probleme avec "IEXPLORE.EXE"[résolu]
Forum Sécurité - Virus : probleme avec "IEXPLORE.EXE"[résolu]
Bonjour a tous,
J'aurais bien voulu me débrouillé tout seul mais la je n'arrive pas a résoudre mon problème.
J'ai déja fait quand meme pas mal de recherche sur le net , y compris sur ce forum qui contient un sujet qui ressemble à peu près à mon problème (celui nommé IEXPLORE.EXE) , a savoir :
J' ai le processus IEXPLORE.EXE qui se lance tout le temps , j'ai beau l'arrété en "terminant le processus" , il revient tout le temps... et me mange jusqu'a 100 000ko de ram , a l'heure ou j'écrit le message 30 000 ko seulement, il utilise pas l'uc aussi ( entre 0 et 30 %).
Deplus des que le processus est actif j'entends tout le temps, à intervalle de temps aléatoire allant de 1 sec a 1 min un son. Ce son est le meme que quand on ouvre une page sur internet explorer je crois et il est aussi le meme quand on veut remonter dans les répertoire dans une simple fenetre windows.
Voila j'éspere que j'ai été clair.
Dans l'attente d'une solution si elle existe 
PS : a un moment donné je n'avait pas d'antivirus... mais la j'ai avast, j'ai installé hier, ccleaner, avg antispayare , réçamment hijackthis et je viens de suivre la procédure décrite dans le sujet suivant... sans succes : http://forum.telecharger.01net.com [...] ges-1.html
si quelqu'un pourait m'aidez ca serait avec un grand plaisir.
Message édité par mickael01 le 04-04-2007 à 12:48:37
Personne n'a de solution, ou une piste ? 
J'ai suivi votre procédure bob, voici les deux raport :
Normal Mode:
Checking Files:
No Trojan Files Found...
ADS Check:
Final Check:
Remaining Services:
------------------
[COLOR=RED][B]Rootkit huy32 maybe active, Use a Rootkit scanner![/COLOR][/B]
[COLOR=RED][B]Rootkit PE386 maybe active, Use a Rootkit scanner![/COLOR][/B]
[COLOR=RED][B]Rootkit lzx32 maybe active, Use a Rootkit scanner![/COLOR][/B]
[COLOR=RED][B]Rootkit msguard maybe active, Use a Rootkit scanner![/COLOR][/B]
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"F:\\eMule\\emule.exe"="F:\\eMule\\emule.exe:*:Enabled:eMule"
"I:\\World of Warcraft\\WoW-1.12.x-to-2.0.1-frFR-patch-downloader.exe"="I:\\World of Warcraft\\WoW-1.12.x-to-2.0.1-frFR-patch-downloader.exe:*:Enabled:Blizzard Downloader"
"I:\\World of Warcraft\\BackgroundDownloader.exe"="I:\\World of Warcraft\\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"I:\\World of Warcraft\\WoW-2.0.3-frFR-downloader.exe"="I:\\World of Warcraft\\WoW-2.0.3-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"I:\\World of Warcraft\\Repair.exe"="I:\\World of Warcraft\\Repair.exe:*:Enabled:Blizzard Repair Utility"
"I:\\World of Warcraft\\WoW-2.0.4.6314-to-2.0.5.6320-frFR-downloader.exe"="I:\\World of Warcraft\\WoW-2.0.4.6314-to-2.0.5.6320-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"I:\\World of Warcraft\\WoW-2.0.3.6299-to-2.0.5.6320-frFR-downloader.exe"="I:\\World of Warcraft\\WoW-2.0.3.6299-to-2.0.5.6320-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"I:\\World of Warcraft\\WoW-2.0.5.6320-to-2.0.6.6337-frFR-downloader.exe"="I:\\World of Warcraft\\WoW-2.0.5.6320-to-2.0.6.6337-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"J:\\WINDOWS\\system32\\svchost.exe"="J:\\WINDOWS\\system32\\svchost.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\75exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\75exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\23exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\23exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\82exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\82exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\19exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\19exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\16exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\16exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\43exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\43exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\47exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\47exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\2exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\2exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\24exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\24exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\Program Files\\Macromedia\\Dreamweaver 8\\Dreamweaver.exe"="J:\\Program Files\\Macromedia\\Dreamweaver 8\\Dreamweaver.exe:*:Enabled
reamweaver 8"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\56exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\56exinjs.a2.exe:*:Enabled:Microsoft Update"
"I:\\World of Warcraft\\WoW-2.0.6.6337-to-2.0.7.6383-frFR-downloader.exe"="I:\\World of Warcraft\\WoW-2.0.6.6337-to-2.0.7.6383-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"I:\\World of Warcraft\\WoW-2.0.7.6383-to-2.0.8.6403-frFR-downloader.exe"="I:\\World of Warcraft\\WoW-2.0.7.6383-to-2.0.8.6403-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"J:\\Program Files\\Java\\jdk1.6.0\\jre\\bin\\java.exe"="J:\\Program Files\\Java\\jdk1.6.0\\jre\\bin\\java.exe:*:Enabled:Java(TM) Platform SE binary"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\83exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\83exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\84exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\84exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\79exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\79exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\94exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\94exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\52exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\52exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\53exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\53exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\81exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\81exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\91exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\91exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\8exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\8exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\26exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\26exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\7exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\7exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\35exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\35exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\64exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\64exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\22exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\22exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\6exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\6exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\29exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\29exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\76exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\76exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\42exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\42exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\74exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\74exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\1exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\1exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\12exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\12exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\98exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\98exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\72exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\72exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\Program Files\\MSN Messenger\\msnmsgr.exe"="J:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\38exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\38exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\93exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\93exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\21exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\21exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\11exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\11exinjs.a2.exe:*:Enabled:Microsoft Update"
"I:\\World of Warcraft\\WoW-2.0.8.6403-to-2.0.10.6448-frFR-downloader.exe"="I:\\World of Warcraft\\WoW-2.0.8.6403-to-2.0.10.6448-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\80exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\80exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\61exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\61exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\25exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\25exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\36exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\36exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\10exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\10exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\13exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\13exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\55exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\55exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\41exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\41exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\66exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\66exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\69exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\69exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\85exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\85exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\70exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\70exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\97exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\97exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\62exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\62exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\90exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\90exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\46exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\46exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\30exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\30exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\33exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\33exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\54exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\54exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\73exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\73exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\18exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\18exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\92exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\92exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\17exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\17exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\78exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\78exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\71exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\71exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\88exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\88exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\27exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\27exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\Documents and Settings\\Mickaël\\.netbeans\\5.5\\emulators\\wtk22_win\\emulator\\wtk22\\bin\\emulator.exe"="J:\\Documents and Settings\\Mickaël\\.netbeans\\5.5\\emulators\\wtk22_win\\emulator\\wtk22\\bin\\emulator.exe:*:Enabled:emulator"
"J:\\Documents and Settings\\Mickaël\\.netbeans\\5.5\\emulators\\wtk22_win\\emulator\\wtk22\\bin\\zayit.exe"="J:\\Documents and Settings\\Mickaël\\.netbeans\\5.5\\emulators\\wtk22_win\\emulator\\wtk22\\bin\\zayit.exe:*:Enabled:zayit"
"J:\\Program Files\\netbeans-5.5\\mobility7.3\\emulators-inst\\emulator\\wtk22\\bin\\emulator.exe"="J:\\Program Files\\netbeans-5.5\\mobility7.3\\emulators-inst\\emulator\\wtk22\\bin\\emulator.exe:*:Enabled:emulator"
"J:\\Program Files\\Java\\jdk1.6.0\\bin\\java.exe"="J:\\Program Files\\Java\\jdk1.6.0\\bin\\java.exe:*:Enabled:Java(TM) Platform SE binary"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\63exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\63exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\14exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\14exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\45exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\45exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\28exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\28exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\44exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\44exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\65exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\65exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\48exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\48exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\0exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\0exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\96exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\96exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\60exinjs.a2.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\60exinjs.a2.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\60exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\60exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\82exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\82exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\76exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\76exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\66exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\66exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\72exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\72exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\51exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\51exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\43exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\43exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\69exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\69exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\53exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\53exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\59exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\59exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\61exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\61exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\15exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\15exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\95exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\95exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\6exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\6exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\12exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\12exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\52exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\52exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\57exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\57exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\37exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\37exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\92exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\92exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\19exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\19exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\65exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\65exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\25exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\25exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\54exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\54exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\1exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\1exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\94exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\94exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\79exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\79exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\58exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\58exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\55exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\55exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\88exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\88exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\29exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\29exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\73exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\73exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\89exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\89exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\0exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\0exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\48exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\48exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\42exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\42exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\71exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\71exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\70exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\70exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\36exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\36exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\10exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\10exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\55exml32.9.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\55exml32.9.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\46exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\46exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\11exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\11exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\90exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\90exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\87exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\87exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\20exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\20exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\23exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\23exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\84exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\84exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\91exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\91exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\39exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\39exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\44exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\44exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\64exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\64exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\68exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\68exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\64exml32.9.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\64exml32.9.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\56exml32.9.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\56exml32.9.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\13exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\13exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\91exed32_2.d.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\91exed32_2.d.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\61exed32_2.d.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\61exed32_2.d.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\41exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\41exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\33exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\33exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\37exml32.9.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\37exml32.9.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\85exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\85exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\62exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\62exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\3exml32.9.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\3exml32.9.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\74exml32.9.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\74exml32.9.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\99exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\99exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\36exml32.9.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\36exml32.9.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\75exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\75exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\56exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\56exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\67exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\67exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\32exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\32exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\98exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\98exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\85exed32_2.d.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\85exed32_2.d.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\5exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\5exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\63exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\63exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\69exed32_2.d.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\69exed32_2.d.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\14exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\14exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\54exml32.9.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\54exml32.9.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\56exed32_2.d.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\56exed32_2.d.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\12exed32_2.d.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\12exed32_2.d.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\65exml32.9.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\65exml32.9.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\86exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\86exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\35exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\35exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\38exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\38exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\97exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\97exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\2exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\2exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\8exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\8exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\3exinjs.a3.exe"="J:\\DOCUME~1\\MICKAL~1\\LOCALS~1\\Temp\\3exinjs.a3.exe:*:Enabled:Microsoft Update"
"J:\\Program Files\\Skype\\Phone\\Skype.exe"="J:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"J:\\Program Files\\MSN Messenger\\msnmsgr.exe"="J:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
Remaining Files:
---------------
Checking For Files with Hidden Attributes :
J:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\027a59d992dff23d0bef67a9f75bdfca\BIT6.tmp
Finished
--------------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 11:42:17, on 04/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
J:\WINDOWS\System32\smss.exe
J:\WINDOWS\system32\winlogon.exe
J:\WINDOWS\system32\services.exe
J:\WINDOWS\system32\lsass.exe
J:\WINDOWS\system32\svchost.exe
J:\WINDOWS\System32\svchost.exe
J:\WINDOWS\system32\spoolsv.exe
J:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
J:\WINDOWS\ATKKBService.exe
J:\Program Files\Alwil Software\Avast4\ashServ.exe
J:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
J:\WINDOWS\system32\nvsvc32.exe
J:\WINDOWS\system32\svchost.exe
J:\WINDOWS\system32\nutsrv4.exe
J:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
J:\Program Files\Alwil Software\Avast4\ashWebSv.exe
J:\WINDOWS\System32\svchost.exe
J:\WINDOWS\Explorer.EXE
J:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
J:\Program Files\VIA\RAID\raid_tool.exe
J:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
J:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
J:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe
J:\WINDOWS\system32\RUNDLL32.EXE
J:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
J:\Program Files\RivaTuner v2.0 Final Release\RivaTuner.exe
J:\Program Files\Winamp\winampa.exe
J:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
J:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
J:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
J:\WINDOWS\system32\ctfmon.exe
J:\Program Files\SuperCopier\SuperCopier.exe
J:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
J:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
J:\Program Files\Skype\Phone\Skype.exe
J:\Program Files\MSN Messenger\MsnMsgr.Exe
J:\Program Files\Messenger\msmsgs.exe
J:\Program Files\Skype\Plugin Manager\SkypePM.exe
J:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe
F:\eMule\emule.exe
J:\WINDOWS\system32\notepad.exe
J:\WINDOWS\system32\wuauclt.exe
J:\WINDOWS\system32\wuauclt.exe
J:\Program Files\Mozilla Firefox\firefox.exe
J:\Documents and Settings\Mickaël\Bureau\hjt\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - J:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - J:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - J:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - J:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - J:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "J:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE J:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Soltek] J:\WINDOWS\system32\autorun.exe
O4 - HKLM\..\Run: [RaidTool] J:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKLM\..\Run: [NeroFilterCheck] J:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Norton Ghost 9.0] J:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "J:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Adobe Photo Downloader] "J:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NuTCSetupEnviron] J:\Program Files\Rational\Rational Test\nutcroot\bin\ncoeenv.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] J:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE J:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RivaTuner] "J:\Program Files\RivaTuner v2.0 Final Release\RivaTuner.exe" /T
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "J:\Program Files\RivaTuner v2.0 Final Release\RivaTuner.exe" /S
O4 - HKLM\..\Run: [WinampAgent] J:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [OpwareSE2] "J:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [OPSE reminder] "J:\Program Files\ScanSoft\OmniPageSE2.0\EregFre\Ereg.exe" -r "J:\Program Files\ScanSoft\OmniPageSE2.0\EregFre\ereg.ini"
O4 - HKLM\..\Run: [avast!] J:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "J:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] J:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SuperCopier.exe] J:\Program Files\SuperCopier\SuperCopier.exe
O4 - HKCU\..\Run: [Skype] "J:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MsnMsgr] "J:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "J:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ASUS SmartDoctor] J:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start
O4 - HKCU\..\Run: [eMuleAutoStart] F:\eMule\emule.exe -AutoStart
O4 - Startup: Xinek.lnk = J:\Program Files\Xinek\Xinek.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = J:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = J:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://J:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - J:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - J:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - J:\Program Files\Yahoo!\Common\yinsthelper.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{20A33123-A3E1-4385-9E7A-44939FDCA322}: NameServer = 86.64.145.142 84.103.237.142
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - J:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "J:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - J:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - J:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - J:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - Unknown owner - J:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - J:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - J:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - J:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Norton Ghost - Unknown owner - J:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe (file missing)
O23 - Service: NuTCRACKERService - DataFocus, Inc. - J:\WINDOWS\system32\nutsrv4.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - J:\WINDOWS\system32\nvsvc32.exe
PS :A savoir j'ai eu 1 message d'erreur au redémarge , comme quoi il n'avait pas trouvé J\...RunThis.batx\RunThis.bat
Pour l'instant j'ai l'impression que le virus ne se montre plus, peut etre est-t-il éradiqué, je vous en dirais plus d'ici une petite demi heure.
Re,
Ne te sauve pas trop vite !!
STP enleve la mention résolu car tu es encore infecté
1/ Télécharge Rustbfix (par ejvindh)
http://www.uploads.ejvindh.net/rustbfix.exe
Sauvegarde-le sur ton Bureau.
Double clique rustbfix.exe afin de lancer l'outil.
Si une infection Rustock.b est détectée, une invite t'indiquera qu'il est nécessaire de redémarrer le PC. Ce redémarrage pourrait être plus long que d'habitude, et il est possible que deux redémarrages soient requis. Tout cela se fera automatiquement.
Suite au(x) redémarrage(s), deux rapports s'ouvriront : (C:\avenger.txt & C:\rustbfix\pelog.txt).
Copie/Colle le contenu de ces deux rapports.
2/ Télécharge combofix.exe (par sUBs) sur ton Bureau
http://download.bleepingcomputer.com/sUBs/combofix.exe
Double clique combofix.exe et suis les invites.
Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
