Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

Probleme de trojan.[Résolu]

Kharl Amar
 Partager

Messages recommandés

Kharl Amar Junior Member

Kharl Amar

Posté(e)
  • Auteur
Posté(e)

Le rapport me semble un peu étrange: le scan à pris 2 secondes et le rapport indique qu'aucun fichier n'a été scanné.

Sinon j'ai donc (forcément, puisque que tu as le résultat sous tes yeux) suivis tes conseils en désinstallant ad-aware et avast.

 

Avira AntiVir Personal

Report file date: mardi 10 juin 2008 13:04

 

Scanning for 1321380 virus strains and unwanted programs.

 

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows Vista

Windows version: (Service Pack 1) [6.0.6001]

Boot mode: Save mode

Username: hp

Computer name: PC-DE-DIMITRI

 

Version information:

BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00

AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56

AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37

LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23

LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34

ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58

ANTIVIR2.VDF : 7.0.4.120 2206720 Bytes 01/06/2008 10:46:10

ANTIVIR3.VDF : 7.0.4.170 254976 Bytes 10/06/2008 10:46:12

Engineversion : 8.1.0.55

AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21

AESCRIPT.DLL : 8.1.0.40 266618 Bytes 10/06/2008 10:46:26

AESCN.DLL : 8.1.0.21 119156 Bytes 10/06/2008 10:46:25

AERDL.DLL : 8.1.0.20 418165 Bytes 10/06/2008 10:46:24

AEPACK.DLL : 8.1.1.5 364918 Bytes 10/06/2008 10:46:23

AEOFFICE.DLL : 8.1.0.18 192890 Bytes 10/06/2008 10:46:21

AEHEUR.DLL : 8.1.0.30 1253750 Bytes 10/06/2008 10:46:20

AEHELP.DLL : 8.1.0.15 115063 Bytes 10/06/2008 10:46:17

AEGEN.DLL : 8.1.0.28 307572 Bytes 10/06/2008 10:46:15

AEEMU.DLL : 8.1.0.6 430451 Bytes 10/06/2008 10:46:14

AECORE.DLL : 8.1.0.31 168310 Bytes 10/06/2008 10:46:13

AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53

AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50

AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47

AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49

AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23

AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31

SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02

SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39

NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10

RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25

RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11

 

Configuration settings for the scan:

Jobname..........................: Rootkit search

Configuration file...............: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\PROFILES\rootkit.avp

Logging..........................: high

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: on

Scan boot sector.................: on

Scan memory......................: off

Process scan.....................: off

Scan registry....................: off

Search for rootkits..............: on

Scan all files...................: All files

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Macro heuristic..................: on

File heuristic...................: high

Expanded search settings.........: 0x00300922

 

Start of the scan: mardi 10 juin 2008 13:04

 

Starting search for hidden objects.

The driver could not be initialized.

 

 

End of the scan: mardi 10 juin 2008 13:04

Used time: 00:02 min

 

The scan has been done completely.

 

0 Scanning directories

0 Files were scanned

0 viruses and/or unwanted programs were found

0 Files were classified as suspicious:

0 files were deleted

0 files were repaired

0 files were moved to quarantine

0 files were renamed

0 Files cannot be scanned

0 Files not concerned

0 Archives were scanned

0 Warnings

0 Notes

Kharl Amar Junior Member

Kharl Amar

Posté(e)
  • Auteur
Posté(e)

En effet ça marche mieux avec les bons réglages!

 

 

 

Avira AntiVir Personal

Report file date: mardi 10 juin 2008 13:31

 

Scanning for 1321380 virus strains and unwanted programs.

 

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows Vista

Windows version: (Service Pack 1) [6.0.6001]

Boot mode: Save mode

Username: hp

Computer name: PC-DE-DIMITRI

 

Version information:

BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00

AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56

AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37

LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23

LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34

ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58

ANTIVIR2.VDF : 7.0.4.120 2206720 Bytes 01/06/2008 10:46:10

ANTIVIR3.VDF : 7.0.4.170 254976 Bytes 10/06/2008 10:46:12

Engineversion : 8.1.0.55

AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21

AESCRIPT.DLL : 8.1.0.40 266618 Bytes 10/06/2008 10:46:26

AESCN.DLL : 8.1.0.21 119156 Bytes 10/06/2008 10:46:25

AERDL.DLL : 8.1.0.20 418165 Bytes 10/06/2008 10:46:24

AEPACK.DLL : 8.1.1.5 364918 Bytes 10/06/2008 10:46:23

AEOFFICE.DLL : 8.1.0.18 192890 Bytes 10/06/2008 10:46:21

AEHEUR.DLL : 8.1.0.30 1253750 Bytes 10/06/2008 10:46:20

AEHELP.DLL : 8.1.0.15 115063 Bytes 10/06/2008 10:46:17

AEGEN.DLL : 8.1.0.28 307572 Bytes 10/06/2008 10:46:15

AEEMU.DLL : 8.1.0.6 430451 Bytes 10/06/2008 10:46:14

AECORE.DLL : 8.1.0.31 168310 Bytes 10/06/2008 10:46:13

AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53

AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50

AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47

AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49

AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23

AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31

SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02

SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39

NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10

RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25

RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11

 

Configuration settings for the scan:

Jobname..........................: Manual Selection

Configuration file...............: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\PROFILES\folder.avp

Logging..........................: low

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: on

Scan boot sector.................: on

Boot sectors.....................: C:, D:, E:, F:, G:, H:, I:, J:, K:,

Scan memory......................: on

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: off

Scan all files...................: Intelligent file selection

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Macro heuristic..................: on

File heuristic...................: medium

 

Start of the scan: mardi 10 juin 2008 13:31

 

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'notepad.exe' - '1' Module(s) have been scanned

Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned

Scan process 'unsecapp.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'lsm.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'wininit.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

20 processes with 20 modules were scanned

 

Starting master boot sector scan:

Master boot sector HD0

[iNFO] No virus was found!

Master boot sector HD1

[iNFO] No virus was found!

[WARNING] Le périphérique n'est pas prêt.

[iNFO] Please restart the search with Administrator rights

Master boot sector HD2

[iNFO] No virus was found!

[WARNING] Le périphérique n'est pas prêt.

[iNFO] Please restart the search with Administrator rights

Master boot sector HD3

[iNFO] No virus was found!

[WARNING] Le périphérique n'est pas prêt.

[iNFO] Please restart the search with Administrator rights

Master boot sector HD4

[iNFO] No virus was found!

[WARNING] Le périphérique n'est pas prêt.

[iNFO] Please restart the search with Administrator rights

 

Start scanning boot sectors:

Boot sector 'C:\'

[iNFO] No virus was found!

Boot sector 'D:\'

[iNFO] No virus was found!

Boot sector 'F:\'

[iNFO] In the drive 'F:\' no data medium is inserted!

Boot sector 'G:\'

[iNFO] In the drive 'G:\' no data medium is inserted!

Boot sector 'H:\'

[iNFO] In the drive 'H:\' no data medium is inserted!

Boot sector 'I:\'

[iNFO] In the drive 'I:\' no data medium is inserted!

 

Starting to scan the registry.

The registry was scanned ( '23' files ).

 

 

Starting the file scan:

 

Begin scan in 'C:\' <HP>

C:\pagefile.sys

[WARNING] The file could not be opened!

C:\QooBox\Quarantine\C\Windows\System32\nwshhnwh.dll.vir

[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen

[NOTE] The file was moved to '48c16e1d.qua'!

C:\QooBox\Quarantine\C\Windows\System32\wvUkIXpO.dll.vir

[DETECTION] Is the Trojan horse TR/Vundo.HO

[NOTE] The file was moved to '48a36e20.qua'!

C:\Users\Kharl Amar\AppData\Local\Temp\tmp00018268

[DETECTION] Is the Trojan horse TR/Vundo.HO

[NOTE] The file was moved to '48be71bb.qua'!

C:\Users\Kharl Amar\AppData\Local\Temp\xxyYSmll.dll

[DETECTION] Is the Trojan horse TR/Vundo.HO

[NOTE] The file was moved to '48c771cb.qua'!

C:\Windows\System32\drivers\sptd.sys

[WARNING] The file could not be opened!

Begin scan in 'D:\' <Recovery>

Begin scan in 'E:\' <Mon disque>

Begin scan in 'F:\'

Search path F:\ could not be opened!

Le périphérique n'est pas prêt.

 

Begin scan in 'G:\'

Search path G:\ could not be opened!

Le périphérique n'est pas prêt.

 

Begin scan in 'H:\'

Search path H:\ could not be opened!

Le périphérique n'est pas prêt.

 

Begin scan in 'I:\'

Search path I:\ could not be opened!

Le périphérique n'est pas prêt.

 

Begin scan in 'J:\'

Search path J:\ could not be opened!

Le périphérique n'est pas prêt.

 

Begin scan in 'K:\'

Search path K:\ could not be opened!

Le périphérique n'est pas prêt.

 

 

 

End of the scan: mardi 10 juin 2008 14:40

Used time: 1:08:50 min

 

The scan has been done completely.

 

25657 Scanning directories

673214 Files were scanned

4 viruses and/or unwanted programs were found

0 Files were classified as suspicious:

0 files were deleted

0 files were repaired

4 files were moved to quarantine

0 files were renamed

2 Files cannot be scanned

673210 Files not concerned

4694 Archives were scanned

6 Warnings

4 Notes

HaTe-LoVe-AnGer Member

HaTe-LoVe-AnGer

Posté(e)
Posté(e)

Yop,

 

L'infection semble s'être recrée ...

 

  • Double-clique sur OTMoveIt2.exe pour l'ouvrir.
     
    Note : Si tu es un utilisateur de Vista, clique avec le bouton droit de la souris sur OTMoveIt et sélectionne "Exécuter en tant qu'administrateur".
     
  • Copie le chemin de(s) fichier(s) ci dessous dans le presse-papiers en les sélectionnant puis en appuyant sur CTRL + C (ou bien en les sélectionnant puis en faisant un clic droit et en choisissant Copier) :

 

C:\Users\Kharl Amar\AppData\Local\Temp\*.* /s

 

  • Retourne dans OTMoveIt2, fais un clic droit dans l'espace appelé "Paste List of Files/Folders to Move" (sous une barre jaune) et choisis Coller.
  • Clique sur le bouton rouge nommé Moveit!.
  • Un compte-rendu des fichiers et dossiers transférés sera crée dans le répertoire C:\_OTMoveIt\MovedFiles sous forme date/heure (mmddyyyy_hhmmss.log). Ouvre ce rapport avec le Bloc-Notes et édite-le dans ta prochaine réponse.
  • Ferme OTMoveIt2.

 

Note : Si un fichier ou un dossier ne peut être déplacé, tu seras invité à redémarrer la machine pour mettre fin au processus. Accepte en choisissant Yes.

 

*************************************************

 

Télécharge Deckard's System Scanner sur le bureau.

 

Ferme toutes les applications en cours, antivirus y compris.

 

  • Double-clique sur DSS pour lancer le soft.
  • S'il ne trouve pas HijackThis, clique sur Oui.
  • Clique sur OK à chaque fois que cela sera demandé.
  • L'analyse finie, un fichier texte s'affichera.
  • Poste son contenu dans ta prochaine réponse.

 

Note : Le rapport se trouve ici : C:\Deckard\System Scanner\main.txt.

 

@+

Kharl Amar Junior Member

Kharl Amar

Posté(e)
  • Auteur
Posté(e)

J'ai eu deux rapports pour DSS, je ne post que le main pour l'instant, dis moi si tu as besoin de l'autre.

 

Deckard's System Scanner v20071014.68

Run by hp on 2008-06-10 18:28:27

Computer is in Normal Mode.

--------------------------------------------------------------------------------

 

-- Last 5 Restore Point(s) --

7: 2008-06-10 10:44:45 UTC - RP420 - Avira AntiVir Personal - 10/06/2008 12:44

6: 2008-06-10 10:37:46 UTC - RP418 - Removed Ad-Aware

5: 2008-06-09 17:26:26 UTC - RP417 - Removed Need for Speed™ ProStreet

4: 2008-06-09 10:07:59 UTC - RP416 - Installed Ad-Aware

3: 2008-06-09 10:03:39 UTC - RP415 - Installation du package de pilote logiciel : Zone Labs, a Check Point company Service réseau

 

 

-- First Restore Point --

1: 2008-06-08 09:30:30 UTC - RP413 - Last known good configuration

 

 

Backed up registry hives.

Performed disk cleanup.

 

System Drive C: has 32.33 GiB (less than 15%) free.

 

 

-- HijackThis (run as hp.exe) --------------------------------------------------

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 18:31:30, on 10/06/2008

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\hp\support\hpsysdrv.exe

C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Windows\ehome\ehmsas.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\hp\kbd\kbd.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\Users\hp\Desktop\dss.exe

C:\Windows\system32\conime.exe

C:\Windows\system32\SearchFilterHost.exe

C:\PROGRA~1\TRENDM~1\HIJACK~1\hp.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O2 - BHO: (no name) - {8AE8C912-5723-4172-B6ED-38C4DB482255} - C:\Windows\system32\ssqRLFxx.dll (file missing)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll

O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe

O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE

O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools\daemon.exe"

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')

O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe

O4 - Global Startup: WiFi Station.lnk = C:\Program Files\Hercules\WiFi Station\WiFiStation.exe

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O13 - Gopher Prefix:

O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe

O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe

 

--

End of file - 7891 bytes

 

-- File Associations -----------------------------------------------------------

 

.cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL "%1",%*

 

 

-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

 

R2 atksgt - c:\windows\system32\drivers\atksgt.sys

R2 lirsgt - c:\windows\system32\drivers\lirsgt.sys

 

 

-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

 

R2 AntiVirScheduler (Avira AntiVir Personal – Free Antivirus Scheduler) - "c:\program files\avira\antivir personaledition classic\sched.exe" <Not Verified; Avira GmbH; AntiVir Workstation>

R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>

 

 

-- Device Manager: Disabled ----------------------------------------------------

 

No disabled devices found.

 

 

-- Scheduled Tasks -------------------------------------------------------------

 

2008-06-10 18:27:59 428 --ah----- C:\Windows\Tasks\User_Feed_Synchronization-{E9E7EC14-3612-42CF-8984-3B20A2114B08}.job

 

 

-- Files created between 2008-05-10 and 2008-06-10 -----------------------------

 

2008-06-10 12:45:13 0 d-------- C:\Users\All Users\Avira

2008-06-10 12:45:13 0 d-------- C:\Program Files\Avira

2008-06-10 11:21:15 68096 --a------ C:\Windows\zip.exe

2008-06-10 11:21:15 49152 --a------ C:\Windows\VFind.exe

2008-06-10 11:21:15 136704 --a------ C:\Windows\swsc.exe <Not Verified; SteelWerX; SteelWerX Service Controller>

2008-06-10 11:21:15 161792 --a------ C:\Windows\swreg.exe <Not Verified; SteelWerX; SteelWerX Registry Editor>

2008-06-10 11:21:15 98816 --a------ C:\Windows\sed.exe

2008-06-10 11:21:15 80412 --a------ C:\Windows\grep.exe

2008-06-10 11:21:15 89504 --a------ C:\Windows\fdsv.exe <Not Verified; Smallfrogs Studio; >

2008-06-10 11:20:58 212480 --a------ C:\Windows\swxcacls.exe <Not Verified; SteelWerX; SteelWerX Extended Configurator ACLists>

2008-06-10 10:56:23 0 d-------- C:\Program Files\Trend Micro

2008-06-09 21:30:08 0 d-------- C:\VundoFix Backups

2008-06-09 14:13:31 0 d-------- C:\Program Files\CCleaner

2008-06-09 12:14:36 0 d-------- C:\Users\All Users\Spybot - Search & Destroy

2008-06-09 12:08:09 0 d-------- C:\Users\All Users\Lavasoft

2008-06-09 12:04:18 0 d-------- C:\Users\All Users\CheckPoint

2008-06-09 12:03:34 0 d-------- C:\Windows\system32\ZoneLabs

2008-06-09 12:02:42 0 d-------- C:\Windows\Internet Logs

2008-06-09 11:59:40 0 d-------- C:\Program Files\Alwil Software

2008-06-09 11:54:08 0 dr------- C:\Users\Kharl Amar\Searches

2008-06-09 11:53:59 0 dr------- C:\Users\Kharl Amar\Contacts

2008-06-09 11:53:54 0 d--hs---- C:\Users\Kharl Amar\Voisinage réseau

2008-06-09 11:53:54 0 d--hs---- C:\Users\Kharl Amar\Voisinage d'impression

2008-06-09 11:53:54 0 dr------- C:\Users\Kharl Amar\Videos

2008-06-09 11:53:54 0 d--hs---- C:\Users\Kharl Amar\SendTo

2008-06-09 11:53:54 0 dr------- C:\Users\Kharl Amar\Saved Games

2008-06-09 11:53:54 0 d--hs---- C:\Users\Kharl Amar\Recent

2008-06-09 11:53:54 0 dr------- C:\Users\Kharl Amar\Pictures

2008-06-09 11:53:54 786432 --ahs---- C:\Users\Kharl Amar\NTUSER.DAT

2008-06-09 11:53:54 0 dr------- C:\Users\Kharl Amar\Music

2008-06-09 11:53:54 0 d--hs---- C:\Users\Kharl Amar\Modèles

2008-06-09 11:53:54 0 d--hs---- C:\Users\Kharl Amar\Mes documents

2008-06-09 11:53:54 0 d--hs---- C:\Users\Kharl Amar\Menu Démarrer

2008-06-09 11:53:54 0 d--hs---- C:\Users\Kharl Amar\Local Settings

2008-06-09 11:53:54 0 dr------- C:\Users\Kharl Amar\Links

2008-06-09 11:53:54 0 dr------- C:\Users\Kharl Amar\Favorites

2008-06-09 11:53:54 0 dr------- C:\Users\Kharl Amar\Downloads

2008-06-09 11:53:54 0 dr------- C:\Users\Kharl Amar\Documents

2008-06-09 11:53:54 0 dr------- C:\Users\Kharl Amar\Desktop

2008-06-09 11:53:54 0 d--hs---- C:\Users\Kharl Amar\Cookies

2008-06-09 11:53:54 0 d--hs---- C:\Users\Kharl Amar\Application Data

2008-06-09 11:53:54 0 d--h----- C:\Users\Kharl Amar\AppData

2008-06-07 17:21:23 0 d-------- C:\Program Files\Blobby Volley 2.0 Alpha 6

2008-06-03 18:54:51 0 d-------- C:\Program Files\TrackMania Nations ESWC

2008-05-31 01:22:48 802816 --a------ C:\Windows\system32\divx_xx11.dll <Not Verified; DivX, Inc.; DivX?>

2008-05-31 01:22:48 823296 --a------ C:\Windows\system32\divx_xx0c.dll <Not Verified; DivX, Inc.; DivX®>

2008-05-31 01:22:48 823296 --a------ C:\Windows\system32\divx_xx07.dll <Not Verified; DivX, Inc.; DivX®>

2008-05-31 01:22:46 815104 --a------ C:\Windows\system32\divx_xx0a.dll <Not Verified; DivX, Inc.; DivX®>

2008-05-31 01:22:46 683520 --a------ C:\Windows\system32\DivX.dll <Not Verified; DivX, Inc.; DivX®>

2008-05-28 17:19:03 0 d-------- C:\PerfLogs

2008-05-26 21:04:00 0 d-------- C:\Program Files\Microsoft SQL Server Compact Edition

2008-05-26 20:59:52 0 d--hs--c- C:\Program Files\Common Files\WindowsLiveInstaller

2008-05-26 20:59:11 0 d-------- C:\Users\All Users\WLInstaller

2008-05-26 18:14:17 0 d-------- C:\RomStation

2008-05-25 20:49:19 0 d-------- C:\DeusEx

2008-05-23 00:22:18 3596288 --a------ C:\Windows\system32\qt-dx331.dll

2008-05-23 00:19:46 196608 --a------ C:\Windows\system32\dtu100.dll <Not Verified; DivX, Inc.; DivX, Inc. dtu100>

2008-05-23 00:19:46 81920 --a------ C:\Windows\system32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100>

2008-05-23 00:18:54 12288 --a------ C:\Windows\system32\DivXWMPExtType.dll

2008-05-12 21:00:08 0 d-------- C:\Temp

2008-05-10 11:06:27 0 d-------- C:\Windows\system32\Adobe

 

 

-- Find3M Report ---------------------------------------------------------------

 

2008-06-10 18:26:33 0 d-------- C:\Users\hp\AppData\Roaming\uTorrent

2008-06-10 16:13:56 678730 --a------ C:\Windows\system32\perfh00C.dat

2008-06-10 16:13:56 127798 --a------ C:\Windows\system32\perfc00C.dat

2008-06-10 12:38:18 0 d-------- C:\Program Files\Common Files

2008-06-09 11:45:45 0 d-------- C:\Program Files\Kaspersky Lab

2008-06-08 17:00:21 0 d-------- C:\Program Files\DivX

2008-06-07 12:11:48 0 d-------- C:\Program Files\iGnuteel

2008-05-28 17:26:58 174 --ahs---- C:\Program Files\desktop.ini

2008-05-28 17:19:42 0 d-------- C:\Program Files\Windows Sidebar

2008-05-28 17:19:42 0 d-------- C:\Program Files\Windows Photo Gallery

2008-05-28 17:19:42 0 d-------- C:\Program Files\Windows Mail

2008-05-28 17:19:42 0 d-------- C:\Program Files\Windows Journal

2008-05-28 17:19:42 0 d-------- C:\Program Files\Windows Collaboration

2008-05-28 17:19:42 0 d-------- C:\Program Files\Windows Calendar

2008-05-28 17:19:42 0 d-------- C:\Program Files\Movie Maker

2008-05-28 17:19:41 0 d-------- C:\Program Files\Windows Defender

2008-05-28 12:42:16 0 d-------- C:\Program Files\Windows Live

2008-05-27 23:26:40 0 d-------- C:\Users\hp\AppData\Roaming\Roxio

2008-05-26 21:01:07 0 d-------- C:\Program Files\MSN Messenger

2008-05-12 17:21:57 0 d--h----- C:\Program Files\InstallShield Installation Information

2008-05-12 17:19:13 0 d-------- C:\Program Files\LucasArts

2008-05-12 17:16:51 0 d-------- C:\Program Files\Esprit Des Elements

2008-05-12 17:12:27 0 d-------- C:\Program Files\Webteh

2008-05-12 17:12:04 0 d-------- C:\Users\hp\AppData\Roaming\BSplayer

2008-05-12 17:10:10 0 d-------- C:\Program Files\Bethesda Softworks

2008-05-12 17:04:06 0 d-------- C:\Program Files\Wesnoth 1.3.15a

2008-05-11 21:48:19 0 d-------- C:\Users\hp\AppData\Roaming\DAEMON Tools

2008-05-11 21:48:19 0 d-------- C:\Program Files\SWKotOR2

2008-04-24 22:22:08 0 d-------- C:\Program Files\Apple Software Update

2008-04-20 22:04:03 0 d-------- C:\Program Files\Google

2008-04-20 11:01:36 43520 --a------ C:\Windows\system32\CmdLineExt03.dll

2008-04-19 17:42:49 0 d-------- C:\Program Files\Hercules

2008-04-15 19:02:40 0 d-------- C:\Users\hp\AppData\Roaming\SystemRequirementsLab

2008-04-14 10:55:28 0 d-------- C:\Program Files\Anno 1701

 

 

-- Registry Dump ---------------------------------------------------------------

 

*Note* empty entries & legit default entries are not shown

 

 

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8AE8C912-5723-4172-B6ED-38C4DB482255}]

C:\Windows\system32\ssqRLFxx.dll

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"hpsysdrv"="c:\hp\support\hpsysdrv.exe" [28/09/2006 15:42]

"KBD"="C:\HP\KBD\KbdStub.EXE" [08/12/2006 18:16]

"OsdMaestro"="C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" [15/02/2007 12:59]

"RtHDVCpl"="RtHDVCpl.exe" [01/03/2007 17:38 C:\Windows\RtHDVCpl.exe]

"HP Software Update"="c:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [16/02/2005 23:11]

"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [23/09/2007 11:26]

"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [22/02/2008 05:25]

"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [11/01/2008 23:16]

"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [28/03/2008 23:37]

"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [30/03/2008 10:36]

"NvSvc"="C:\Windows\system32\nvsvc.dll" [11/12/2007 17:06]

"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [11/12/2007 17:06]

"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [11/12/2007 17:06]

"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [03/03/2008 15:05]

"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [12/02/2008 10:06]

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [19/01/2008 09:33]

"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [20/09/2007 20:28]

"msnmsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [18/10/2007 11:34]

"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [19/01/2008 09:33]

"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools\daemon.exe" [15/12/2007 12:02]

"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [28/01/2008 11:43]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce]

"Launcher"=%WINDIR%\SMINST\launcher.exe

 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\

Outil de mise … jour Google.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [20/09/2007 20:28:37]

WiFi Station.lnk - C:\Program Files\Hercules\WiFi Station\WiFiStation.exe [19/04/2008 17:43:21]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"=2 (0x2)

"EnableLUA"=0 (0x0)

"EnableSecureUIAPaths"=0 (0x0)

"EnableVirtualization"=0 (0x0)

"EnableUIADesktopToggle"=0 (0x0)

"DisableRegistryTools"=0 (0x0)

"HideLegacyLogonScripts"=0 (0x0)

"HideLogoffScripts"=0 (0x0)

"RunLogonScriptSync"=1 (0x1)

"RunStartupScriptSync"=0 (0x0)

"HideStartupScripts"=0 (0x0)

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]

"HideLegacyLogonScripts"=0 (0x0)

"HideLogoffScripts"=0 (0x0)

"RunLogonScriptSync"=1 (0x1)

"RunStartupScriptSync"=0 (0x0)

"HideStartupScripts"=0 (0x0)

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

@="Volume shadow copy"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

@="IEEE 1394 Bus host controllers"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

@="SBP2 IEEE 1394 Devices"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

@="SecurityDevices"

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalService nsi lltdsvc SSDPSRV upnphost SCardSvr w32time EventSystem RemoteRegistry WinHttpAutoProxySvc lanmanworkstation TBS SLUINotify THREADORDER fdrespub netprofm fdphost wcncsvc QWAVE Mcx2Svc WebClient SstpSvc

LocalSystemNetworkRestricted hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc EMDMgmt TabletInputService wlansvc WPDBusEnum

 

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6b857c3a-57a7-11dc-8b7e-001bb98630ba}]

AutoRun\command- K:\LaunchU3.exe -a

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{93f5cf2a-898f-11dc-8d3e-001bb98630ba}]

AutoRun\command- J:\Setup.now.exe

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d80d1365-5e52-11dc-a2bb-001bb98630ba}]

AutoRun\command- K:\Menu.exe

 

 

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]

C:\Windows\system32\unregmp2.exe /ShowWMP

 

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]

%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI

 

 

 

-- End of Deckard's System Scanner: finished at 2008-06-10 18:35:55 ------------

 

 

 

Et voila le rapport de OTmoveIT

< C:\Users\Kharl Amar\AppData\Local\Temp\*.* /s >

C:\Users\Kharl Amar\AppData\Local\Temp\jusched.log moved successfully.

C:\Users\Kharl Amar\AppData\Local\Temp\Kharl Amar.bmp moved successfully.

C:\Users\Kharl Amar\AppData\Local\Temp\modern-wizard.bmp moved successfully.

C:\Users\Kharl Amar\AppData\Local\Temp\QTInstallCode.log moved successfully.

C:\Users\Kharl Amar\AppData\Local\Temp\wmsetup.log moved successfully.

C:\Users\Kharl Amar\AppData\Local\Temp\~DFC6B2.tmp moved successfully.

 

OTMoveIt2 by OldTimer - Version 1.0.4.2 log created on 06102008_182429

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...