un antivirus pour "MyPictures" SVP.

Un bonjour ?

Télécharge Hijackthis (de Merjin).
Dézippe-le dans un dossier ou sur ton Bureau.

Lance l'application (Hijackthis.exe) :
- Choisis l'option "Do a system scan and save a logfile"
- Le Bloc-Notes s'ouvre, poste son contenu :

-> Edition / Sélectionner tout
-> Edition / Copier
-> Clique-Droit / Coller dans ta réponse

AIDE : Tuto en vidéo sur Hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 17:05:41, on 10-05-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\taskmger.com
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\zstatus.exe
C:\WINDOWS\system32\WISPTIS.EXE
H:\systems.com
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
H:\systems.com
H:\systems.com
H:\systems.com
C:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Bureau\hijackthis\HijackThis.exe

O17 - HKLM\System\CCS\Services\Tcpip\..\{80B5CF3B-FC6C-45FD-BDDA-68F33B2EC925}: NameServer = 208.67.222.222 193.55.10.102

Logfile of HijackThis v1.99.1
Scan saved at 15:34:18, on 10-05-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\taskmger.com
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\zstatus.exe
C:\WINDOWS\system32\WISPTIS.EXE
H:\systems.com
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
D:\Bureau\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
F2 - REG:system.ini: Shell=Explorer.exe taskmger.com
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O4 - HKLM\..\Run: [Systry] C:\WINDOWS\system32\notepad.exe
O4 - HKLM\..\Run: [userd] C:\WINDOWS\RECYCLER\systems.com
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

Re,

Télécharge VundoFix.exe (par Atribune) sur ton Bureau.

Double-clique VundoFix.exe afin de le lancer

Clique sur le bouton Scan for Vundo

Lorsque le scan est complété, clique sur le bouton Remove Vundo

Une invite te demandera si tu veux supprimer les fichiers, clique YES

Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers

Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK

Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis dans ta prochaine réponse

Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo".

VundoFix V6.3.21

Checking Java version...

Sun Java not detected
Scan started at 8:28:38 12-05-2007

Listing files found while scanning....

No infected files were found.


VundoFix V6.3.21

Checking Java version...

Sun Java not detected
Scan started at 8:35:34 12-05-2007

Listing files found while scanning....

No infected files were found.


Beginning removal...

Logfile of HijackThis v1.99.1
Scan saved at 8:53:39, on 12-05-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\taskmger.com
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\zstatus.exe
C:\RECYCLER\systems.com
C:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Bureau\hijackthis\HijackThis.exe

O17 - HKLM\System\CCS\Services\Tcpip\..\{80B5CF3B-FC6C-45FD-BDDA-68F33B2EC925}: NameServer = 208.67.222.222 193.55.10.102

Ton rapport est complet ?  

qu'est ce que je vais faire ?

Tu peux répondre à la question...

Logfile of HijackThis v1.99.1
Scan saved at 17:59:54, on 15-05-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\taskmger.com
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\zstatus.exe
H:\systems.com
C:\WINDOWS\system32\WISPTIS.EXE
H:\systems.com
H:\systems.com
H:\systems.com
C:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Bureau\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{80B5CF3B-FC6C-45FD-BDDA-68F33B2EC925}: NameServer = 208.67.222.222 193.55.10.102

Re,

Télécharge Clean.zip (de Malekal),
Décompresse-le sur ton bureau (Clique-Droit/Extraire tout), tu dois obtenir un dossier Clean.
Ouvre le dossier clean, double-clique sur clean.cmd.
Choisis l'option 1 puis patiente. Poste ensuite le contenu du rapport.

15/05/2007 a 23:50:07,92

*** Recherche des fichiers dans D:
D:\autorun.inf FOUND

*** Recherche des fichiers dans D:\WINDOWS\

*** Recherche des fichiers dans D:\WINDOWS\system32

*** Recherche des fichiers dans D:\Program Files
*** Fin du rapport !

Commence par installer un antivirus comme Antivir, fais un scan complet puis poste le rapport.

 




Avira AntiVir PersonalEdition Classic
*************************************

Copyright © 2007 Avira GmbH.
All rights reserved.


Inhalt
******

0 Important information
1 System requirements
2 Important requirements for an installation
3 Incompatibilities with other programs
4 Support service
5 Contact address


0 Important information
***********************

Users who have up to now installed an ANSI version of the Avira
AntiVir PersonalEdition Classic software pack on a Microsoft Windows
NT, Microsoft Windows 2000 or Microsoft Windows XP operating system,
receive update information when attempting to update.

When updating, please proceed as follows:

1. Deinstall the installed version of the Avira AntiVir
PersonalEdition Classic.
2. Download a current software pack from the downoad section of the
Avira AntiVir PersonalEdition Classic website
http://www.free-av.com.
3. Install this software pack on your computer.

1 System requirements
*********************

In order for Avira AntiVir PersonalEdition Classic to run properly,
the computer system must fulfill the following requirements:

- Computer: Pentium or higher, at least 133 MHz

- Operating system
- Microsoft Windows Vista or
- Microsoft Windows XP Home or Professional, or
- Microsoft Windows 2000, SP 4 recommended

Avira AntiVir PersonalEdition Classic also supports Microsoft Windows
XP x64 Edition.

The display of the program interfaces can differ, depending on the
operating system used.

- 30 MB free memory on the hard disk (more if quarantine is used)

- Min. 100 MB temporary memory on the hard disk

- Min. 25 MB of free main memory

- For all installations: Internet Explorer 5.0 or higher

- For the installation of Avira AntiVir PersonalEdition Classic:
administrator rights

Note
----

- If there is no Internet Explorer 5.0 or higher available on your
system, you can download it under the following address:

http://www.microsoft.com/windows/ie/downloads/default.m...


2 Important requirements for an installation
********************************************

Ensure that the following requirements are fulfilled so that Avira
AntiVir PersonalEdition Classic works properly on your computer:

- System requirements fulfilled
- No other on-access scanner (also called Guard) installed
- Installer has administrator rights
- Internet/Intranet connection available
- All running programs on the computer exited


3 Incompatibilities with other programs
***************************************

Cygwin

If the Avira AntiVir PersonalEdition Classic runs on a system where
the product Cygwin is installed, you might encounter problems with
updating the Avira AntiVir PersonalEdition Classic. In a worst case
scenario you might not be able to update the Avira AntiVir
PersonalEdition Classic at all. Background to this behavior is the
fact that the cygwin process "cygrun.srv.exe" together with the
Microsoft Client/Server runtime server subsystem ("csrss.exe) causes
a complete load of the system once the update process of the Avira
AntiVir PersonalEdition Classic is started. It is therefore strongly
recommended to deinstall Cygwin before the Avira AntiVir
PersonalEdition Classic is installed.


4 Support service
*****************

If you have problems please try first to solve them using the
integrated help system and the user manual (Download at:
http://www.free-av.com). For harder problem, please feel free to
post a message to our bulletin board at http://forum.avira.de or
to call our Support-Hotline.

Please also feel free to post bug reports, hints, feature requests
and anything else related to the Avira AntiVir PersonalEdition
Classic to this Bulletin Board.

Please note that technical inquiries can only be anserwered via our
Support-Forum or our Support-Hotline.


Support-Forum
-------------

...our forum is available for you at any time!

The forum, which is subdivided into clear categories offers you the
possibility to exchange yourself online with other users and our
employees of the customer support. An up-to-date, electronic
bulletin board that is coordinated by our moderators is available.
Our experience multiplies with the experience from the users of
AntiVir all over the world. Have a look on it without any
obligation...

http://forum.avira.de


Support-Hotline
---------------

Germany: 0900 10 11 333 (1,99 Euro/Min*)
Austria: 0900 51 03 61 121 (2,16 Euro/Min*)
Switzerland: 0900 51 03 61 (4,23 CHF/Min*)

* Prices are subject to change.

Mo - Fr between 10 a.m. and 7 p.m.


5 Contact
*********

Avira GmbH
Lindauer Str. 21
D-88069 Tettnang
Germany

Internet: http://www.free-av.com

voici le rapport de scan avec antivir





AntiVir PersonalEdition Classic
Report file date: vendredi 18 mai 2007 12:55

Scanning for 740715 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (plain) [5.1.2600]
Username: Maatoug N
Computer name: NOUARI-5HUXV1T0

Version information:
BUILD.DAT : 247 14437 Bytes 10/05/2007 11:55:00
AVSCAN.EXE : 7.0.4.15 282664 Bytes 20/04/2007 11:37:16
AVSCAN.DLL : 7.0.4.4 33832 Bytes 27/03/2007 11:31:56
LUKE.DLL : 7.0.4.11 143400 Bytes 27/03/2007 11:26:06
LUKERES.DLL : 7.0.4.0 10280 Bytes 19/03/2007 11:19:00
ANTIVIR0.VDF : 6.35.0.1 7371264 Bytes 31/05/2006 13:08:58
ANTIVIR1.VDF : 6.37.1.151 4303360 Bytes 23/02/2007 13:09:02
ANTIVIR2.VDF : 6.38.0.214 729600 Bytes 12/04/2007 13:09:02
ANTIVIR3.VDF : 6.38.0.225 50688 Bytes 16/04/2007 13:09:02
AVEWIN32.DLL : 7.4.0.12 2404864 Bytes 13/04/2007 13:04:24
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 09:36:28
AVPREF.DLL : 7.0.2.1 24616 Bytes 27/03/2007 11:31:52
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 12:16:24
AVPACK32.DLL : 7.3.0.8 360488 Bytes 27/03/2007 07:48:30
AVREG.DLL : 7.0.1.2 31784 Bytes 15/03/2007 08:05:10
AVEVTLOG.DLL : 7.0.0.18 86056 Bytes 27/03/2007 11:16:06
AVARKT.DLL : 1.0.0.17 278568 Bytes 02/05/2007 10:32:28
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 10:09:44
RCIMAGE.DLL : 7.0.1.15 2228264 Bytes 13/03/2007 09:46:20
RCTEXT.DLL : 7.0.45.0 86056 Bytes 19/03/2007 11:42:44

Configuration settings for the scan:
Jobname..........................: Windows System Directory
Configuration file...............: D:\Program Files\AntiVir PersonalEdition Classic\setupprf.dat
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: vendredi 18 mai 2007 12:55

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'IEXPLORE.EXE' - '1' Module(s) have been scanned
Scan process 'IEXPLORE.EXE' - '1' Module(s) have been scanned
Scan process 'Ymsgr_tray.exe' - '1' Module(s) have been scanned
Scan process 'AVGWB.DAT' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'fbserver.exe' - '1' Module(s) have been scanned
Scan process 'Hotsync.exe' - '1' Module(s) have been scanned
Scan process 'BlueSoleil.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'avgcc.exe' - '1' Module(s) have been scanned
Scan process 'PIFSvc.exe' - '1' Module(s) have been scanned
Scan process 'OrderReminder.exe' - '1' Module(s) have been scanned
Scan process 'RUNDLL32.EXE' - '1' Module(s) have been scanned
Scan process 'OPWARE32.EXE' - '1' Module(s) have been scanned
Scan process 'hpwuSchd2.exe' - '1' Module(s) have been scanned
Scan process 'HPZTSB10.EXE' - '1' Module(s) have been scanned
Scan process 'HPCMPMGR.EXE' - '1' Module(s) have been scanned
Scan process 'TASKMGER.COM' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'MDM.EXE' - '1' Module(s) have been scanned
Scan process 'PIFSvc.exe' - '1' Module(s) have been scanned
Scan process 'Explorer.exe' - '1' Module(s) have been scanned
Scan process 'fbguard.exe' - '1' Module(s) have been scanned
Scan process 'BTNtService.exe' - '1' Module(s) have been scanned
Scan process 'avgemc.exe' - '1' Module(s) have been scanned
Scan process 'avgupsvc.exe' - '1' Module(s) have been scanned
Scan process 'avgamsvr.exe' - '1' Module(s) have been scanned
Scan process 'AluSchedulerSvc.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'SMSS.EXE' - '1' Module(s) have been scanned
44 processes with 44 modules were scanned

Start scanning boot sectors:
Boot sector 'D:\'
[NOTE] No virus was found!

Starting to scan the registry.
The registry was scanned ( '25' files ).


Starting the file scan:

Begin scan in 'D:\WINDOWS\System32'


End of the scan: vendredi 18 mai 2007 12:59
Used time: 04:15 min

The scan has been done completely.

143 Scanning directories
5851 Files were scanned
0 viruses and/or unwanted programs were found
0 classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
0 Files cannot be scanned
5851 Files not concerned
3 Archives were scanned
0 Warnings
0 Notes
0 Hidden objects were found

Essaie cet utilitaire :
http://www.techsupportforum.com/sectools/tel.xls.exe_Re...

ca n'as pas marché !!!!

ca n'as pas marché !!!

j'ai un nouveau virus "MyPictures.exe" qui peut pas etre suprime et qu'est pas detecté ni par AVG ni par KASPERSKY ni par NORTON ni n'importe quel antivirus ,je veux quelqu'un qui peut m'aider.

Tu peux patienter ?
Refais un scan clean option 1.

voici le rapport de clean option 1 :

19/05/2007 a 21:08:18,76

*** Recherche des fichiers dans D:
D:\autorun.inf FOUND

*** Recherche des fichiers dans D:\WINDOWS\

*** Recherche des fichiers dans D:\WINDOWS\system32

*** Recherche des fichiers dans D:\Program Files
*** Fin du rapport !

Re,

http://dcangeldark.blogspot.com/2007/05/infection-par-l...

voici le rapport du scan "antivir"





AntiVir PersonalEdition Classic
Report file date: dimanche 20 mai 2007 19:11

Scanning for 781432 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (plain) [5.1.2600]
Username: Maatoug N
Computer name: NOUARI-5HUXV1T0

Version information:
BUILD.DAT : 247 14437 Bytes 10/05/2007 11:55:00
AVSCAN.EXE : 7.0.4.15 282664 Bytes 20/04/2007 11:37:16
AVSCAN.DLL : 7.0.4.4 33832 Bytes 27/03/2007 11:31:56
LUKE.DLL : 7.0.4.11 143400 Bytes 27/03/2007 11:26:06
LUKERES.DLL : 7.0.4.0 10280 Bytes 19/03/2007 11:19:00
ANTIVIR0.VDF : 6.35.0.1 7371264 Bytes 31/05/2006 13:08:58
ANTIVIR1.VDF : 6.37.1.151 4303360 Bytes 23/02/2007 13:09:02
ANTIVIR2.VDF : 6.38.1.100 1168384 Bytes 06/05/2007 18:41:24
ANTIVIR3.VDF : 6.38.1.161 161792 Bytes 18/05/2007 18:41:24
AVEWIN32.DLL : 7.4.0.23 2454016 Bytes 19/05/2007 18:41:24
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 09:36:28
AVPREF.DLL : 7.0.2.1 24616 Bytes 27/03/2007 11:31:52
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 12:16:24
AVPACK32.DLL : 7.3.0.8 360488 Bytes 27/03/2007 07:48:30
AVREG.DLL : 7.0.1.2 31784 Bytes 15/03/2007 08:05:10
AVEVTLOG.DLL : 7.0.0.18 86056 Bytes 27/03/2007 11:16:06
AVARKT.DLL : 1.0.0.17 278568 Bytes 02/05/2007 10:32:28
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 10:09:44
RCIMAGE.DLL : 7.0.1.15 2228264 Bytes 13/03/2007 09:46:20
RCTEXT.DLL : 7.0.45.0 86056 Bytes 19/03/2007 11:42:44

Configuration settings for the scan:
Jobname..........................: Local Drives
Configuration file...............: D:\Program Files\AntiVir PersonalEdition Classic\alldrives.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: G:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: dimanche 20 mai 2007 19:11

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'Ymsgr_tray.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'fbserver.exe' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'MDM.EXE' - '1' Module(s) have been scanned
Scan process 'PIFSvc.exe' - '1' Module(s) have been scanned
Scan process 'KAVSVC.EXE' - '0' Module(s) have been scanned
Scan process 'FBGUARD.EXE' - '1' Module(s) have been scanned
Scan process 'BTNtService.exe' - '1' Module(s) have been scanned
Scan process 'avgemc.exe' - '1' Module(s) have been scanned
Scan process 'AVGUPSVC.EXE' - '1' Module(s) have been scanned
Scan process 'AVGAMSVR.EXE' - '1' Module(s) have been scanned
Scan process 'AluSchedulerSvc.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'ALG.EXE' - '1' Module(s) have been scanned
Scan process 'Hotsync.exe' - '1' Module(s) have been scanned
Scan process 'BlueSoleil.exe' - '1' Module(s) have been scanned
Scan process 'MSNMSGR.EXE' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'CTFMON.EXE' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avgcc.exe' - '1' Module(s) have been scanned
Scan process 'KAV.EXE' - '0' Module(s) have been scanned
Scan process 'PIFSvc.exe' - '1' Module(s) have been scanned
Scan process 'OrderReminder.exe' - '1' Module(s) have been scanned
Scan process 'RUNDLL32.EXE' - '1' Module(s) have been scanned
Scan process 'OPWARE32.EXE' - '1' Module(s) have been scanned
Scan process 'hpwuSchd2.exe' - '1' Module(s) have been scanned
Scan process 'HPZTSB10.EXE' - '1' Module(s) have been scanned
Scan process 'HPCMPMGR.EXE' - '1' Module(s) have been scanned
Scan process 'EXPLORER.EXE' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'SPOOLSV.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'LSASS.EXE' - '1' Module(s) have been scanned
Scan process 'SERVICES.EXE' - '1' Module(s) have been scanned
Scan process 'WINLOGON.EXE' - '1' Module(s) have been scanned
Scan process 'CSRSS.EXE' - '1' Module(s) have been scanned
Scan process 'SMSS.EXE' - '1' Module(s) have been scanned
43 processes with 43 modules were scanned

Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!
Boot sector 'E:\'
[NOTE] No virus was found!
Boot sector 'H:\'
[NOTE] No virus was found!
Boot sector 'A:\'
[NOTE] In the drive 'A:\' no data medium is inserted!

Starting to scan the registry.
The registry was scanned ( '25' files ).


Starting the file scan:

Begin scan in 'C:\' <MILLENIUM>
C:\_RESTORE\TEMP\A0227860.CPY
[0] Archive type: ZIP
--> close_default.bmp
[WARNING] Error creating the file
--> close_down.bmp
[WARNING] Error creating the file
--> close_rollover.bmp
[WARNING] Error creating the file
--> frame_bottom.bmp
[WARNING] Error creating the file
--> frame_left.bmp
[WARNING] Error creating the file
--> frame_logo.bmp
[WARNING] Error creating the file
--> frame_right.bmp
[WARNING] Error creating the file
--> frame_top.bmp
[WARNING] Error creating the file
--> min_default.bmp
[WARNING] Error creating the file
--> min_down.bmp
[WARNING] Error creating the file
--> min_rollover.bmp
[WARNING] Error creating the file
--> seekbar.gif
[WARNING] Error creating the file
--> seekbar_slider.gif
[WARNING] Error creating the file
--> toggle_default.bmp
[WARNING] Error creating the file
--> toggle_down.bmp
[WARNING] Error creating the file
--> toggle_rollover.bmp
[WARNING] Error creating the file
--> transport_colormap.bmp
[WARNING] Error creating the file
--> transport_default.bmp
[WARNING] Error creating the file
--> transport_down.bmp
[WARNING] Error creating the file
--> transport_rollover.bmp
[WARNING] Error creating the file
--> vis_button_default.bmp
[WARNING] Error creating the file
--> vis_button_down.bmp
[WARNING] Error creating the file
--> vis_button_rollover.bmp
[WARNING] Error creating the file
--> vol_slider.bmp
[WARNING] Error creating the file
--> vol_thumb.bmp
[WARNING] Error creating the file
--> winme.js
[WARNING] Error creating the file
--> winme.wms
[WARNING] Error creating the file
[WARNING] Error creating the file
C:\_RESTORE\TEMP\A0239779.CPY
[0] Archive type: CAB SFX (self extracting)
--> \0x040c.ini
[WARNING] Error opening the file
--> \Data1.cab
[WARNING] Error opening the file
--> \GX_wiz_4.msi
[WARNING] Error opening the file
--> \instmsia.exe
[WARNING] Error opening the file
--> \instmsiw.exe
[WARNING] Error opening the file
--> \isscript.msi
[WARNING] Error opening the file
--> \setup.bmp
[WARNING] Error opening the file
--> \setup.exe
[WARNING] Error opening the file
--> \Setup.ini
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\TEMP\A0239781.CPY
[0] Archive type: CAB SFX (self extracting)
--> \0x040c.ini
[WARNING] Error opening the file
--> \Data1.cab
[WARNING] Error opening the file
--> \GX_USB_2.msi
[WARNING] Error opening the file
--> \instmsia.exe
[WARNING] Error opening the file
--> \instmsiw.exe
[WARNING] Error opening the file
--> \isscript.msi
[WARNING] Error opening the file
--> \setup.exe
[WARNING] Error opening the file
--> \Setup.ini
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\RG1042414360.CAB
[0] Archive type: CAB (Microsoft)
--> CLASSES.DAT
[WARNING] Error opening the file
--> SYSTEM.DAT
[WARNING] Error opening the file
--> USER.DAT
[WARNING] Error opening the file
--> system.ini
[WARNING] Error opening the file
--> win.ini
[WARNING] Error opening the file
--> desktop.ini
[WARNING] Error opening the file
--> wavemix.ini
[WARNING] Error opening the file
--> powerpnt.ini
[WARNING] Error opening the file
--> REGSNAPSHOT.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS239.CAB
[0] Archive type: CAB (Microsoft)
--> A0097870.CPY
[WARNING] Error opening the file
--> A0097871.CPY
[WARNING] Error opening the file
--> A0097872.CPY
[WARNING] Error opening the file
--> A0097873.CPY
[WARNING] Error opening the file
--> A0097874.CPY
[WARNING] Error opening the file
--> A0097875.CPY
[WARNING] Error opening the file
--> A0097876.CPY
[WARNING] Error opening the file
--> A0097877.CPY
[WARNING] Error opening the file
--> A0097878.CPY
[WARNING] Error opening the file
--> A0097879.CPY
[WARNING] Error opening the file
--> A0097880.CPY
[WARNING] Error opening the file
--> A0097881.CPY
[WARNING] Error opening the file
--> A0097882.CPY
[WARNING] Error opening the file
--> A0097883.CPY
[WARNING] Error opening the file
--> A0097884.CPY
[WARNING] Error opening the file
--> A0097885.CPY
[WARNING] Error opening the file
--> A0097886.CPY
[WARNING] Error opening the file
--> A0097887.CPY
[WARNING] Error opening the file
--> A0097888.CPY
[WARNING] Error opening the file
--> A0097914.CPY
[WARNING] Error opening the file
--> A0097916.CPY
[WARNING] Error opening the file
--> A0097918.CPY
[WARNING] Error opening the file
--> A0097920.CPY
[WARNING] Error opening the file
--> A0097922.CPY
[WARNING] Error opening the file
--> A0097924.CPY
[WARNING] Error opening the file
--> A0097926.CPY
[WARNING] Error opening the file
--> A0097928.CPY
[WARNING] Error opening the file
--> A0097930.CPY
[WARNING] Error opening the file
--> A0097932.CPY
[WARNING] Error opening the file
--> A0097934.CPY
[WARNING] Error opening the file
--> A0097936.CPY
[WARNING] Error opening the file
--> A0097938.CPY
[WARNING] Error opening the file
--> A0097940.CPY
[WARNING] Error opening the file
--> A0097942.CPY
[WARNING] Error opening the file
--> A0097944.CPY
[WARNING] Error opening the file
--> A0097946.CPY
[WARNING] Error opening the file
--> A0097948.CPY
[WARNING] Error opening the file
--> A0097950.CPY
[WARNING] Error opening the file
--> A0097952.CPY
[WARNING] Error opening the file
--> A0097954.CPY
[WARNING] Error opening the file
--> A0097956.CPY
[WARNING] Error opening the file
--> A0097958.CPY
[WARNING] Error opening the file
--> A0097960.CPY
[WARNING] Error opening the file
--> A0097962.CPY
[WARNING] Error opening the file
--> A0097964.CPY
[WARNING] Error opening the file
--> A0097966.CPY
[WARNING] Error opening the file
--> A0097968.CPY
[WARNING] Error opening the file
--> A0097970.CPY
[WARNING] Error opening the file
--> A0097972.CPY
[WARNING] Error opening the file
--> A0097974.CPY
[WARNING] Error opening the file
--> A0097976.CPY
[WARNING] Error opening the file
--> A0097978.CPY
[WARNING] Error opening the file
--> A0097980.CPY
[WARNING] Error opening the file
--> A0097982.CPY
[WARNING] Error opening the file
--> A0097984.CPY
[WARNING] Error opening the file
--> A0097986.CPY
[WARNING] Error opening the file
--> A0097988.CPY
[WARNING] Error opening the file
--> A0097990.CPY
[WARNING] Error opening the file
--> A0097992.CPY
[WARNING] Error opening the file
--> A0097994.CPY
[WARNING] Error opening the file
--> A0097996.CPY
[WARNING] Error opening the file
--> A0097998.CPY
[WARNING] Error opening the file
--> A0098000.CPY
[WARNING] Error opening the file
--> A0098002.CPY
[WARNING] Error opening the file
--> A0098004.CPY
[WARNING] Error opening the file
--> A0098006.CPY
[WARNING] Error opening the file
--> A0098008.CPY
[WARNING] Error opening the file
--> A0098010.CPY
[WARNING] Error opening the file
--> A0098012.CPY
[WARNING] Error opening the file
--> A0098014.CPY
[WARNING] Error opening the file
--> A0098016.CPY
[WARNING] Error opening the file
--> A0098018.CPY
[WARNING] Error opening the file
--> A0098020.CPY
[WARNING] Error opening the file
--> A0098022.CPY
[WARNING] Error opening the file
--> A0098024.CPY
[WARNING] Error opening the file
--> A0098026.CPY
[WARNING] Error opening the file
--> A0098028.CPY
[WARNING] Error opening the file
--> A0098030.CPY
[WARNING] Error opening the file
--> A0098032.CPY
[WARNING] Error opening the file
--> A0098034.CPY
[WARNING] Error opening the file
--> A0098036.CPY
[WARNING] Error opening the file
--> A0098038.CPY
[WARNING] Error opening the file
--> A0098040.CPY
[WARNING] Error opening the file
--> A0098042.CPY
[WARNING] Error opening the file
--> A0098044.CPY
[WARNING] Error opening the file
--> A0098046.CPY
[WARNING] Error opening the file
--> A0098048.CPY
[WARNING] Error opening the file
--> A0098050.CPY
[WARNING] Error opening the file
--> A0098052.CPY
[WARNING] Error opening the file
--> A0098054.CPY
[WARNING] Error opening the file
--> A0098055.CPY
[WARNING] Error opening the file
--> A0098056.CPY
[WARNING] Error opening the file
--> A0098057.CPY
[WARNING] Error opening the file
--> A0098058.CPY
[WARNING] Error opening the file
--> A0098059.CPY
[WARNING] Error opening the file
--> A0098060.CPY
[WARNING] Error opening the file
--> A0098061.CPY
[WARNING] Error opening the file
--> A0098062.CPY
[WARNING] Error opening the file
--> A0098063.CPY
[WARNING] Error opening the file
--> A0098064.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS134.CAB
[0] Archive type: CAB (Microsoft)
--> W0063417.CPY
[WARNING] Error opening the file
--> W0063419.CPY
[WARNING] Error opening the file
--> W0063421.CPY
[WARNING] Error opening the file
--> W0063423.CPY
[WARNING] Error opening the file
--> W0063425.CPY
[WARNING] Error opening the file
--> W0063427.CPY
[WARNING] Error opening the file
--> W0063429.CPY
[WARNING] Error opening the file
--> W0063431.CPY
[WARNING] Error opening the file
--> W0063433.CPY
[WARNING] Error opening the file
--> W0063435.CPY
[WARNING] Error opening the file
--> W0063437.CPY
[WARNING] Error opening the file
--> W0063439.CPY
[WARNING] Error opening the file
--> W0063441.CPY
[WARNING] Error opening the file
--> W0063443.CPY
[WARNING] Error opening the file
--> W0063445.CPY
[WARNING] Error opening the file
--> W0063447.CPY
[WARNING] Error opening the file
--> W0063449.CPY
[WARNING] Error opening the file
--> W0063451.CPY
[WARNING] Error opening the file
--> W0063453.CPY
[WARNING] Error opening the file
--> W0063455.CPY
[WARNING] Error opening the file
--> W0063457.CPY
[WARNING] Error opening the file
--> W0063459.CPY
[WARNING] Error opening the file
--> W0063461.CPY
[WARNING] Error opening the file
--> W0063463.CPY
[WARNING] Error opening the file
--> W0063465.CPY
[WARNING] Error opening the file
--> W0063467.CPY
[WARNING] Error opening the file
--> W0063469.CPY
[WARNING] Error opening the file
--> W0063471.CPY
[WARNING] Error opening the file
--> W0063473.CPY
[WARNING] Error opening the file
--> W0063475.CPY
[WARNING] Error opening the file
--> W0063477.CPY
[WARNING] Error opening the file
--> W0063479.CPY
[WARNING] Error opening the file
--> W0063481.CPY
[WARNING] Error opening the file
--> W0063485.CPY
[WARNING] Error opening the file
--> W0063487.CPY
[WARNING] Error opening the file
--> W0063489.CPY
[WARNING] Error opening the file
--> W0063491.CPY
[WARNING] Error opening the file
--> W0063493.CPY
[WARNING] Error opening the file
--> W0063495.CPY
[WARNING] Error opening the file
--> W0063497.CPY
[WARNING] Error opening the file
--> W0063499.CPY
[WARNING] Error opening the file
--> W0063501.CPY
[WARNING] Error opening the file
--> W0063503.CPY
[WARNING] Error opening the file
--> W0063505.CPY
[WARNING] Error opening the file
--> W0063507.CPY
[WARNING] Error opening the file
--> W0063509.CPY
[WARNING] Error opening the file
--> W0063511.CPY
[WARNING] Error opening the file
--> W0063513.CPY
[WARNING] Error opening the file
--> W0063515.CPY
[WARNING] Error opening the file
--> W0063517.CPY
[WARNING] Error opening the file
--> W0063519.CPY
[WARNING] Error opening the file
--> W0063521.CPY
[WARNING] Error opening the file
--> W0063523.CPY
[WARNING] Error opening the file
--> W0063525.CPY
[WARNING] Error opening the file
--> W0063527.CPY
[WARNING] Error opening the file
--> W0063529.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS5.CAB
[0] Archive type: CAB (Microsoft)
--> A0000710.CPY
[WARNING] Error opening the file
--> A0000711.CPY
[WARNING] Error opening the file
--> A0000713.CPY
[WARNING] Error opening the file
--> A0000714.CPY
[WARNING] Error opening the file
--> A0000715.CPY
[WARNING] Error opening the file
--> A0000718.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS6.CAB
[0] Archive type: CAB (Microsoft)
--> A0001323.CPY
[WARNING] Error opening the file
--> A0001335.CPY
[WARNING] Error opening the file
--> A0001339.CPY
[WARNING] Error opening the file
--> A0001451.CPY
[WARNING] Error opening the file
--> A0001567.CPY
[WARNING] Error opening the file
--> A0001581.CPY
[WARNING] Error opening the file
--> A0001583.CPY
[WARNING] Error opening the file
--> A0001642.CPY
[WARNING] Error opening the file
--> A0001643.CPY
[WARNING] Error opening the file
--> A0001646.CPY
[WARNING] Error opening the file
--> A0001647.CPY
[WARNING] Error opening the file
--> A0001648.CPY
[WARNING] Error opening the file
--> A0001649.CPY
[WARNING] Error opening the file
--> A0001650.CPY
[WARNING] Error opening the file
--> A0001651.CPY
[WARNING] Error opening the file
--> A0001652.CPY
[WARNING] Error opening the file
--> A0001653.CPY
[WARNING] Error opening the file
--> A0001654.CPY
[WARNING] Error opening the file
--> A0001655.CPY
[WARNING] Error opening the file
--> A0001656.CPY
[WARNING] Error opening the file
--> A0001657.CPY
[WARNING] Error opening the file
--> A0001658.CPY
[WARNING] Error opening the file
--> A0001659.CPY
[WARNING] Error opening the file
--> A0001661.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS7.CAB
[0] Archive type: CAB (Microsoft)
--> A0001662.CPY
[WARNING] Error opening the file
--> A0001663.CPY
[WARNING] Error opening the file
--> A0001664.CPY
[WARNING] Error opening the file
--> A0001665.CPY
[WARNING] Error opening the file
--> A0001666.CPY
[WARNING] Error opening the file
--> A0001668.CPY
[WARNING] Error opening the file
--> A0001669.CPY
[WARNING] Error opening the file
--> A0001670.CPY
[WARNING] Error opening the file
--> A0001672.CPY
[WARNING] Error opening the file
--> A0001673.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS8.CAB
[0] Archive type: CAB (Microsoft)
--> A0001674.CPY
[WARNING] Error opening the file
--> A0001675.CPY
[WARNING] Error opening the file
--> A0001676.CPY
[WARNING] Error opening the file
--> A0001677.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS9.CAB
[0] Archive type: CAB (Microsoft)
--> A0001682.CPY
[WARNING] Error opening the file
--> A0001683.CPY
[WARNING] Error opening the file
--> A0001684.CPY
[WARNING] Error opening the file
--> A0001685.CPY
[WARNING] Error opening the file
--> A0001686.CPY
[WARNING] Error opening the file
--> A0001687.CPY
[WARNING] Error opening the file
--> A0001688.CPY
[WARNING] Error opening the file
--> A0001689.CPY
[WARNING] Error opening the file
--> A0001690.CPY
[WARNING] Error opening the file
--> A0001691.CPY
[WARNING] Error opening the file
--> A0001692.CPY
[WARNING] Error opening the file
--> A0001693.CPY
[WARNING] Error opening the file
--> A0001694.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS10.CAB
[0] Archive type: CAB (Microsoft)
--> A0001695.CPY
[WARNING] Error opening the file
--> A0001696.CPY
[WARNING] Error opening the file
--> A0001700.CPY
[WARNING] Error opening the file
--> A0001701.CPY
[WARNING] Error opening the file
--> A0001704.CPY
[WARNING] Error opening the file
--> A0001706.CPY
[WARNING] Error opening the file
--> A0001707.CPY
[WARNING] Error opening the file
--> A0001710.CPY
[WARNING] Error opening the file
--> A0001711.CPY
[WARNING] Error opening the file
--> A0001714.CPY
[WARNING] Error opening the file
--> A0001715.CPY
[WARNING] Error opening the file
--> A0001716.CPY
[WARNING] Error opening the file
--> A0001719.CPY
[WARNING] Error opening the file
--> A0001720.CPY
[WARNING] Error opening the file
--> A0001723.CPY
[WARNING] Error opening the file
--> A0001724.CPY
[WARNING] Error opening the file
--> A0001727.CPY
[WARNING] Error opening the file
--> A0001728.CPY
[WARNING] Error opening the file
--> A0001730.CPY
[WARNING] Error opening the file
--> A0001731.CPY
[WARNING] Error opening the file
--> A0001732.CPY
[WARNING] Error opening the file
--> A0001733.CPY
[WARNING] Error opening the file
--> A0001734.CPY
[WARNING] Error opening the file
--> A0001738.CPY
[WARNING] Error opening the file
--> A0001740.CPY
[WARNING] Error opening the file
--> A0001742.CPY
[WARNING] Error opening the file
--> A0001745.CPY
[WARNING] Error opening the file
--> A0001746.CPY
[WARNING] Error opening the file
--> A0001749.CPY
[WARNING] Error opening the file
--> A0001750.CPY
[WARNING] Error opening the file
--> A0001752.CPY
[WARNING] Error opening the file
--> A0001755.CPY
[WARNING] Error opening the file
--> A0001756.CPY
[WARNING] Error opening the file
--> A0001757.CPY
[WARNING] Error opening the file
--> A0001760.CPY
[WARNING] Error opening the file
--> A0001761.CPY
[WARNING] Error opening the file
--> A0001762.CPY
[WARNING] Error opening the file
--> A0001763.CPY
[WARNING] Error opening the file
--> A0001766.CPY
[WARNING] Error opening the file
--> A0001767.CPY
[WARNING] Error opening the file
--> A0001768.CPY
[WARNING] Error opening the file
--> A0001769.CPY
[WARNING] Error opening the file
--> A0001770.CPY
[WARNING] Error opening the file
--> A0001771.CPY
[WARNING] Error opening the file
--> A0001772.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS11.CAB
[0] Archive type: CAB (Microsoft)
--> A0001773.CPY
[WARNING] Error opening the file
--> A0001774.CPY
[WARNING] Error opening the file
--> A0001775.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS12.CAB
[0] Archive type: CAB (Microsoft)
--> A0001776.CPY
[WARNING] Error opening the file
--> A0001777.CPY
[WARNING] Error opening the file
--> A0001778.CPY
[WARNING] Error opening the file
--> A0001779.CPY
[WARNING] Error opening the file
--> A0001780.CPY
[WARNING] Error opening the file
--> A0001781.CPY
[WARNING] Error opening the file
--> A0001782.CPY
[WARNING] Error opening the file
--> A0001783.CPY
[WARNING] Error opening the file
--> A0001784.CPY
[WARNING] Error opening the file
--> A0001785.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS13.CAB
[0] Archive type: CAB (Microsoft)
--> A0001786.CPY
[WARNING] Error opening the file
--> A0001787.CPY
[WARNING] Error opening the file
--> A0001788.CPY
[WARNING] Error opening the file
--> A0001789.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS14.CAB
[0] Archive type: CAB (Microsoft)
--> A0001790.CPY
[WARNING] Error opening the file
--> A0001791.CPY
[WARNING] Error opening the file
--> A0001792.CPY
[WARNING] Error opening the file
--> A0001793.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS15.CAB
[0] Archive type: CAB (Microsoft)
--> A0002790.CPY
[WARNING] Error opening the file
--> A0002791.CPY
[WARNING] Error opening the file
--> A0002792.CPY
[WARNING] Error opening the file
--> A0002793.CPY
[WARNING] Error opening the file
--> A0002794.CPY
[WARNING] Error opening the file
--> A0002795.CPY
[WARNING] Error opening the file
--> A0002796.CPY
[WARNING] Error opening the file
--> A0002797.CPY
[WARNING] Error opening the file
--> A0002798.CPY
[WARNING] Error opening the file
--> A0002799.CPY
[WARNING] Error opening the file
--> A0002800.CPY
[WARNING] Error opening the file
--> A0002801.CPY
[WARNING] Error opening the file
--> A0002802.CPY
[WARNING] Error opening the file
--> A0002803.CPY
[WARNING] Error opening the file
--> A0002804.CPY
[WARNING] Error opening the file
--> A0002805.CPY
[WARNING] Error opening the file
--> A0002806.CPY
[WARNING] Error opening the file
--> A0002807.CPY
[WARNING] Error opening the file
--> A0002808.CPY
[WARNING] Error opening the file
--> A0002809.CPY
[WARNING] Error opening the file
--> A0002810.CPY
[WARNING] Error opening the file
--> A0002811.CPY
[WARNING] Error opening the file
--> A0002812.CPY
[WARNING] Error opening the file
--> A0002813.CPY
[WARNING] Error opening the file
--> A0002814.CPY
[WARNING] Error opening the file
--> A0002815.CPY
[WARNING] Error opening the file
--> A0002816.CPY
[WARNING] Error opening the file
--> A0002817.CPY
[WARNING] Error opening the file
--> A0002818.CPY
[WARNING] Error opening the file
--> A0002820.CPY
[WARNING] Error opening the file
--> A0002821.CPY
[WARNING] Error opening the file
--> A0002822.CPY
[WARNING] Error opening the file
--> A0002823.CPY
[WARNING] Error opening the file
--> A0002824.CPY
[WARNING] Error opening the file
--> A0002825.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS16.CAB
[0] Archive type: CAB (Microsoft)
--> A0002827.CPY
[WARNING] Error opening the file
--> A0002828.CPY
[WARNING] Error opening the file
--> A0002855.CPY
[WARNING] Error opening the file
--> A0002857.CPY
[WARNING] Error opening the file
--> A0002859.CPY
[WARNING] Error opening the file
--> A0002861.CPY
[WARNING] Error opening the file
--> A0002863.CPY
[WARNING] Error opening the file
--> A0002865.CPY
[WARNING] Error opening the file
--> A0002867.CPY
[WARNING] Error opening the file
--> A0002869.CPY
[WARNING] Error opening the file
--> A0002871.CPY
[WARNING] Error opening the file
--> A0002873.CPY
[WARNING] Error opening the file
--> A0002875.CPY
[WARNING] Error opening the file
--> A0002877.CPY
[WARNING] Error opening the file
--> A0002879.CPY
[WARNING] Error opening the file
--> A0002881.CPY
[WARNING] Error opening the file
--> A0002883.CPY
[WARNING] Error opening the file
--> A0002885.CPY
[WARNING] Error opening the file
--> A0002887.CPY
[WARNING] Error opening the file
--> A0002889.CPY
[WARNING] Error opening the file
--> A0002891.CPY
[WARNING] Error opening the file
--> A0002893.CPY
[WARNING] Error opening the file
--> A0002895.CPY
[WARNING] Error opening the file
--> A0002897.CPY
[WARNING] Error opening the file
--> A0002899.CPY
[WARNING] Error opening the file
--> A0002901.CPY
[WARNING] Error opening the file
--> A0002903.CPY
[WARNING] Error opening the file
--> A0002905.CPY
[WARNING] Error opening the file
--> A0002907.CPY
[WARNING] Error opening the file
--> A0002909.CPY
[WARNING] Error opening the file
--> A0002911.CPY
[WARNING] Error opening the file
--> A0002913.CPY
[WARNING] Error opening the file
--> A0002915.CPY
[WARNING] Error opening the file
--> A0002917.CPY
[WARNING] Error opening the file
--> A0002919.CPY
[WARNING] Error opening the file
--> A0002921.CPY
[WARNING] Error opening the file
--> A0002923.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS17.CAB
[0] Archive type: CAB (Microsoft)
--> A0003790.CPY
[WARNING] Error opening the file
--> A0003791.CPY
[WARNING] Error opening the file
--> A0003792.CPY
[WARNING] Error opening the file
--> A0003793.CPY
[WARNING] Error opening the file
--> A0003794.CPY
[WARNING] Error opening the file
--> A0003795.CPY
[WARNING] Error opening the file
--> A0003796.CPY
[WARNING] Error opening the file
--> A0003797.CPY
[WARNING] Error opening the file
--> A0003798.CPY
[WARNING] Error opening the file
--> A0003799.CPY
[WARNING] Error opening the file
--> A0003800.CPY
[WARNING] Error opening the file
--> A0003801.CPY
[WARNING] Error opening the file
--> A0003803.CPY
[WARNING] Error opening the file
--> A0003804.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS18.CAB
[0] Archive type: CAB (Microsoft)
--> A0003805.CPY
[WARNING] Error opening the file
--> A0003806.CPY
[WARNING] Error opening the file
--> A0003807.CPY
[WARNING] Error opening the file
--> A0003808.CPY
[WARNING] Error opening the file
--> A0003810.CPY
[WARNING] Error opening the file
--> A0003811.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS34.CAB
[0] Archive type: CAB (Microsoft)
--> A0010372.CPY
[WARNING] Error opening the file
--> A0010373.CPY
[WARNING] Error opening the file
--> A0010374.CPY
[WARNING] Error opening the file
--> A0010375.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS35.CAB
[0] Archive type: CAB (Microsoft)
--> A0010376.CPY
[WARNING] Error opening the file
--> A0010377.CPY
[WARNING] Error opening the file
--> A0010379.CPY
[WARNING] Error opening the file
--> A0010381.CPY
[WARNING] Error opening the file
--> A0010382.CPY
[WARNING] Error opening the file
--> A0010383.CPY
[WARNING] Error opening the file
--> A0010385.CPY
[WARNING] Error opening the file
--> A0010387.CPY
[WARNING] Error opening the file
--> A0010388.CPY
[WARNING] Error opening the file
--> A0010389.CPY
[WARNING] Error opening the file
--> A0010390.CPY
[WARNING] Error opening the file
--> A0010391.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS36.CAB
[0] Archive type: CAB (Microsoft)
--> A0010392.CPY
[WARNING] Error opening the file
--> A0010395.CPY
[WARNING] Error opening the file
--> A0010396.CPY
[WARNING] Error opening the file
--> A0010397.CPY
[WARNING] Error opening the file
--> A0010399.CPY
[WARNING] Error opening the file
--> A0010402.CPY
[WARNING] Error opening the file
--> A0010403.CPY
[WARNING] Error opening the file
--> A0010404.CPY
[WARNING] Error opening the file
--> A0010408.CPY
[WARNING] Error opening the file
--> A0010409.CPY
[WARNING] Error opening the file
--> A0010411.CPY
[WARNING] Error opening the file
--> A0010412.CPY
[WARNING] Error opening the file
--> A0010415.CPY
[WARNING] Error opening the file
--> A0010416.CPY
[WARNING] Error opening the file
--> A0010417.CPY
[WARNING] Error opening the file
--> A0010419.CPY
[WARNING] Error opening the file
--> A0010422.CPY
[WARNING] Error opening the file
--> A0010423.CPY
[WARNING] Error opening the file
--> A0010425.CPY
[WARNING] Error opening the file
--> A0010428.CPY
[WARNING] Error opening the file
--> A0010429.CPY
[WARNING] Error opening the file
--> A0010431.CPY
[WARNING] Error opening the file
--> A0010434.CPY
[WARNING] Error opening the file
--> A0010435.CPY
[WARNING] Error opening the file
--> A0010436.CPY
[WARNING] Error opening the file
--> A0010437.CPY
[WARNING] Error opening the file
--> A0010438.CPY
[WARNING] Error opening the file
--> A0010440.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS37.CAB
[0] Archive type: CAB (Microsoft)
--> A0011392.CPY
[WARNING] Error opening the file
--> A0011393.CPY
[WARNING] Error opening the file
--> A0011394.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS38.CAB
[0] Archive type: CAB (Microsoft)
--> A0011395.CPY
[WARNING] Error opening the file
--> A0011396.CPY
[WARNING] Error opening the file
--> A0011397.CPY
[WARNING] Error opening the file
--> A0011398.CPY
[WARNING] Error opening the file
--> A0011399.CPY
[WARNING] Error opening the file
--> A0011400.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS39.CAB
[0] Archive type: CAB (Microsoft)
--> A0011401.CPY
[WARNING] Error opening the file
--> A0011402.CPY
[WARNING] Error opening the file
--> A0011403.CPY
[WARNING] Error opening the file
--> A0011404.CPY
[WARNING] Error opening the file
--> A0011405.CPY
[WARNING] Error opening the file
--> A0011406.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS40.CAB
[0] Archive type: CAB (Microsoft)
--> A0011407.CPY
[WARNING] Error opening the file
--> A0011408.CPY
[WARNING] Error opening the file
--> A0011409.CPY
[WARNING] Error opening the file
--> A0011410.CPY
[WARNING] Error opening the file
--> A0011411.CPY
[WARNING] Error opening the file
--> A0011412.CPY
[WARNING] Error opening the file
--> A0011413.CPY
[WARNING] Error opening the file
--> A0011414.CPY
[WARNING] Error opening the file
--> A0011415.CPY
[WARNING] Error opening the file
--> A0011441.CPY
[WARNING] Error opening the file
--> A0011443.CPY
[WARNING] Error opening the file
--> A0011445.CPY
[WARNING] Error opening the file
--> A0011447.CPY
[WARNING] Error opening the file
--> A0011449.CPY
[WARNING] Error opening the file
--> A0011451.CPY
[WARNING] Error opening the file
--> A0011453.CPY
[WARNING] Error opening the file
--> A0011455.CPY
[WARNING] Error opening the file
--> A0011457.CPY
[WARNING] Error opening the file
--> A0011458.CPY
[WARNING] Error opening the file
--> A0011459.CPY
[WARNING] Error opening the file
--> A0011460.CPY
[WARNING] Error opening the file
--> A0011461.CPY
[WARNING] Error opening the file
--> A0011462.CPY
[WARNING] Error opening the file
--> A0011463.CPY
[WARNING] Error opening the file
--> A0011464.CPY
[WARNING] Error opening the file
--> A0011465.CPY
[WARNING] Error opening the file
--> A0011466.CPY
[WARNING] Error opening the file
--> A0011467.CPY
[WARNING] Error opening the file
--> A0011468.CPY
[WARNING] Error opening the file
--> A0011469.CPY
[WARNING] Error opening the file
--> A0011470.CPY
[WARNING] Error opening the file
--> A0011471.CPY
[WARNING] Error opening the file
--> A0011472.CPY
[WARNING] Error opening the file
--> A0011473.CPY
[WARNING] Error opening the file
--> A0011474.CPY
[WARNING] Error opening the file
--> A0011475.CPY
[WARNING] Error opening the file
--> A0011476.CPY
[WARNING] Error opening the file
--> A0011477.CPY
[WARNING] Error opening the file
--> A0011478.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS41.CAB
[0] Archive type: CAB (Microsoft)
--> A0011479.CPY
[WARNING] Error opening the file
--> A0011481.CPY
[WARNING] Error opening the file
--> A0011482.CPY
[WARNING] Error opening the file
--> A0011483.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS42.CAB
[0] Archive type: CAB (Microsoft)
--> A0011484.CPY
[WARNING] Error opening the file
--> A0011485.CPY
[WARNING] Error opening the file
--> A0011486.CPY
[WARNING] Error opening the file
--> A0011487.CPY
[WARNING] Error opening the file
--> A0011488.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS43.CAB
[0] Archive type: CAB (Microsoft)
--> A0012484.CPY
[WARNING] Error opening the file
--> A0012485.CPY
[WARNING] Error opening the file
--> A0012486.CPY
[WARNING] Error opening the file
--> A0012487.CPY
[WARNING] Error opening the file
--> A0012488.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS44.CAB
[0] Archive type: CAB (Microsoft)
--> A0012489.CPY
[WARNING] Error opening the file
--> A0012490.CPY
[WARNING] Error opening the file
--> A0012491.CPY
[WARNING] Error opening the file
--> A0012492.CPY
[WARNING] Error opening the file
--> A0012493.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS47.CAB
[0] Archive type: CAB (Microsoft)
--> A0012522.CPY
[WARNING] Error opening the file
--> A0012523.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS48.CAB
[0] Archive type: CAB (Microsoft)
--> A0013522.CPY
[WARNING] Error opening the file
--> A0013523.CPY
[WARNING] Error opening the file
--> A0013524.CPY
[WARNING] Error opening the file
--> A0013525.CPY
[WARNING] Error opening the file
--> A0013526.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS49.CAB
[0] Archive type: CAB (Microsoft)
--> A0013527.CPY
[WARNING] Error opening the file
--> A0013528.CPY
[WARNING] Error opening the file
--> A0013529.CPY
[WARNING] Error opening the file
--> A0013530.CPY
[WARNING] Error opening the file
--> A0013533.CPY
[WARNING] Error opening the file
--> A0013536.CPY
[WARNING] Error opening the file
--> A0013537.CPY
[WARNING] Error opening the file
--> A0013538.CPY
[WARNING] Error opening the file
--> A0013540.CPY
[WARNING] Error opening the file
--> A0013543.CPY
[WARNING] Error opening the file
--> A0013544.CPY
[WARNING] Error opening the file
--> A0013545.CPY
[WARNING] Error opening the file
--> A0013548.CPY
[WARNING] Error opening the file
--> A0013551.CPY
[WARNING] Error opening the file
--> A0013552.CPY
[WARNING] Error opening the file
--> A0013553.CPY
[WARNING] Error opening the file
--> A0013556.CPY
[WARNING] Error opening the file
--> A0013559.CPY
[WARNING] Error opening the file
--> A0013560.CPY
[WARNING] Error opening the file
--> A0013561.CPY
[WARNING] Error opening the file
--> A0013564.CPY
[WARNING] Error opening the file
--> A0013567.CPY
[WARNING] Error opening the file
--> A0013568.CPY
[WARNING] Error opening the file
--> A0013569.CPY
[WARNING] Error opening the file
--> A0013572.CPY
[WARNING] Error opening the file
--> A0013575.CPY
[WARNING] Error opening the file
--> A0013576.CPY
[WARNING] Error opening the file
--> A0013577.CPY
[WARNING] Error opening the file
--> A0013578.CPY
[WARNING] Error opening the file
--> A0013579.CPY
[WARNING] Error opening the file
--> A0013582.CPY
[WARNING] Error opening the file
--> A0013585.CPY
[WARNING] Error opening the file
--> A0013588.CPY
[WARNING] Error opening the file
--> A0013591.CPY
[WARNING] Error opening the file
--> A0013592.CPY
[WARNING] Error opening the file
--> A0013594.CPY
[WARNING] Error opening the file
--> A0013595.CPY
[WARNING] Error opening the file
--> A0013596.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS50.CAB
[0] Archive type: CAB (Microsoft)
--> A0013597.CPY
[WARNING] Error opening the file
--> A0013598.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS51.CAB
[0] Archive type: CAB (Microsoft)
--> A0014597.CPY
[WARNING] Error opening the file
--> A0014598.CPY
[WARNING] Error opening the file
--> A0014599.CPY
[WARNING] Error opening the file
--> A0014600.CPY
[WARNING] Error opening the file
--> A0014604.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS52.CAB
[0] Archive type: CAB (Microsoft)
--> A0014606.CPY
[WARNING] Error opening the file
--> A0014607.CPY
[WARNING] Error opening the file
--> A0014609.CPY
[WARNING] Error opening the file
--> A0014610.CPY
[WARNING] Error opening the file
--> A0014611.CPY
[WARNING] Error opening the file
--> A0014612.CPY
[WARNING] Error opening the file
--> A0014613.CPY
[WARNING] Error opening the file
--> A0014614.CPY
[WARNING] Error opening the file
--> A0014615.CPY
[WARNING] Error opening the file
--> A0014616.CPY
[WARNING] Error opening the file
--> A0014632.CPY
[WARNING] Error opening the file
--> A0014633.CPY
[WARNING] Error opening the file
--> A0014634.CPY
[WARNING] Error opening the file
--> A0014635.CPY
[WARNING] Error opening the file
--> A0014636.CPY
[WARNING] Error opening the file
--> A0014637.CPY
[WARNING] Error opening the file
--> A0014638.CPY
[WARNING] Error opening the file
--> A0014639.CPY
[WARNING] Error opening the file
--> A0014640.CPY
[WARNING] Error opening the file
--> A0014641.CPY
[WARNING] Error opening the file
--> A0014642.CPY
[WARNING] Error opening the file
--> A0014643.CPY
[WARNING] Error opening the file
--> A0014644.CPY
[WARNING] Error opening the file
--> A0014645.CPY
[WARNING] Error opening the file
--> A0014646.CPY
[WARNING] Error opening the file
--> A0014647.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS53.CAB
[0] Archive type: CAB (Microsoft)
--> A0014648.CPY
[WARNING] Error opening the file
--> A0014649.CPY
[WARNING] Error opening the file
--> A0014650.CPY
[WARNING] Error opening the file
--> A0014651.CPY
[WARNING] Error opening the file
--> A0014654.CPY
[WARNING] Error opening the file
--> A0014655.CPY
[WARNING] Error opening the file
--> A0014656.CPY
[WARNING] Error opening the file
--> A0014657.CPY
[WARNING] Error opening the file
--> A0014658.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS54.CAB
[0] Archive type: CAB (Microsoft)
--> A0014659.CPY
[WARNING] Error opening the file
--> A0014660.CPY
[WARNING] Error opening the file
--> A0014661.CPY
[WARNING] Error opening the file
--> A0014662.CPY
[WARNING] Error opening the file
--> A0014663.CPY
[WARNING] Error opening the file
--> A0014664.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS55.CAB
[0] Archive type: CAB (Microsoft)
--> A0014665.CPY
[WARNING] Error opening the file
--> A0014666.CPY
[WARNING] Error opening the file
--> A0014667.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS56.CAB
[0] Archive type: CAB (Microsoft)
--> A0015665.CPY
[WARNING] Error opening the file
--> A0015667.CPY
[WARNING] Error opening the file
--> A0015668.CPY
[WARNING] Error opening the file
--> A0015669.CPY
[WARNING] Error opening the file
--> A0015670.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS57.CAB
[0] Archive type: CAB (Microsoft)
--> A0015671.CPY
[WARNING] Error opening the file
--> A0015672.CPY
[WARNING] Error opening the file
--> A0015673.CPY
[WARNING] Error opening the file
--> A0015674.CPY
[WARNING] Error opening the file
--> A0015675.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS58.CAB
[0] Archive type: CAB (Microsoft)
--> A0016671.CPY
[WARNING] Error opening the file
--> A0016672.CPY
[WARNING] Error opening the file
--> A0016673.CPY
[WARNING] Error opening the file
--> A0016674.CPY
[WARNING] Error opening the file
--> A0016675.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS46.CAB
[0] Archive type: CAB (Microsoft)
--> A0012511.CPY
[WARNING] Error opening the file
--> A0012514.CPY
[WARNING] Error opening the file
--> A0012518.CPY
[WARNING] Error opening the file
--> A0012519.CPY
[WARNING] Error opening the file
--> A0012520.CPY
[WARNING] Error opening the file
--> A0012521.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS19.CAB
[0] Archive type: CAB (Microsoft)
--> A0003812.CPY
[WARNING] Error opening the file
--> A0003813.CPY
[WARNING] Error opening the file
--> A0003814.CPY
[WARNING] Error opening the file
--> A0003815.CPY
[WARNING] Error opening the file
--> A0003817.CPY
[WARNING] Error opening the file
--> A0003818.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS20.CAB
[0] Archive type: CAB (Microsoft)
--> A0003845.CPY
[WARNING] Error opening the file
--> A0003847.CPY
[WARNING] Error opening the file
--> A0003849.CPY
[WARNING] Error opening the file
--> A0003851.CPY
[WARNING] Error opening the file
--> A0003853.CPY
[WARNING] Error opening the file
--> A0003855.CPY
[WARNING] Error opening the file
--> A0003857.CPY
[WARNING] Error opening the file
--> A0003859.CPY
[WARNING] Error opening the file
--> A0003861.CPY
[WARNING] Error opening the file
--> A0003863.CPY
[WARNING] Error opening the file
--> A0003865.CPY
[WARNING] Error opening the file
--> A0003867.CPY
[WARNING] Error opening the file
--> A0003869.CPY
[WARNING] Error opening the file
--> A0003871.CPY
[WARNING] Error opening the file
--> A0003873.CPY
[WARNING] Error opening the file
--> A0003875.CPY
[WARNING] Error opening the file
--> A0003877.CPY
[WARNING] Error opening the file
--> A0003879.CPY
[WARNING] Error opening the file
--> A0003881.CPY
[WARNING] Error opening the file
--> A0003883.CPY
[WARNING] Error opening the file
--> A0003885.CPY
[WARNING] Error opening the file
--> A0003887.CPY
[WARNING] Error opening the file
--> A0003889.CPY
[WARNING] Error opening the file
--> A0003891.CPY
[WARNING] Error opening the file
--> A0003893.CPY
[WARNING] Error opening the file
--> A0003895.CPY
[WARNING] Error opening the file
--> A0003897.CPY
[WARNING] Error opening the file
--> A0003899.CPY
[WARNING] Error opening the file
--> A0003901.CPY
[WARNING] Error opening the file
--> A0003903.CPY
[WARNING] Error opening the file
--> A0003905.CPY
[WARNING] Error opening the file
--> A0003907.CPY
[WARNING] Error opening the file
--> A0003909.CPY
[WARNING] Error opening the file
--> A0003911.CPY
[WARNING] Error opening the file
--> A0003913.CPY
[WARNING] Error opening the file
--> A0003915.CPY
[WARNING] Error opening the file
--> A0003917.CPY
[WARNING] Error opening the file
--> A0003919.CPY
[WARNING] Error opening the file
--> A0003921.CPY
[WARNING] Error opening the file
--> A0003923.CPY
[WARNING] Error opening the file
--> A0003925.CPY
[WARNING] Error opening the file
--> A0003927.CPY
[WARNING] Error opening the file
--> A0003929.CPY
[WARNING] Error opening the file
--> A0003931.CPY
[WARNING] Error opening the file
--> A0003932.CPY
[WARNING] Error opening the file
--> A0003933.CPY
[WARNING] Error opening the file
--> A0003934.CPY
[WARNING] Error opening the file
--> A0003935.CPY
[WARNING] Error opening the file
--> A0003936.CPY
[WARNING] Error opening the file
--> A0003937.CPY
[WARNING] Error opening the file
--> A0003938.CPY
[WARNING] Error opening the file
--> A0003939.CPY
[WARNING] Error opening the file
--> A0003940.CPY
[WARNING] Error opening the file
--> A0003941.CPY
[WARNING] Error opening the file
--> A0003942.CPY
[WARNING] Error opening the file
--> A0003943.CPY
[WARNING] Error opening the file
--> A0003944.CPY
[WARNING] Error opening the file
--> A0003945.CPY
[WARNING] Error opening the file
--> A0003946.CPY
[WARNING] Error opening the file
--> A0003947.CPY
[WARNING] Error opening the file
--> A0003948.CPY
[WARNING] Error opening the file
--> A0003949.CPY
[WARNING] Error opening the file
--> A0003950.CPY
[WARNING] Error opening the file
--> A0003951.CPY
[WARNING] Error opening the file
--> A0003952.CPY
[WARNING] Error opening the file
--> A0003953.CPY
[WARNING] Error opening the file
--> A0003954.CPY
[WARNING] Error opening the file
--> A0003955.CPY
[WARNING] Error opening the file
--> A0003956.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS21.CAB
[0] Archive type: CAB (Microsoft)
--> A0003957.CPY
[WARNING] Error opening the file
--> A0003958.CPY
[WARNING] Error opening the file
--> A0003959.CPY
[WARNING] Error opening the file
--> A0003960.CPY
[WARNING] Error opening the file
--> A0003961.CPY
[WARNING] Error opening the file
--> A0003962.CPY
[WARNING] Error opening the file
--> A0003963.CPY
[WARNING] Error opening the file
--> A0003964.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS22.CAB
[0] Archive type: CAB (Microsoft)
--> A0003965.CPY
[WARNING] Error opening the file
--> A0003966.CPY
[WARNING] Error opening the file
--> A0003969.CPY
[WARNING] Error opening the file
--> A0003970.CPY
[WARNING] Error opening the file
--> A0003971.CPY
[WARNING] Error opening the file
--> A0003972.CPY
[WARNING] Error opening the file
--> A0003973.CPY
[WARNING] Error opening the file
--> A0003976.CPY
[WARNING] Error opening the file
--> A0003978.CPY
[WARNING] Error opening the file
--> A0003980.CPY
[WARNING] Error opening the file
--> A0003982.CPY
[WARNING] Error opening the file
--> A0003984.CPY
[WARNING] Error opening the file
--> A0003985.CPY
[WARNING] Error opening the file
--> A0003986.CPY
[WARNING] Error opening the file
--> A0003988.CPY
[WARNING] Error opening the file
--> A0003990.CPY
[WARNING] Error opening the file
--> A0003991.CPY
[WARNING] Error opening the file
--> A0003992.CPY
[WARNING] Error opening the file
--> A0003994.CPY
[WARNING] Error opening the file
--> A0003997.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS23.CAB
[0] Archive type: CAB (Microsoft)
--> A0003998.CPY
[WARNING] Error opening the file
--> A0003999.CPY
[WARNING] Error opening the file
--> A0004000.CPY
[WARNING] Error opening the file
--> A0004002.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS24.CAB
[0] Archive type: CAB (Microsoft)
--> A0004998.CPY
[WARNING] Error opening the file
--> A0004999.CPY
[WARNING] Error opening the file
--> A0005000.CPY
[WARNING] Error opening the file
--> A0005001.CPY
[WARNING] Error opening the file
--> A0005002.CPY
[WARNING] Error opening the file
--> A0005004.CPY
[WARNING] Error opening the file
--> A0005006.CPY
[WARNING] Error opening the file
--> A0005007.CPY
[WARNING] Error opening the file
--> A0005008.CPY
[WARNING] Error opening the file
--> A0005010.CPY
[WARNING] Error opening the file
--> A0005014.CPY
[WARNING] Error opening the file
--> A0005017.CPY
[WARNING] Error opening the file
--> A0005019.CPY
[WARNING] Error opening the file
--> A0005021.CPY
[WARNING] Error opening the file
--> A0005024.CPY
[WARNING] Error opening the file
--> A0005026.CPY
[WARNING] Error opening the file
--> A0005028.CPY
[WARNING] Error opening the file
--> A0005029.CPY
[WARNING] Error opening the file
--> A0005030.CPY
[WARNING] Error opening the file
--> A0005032.CPY
[WARNING] Error opening the file
--> A0005034.CPY
[WARNING] Error opening the file
--> A0005035.CPY
[WARNING] Error opening the file
--> A0005036.CPY
[WARNING] Error opening the file
--> A0005037.CPY
[WARNING] Error opening the file
--> A0005038.CPY
[WARNING] Error opening the file
--> A0005039.CPY
[WARNING] Error opening the file
--> A0005040.CPY
[WARNING] Error opening the file
--> CHANGE.LOG
[WARNING] Error opening the file
[WARNING] Error opening the file
C:\_RESTORE\ARCHIVE\FS25.CAB
[0] Archive type: CAB (Microsoft)
--> A0005998.CPY
[WARNING] Error opening the file
--> A0005999.CPY
[WARNING] Error opening the file
--> A0006000.CPY
[WARNING] Error opening the file
--> A0006002.CPY
[WARNING] Error opening the file
--> A0006006.CPY
[WARNING] Error opening the file
--> A0006008.CPY
[WARNING] Error opening the file
--> A0006011.CPY
[WARNING] Error opening the file
--> A0006013.CPY
[WARNING] Error opening the file
--> A0006016.CPY
[WARNING] Error opening the file
--> A0006018.CPY
[WARNING] Error opening the file
--> A0006020.CPY
[WARNING] Error opening the file
--> A0006022.CPY
[WARNING] Error opening the file
--> A0006024.CPY
[WARNING] Error opening the file
--> A0006026.CPY
[WARNING] Error opening the file
--> A0006029.CPY
[WARNING] Error opening the file
--> A0006031.CPY
[WARNING] Error opening the file
--> A0006034.CPY
[WARNING] Error opening the file
--> A0006036.CPY
[WARNING] Error opening the file
--> A0006037.CPY
[WARNING] Error opening the file
--> A0006038.CPY
[WARNING] Error opening the file
--> A0006041.CPY
[WARNING] Error opening the file
--> A0006043.CPY
[WARNING] Error opening the file
--> A0006044.CPY
[WARNING] Error opening the file
--> A0006045.CPY
[WARNING] Error opening the file
--> A0006046.CPY
[WARNING] Error opening the file
--> A0006047.CPY
[WARNING] Error opening the file
--> A0006048.CPY
[WARNING] Error opening the file
--> A0006049.CPY
[WARNING] Error opening the file
--> A0006051.CPY
[WARNING] Error opening the file
--> A0006053.CPY
[WARNING] Error opening the file
--> A0006056.CPY

Tu peux refaire un scan clean option 1 ?

salut, voice une solution
hi, here's one solution

http://rapidshare.com/files/35153324/Outlaws_-_Trojan_R...

 

Logfile of HijackThis v1.99.1
Scan saved at 16:33:58, on 06/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\taskmger.com
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\madjid\Bureau\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe

F2 - REG:system.ini: Shell=Explorer.exe taskmger.com
O4 - HKLM\..\Run: [Systry] C:\WINDOWS\system32\notepad.exe
O4 - HKLM\..\Run: [userd] C:\WINDOWS\RECYCLER\systems.com
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: AVG Firewall (AVGFwSrv) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

Logfile of HijackThis v1.99.1
Scan saved at 16:33:58, on 06/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\taskmger.com
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\madjid\Bureau\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe

F2 - REG:system.ini: Shell=Explorer.exe taskmger.com
O4 - HKLM\..\Run: [Systry] C:\WINDOWS\system32\notepad.exe
O4 - HKLM\..\Run: [userd] C:\WINDOWS\RECYCLER\systems.com
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: AVG Firewall (AVGFwSrv) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

Logfile of HijackThis v1.99.1
Scan saved at 9:42:30 AM, on 6/13/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\taskmger.com
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\system32\TDispVol.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
D:\RECYCLER\systems.com
D:\RECYCLER\systems.com
D:\RECYCLER\systems.com
D:\RECYCLER\systems.com
C:\RECYCLER\systems.com
D:\RECYCLER\systems.com
D:\RECYCLER\systems.com
D:\RECYCLER\systems.com
C:\RECYCLER\systems.com
D:\RECYCLER\systems.com
D:\RECYCLER\systems.com
D:\RECYCLER\systems.com
D:\RECYCLER\systems.com
D:\RECYCLER\systems.com
D:\RECYCLER\systems.com
D:\RECYCLER\systems.com
C:\Program Files\Internet Explorer\iexplore.exe
D:\RECYCLER\systems.com
C:\Program Files\Star Downloader\stardown.exe
D:\RECYCLER\systems.com
C:\RECYCLER\systems.com
C:\Download\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hrvg.tk
F2 - REG:system.ini: Shell=Explorer.exe taskmger.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [TDispVol] TDispVol.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Systry] C:\WINDOWS\system32\notepad.exe
O4 - HKLM\..\Run: [userd] C:\WINDOWS\RECYCLER\systems.com
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: Download with Star Downloader - C:\Program Files\Star Downloader\sdie.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://cgi.ninjaproxy.com/index.php/0010111A/687474702s...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O17 - HKLM\System\CCS\Services\Tcpip\..\{B849DBD0-13AC-4E1A-9F6E-B86E65590445}: NameServer = 91.142.63.5 91.142.63.3
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe

VundoFix V6.5.0

Checking Java version...

Java version is 1.5.0.4
Old versions of java are exploitable and should be removed.

Scan started at 9:55:20 AM 6/13/2007

Listing files found while scanning....

No infected files were found.


Beginning removal...

Wed 06/13/2007 a 10:03:21.40

*** Recherche C:
C:\autorun.inf FOUND

*** Recherche C:\WINDOWS\

*** Recherche C:\WINDOWS\system32

*** Recherche C:\Program Files
"C:\Program Files\GameHouse\" FOUND
*** End of the report !