Bonjour a tous,
depuis environ 4 jours j'ai des pages internet (porno) qui s'ouvrent toutes seules et mon pc se bloque de plus en plus souvent.
Voici le rapport de hijackthis :
Logfile of HijackThis v1.99.1
Scan saved at 16:27:05, on 17/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Logfile of HijackThis v1.99.1
Scan saved at 16:40:57, on 17/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\sstray.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Labtec\Mouse\2.1\moffice.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Fichiers communs\DriveCleaner 2006 Free\SDRmon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Labtec\Mouse\2.1\MOUSE32A.EXE
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\TEMP\win76.tmp.exe
C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Bureau\HijackThis\scanner.exe.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2810AAE0-EDAA-41F6-86F3-FF420FF9052F} - C:\WINDOWS\system32\urqqqpo.dll
O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: (no name) - {7DA39570-5FD2-4f18-94B4-20730CB3F727} - C:\WINDOWS\system32\nhytwhcv.dll
O2 - BHO: (no name) - {F1CFED7F-EED0-4D42-9313-56A78DC475B2} - C:\WINDOWS\system32\vturq.dll
O2 - BHO: (no name) - {FE4FDF23-7EBC-45F9-B1E3-71B334CF01F9} - C:\WINDOWS\system32\vturq.dll
O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Labtec\Mouse\2.1\moffice.exe
O4 - HKLM\..\Run: [WinLiveUpdate] C:\Program Files\Fichiers communs\Microsoft Shared\DAO\svchost.exe
O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [AutoSys] C:\WINDOWS\system32\autosys.exe
O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\system32\hdglridv.dll",setvm
O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner 2006 Free\SDRmon.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [UDial] C:\WINDOWS\system32/udial.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzShadow\YzShadow.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {42E1F024-ECC3-456F-B98A-4CE5ACDBF25C} (ActiveFormX Contrôle) - https://ssl-tb.sitadelle.com/selfca [...] Config.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control) - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/bina [...] b32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: urqqqpo - C:\WINDOWS\SYSTEM32\urqqqpo.dll
O20 - Winlogon Notify: vturq - C:\WINDOWS\system32\vturq.dll
O20 - Winlogon Notify: winepi32 - C:\WINDOWS\SYSTEM32\winepi32.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
Voila je vous en prie aidez moi ! 
Message édité par enjoii89 le 24-01-2007 à 14:11:48
bonjour, 
~Télécharge VundoFix.exe (par Atribune) sur ton Bureau.
http://www.atribune.org/ccount/click.php?id=4
Double-clique VundoFix.exe afin de le lancer
Clique sur le bouton Scan for Vundo.
~Lorsque le scan est complété, clique sur le bouton Remove Vundo
Une invite te demandera si tu veux supprimer les fichiers, clique YES
Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers
Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK.
~Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis dans ta prochaine réponse
Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo
Merci beaucoup d'avoir répondu sham-rock !
Alors :
Le rapport de vundofix :
VundoFix V6.3.2
Checking Java version...
Java version is 1.5.0.9
Scan started at 16:59:50 17/01/2007
Listing files found while scanning....
C:\Program Files\VSAdd-in\VSAdd-in.dll
C:\WINDOWS\system32\hdglridv.dll
C:\WINDOWS\system32\nfmucbjc.exe
C:\WINDOWS\system32\nhytwhcv.dll
C:\WINDOWS\system32\qrutv.bak1
C:\WINDOWS\system32\qrutv.bak2
C:\WINDOWS\system32\qrutv.ini
C:\WINDOWS\system32\qrutv.ini2
C:\WINDOWS\system32\rmsyaxnr.dll
C:\WINDOWS\system32\urqqqpo.dll
C:\WINDOWS\system32\vdirlgdh.ini
C:\WINDOWS\system32\vdirlgdh.ini2
C:\WINDOWS\system32\vturq.dll
C:\WINDOWS\system32\xtgxrmpl.exe
Beginning removal...
Attempting to delete C:\Program Files\VSAdd-in\VSAdd-in.dll
C:\Program Files\VSAdd-in\VSAdd-in.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\hdglridv.dll
C:\WINDOWS\system32\hdglridv.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\nfmucbjc.exe
C:\WINDOWS\system32\nfmucbjc.exe Has been deleted!
Attempting to delete C:\WINDOWS\system32\nhytwhcv.dll
C:\WINDOWS\system32\nhytwhcv.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\qrutv.bak1
C:\WINDOWS\system32\qrutv.bak1 Has been deleted!
Attempting to delete C:\WINDOWS\system32\qrutv.bak2
C:\WINDOWS\system32\qrutv.bak2 Has been deleted!
Attempting to delete C:\WINDOWS\system32\qrutv.ini
C:\WINDOWS\system32\qrutv.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\qrutv.ini2
C:\WINDOWS\system32\qrutv.ini2 Has been deleted!
Attempting to delete C:\WINDOWS\system32\rmsyaxnr.dll
C:\WINDOWS\system32\rmsyaxnr.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\urqqqpo.dll
C:\WINDOWS\system32\urqqqpo.dll Could not be deleted.
Attempting to delete C:\WINDOWS\system32\vdirlgdh.ini
C:\WINDOWS\system32\vdirlgdh.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\vdirlgdh.ini2
C:\WINDOWS\system32\vdirlgdh.ini2 Has been deleted!
Attempting to delete C:\WINDOWS\system32\vturq.dll
C:\WINDOWS\system32\vturq.dll Could not be deleted.
Attempting to delete C:\WINDOWS\system32\xtgxrmpl.exe
C:\WINDOWS\system32\xtgxrmpl.exe Has been deleted!
Performing Repairs to the registry.
Done!
Beginning removal...
Attempting to delete C:\WINDOWS\system32\urqqqpo.dll
C:\WINDOWS\system32\urqqqpo.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\vturq.dll
C:\WINDOWS\system32\vturq.dll Has been deleted!
Performing Repairs to the registry.
Done!
Le rapport de hijackthis :
Logfile of HijackThis v1.99.1
Scan saved at 17:14:08, on 17/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\sstray.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Labtec\Mouse\2.1\moffice.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Fichiers communs\DriveCleaner 2006 Free\SDRmon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Labtec\Mouse\2.1\MOUSE32A.EXE
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Bureau\HijackThis\scanner.exe.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2810AAE0-EDAA-41F6-86F3-FF420FF9052F} - C:\WINDOWS\system32\urqqqpo.dll (file missing)
O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: (no name) - {7DA39570-5FD2-4f18-94B4-20730CB3F727} - C:\WINDOWS\system32\nhytwhcv.dll (file missing)
O2 - BHO: (no name) - {F1CFED7F-EED0-4D42-9313-56A78DC475B2} - C:\WINDOWS\system32\vturq.dll (file missing)
O2 - BHO: (no name) - {FE4FDF23-7EBC-45F9-B1E3-71B334CF01F9} - C:\WINDOWS\system32\vturq.dll (file missing)
O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll (file missing)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Labtec\Mouse\2.1\moffice.exe
O4 - HKLM\..\Run: [WinLiveUpdate] C:\Program Files\Fichiers communs\Microsoft Shared\DAO\svchost.exe
O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [AutoSys] C:\WINDOWS\system32\autosys.exe
O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner 2006 Free\SDRmon.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzShadow\YzShadow.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {42E1F024-ECC3-456F-B98A-4CE5ACDBF25C} (ActiveFormX Contrôle) - https://ssl-tb.sitadelle.com/selfca [...] Config.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control) - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/bina [...] b32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: winepi32 - C:\WINDOWS\SYSTEM32\winepi32.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
voila ! 
attends, je vais chercher
ok pas de soucis (je peux reviser mon anglais en attendant)
merci encore de m'aider
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\59exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\59exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\43exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\43exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\4exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\4exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\38exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\38exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\40exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\40exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\43exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\43exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\39exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\39exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\70exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\70exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\30exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\30exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\50exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\50exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\41exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\41exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\41exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\41exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\29exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\29exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\80exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\80exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\71exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\71exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\7exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\7exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\76exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\76exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\1exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\1exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\89exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\89exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\46exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\46exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\51exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\51exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\85exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\85exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\0exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\0exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\26exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\26exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\27exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\27exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\26exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\26exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\37exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\37exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\1exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\1exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\26exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\26exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\62exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\62exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\52exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\52exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\27exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\27exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\86exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\86exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\0exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\0exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\6exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\6exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\75exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\75exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\92exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\92exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\87exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\87exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\5exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\5exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\48exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\48exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\65exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\65exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\9exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\9exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\55exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\55exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\74exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\74exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\80exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\80exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\12exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\12exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\56exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\56exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\36exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\36exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\83exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\83exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\17exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\17exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\9exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\9exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\6exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\6exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\76exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\76exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\68exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\68exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\63exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\63exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\99exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\99exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\65exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\65exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\39exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\39exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\73exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\73exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\66exmodul32d.5.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\66exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\40exmodul32d.5.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\40exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\5exmodul32d.5.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\5exmodul32d.5.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\33exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\33exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\6exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\6exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\70exmodul32d.6.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\70exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\3exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\3exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\78exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\78exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\63exmodul32d.6.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\63exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\55exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\55exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\82exmodul32d.6.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\82exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\96exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\96exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\88exmodul32d.6.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\88exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\64exmodul32d.6.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\64exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\67exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\67exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\86exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\86exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\48exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\48exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\71exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\71exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\91exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\91exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\77exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\77exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\85exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\85exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\67exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\67exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\73exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\73exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\33exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\33exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\6exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\6exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\26exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\26exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\19exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\19exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\63exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\63exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\38exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\38exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\61exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\61exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\78exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\78exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\64exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\64exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\51exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\51exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\61exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\61exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\65exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\65exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\76exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\76exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\69exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\69exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\87exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\87exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\81exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\81exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\35exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\35exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\65exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\65exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\37exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\37exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\59exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\59exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\1exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\1exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\60exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\60exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\85exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\85exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\51exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\51exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\30exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\30exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\82exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\82exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\28exmodul32d.6.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\28exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\68exmodul32d.6.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\68exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\16exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\16exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\21exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\21exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\97exmodul32d.6.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\97exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\39exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\39exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\94exmodul32d.6.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\94exmodul32d.6.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\56exmodul32d.7.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\56exmodul32d.7.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\79exmodul32d.7.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\79exmodul32d.7.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\23exmodul32d.7.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\23exmodul32d.7.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\92exmodul32d.7.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\92exmodul32d.7.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\40exmodul32d.8.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\40exmodul32d.8.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\11exmodul32d.8.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\11exmodul32d.8.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\35exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\35exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\1exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\1exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\83exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\83exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\40exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\40exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\34exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\34exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\75exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\75exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\17exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\17exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\41exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\41exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\57exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\57exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\27exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\27exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\60exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\60exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\24exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\24exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\91exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\91exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\15exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\15exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\73exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\73exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\4exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\4exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\1exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\1exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\39exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\39exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\82exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\82exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\22exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\22exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\45exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\45exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\63exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\63exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\4exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\4exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\2exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\2exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\19exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\19exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\20exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\20exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\48exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\48exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\26exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\26exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\79exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\79exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\85exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\85exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\20exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\20exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\45exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\45exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\97exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\97exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\67exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\67exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\46exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\46exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\16exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\16exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\29exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\29exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\62exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\62exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\5exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\5exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\7exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\7exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\31exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\31exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\19exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\19exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\56exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\56exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\70exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\70exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\59exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\59exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\96exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\96exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\41exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\41exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\37exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\37exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\34exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\34exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\49exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\49exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\42exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\42exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\23exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\23exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\72exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\72exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\27exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\27exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\47exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\47exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\81exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\81exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\40exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\40exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\30exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\30exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\76exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\76exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\46exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\46exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\55exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\55exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\48exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\48exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\70exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\70exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\21exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\21exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\75exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\75exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\35exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\35exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\21exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\21exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\23exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\23exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\69exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\69exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\83exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\83exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\32exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\32exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\73exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\73exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\24exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\24exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\60exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\60exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\13exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\13exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\49exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\49exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\0exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\0exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\93exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\93exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\90exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\90exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\92exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\92exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\95exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\95exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\78exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\78exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\97exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\97exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\88exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\88exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\31exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\31exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\17exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\17exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\92exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\92exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\36exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\36exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\67exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\67exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\82exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\82exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\93exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\93exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\55exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\55exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\99exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\99exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\28exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\28exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\44exmodul32d.a.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\44exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\54exmodul32d.a.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\54exmodul32d.a.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\72exmodul32d.b.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\72exmodul32d.b.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\67exmodul32d.b.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\67exmodul32d.b.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\91exmodul32d.b.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\91exmodul32d.b.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\96exmodul32d.b.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\96exmodul32d.b.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\68exmodul32d.b.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\68exmodul32d.b.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\11exmodul32d.b.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\11exmodul32d.b.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\11exmodul32d.c.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\11exmodul32d.c.exe:*:Enabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\99exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\99exmodul32d.c.exe:*
isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\99exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\99exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\96exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\96exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\96exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\96exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\92exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\92exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\90exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\90exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\88exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\88exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\88exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\88exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\87exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\87exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\87exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\87exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\86exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\86exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\86exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\86exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\85exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\85exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\84exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\84exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\83exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\83exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\82exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\82exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\82exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\82exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\81exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\81exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\80exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\80exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\77exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\77exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\76exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\76exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\76exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\76exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\72exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\72exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\72exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\72exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\71exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\71exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\71exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\71exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\69exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\69exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\68exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\68exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\67exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\67exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\67exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\67exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\66exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\66exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\65exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\65exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\65exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\65exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\63exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\63exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\63exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\63exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\62exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\62exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\62exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\62exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\61exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\61exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\60exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\60exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\5exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\5exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\59exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\59exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\59exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\59exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\57exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\57exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\55exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\55exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\54exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\54exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\54exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\54exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\52exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\52exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\50exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\50exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\4exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\4exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\49exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\49exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\47exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\47exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\47exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\47exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\46exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\46exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\44exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\44exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\44exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\44exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\43exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\43exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\43exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\43exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\42exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\42exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\40exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\40exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\3exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\3exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\3exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\3exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\39exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\39exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\37exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\37exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\36exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\36exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\35exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\35exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\35exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\35exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\34exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\34exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\33exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\33exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\32exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\32exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\32exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\32exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\31exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\31exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\31exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\31exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\30exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\30exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\30exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\30exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\2exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\2exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\29exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\29exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\28exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\28exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\25exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\25exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\25exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\25exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\23exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\23exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\22exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\22exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\21exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\21exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\21exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\21exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\20exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\20exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\20exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\20exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\1exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\1exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\1exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\1exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\17exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\17exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\17exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\17exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\15exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\15exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\15exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\15exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\14exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\14exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\14exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\14exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\13exmodul32d.c.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\13exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\client\\Local Settings\\Temp\\13exmodul32d.b.exe"="C:\\Documents and Settings\\client\\Local Settings\\Temp\\13exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\9exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\9exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\9exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\9exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\98exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\98exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\96exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\96exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\83exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\83exmodul32d.1.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\82exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\82exmodul32d.1.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\81exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\81exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\69exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\69exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\68exmodul32d.7.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\68exmodul32d.7.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\67exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\67exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\67exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\67exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\66exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\66exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\66exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\66exmodul32d.2.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\66exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\66exmodul32d.1.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\65exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\65exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\65exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\65exmodul32d.2.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\65exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\65exmodul32d.1.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\64exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\64exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\64exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\64exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\63exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\63exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\63exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\63exmodul32d.2.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\62exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\62exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\62exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\62exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\61exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\61exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\61exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\61exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\60exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\60exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\60exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\60exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\5exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\5exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\5exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\5exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\5exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\5exmodul32d.2.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\59exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\59exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\59exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\59exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\58exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\58exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\57exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\57exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\57exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\57exmodul32d.2.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\56exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\56exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\56exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\56exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\55exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\55exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\54exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\54exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\54exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\54exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\53exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\53exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\53exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\53exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\52exmodul32d.8.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\52exmodul32d.8.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\51exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\51exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\51exmodul32d.7.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\51exmodul32d.7.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\50exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\50exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\50exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\50exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\4exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\4exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\4exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\4exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\4exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\4exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\49exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\49exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\49exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\49exmodul32d.1.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\48exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\48exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\48exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\48exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\47exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\47exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\46exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\46exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\46exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\46exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\46exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\46exmodul32d.2.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\45exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\45exmodul32d.2.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\45exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\45exmodul32d.1.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\44exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\44exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\44exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\44exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\43exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\43exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\43exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\43exmodul32d.2.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\43exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\43exmodul32d.1.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\42exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\42exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\42exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\42exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\42exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\42exmodul32d.1.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\3exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\3exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\3exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\3exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\3exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\3exmodul32d.1.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\39exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\39exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\38exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\38exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\38exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\38exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\38exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\38exmodul32d.1.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\37exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\37exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\36exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\36exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\36exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\36exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\36exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\36exmodul32d.2.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\35exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\35exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\35exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\35exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\35exmodul32d.2.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\34exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\34exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\34exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\34exmodul32d.2.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\34exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\34exmodul32d.1.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\33exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\33exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\33exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\33exmodul32d.2.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\33exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\33exmodul32d.1.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\32exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\32exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\32exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\32exmodul32d.a.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\31exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\31exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\31exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\31exmodul32d.a.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\30exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\30exmodul32d.a.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\30exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\30exmodul32d.2.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\2exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\2exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\2exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\2exmodul32d.2.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\2exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\2exmodul32d.1.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\29exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\29exmodul32d.a.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\29exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\29exmodul32d.1.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\28exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\28exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\28exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\28exmodul32d.1.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\27exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\27exmodul32d.1.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\26exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\26exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\26exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\26exmodul32d.1.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\25exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\25exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\25exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\25exmodul32d.b.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\25exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\25exmodul32d.a.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\24exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\24exmodul32d.1.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\23exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\23exmodul32d.a.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\23exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\23exmodul32d.2.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\22exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\22exmodul32d.c.exe:*isabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\22exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\22exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\22exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\22exmodul32d.1.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\21exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\21exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\20exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\20exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\20exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\20exmodul32d.2.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\1exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\1exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\18exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\18exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\17exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\17exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\16exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\16exmodul32d.1.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\15exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\15exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\15exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\15exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\15exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\15exmodul32d.2.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\14exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\14exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\13exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\13exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\13exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\13exmodul32d.2.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\11exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\11exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\11exmodul32d.1.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\11exmodul32d.1.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\10exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\10exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\10exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\10exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\10exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\10exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\10exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\10exmodul32d.2.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\0exmodul32d.c.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\0exmodul32d.c.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\0exmodul32d.b.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\0exmodul32d.b.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\0exmodul32d.a.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\0exmodul32d.a.exe:*:Disabled:Microsoft Update"
"C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\0exmodul32d.2.exe"="C:\\Documents and Settings\\QUENTIN\\Local Settings\\Temp\\0exmodul32d.2.exe:*:Disabled:Microsoft Update"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\10exinjs.n.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\10exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\41exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\41exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\4exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\4exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\71exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\71exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\1exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\1exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\89exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\89exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\45exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\45exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\15exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\15exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\2exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\2exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\93exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\93exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\25exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\25exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\43exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\43exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\56exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\56exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\48exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\48exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\98exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\98exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\9exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\9exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\74exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\74exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\0exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\0exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\7exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\7exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\92exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\92exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\67exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\67exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\23exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\23exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\12exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\12exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\28exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\28exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\85exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\85exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\84exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\84exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\64exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\64exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\20exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\20exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\70exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\70exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\55exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\55exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\73exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\73exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\61exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\61exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\77exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\77exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\21exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\21exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\62exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\62exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\97exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\97exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\86exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\86exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\72exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\72exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\57exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\57exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\51exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\51exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\94exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\94exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\10exinjs.n.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\10exinjs.n.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\36exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\36exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\85exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\85exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\71exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\71exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\45exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\45exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\91exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\91exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\58exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\58exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\81exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\81exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\94exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\94exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\98exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\98exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\86exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\86exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\63exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\63exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\65exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\65exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\26exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\26exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\72exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\72exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\79exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\79exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\19exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\19exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\22exinjs.o.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\22exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\69exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\69exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\27exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\27exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\62exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\62exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\31exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\31exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\77exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\77exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\82exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\82exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\76exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\76exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\33exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\33exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\25exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\25exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\52exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\52exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\43exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\43exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\47exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\47exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\89exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\89exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\45exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\45exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\79exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\79exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\13exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\13exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\99exinjs.o.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\99exinjs.o.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\35exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\35exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\34exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\34exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\71exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\71exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\14exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\14exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\41exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\41exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\99exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\99exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\42exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\42exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\13exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\13exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\97exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\97exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\73exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\73exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\0exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\0exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\31exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\31exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\95exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\95exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\1exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\1exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\85exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\85exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\72exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\72exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\74exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\74exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\78exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\78exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\5exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\5exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\87exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\87exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\40exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\40exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\30exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\30exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\94exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\94exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\39exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\39exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\25exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\25exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\49exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\49exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\90exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\90exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\80exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\80exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\68exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\68exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\48exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\48exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\32exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\32exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\10exinjs.p.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\10exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\23exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\23exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\35exinjs.p.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\35exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\38exinjs.p.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\38exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\22exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\22exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\42exinjs.p.exe"="C:\\DOCUME~1\\KIMI@\\LOCALS~1\\Temp\\42exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\34exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\34exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\21exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\21exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\41exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\41exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\12exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\12exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\70exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\70exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\83exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\83exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\15exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\15exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\20exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\20exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\19exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\19exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\36exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\36exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\11exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\11exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\50exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\50exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\98exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\98exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\54exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\54exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\69exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\69exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\36exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\36exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\62exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\62exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\54exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\54exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\23exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\23exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\87exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\87exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\11exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\11exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\67exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\67exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\96exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\96exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\51exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\51exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\7exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\7exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\28exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\28exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\64exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\64exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\60exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\60exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\73exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\73exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\24exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\24exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\86exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\86exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\74exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\74exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\71exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\71exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\65exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\65exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\93exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\93exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\26exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\26exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\13exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\13exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\46exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\46exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\37exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\37exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\12exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\12exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\58exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\58exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\72exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\72exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\60exinjs.p.exe"="C:\\DOCUME~1\\QUENTIN\\LOCALS~1\\Temp\\60exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\55exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\55exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\38exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\38exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\40exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\40exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\Program Files\\uTorrent\\utorrent.exe"="C:\\Program Files\\uTorrent\\utorrent.exe:*:Enabled:µTorrent"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\2exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\2exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\49exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\49exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\5exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\5exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\84exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\84exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\44exinjs.p.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\44exinjs.p.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\60exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\60exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\42exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\42exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\1exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\1exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\65exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\65exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\79exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\79exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\91exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\91exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\41exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\41exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\68exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\68exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\5exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\5exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\71exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\71exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\37exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\37exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\22exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\22exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTI~1.CL-\\LOCALS~1\\Temp\\67exinjs.q.exe"="C:\\DOCUME~1\\QUENTI~1.CL-\\LOCALS~1\\Temp\\67exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\62exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\62exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTI~1.CL-\\LOCALS~1\\Temp\\99exinjs.q.exe"="C:\\DOCUME~1\\QUENTI~1.CL-\\LOCALS~1\\Temp\\99exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTI~1.CL-\\LOCALS~1\\Temp\\71exinjs.q.exe"="C:\\DOCUME~1\\QUENTI~1.CL-\\LOCALS~1\\Temp\\71exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\53exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\53exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\10exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\10exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\QUENTI~1.CL-\\LOCALS~1\\Temp\\72exinjs.q.exe"="C:\\DOCUME~1\\QUENTI~1.CL-\\LOCALS~1\\Temp\\72exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\16exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\16exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\59exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\59exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\74exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\74exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\0exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\0exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\12exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\12exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\80exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\80exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\61exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\61exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\15exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\15exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\64exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\64exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\56exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\56exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\67exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\67exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\11exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\11exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\99exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\99exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\39exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\39exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\95exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\95exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\17exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\17exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\51exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\51exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\38exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\38exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\87exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\87exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\97exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\97exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\40exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\40exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\8exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\8exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\66exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\66exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\33exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\33exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\83exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\83exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\3exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\3exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\Documents and Settings\\QuEnTiN.CL-B83CD58EF849\\Bureau\\TrackMania Sunrise Demo\\TmSunriseExtremeDemo.exe"="C:\\Documents and Settings\\QuEnTiN.CL-B83CD58EF849\\Bureau\\TrackMania Sunrise Demo\\TmSunriseExtremeDemo.exe:*:Enabled:TmSunriseExtremeDemo"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\21exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\21exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\50exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\50exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\7exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\7exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\19exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\19exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\28exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\28exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\46exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\46exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\18exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\18exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\35exinjs.q.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\35exinjs.q.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\17exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\17exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\40exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\40exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\54exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\54exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\63exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\63exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\99exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\99exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\73exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\73exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\10exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\10exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\13exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\13exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\38exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\38exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\69exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\69exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\83exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\83exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\37exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\37exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\97exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\97exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\16exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\16exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\11exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\11exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\35exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\35exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\79exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\79exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\72exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\72exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\15exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\15exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\42exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\42exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\61exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\61exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\76exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\76exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\26exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\26exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\68exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\68exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\0exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\0exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\48exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\48exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\87exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\87exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\88exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\88exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\33exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\33exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\21exinjs.r.exe"="C:\\DOCUME~1\\client\\LOCALS~1\\Temp\\21exinjs.r.exe:*:Enabled:Microsoft Update"
"C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"="C:\\Program Files\\IncrediMail\\bin\\IMApp.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"="C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\ImLc.exe"="C:\\Program Files\\IncrediMail\\bin\\ImLc.exe:*:Enabled:IncrediMail"
"C:\\Documents and Settings\\QuEnTiN.CL-B83CD58EF849\\Bureau\\skull tag\\skulltag.exe"="C:\\Documents and Settings\\QuEnTiN.CL-B83CD58EF849\\Bureau\\skull tag\\skulltag.exe:*:Enabled:ZDoom"
"C:\\Documents and Settings\\QuEnTiN.CL-B83CD58EF849\\Bureau\\logiciels\\skull tag\\skulltag.exe"="C:\\Documents and Settings\\QuEnTiN.CL-B83CD58EF849\\Bureau\\logiciels\\skull tag\\skulltag.exe:*:Enabled:ZDoom"
"C:\\Program Files\\Ubisoft\\XIII Demo Online\\System\\XIII.exe"="C:\\Program Files\\Ubisoft\\XIII Demo Online\\System\\XIII.exe:*:Enabled:XIII"
"C:\\DOCUME~1\\QUENTI~1.CL-\\LOCALS~1\\Temp\\win80.tmp.exe"="C:\\DOCUME~1\\QUENTI~1.CL-\\LOCALS~1\\Temp\\win80.tmp.exe:*:Enabled:win80.tmp"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
Remaining Files:
---------------
Backups Folder: - C:\DOCUME~1\QUENTI~1.CL-\Bureau\SDFix\backups\backups.zip
Checking For Files with Hidden Attributes :
C:\NTDETECT.COM
C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Bureau\Ma musique\teckno.com 2007 cd-1+cd-2 BY OZE\teckno.com 2007 cd-1 teckno BY OZE NEW\desktop.ini
C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Bureau\Ma musique\teckno.com 2007 cd-1+cd-2 BY OZE\teckno.com 2007 cd-2 BY OZE housse mix‚ NEW\desktop.ini
C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Bureau\Ma musique\teckno.com 2007 cd-1+cd-2 BY OZE\teckno.com 2007 cd-2 BY OZE housse mix‚ NEW\Album inconnu (06-12-2006 16-54-25)\desktop.ini
C:\WINDOWS\system32\avisynth.dll
C:\WINDOWS\system32\AVSredirect.dll
C:\WINDOWS\system32\cygwin1.dll
C:\WINDOWS\system32\cygz.dll
C:\WINDOWS\system32\i420vfw.dll
C:\WINDOWS\system32\Smab.dll
C:\WINDOWS\system32\yv12vfw.dll
C:\Program Files\Fichiers communs\Adobe\ESD\DLMCleanup.exe
C:\Program Files\RamBoost XP\StopRam.exe
C:\WINDOWS\meta4.exe
C:\WINDOWS\MOTA113.exe
C:\WINDOWS\x2.64.exe
C:\WINDOWS\system32\cdplayer.exe.manifest
C:\WINDOWS\system32\logonui.exe.manifest
C:\WINDOWS\system32\x.264.exe
C:\hiberfil.sys
C:\IO.SYS
C:\MSDOS.SYS
C:\pagefile.sys
C:\WINDOWS\system32\KGyGaAvL.sys
C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\6e9c42a1e895ff016ed3a8bb3a107218\BITAD.tmp
C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\eabe1622973d561afb591ab24f972644\download\BIT5FE.tmp
Finished
re,
garde sdfix pour le moment
on s'occupe du pe386
1
~Télécharge rusbfix (par ejvindh)
http://www.uploads.ejvindh.net/rustbfix.exe
Sauvegarde -le sur ton Bureau.
Double clique rustbfix.exe afin de lancer l'outil.
~Note :Si une infection Rustock.b est détectée, une invite t'indiquera qu'il est nécessaire de redémarrer ton PC. Ce redémarrage pourrait être plus long que d'habitude, et il est possible que deux redémarrages soient requis. Tout cela se fera automatiquement.
Suite au(x) redémarrage(s), deux rapports s'ouvriront : (%root%\avenger.txt & %root%\rustbfix\pelog.txt).
~Poste (Copie/Colle) le contenu de ces deux rapports, ainsi qu'un nouveau log smitfraud dans ta prochaine réponse.
2
~Télécharge. F-Secure Blacklight
https://europe.f-secure.com/exclude [...] blbeta.exe
- Lance F-Secure Blacklight (fichier blbeta.exe)
- Accepte la licence, et clique enfin sur "Scan" puis Next et Exit.
- Un rapport fsbl-bxxxx.log (xx sont des chiffres) va être créé dans le même dossier que blbeta.exe
- Ouvre fsbl-bxxxx.log , fais un copier/coller dans ton prochain message.
Attention ! .
Il ne faut pas choisir l'option "Rename". de suite : nous devons analyser le rapport, car des fichiers légitimes peuvent être présents, tel wbemtest.exe .
Tuto de F-Secure BlackLight : (merci à Malekal) .
http://www.malekal.com/tutorial_f- [...] Light.html
SMITFRAUD
SmitFraudFix v2.132
Rapport fait à 21:24:49,76, 17/01/2007
Executé à partir de C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec
»»»»»»»»»»»»»»»»»»»»»»»» Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés
»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
Nettoyage terminé.
»»»»»»»»»»»»»»»»»»»»»»»» Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» Fin
HIJACKSTHIS
Logfile of HijackThis v1.99.1
Scan saved at 21:32:06, on 17/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\sstray.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Labtec\Mouse\2.1\moffice.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Fichiers communs\DriveCleaner 2006 Free\SDRmon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\udial.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Labtec\Mouse\2.1\MOUSE32A.EXE
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Bureau\HijackThis\scanner.exe.exe
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2810AAE0-EDAA-41F6-86F3-FF420FF9052F} - C:\WINDOWS\system32\urqqqpo.dll (file missing)
O2 - BHO: (no name) - {38F4A92E-A670-4CB1-8A99-BBDFD14CE914} - C:\WINDOWS\system32\jkkji.dll
O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll (file missing)
O2 - BHO: (no name) - {57A62825-840C-4FFE-8717-80A308558154} - C:\WINDOWS\system32\qomnlif.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: (no name) - {7DA39570-5FD2-4f18-94B4-20730CB3F727} - C:\WINDOWS\system32\nhytwhcv.dll (file missing)
O2 - BHO: (no name) - {F1CFED7F-EED0-4D42-9313-56A78DC475B2} - C:\WINDOWS\system32\vturq.dll (file missing)
O2 - BHO: (no name) - {FE4FDF23-7EBC-45F9-B1E3-71B334CF01F9} - C:\WINDOWS\system32\vturq.dll (file missing)
O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll (file missing)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Labtec\Mouse\2.1\moffice.exe
O4 - HKLM\..\Run: [WinLiveUpdate] C:\Program Files\Fichiers communs\Microsoft Shared\DAO\svchost.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner 2006 Free\SDRmon.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\system32\ncicmfyu.dll",setvm
O4 - HKLM\..\Run: [UDial] C:\WINDOWS\system32/udial.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzShadow\YzShadow.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {42E1F024-ECC3-456F-B98A-4CE5ACDBF25C} (ActiveFormX Contrôle) - https://ssl-tb.sitadelle.com/selfca [...] Config.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control) - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/bina [...] b32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: jkkji - C:\WINDOWS\system32\jkkji.dll
O20 - Winlogon Notify: qomnlif - C:\WINDOWS\SYSTEM32\qomnlif.dll
O20 - Winlogon Notify: winepi32 - C:\WINDOWS\SYSTEM32\winepi32.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
Alors docteur ?
alors ça devient bon,
maintenant il faut que je rédige le fix à la main,
30 à 45mn
OK ok travail bien alr
t'es trop simpas c gentil de m'aider
mais tu peux prendre ton temps pour "rédiger le fix" car je vais aller me coucher donc je retourne sur le pc demain vers 18-19h
voila bonne soirée !!
ps: poste moi d'autres consignes si il y en a et je les fait dès que je
rentre 
Message édité par enjoii89 le 17-01-2007 à 21:46:04
re,
à toi de jouer
Imprime ou sauvegarde cette procédure sur ton bureau car une bonne partie de ton travail est à faire en mode sans échec. (tu n’auras alors pas accès au net pendant ce temps).Si tu ne comprends pas quelque-chose, dis-le moi.
Etape 1
~Télécharge AVG anti-spyware.
http://www.ewido.net/en/download/
~Mets le à jour. en cliquant sur le bouton mise à jour dans le menu du haut.
Etape 2
~Redémarre en mode sans échec
(f8 au démarrage de ton pc)
http://www.malekal.com/modesansechec.php
~Désinstalle si possible :
Les programmes:
-Boonty Games
-DriveCleaner 2006
-VSAdd-in
~Lance Hijackthis “Do a system scan only”.
Coche les lignes qui suivent si encore présentes et uniquement celles-là.
O2 - BHO: (no name) - {2810AAE0-EDAA-41F6-86F3-FF420FF9052F} - C:\WINDOWS\system32\urqqqpo.dll (file missing)
O2 - BHO: (no name) - {38F4A92E-A670-4CB1-8A99-BBDFD14CE914} - C:\WINDOWS\system32\jkkji.dll
O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll (file missing)
O2 - BHO: (no name) - {57A62825-840C-4FFE-8717-80A308558154} - C:\WINDOWS\system32\qomnlif.dll
O2 - BHO: (no name) - {7DA39570-5FD2-4f18-94B4-20730CB3F727} - C:\WINDOWS\system32\nhytwhcv.dll (file missing)
O2 - BHO: (no name) - {F1CFED7F-EED0-4D42-9313-56A78DC475B2} - C:\WINDOWS\system32\vturq.dll (file missing)
O2 - BHO: (no name) - {FE4FDF23-7EBC-45F9-B1E3-71B334CF01F9} - C:\WINDOWS\system32\vturq.dll (file missing)
O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll (file missing)
O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner 2006 Free\SDRmon.exe"
O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\system32\ncicmfyu.dll",setvm
O4 - HKLM\..\Run: [UDial] C:\WINDOWS\system32/udial.exe
O16 - DPF: {42E1F024-ECC3-456F-B98A-4CE5ACDBF25C} (ActiveFormX Contrôle) - https://ssl-tb.sitadelle.com/selfca [...] Config.ocx
O20 - Winlogon Notify: jkkji - C:\WINDOWS\system32\jkkji.dll
O20 - Winlogon Notify: qomnlif - C:\WINDOWS\SYSTEM32\qomnlif.dll
O20 - Winlogon Notify: winepi32 - C:\WINDOWS\SYSTEM32\winepi32.dll
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
Clique sur Fix checked (en bas à gauche)
Tu cliques sur démarrer : executer/services.msc , type de démarrage désactivé puis tu arrêtes ces lignes de service :
Boonty Games - BOONTY, et "type de démarrage" sur arrêter.
Etape 3
Ensuite tu n'a plus qu'à supprimer les fichiers et les dossiers.
~Supprime
Les fichiers en gras qui suivent si encore présents, ils se trouvent sûrement dans les emplacements indiqués :
C:\WINDOWS\system32\jkkji.dll
C:\WINDOWS\system32\qomnlif.dll
C:\WINDOWS\system32\ncicmfyu.dll
C:\WINDOWS\system32/udial.exe
C:\WINDOWS\SYSTEM32\winepi32.dll
~Supprime les dossiers en gras :
C:\Program Files\Fichiers communs\BOONTY Shared
C:\Program Files\Fichiers communs\DriveCleaner 2006 Free
Note :
| Citation : Pour afficher les dossiers et fichiers cachés du système :
|
Les fichiers et dossiers cachés du système apparaissent alors dans l'explorateur Windows en transparence.
Etape 4
Lance AVG :
~Dans l’onglet analyse, dans Paramètre, clique sur Actions recommandées : choisis Quarantaine.
~Clique sur Analyse puis Analyse complète du système pour commencer le scan.
~Une fois que le scan est terminé, clique sur Appliquer toutes les actions, pour supprimer tous les fichiers infectés trouvés par AVG Anti-Spyware.
~Une fois que la suppression des fichiers infectés a été faite, clique sur enregistrer le rapport et sauvegarde-le sur le bureau.
TutoAVG antispyware : (merci à Malekal) .
http://www.malekal.com/tutorial_AVG_AntiSpyware.html
Etape 5
~Redémarre normalement
cache à nouveau les fichiers pour te protéger.
| Citation :
|
Tu garderas :Masquer les extensions de fichiers connus, décocher.
~Nous allons maintenant sécuriser ton ordinateur en installant un pare-feu. Je te propose ces logiciels :
Le pare-feu :zone alarm que tu peux télécharger ici http://www.zonelabs.com/store/cont [...] lid=nav_za
Tuto pour zone alarm http://www.malekal.com/tutorial_zonealarm.php
ou
Le pare-feu :Kerio que tu peux télécharger ici
http://www.sunbelt-software.com/ev [...] /kerio.exe
Tuto pour Kerio : http://www.malekal.com/kerio_firewall.php
poste-nous le rapport avg et un nouveau log Hijackthis
Bon courage
Salut
j'ai fait ce que tu m'as demandé mais je n'ai pas pu supprimer ces fichiers
C:\WINDOWS\system32\jkkji.dll
C:\WINDOWS\system32\qomnlif.dll
C:\WINDOWS\system32\ncicmfyu.dll
C:\WINDOWS\system32/udial.exe
C:\WINDOWS\SYSTEM32\winepi32.dll
car l'acces était refusé.
Voici les rapports d'analyse de avg :
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 20:40:07 18/01/2007
+ Résultat de l'analyse:
C:\WINDOWS\Temp\win4E.tmp.exe -> Adware.Universa : Nettoyé.
C:\WINDOWS\Temp\win5C7.tmp.exe -> Adware.Universa : Nettoyé.
C:\WINDOWS\Temp\win5E1.tmp.exe -> Adware.Universa : Nettoyé.
C:\WINDOWS\Temp\win90.tmp.exe -> Adware.Universa : Nettoyé.
C:\WINDOWS\Temp\winA.tmp.exe -> Adware.Universa : Nettoyé.
C:\WINDOWS\Temp\winAE.tmp.exe -> Adware.Universa : Nettoyé.
C:\System Volume Information\_restore{FD6630C4-736A-4E19-A8EC-C3F18C035346}\RP468\A0198013.exe -> Adware.WinFixer : Nettoyé.
C:\WINDOWS\Temp\idd18.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd19.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd3.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd31.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd480.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd4AE.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd574.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd595.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd5B4.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd5B5.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd5BC.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd5BE.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd5C1.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd5CF.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd5D1.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd5DB.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd5E5.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd5E8.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd5EB.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd5EF.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd601.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd635.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd640.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd649.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd66F.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd69F.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd6D2.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\iddC8.tmp.exe -> Dialer.Agent.z : Nettoyé.
C:\WINDOWS\Temp\idd14.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd1A.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd2.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd42A.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd43B.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd448.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd454.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd5B6.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd5BF.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd5C2.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd5C6.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd5CA.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd5D2.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd5DF.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd5E6.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd5EA.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd5F0.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd6.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd602.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd615.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd637.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd697.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd7.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\idd7D.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\iddB5.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\iddE.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\iddE6.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\WINDOWS\Temp\iddF.tmp.exe -> Dialer.IDialer.m : Nettoyé.
C:\System Volume Information\_restore{FD6630C4-736A-4E19-A8EC-C3F18C035346}\RP462\A0189208.exe -> Downloader.Small.edb : Nettoyé.
C:\System Volume Information\_restore{FD6630C4-736A-4E19-A8EC-C3F18C035346}\RP462\A0191050.exe -> Hijacker.Costrat.ae : Nettoyé.
C:\RECYCLER\S-1-5-21-823518204-1801674531-682003330-1003\Dc5.exe -> Not-A-Virus.Downloader.Win32.WinFixer.m : Nettoyé.
C:\System Volume Information\_restore{FD6630C4-736A-4E19-A8EC-C3F18C035346}\RP462\A0189204.exe -> Proxy.Agent.lu : Nettoyé.
C:\WINDOWS\system32\winepi32.dll -> Proxy.Agent.lu : Nettoyé.
:mozilla.18:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.19:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.20:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.50:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.25:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.26:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.32:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.33:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.34:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.35:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.31:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Cookies\quentin@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Cookies\quentin@bfast[2].txt -> TrackingCookie.Bfast : Nettoyé.
:mozilla.15:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Cookies\quentin@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Nettoyé.
C:\Documents and Settings\client\Cookies\client@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.36:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.83:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.117:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.119:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Cookies\quentin@linksynergy[2].txt -> TrackingCookie.Linksynergy : Nettoyé.
:mozilla.37:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Cookies\quentin@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Cookies\quentin@www.myaffiliateprogram[2].txt -> TrackingCookie.Myaffiliateprogram : Nettoyé.
C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Cookies\quentin@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Nettoyé.
:mozilla.106:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.107:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.108:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.109:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.110:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.112:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.12:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.13:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.14:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.21:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.22:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.23:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.24:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.44:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.45:C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\l244irhy.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
C:\System Volume Information\_restore{FD6630C4-736A-4E19-A8EC-C3F18C035346}\RP463\A0191129.dll -> Trojan.Agent.acl : Nettoyé.
C:\System Volume Information\_restore{FD6630C4-736A-4E19-A8EC-C3F18C035346}\RP463\A0191209.dll -> Trojan.Agent.acl : Nettoyé.
C:\System Volume Information\_restore{FD6630C4-736A-4E19-A8EC-C3F18C035346}\RP463\A0192438.dll -> Trojan.Agent.acl : Nettoyé.
C:\System Volume Information\_restore{FD6630C4-736A-4E19-A8EC-C3F18C035346}\RP465\A0196662.dll -> Trojan.Agent.acl : Nettoyé.
C:\VundoFix Backups\VSAdd-in.dll.bad -> Trojan.Agent.acl : Nettoyé.
C:\System Volume Information\_restore{FD6630C4-736A-4E19-A8EC-C3F18C035346}\RP466\A0197757.sys -> Trojan.Rustock.nbh : Nettoyé.
Fin du rapport
HIJACKTHIS
Logfile of HijackThis v1.99.1
Scan saved at 20:52:03, on 18/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\sstray.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Labtec\Mouse\2.1\moffice.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\udial.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Labtec\Mouse\2.1\MOUSE32A.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\QuEnTiN.CL-B83CD58EF849\Bureau\HijackThis\scanner.exe.exe
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {10B735B1-B92E-4EDB-A185-BD360D0FD1E7} - C:\WINDOWS\system32\jkkji.dll
O2 - BHO: (no name) - {57A62825-840C-4FFE-8717-80A308558154} - C:\WINDOWS\system32\qomnlif.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Labtec\Mouse\2.1\moffice.exe
O4 - HKLM\..\Run: [WinLiveUpdate] C:\Program Files\Fichiers communs\Microsoft Shared\DAO\svchost.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [UDial] C:\WINDOWS\system32/udial.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzShadow\YzShadow.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control) - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/bina [...] b32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: jkkji - C:\WINDOWS\system32\jkkji.dll
O20 - Winlogon Notify: qomnlif - C:\WINDOWS\SYSTEM32\qomnlif.dll
O20 - Winlogon Notify: winepi32 - winepi32.dll (file missing)
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
Voila
J'ai malgrès tout encore des pages qui s'affichent. 
En attendant de nouvelles instructions.
re,
on continue :
1
~ Télécharge Killbox et installe-le sur ton bureau.
http://www.downloads.subratam.org/KillBox.zip
~Copie le texte ci-bas (sélectionne-le en entier avec ta souris, puis fais un clic-droit dessus et choisis "Copier" ) :
| Citation : C:\WINDOWS\system32\gfarwfsa.exe
|
~Ouvre Killbox:
~Clique sur le menu "File" de KillBox (en haut à gauche) et choisis l'option « Paste from clipboard ».
~Sous "Full Path Of File To Delete" les fichiers viennent de s'inscrire: il faut t'en assurer en cliquant sur la petite flèche à droite!
~Coche les cases : "Delete on Reboot" & "Unregister Dll Before Deleting" .
~Une fois le bouton radio "Delete on Reboot" coché, la case "Single File" va clignoter: clique sur la case "All Files".
~Clique sur la croix blanche sur fond rouge , au message suivant qui va s'afficher:
Citation:
« File will be Removed on Reboot, Do you want to reboot now ? » : répondre YES Le PC va redémarrer et supprimer le fichier de la liste. Sinon redémarre manuellement.
~Une fois que tu auras redémarré, relance Killbox. Clique sur Menu "File" /"Logs" /"Actions History Log". Poste-nous ce rapport.
Tuto Killbox
http://perso.orange.fr/jesses/Docs [...] illBox.htm
2
supprime le dossier:
C:\Program Files\Eurobarre
3
Télécharge sur ton bureau : http://www.malekal.com/download/clean.zip
Une fois sur le bureau, tu fais un clic droit sur ton fichier clean.zip et dans le menu déroulant, tu clics sur extrait tout ou extraire ici.
Cela va créer un dossier clean.
Double-clic sur ce dossier clean, tu y trouveras dedans plusieurs fichiers.
Double-clic sur clean. Cela va ouvrir une fenêtre noire.
Un menu va apparaître, choisis l'option 1 en appuyant sur la touche 1 de ton clavier.
Clean va travailler.
Un rapport Va etre généré, colle le contenu entier ici.