtime Environment 5.0 Update 6 J2SE Runtime Environment 5.0 Update 9 Java SE Runtime Environment 6 Update 1 Jouer à Disney Winnie l’Ourson La Chasse au Miel de Tigrou K-Lite Codec Pack 2.25 Full Kaspersky Online Scanner Lapin Malin Maternelle 1 Lapin Malin Maternelle 2 Lecteur Windows Media 11 Matroska Pack - Lazy Man's MKV 0.9.9 Matroska Playback Pack Messenger Plus! 3 Messenger Plus! Live Microsoft .NET Framework 1.1 Microsoft ActiveSync Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office XP Standard Microsoft User-Mode Driver Framework Feature Pack 1.0 Mise à jour de sécurité pour Lecteur Windows Media (KB911564) Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782) Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398) Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127) Mise à jour de sécurité pour Windows XP (KB890046) Mise à jour de sécurité pour Windows XP (KB893066) Mise à jour de sécurité pour Windows XP (KB893756) Mise à jour de sécurité pour Windows XP (KB896358) Mise à jour de sécurité pour Windows XP (KB896422) Mise à jour de sécurité pour Windows XP (KB896423) Mise à jour de sécurité pour Windows XP (KB896424) Mise à jour de sécurité pour Windows XP (KB896428) Mise à jour de sécurité pour Windows XP (KB899587) Mise à jour de sécurité pour Windows XP (KB899588) Mise à jour de sécurité pour Windows XP (KB899591) Mise à jour de sécurité pour Windows XP (KB900725) Mise à jour de sécurité pour Windows XP (KB901017) Mise à jour de sécurité pour Windows XP (KB901214) Mise à jour de sécurité pour Windows XP (KB902400) Mise à jour de sécurité pour Windows XP (KB904706) Mise à jour de sécurité pour Windows XP (KB905414) Mise à jour de sécurité pour Windows XP (KB905749) Mise à jour de sécurité pour Windows XP (KB908519) Mise à jour de sécurité pour Windows XP (KB911562) Mise à jour de sécurité pour Windows XP (KB911567) Mise à jour de sécurité pour Windows XP (KB911927) Mise à jour de sécurité pour Windows XP (KB912919) Mise à jour de sécurité pour Windows XP (KB913433) Mise à jour de sécurité pour Windows XP (KB913580) Mise à jour de sécurité pour Windows XP (KB914388) Mise à jour de sécurité pour Windows XP (KB914389) Mise à jour de sécurité pour Windows XP (KB916281) Mise à jour de sécurité pour Windows XP (KB917159) Mise à jour de sécurité pour Windows XP (KB917344) Mise à jour de sécurité pour Windows XP (KB917422) Mise à jour de sécurité pour Windows XP (KB917953) Mise à jour de sécurité pour Windows XP (KB918118) Mise à jour de sécurité pour Windows XP (KB918439) Mise à jour de sécurité pour Windows XP (KB919007) Mise à jour de sécurité pour Windows XP (KB920213) Mise à jour de sécurité pour Windows XP (KB920214) Mise à jour de sécurité pour Windows XP (KB920670) Mise à jour de sécurité pour Windows XP (KB920683) Mise à jour de sécurité pour Windows XP (KB920685) Mise à jour de sécurité pour Windows XP (KB921398) Mise à jour de sécurité pour Windows XP (KB921503) Mise à jour de sécurité pour Windows XP (KB921883) Mise à jour de sécurité pour Windows XP (KB922616) Mise à jour de sécurité pour Windows XP (KB922819) Mise à jour de sécurité pour Windows XP (KB923191) Mise à jour de sécurité pour Windows XP (KB923414) Mise à jour de sécurité pour Windows XP (KB923689) Mise à jour de sécurité pour Windows XP (KB923694) Mise à jour de sécurité pour Windows XP (KB923980) Mise à jour de sécurité pour Windows XP (KB924191) Mise à jour de sécurité pour Windows XP (KB924270) Mise à jour de sécurité pour Windows XP (KB924496) Mise à jour de sécurité pour Windows XP (KB924667) Mise à jour de sécurité pour Windows XP (KB925902) Mise à jour de sécurité pour Windows XP (KB926255) Mise à jour de sécurité pour Windows XP (KB926436) Mise à jour de sécurité pour Windows XP (KB927779) Mise à jour de sécurité pour Windows XP (KB927802) Mise à jour de sécurité pour Windows XP (KB928255) Mise à jour de sécurité pour Windows XP (KB928843) Mise à jour de sécurité pour Windows XP (KB929123) Mise à jour de sécurité pour Windows XP (KB930178) Mise à jour de sécurité pour Windows XP (KB931261) Mise à jour de sécurité pour Windows XP (KB931784) Mise à jour de sécurité pour Windows XP (KB932168) Mise à jour de sécurité pour Windows XP (KB933729) Mise à jour de sécurité pour Windows XP (KB935839) Mise à jour de sécurité pour Windows XP (KB935840) Mise à jour de sécurité pour Windows XP (KB936021) Mise à jour de sécurité pour Windows XP (KB938127) Mise à jour de sécurité pour Windows XP (KB938829) Mise à jour de sécurité pour Windows XP (KB939653) Mise à jour de sécurité pour Windows XP (KB941202) Mise à jour pour Windows XP (KB894391) Mise à jour pour Windows XP (KB896727) Mise à jour pour Windows XP (KB898461) Mise à jour pour Windows XP (KB900485) Mise à jour pour Windows XP (KB904942) Mise à jour pour Windows XP (KB908531) Mise à jour pour Windows XP (KB910437) Mise à jour pour Windows XP (KB911280) Mise à jour pour Windows XP (KB916595) Mise à jour pour Windows XP (KB920872) Mise à jour pour Windows XP (KB922582) Mise à jour pour Windows XP (KB927891) Mise à jour pour Windows XP (KB929338) Mise à jour pour Windows XP (KB930916) Mise à jour pour Windows XP (KB931836) Mise à jour pour Windows XP (KB933360) Mise à jour pour Windows XP (KB938828) Mobipocket Reader 6.0 Mozilla Firefox (2.0.0.9) Mozilla Thunderbird (2.0.0.6) MS Export MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) Nero Orban/Coding Technologies AAC/aacPlus Player Pluginâ„¢ 1.0 pByo PDFCreator PhotoFiltre Studio PhotoStitch Picasa 2 PictureGear 4.6Lite PIF DESIGNER2.1 PM Guide de référence PM Guide des logiciels POLLUX BLEU PowerDVD QuickTime Radio Fr Solo 1.8 Radio Media Player RAW Image Task 2.0 RealPlayer RemoteCapture Task 1.1 Satsuki Decoder Pack ScanToWeb Skypeâ„¢ 3.2 Sony Ericsson PC Suite Sony USB Driver Spelling Dictionaries Support For Adobe Reader 8 SplashPhoto SuperPack StreamRipper FR 10.0 TomTom HOME Trust 120 SpaceCam Vade Retro Outllook & Outlook Express VideoLAN VLC media player 0.8.5 WebFldrs XP Winamp (remove only) Windows Genuine Advantage Notifications (KB905474) Windows Installer 3.1 (KB893803) Windows Live Messenger Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Player 11 XviD Video Codec 14052003-1 (Koepi's developer build) Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 702F-CBCF Répertoire de C:\Program Files 02/11/2007 06:42 <REP> . 02/11/2007 06:42 <REP> .. 14/07/2007 10:50 <REP> 7-Zip 23/10/2007 17:27 <REP> AC3Filter 12/07/2007 15:02 <REP> Adobe 14/07/2007 10:13 <REP> ahead 20/06/2006 17:11 <REP> Alwil Software 27/10/2007 14:26 <REP> Apple Software Update 24/09/2005 13:03 <REP> ArcSoft 14/04/2007 14:27 <REP> Astonsoft 14/07/2007 11:02 <REP> Audacity 03/09/2005 16:47 <REP> AVSociety 15/07/2007 15:54 <REP> Burrrn 04/08/2007 18:31 <REP> Canon 05/10/2007 19:13 <REP> CartoExploreur 13/05/2006 18:36 <REP> CD Bank 29/10/2006 17:29 <REP> Cdiscount photos 01/10/2006 08:59 <REP> Club Photo 19/04/2007 16:53 <REP> Combined Community Codec Pack 29/08/2005 11:31 <REP> ComPlus Applications 27/09/2007 08:28 <REP> CopyRightLeft 30/08/2005 00:17 <REP> CyberLink 11/05/2006 18:43 <REP> DFX 04/05/2006 11:21 <REP> directx 03/09/2005 13:51 <REP> Disney Interactive 05/09/2007 17:21 <REP> DivX 29/08/2005 12:11 <REP> EHMINSTALL 11/05/2006 18:30 <REP> EPSON 12/07/2007 15:17 <REP> eSpeak 30/08/2005 00:28 <REP> ffdshow 02/11/2007 07:36 <REP> Fichiers communs 24/06/2006 18:48 <REP> Finding Nemo ScreenMate 02/01/2007 16:01 <REP> FLV Player 30/05/2007 20:21 <REP> Google 10/12/2006 14:38 <REP> Goto Software 24/10/2007 20:03 <REP> IncrediMail 08/08/2007 19:37 <REP> Inkscape 26/10/2007 22:37 <REP> Internet Explorer 19/04/2007 20:06 <REP> Java 30/08/2005 00:22 <REP> K-Lite Codec Pack 24/04/2007 18:55 <REP> LD-Anime 24/04/2007 18:52 <REP> Matroska Playback Pack 24/09/2005 14:27 <REP> Messenger 20/06/2006 17:08 <REP> Messenger Plus! 3 12/06/2007 18:02 <REP> Messenger Plus! Live 04/08/2007 11:29 <REP> Microsoft ActiveSync 29/08/2005 11:35 <REP> microsoft frontpage 29/08/2005 11:57 <REP> Microsoft Office 29/08/2005 11:57 <REP> Microsoft Visual Studio 02/08/2007 15:00 <REP> Mobipocket.com 29/08/2005 11:32 <REP> Movie Maker 02/11/2007 20:17 <REP> Mozilla Firefox 23/10/2007 17:33 <REP> Mozilla Thunderbird 23/10/2007 17:33 <REP> mp3DirectCut 29/08/2005 11:29 <REP> MSN 29/08/2005 11:30 <REP> MSN Gaming Zone 12/06/2007 18:02 <REP> MSN Messenger 18/11/2006 08:23 <REP> MSXML 4.0 23/10/2007 17:33 <REP> NetMeeting 13/09/2005 17:21 <REP> OfficeUpdate11 19/04/2007 16:45 <REP> Orban 13/06/2007 09:53 <REP> Outlook Express 21/08/2007 17:46 <REP> pByo 17/10/2006 20:36 <REP> PDFCreator 23/10/2007 17:33 <REP> PhotoFiltre Studio 27/08/2006 15:32 <REP> Picasa2 27/10/2007 14:30 <REP> QuickTime 26/10/2007 13:19 <REP> Radio Fr Solo 18/08/2006 19:58 <REP> Real 25/10/2007 21:25 <REP> RegCleaner 18/08/2006 19:58 <REP> RichFX 03/09/2005 16:46 <REP> Ringz Studio 18/08/2006 19:11 774 144 RngInterstitial.dll 29/11/2006 18:54 <REP> SAMSUNG 30/08/2005 00:28 <REP> Satsuki Decoder Pack 29/08/2005 11:33 <REP> Services en ligne 07/07/2007 09:53 <REP> Skype 21/08/2007 17:02 <REP> Smart Projects 01/10/2006 09:45 <REP> Sony 07/05/2006 12:58 <REP> Sony Ericsson 24/10/2007 19:49 <REP> Sony Handheld 02/11/2007 06:43 <REP> Spamihilator 01/10/2006 09:38 <REP> SplashData 26/10/2007 14:37 <REP> Spybot - Search & Destroy 21/10/2007 08:10 <REP> Stardock 12/08/2006 22:18 <REP> Stitch 03/12/2006 11:09 <REP> StofWare 23/10/2007 17:36 <REP> StreamRipper32 02/11/2007 07:36 <REP> SUPERAntiSpyware 24/06/2006 18:46 <REP> The Lion King 09/08/2007 14:18 <REP> TomTom HOME 04/05/2006 11:21 <REP> Trust 120 SpaceCam 07/11/2006 21:41 <REP> VideoLAN 23/10/2007 17:38 <REP> Winamp 03/09/2005 16:47 <REP> Winamp3 12/06/2007 18:02 <REP> Windows Live 24/10/2007 19:51 <REP> Windows Live Safety Center 22/12/2006 11:20 <REP> Windows Media Connect 2 28/05/2007 14:18 <REP> Windows Media Player 29/08/2005 11:30 <REP> Windows NT 23/10/2007 17:38 <REP> WinRAR 29/08/2005 11:35 <REP> xerox 30/08/2005 00:20 <REP> XviD 26/09/2007 09:36 <REP> YourWare Solutions 1 fichier(s) 774 144 octets 103 Rép(s) 10 553 540 608 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 702F-CBCF Répertoire de C:\Program Files\fichiers communs 02/11/2007 07:36 <REP> . 02/11/2007 07:36 <REP> .. 12/07/2007 15:01 <REP> Adobe 04/08/2007 18:22 <REP> CANON 29/08/2005 11:57 <REP> Designer 07/08/2006 17:00 <REP> InstallShield 29/06/2006 19:34 <REP> Java 04/08/2007 11:29 <REP> Microsoft Shared 29/08/2005 11:32 <REP> MSSoap 04/01/2007 19:45 <REP> NSV 29/08/2005 13:20 <REP> ODBC 30/04/2006 06:46 <REP> Panda Software 18/08/2006 19:59 <REP> Real 29/08/2005 11:32 <REP> Services 07/07/2007 09:53 <REP> Skype 29/08/2005 13:20 <REP> SpeechEngines 13/06/2007 09:53 <REP> System 07/05/2006 12:58 <REP> Teleca Shared 18/08/2006 19:59 <REP> xing shared 0 fichier(s) 0 octets 19 Rép(s) 10 553 544 704 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 702F-CBCF Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 29/08/2005 11:57 <REP> . 29/08/2005 11:57 <REP> .. 29/08/2005 11:57 <REP> 1033 29/08/2005 11:57 <REP> 1036 15/02/2001 04:45 1 318 912 MSONSEXT.DLL 13/02/2001 07:23 58 784 MSOSV.DLL 03/06/1999 11:09 122 937 MSOWS409.DLL 07/03/2001 06:00 127 033 MSOWS40c.DLL 06/08/2000 08:04 401 462 MSVCP60.DLL 22/01/2001 02:25 69 632 PKMAXCTL.DLL 22/01/2001 02:25 872 448 PKMCDO.DLL 22/01/2001 02:25 159 744 PKMCORE.DLL 07/02/2001 08:59 106 496 PKMFORMS.DLL 12/02/2001 03:03 684 032 PKMRES.DLL 22/01/2001 02:25 28 672 PKMSSTLB.DLL 22/01/2001 02:25 40 960 PKMTEMPL.DLL 22/01/2001 02:25 24 576 PKMTRACE.DLL 22/01/2001 02:25 86 016 PKMWS.DLL 22/01/2001 02:25 237 568 PROMDEMO.DLL 22/01/2001 02:25 184 320 SECMGR.DLL 22/01/2001 02:25 323 584 VAIDDMGR.DLL 22/01/2001 02:25 32 768 VAIMEM.DLL 18 fichier(s) 4 879 944 octets 4 Rép(s) 10 553 544 704 octets libres c:\Documents and Settings\Famille Mutz\Application Data\Adobe\Acrobat\7.0\Updater\AdbeRdr709_fr_FR.exe c:\Documents and Settings\Famille Mutz\Application Data\Microsoft\Installer\{ED386A62-2BA2-4544-A723-5DFFDC283F6A}\_18be6784.exe c:\Documents and Settings\Famille Mutz\Application Data\Microsoft\Installer\{ED386A62-2BA2-4544-A723-5DFFDC283F6A}\_294823.exe c:\Documents and Settings\Famille Mutz\Application Data\Microsoft\Installer\{ED386A62-2BA2-4544-A723-5DFFDC283F6A}\_4ae13d6c.exe c:\Documents and Settings\Famille Mutz\Application Data\Microsoft\Installer\{ED386A62-2BA2-4544-A723-5DFFDC283F6A}\_customicon.exe c:\Documents and Settings\Famille Mutz\Bureau\BorderMaker.exe c:\Documents and Settings\Famille Mutz\Bureau\gecko_genetique.exe c:\Documents and Settings\Famille Mutz\Bureau\Inkscape-0.45.1-1.win32.exe c:\Documents and Settings\Famille Mutz\Bureau\iTunesSetup.exe c:\Documents and Settings\Famille Mutz\Bureau\winpenguins.exe c:\Documents and Settings\Famille Mutz\Bureau\anti-virus\ComboFix.exe c:\Documents and Settings\Famille Mutz\Bureau\anti-virus\SUPERAntiSpyware.exe c:\Documents and Settings\Famille Mutz\Bureau\PDA\logiciels\AdbeRdr20_ppc_fra.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store\Attachments\languagepack_1023.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store\Attachments\magentic_install.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store\Attachments\messenger 6.1.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store\Attachments\MsgPlus-254.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store\Attachments\MsgPlusLive-400.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store\Attachments\spamihilator_0_9_9_9.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store\Attachments\{1A3A93D3-6EDB-46B7-A243-BF474F780A11}\spamihilator_0_9_9_9.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store\Attachments\{76196FB3-D194-47AB-89F8-8AB0B2740F5B}\MsgPlusLive-400.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store\Attachments\{CA3FC445-FC6D-43D6-B0CF-5662AC220942}\languagepack_1023.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store old\Attachments\InstallDialer.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store old\Attachments\messenger 6.1.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store old\Attachments\MsgPlus-254.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{1EB3F4C0-3067-4A05-A454-2EC87E07BBDA}\Message Store old\Attachments\{56ABAF0D-F53D-48F2-9289-E33BA396381D}\MsgPlus-254.exe c:\Documents and Settings\Famille Mutz\Local Settings\Application Data\IM\Identities\{4410558B-D65B-4DE9-A23C-BE34F8797B47}\Message Store\Attachments\{AB344FD1-1346-42B4-8A3E-04A1397F1FD5}\eMule0.42d-Installer.exe c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules401\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules401\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules401\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules404\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules404\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules404\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules405\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules405\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules405\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules406\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules406\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules406\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules407\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules407\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules407\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules408\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules408\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules408\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules409\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules409\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules409\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules40b\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules40b\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules40b\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules40c\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules40c\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules40c\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules40e\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules40e\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules40e\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules410\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules410\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules410\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules411\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules411\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules411\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules412\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules412\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules412\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules413\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules413\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules413\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules414\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules414\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules414\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules415\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules415\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules415\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules419\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules419\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules419\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules41D\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules41D\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules41D\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules41E\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules41E\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules41E\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules41F\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules41F\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules41F\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules804\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules804\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules804\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules816\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules816\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModules816\CNMur86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModulesc0a\CNMlr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModulesc0a\CNMsr86.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4300\LanguageModulesc0a\CNMur86.dll c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll c:\Documents and Settings\Famille Mutz\Application Data\Thunderbird\Profiles\lrjj7gzx.default\extensions\{31513E58-F253-47ad-86DB-D5F21E905429}\components\mintray-9178506d-2005072516-trunk.dll c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll ****** Fin du rapport DiagHelp Veuillez svp envoyer le fichier C:\upload_moi_Z6PO.tar.gz a l'adresse http://upload.malekal.com

salut, Le rapport diaghelp n'arrive pas après l'envois? Si joint le rapport combofix: ComboFix 07-10-26.4 - Famille Mutz 2007-11-02 18:57:41.8 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.164 [GMT 1:00] Running from: C:\Documents and Settings\Famille Mutz\Bureau\anti-virus\ComboFix.exe Command switches used :: C:\Documents and Settings\Famille Mutz\Bureau\anti-virus\CFScript-1.txt * Created a new restore point scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-11-02 19:03:29 - machine was rebooted C:\ComboFix2.txt ... 2007-11-02 06:54 C:\ComboFix3.txt ... 2007-10-26 12:59 . --- E O F ---

et le dernier rapport demandé est là: FPort v2.0 - TCP/IP Process to Port Mapper Copyright 2000 by Foundstone, Inc. http://www.foundstone.com