je suis infestée!!

salut j'aurais besoin d'aide! Mon anti-virus est NOD32,il detecte regulierement "une variante de win32/BHO.G cheval de troie" et aussi depuis 2 ou 3 heures "win32/adware.virtumonde.HBappliaction".Je les mets en quarantaine à chaque fois mais ils reviennent...J'ai essayer spybot search&destroy,ccleaner,avg anti-spyware,ad-ware se,hijackthis,trojan remover et a-square free.Ils trouvent des cookies mais ils y en a toujours des nouveaux,dont trojan.agent qui revient souvent!!Ils y a beaucoup de publicités qui apparaissent et monordi est lent depuis...aidez moi svp!!!!!

salut pour vundofix je lai deja fait et il a rien trouvé,mais je tenvoie un rapport de hijackthis,en attente d'instructions....merci!

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 14:29:38, on 2007-06-07
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ESET\nod32kui.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Propriétaire\Bureau\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: (no name) - {ffedf179-ad71-4c4d-83b5-8fb145c7b96e} - C:\WINDOWS\system32\kbdECD.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [kind hide] C:\DOCUME~1\PROPRI~1\APPLIC~1\THUNKM~1\vc body bore.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/mi [...] 1087495281
O20 - AppInit_DLLs: c:\windows\system32\geebywv.dll
O20 - Winlogon Notify: kbdECD - C:\WINDOWS\SYSTEM32\kbdECD.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

--
End of file - 4453 bytes

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 19:18:40, on 2007-06-07
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ESET\nod32kui.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Propriétaire\Bureau\VundoFix.exe
C:\Documents and Settings\Propriétaire\Bureau\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: (no name) - {ffedf179-ad71-4c4d-83b5-8fb145c7b96e} - C:\WINDOWS\system32\FNTl32.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [kind hide] C:\DOCUME~1\PROPRI~1\APPLIC~1\THUNKM~1\vc body bore.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/mi [...] 1087495281
O20 - AppInit_DLLs: c:\windows\system32\geebywv.dll
O20 - Winlogon Notify: FNTl32 - C:\WINDOWS\SYSTEM32\FNTl32.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

--
End of file - 4496 bytes





Beginning removal...

Attempting to delete c:\windows\system32\geebywv.dll
c:\windows\system32\geebywv.dll Could not be deleted.

Attempting to delete c:\windows\system32\geebywv.dll
c:\windows\system32\geebywv.dll Could not be deleted.

Attempting to delete c:\windows\system32\geebywv.dll
c:\windows\system32\geebywv.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\kbdECD.dll
C:\WINDOWS\system32\kbdECD.dll Has been deleted!

Performing Repairs to the registry.
Done!

Beginning removal...


je mapprête a faire lautre lopxpMH....
Merci!

Bonjour


Je veux bien continuer à t'aider, mais arrête d'aller sur d'autres forums. Ne te disperse pas. Tu viens de faire plusieurs manips inutiles ....

Maintenant, poste un nouveau Hijackthis.

Il reste encore un grand ménage à faire.

Mais y a t-il un moment de la journée ou nous pourrions régler cela ensemble pendant que tu es en ligne..?J'ai hâte de régler tout ça!Et en plus je suis disponible ces jours-ci...en attente d'instructions,Merci!!

C:\Documents and Settings\All Users\Application Data\Itch trust plus support moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\FunWebProducts\Data\Propriétaire moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\FunWebProducts\Data moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\FunWebProducts moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\thunk mp3 moved successfully.
DllUnregisterServer procedure not found in C:\windows\system32\geebywv.dll
C:\windows\system32\geebywv.dll NOT unregistered.
File move failed. C:\windows\system32\geebywv.dll scheduled to be moved on reboot.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\jupilt.dll
C:\WINDOWS\system32\jupilt.dll NOT unregistered.
File move failed. C:\WINDOWS\system32\jupilt.dll scheduled to be moved on reboot.
File/Folder C:\WINDOWS\system32\tlipuj.bak not found.
File/Folder C:\WINDOWS\system32\tlipuj.bak1 not found.
File/Folder C:\WINDOWS\system32\tlipuj.bak2 not found.
File/Folder C:\WINDOWS\SYSTEM32\tlipuj.ini not found.
File/Folder C:\WINDOWS\system32\tlipuj.ini1 not found.
File/Folder C:\WINDOWS\system32\tlipuj.ini2 not found.
File/Folder C:\WINDOWS\SYSTEM32\tlipuj.tmp not found.
C:\Documents and Settings\Propriétaire\Application Data\tmp113C.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1149.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1155.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1158.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp14B8.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp14E6.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1504.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp151.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1513.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp174.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp17C.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp18E6.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp18E9.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp18EC.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp18EF.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1925.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1A26.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1A29.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1A2B.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1A5.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1A9.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1B11.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1B1F.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1B28.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1B7.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1B9.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1C1.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1D7.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1D9.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1DD.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1EC5.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1F36.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1F43.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1F5B.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1FAA.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1FB4.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1FC.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp1FDC.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp209.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp20B6.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp20CC.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp20D3.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp20F.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp220B.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp221.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp24E.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp260.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp2657.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp2665.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp267E.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp268.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp2690.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp273.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp2BC9.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp2BD4.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp2BE0.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp31A.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp34.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp35B.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp390.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp393.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp395.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp3C3.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp3C6.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp3D9E.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp3DBC.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp400.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp409.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp42C4.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp42DA.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp44B.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp44F.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp451.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp465.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp467.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp485.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp49.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp4C1.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp4C7.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp4F7.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp4F9.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp51.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp52.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp54.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp544.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp550.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp56.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp5D6.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp63E.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp656.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp68A.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp68C.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp690.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp698.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp6E.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp740.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp743.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp745.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp75.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp794.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp797.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp7A9.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp7CC9.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp9A0.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmp9B4.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpA13A.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpA45.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpA5C.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpB27A.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpB28D.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpB793.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpB79C.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpB7A5.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpB7AA.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpB8.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpB8C.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpB90.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpC7.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpC80.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpC89.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpC9C.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpCC.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpD2.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpEA.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpEE.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpF1.tmp.exe moved successfully.
C:\Documents and Settings\Propriétaire\Application Data\tmpF6.tmp.exe moved successfully.
C:\WINDOWS\Tasks\A93501F4935AB6A4.job moved successfully.
File/Folder not found.

Created on 06-08-2007 18:10:45

Re


Est ce que l'ordinateur a redémarré après OTMoveIt ?


Relance un scan HijackThis et coche les lignes ci-dessous :

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: (no name) - {c62a43a8-b8c3-43be-9317-4fe2f225d0fb} - C:\WINDOWS\system32\jupilt.dll (file missing)
O4 - HKCU\..\Run: [kind hide] C:\DOCUME~1\PROPRI~1\APPLIC~1\THUNKM~1\vc body bore.exe
O20 - AppInit_DLLs: c:\windows\system32\geebywv.dll
O20 - Winlogon Notify: jupilt - jupilt.dll (file missing)

Ferme toutes les fenêtres Windows, Internet explorer, Outlook,sauf le logiciel Hijackthis et clique sur « Fix checked »


Fais une analyse antivirus en ligne sur Kaspersky
http://webscanner.kaspersky.fr/
Clique sur Démarrer Online Scanner.
Sélectionne le poste de travail comme analyse.
Colle son rapport ici.

le rapport est long...

<html>
<head>
<title>KASPERSKY ON-LINE SCANNER REPORT</title>
<meta http-equiv='Content-Type' content='text/html; charset=utf-8'>
</head>

<style>
.pagetitle { font-size:20px; color:#FFFFFF; font-family: Arial, Geneva, sans-serif; }
.text { font-size:11px; font-family: Arial, Geneva, sans-serif; }
TD { font-size:11px; font-family: Arial, Geneva, sans-serif; }
</style>

<body>
<table width='100%' height='110' border='0'>
<tr height='30' align='center' bgcolor='#005447'>
<td colspan='2' height='30' class='pagetitle'>
<b>KASPERSKY ON-LINE SCANNER REPORT</b>
</td>
</tr>
<tr height='70'>
<td colspan='2' height='70'>
Friday, June 08, 2007 9:29:19 PM<br>
Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)<br>
Kaspersky On-line Scanner version : 5.0.83.0<br>
Dernière mise à jour de la base antivirus Kaspersky : 9/06/2007<br>
Enregistrements dans la base antivirus Kaspersky : 320264<br>
</td>
</tr>
<tr height='10'>
<td colspan='2' height='10'>
</td>
</tr>
</table>
<table width='100%' height='145' border='0'>
<tr height='20' bgcolor='#EFEBDE'>
<td colspan='2' height='20'><b>Paramètres d'analyse</b></td>
</tr>
<tr height='15'>
<td height='15' width='250'>Analyser avec la base antivirus suivante</td>
<td>standard</td>
</tr>
<tr height='15'>
<td height='15'>Analyser les archives</td>
<td>vrai</td>
</tr>
<tr height='15'>
<td height='15'>Analyser les bases de messagerie</td>
<td>vrai</td>
</tr>
<tr height='10'>
<td colspan='2' height='10'>
</td>
</tr>
<tr height='20' bgcolor='#EFEBDE'>
<td height='20'><b>Cible de l'analyse</b></td>
<td>Poste de travail</td>
</tr>
<tr height='20'>
<td colspan='2' height='20'>
A:\<br>
C:\<br>
D:\
</td>
</tr>
<tr height='10'>
<td colspan='2' height='10'>
</td>
</tr>
<tr height='20' bgcolor='#EFEBDE'>
<td colspan='2' height='20'><b>Statistiques de l'analyse</b></td>
</tr>
<tr height='15'>
<td height='15'>Total d'objets analysés</td>
<td>44719</td>
</tr>
<tr height='15'>
<td height='15'>Nombre de virus trouvés</td>
<td>9</td>
</tr>
<tr height='15'>
<td height='15'>Nombre d'objets infectés</td>
<td>145 / 0</td>
</tr>
<tr height='15'>
<td height='15'>Nombre d'objets suspects</td>
<td>0</td>
</tr>
<tr height='15'>
<td height='15'>Durée de l'analyse</td>
<td>00:24:42</td>
</tr>
</table>
<br>
<table width='100%' border='0'>
<tr height='20' bgcolor='#EFEBDE'>
<td height='20'><b>Nom de l'objet infecté</b></td>
<td width='200'><b>Nom du virus</b></td>
<td width='100'><b>Dernière action</b></td>
</tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\LocalService\Cookies\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\LocalService\NTUSER.DAT </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\LocalService\ntuser.dat.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\NetworkService\Cookies\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\NetworkService\NTUSER.DAT </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\NetworkService\ntuser.dat.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Application Data\tmp36F.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Cookies\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{BFC419B0-E2BF-47FE-A96C-C4360825A9DD}\Microsoft\Outlook Express\Boîte d'envoi.dbx/[From "Cynthia Thomas-Maher" <cynthiax666x@hotmail.com>][Date Mon, 19 Feb 2007 18:25:11 -0500]/MSNbloke.zip/MSNbloke.exe </td>
<td>Infecté : not-virus:BadJoke.Win32.Farce.b </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{BFC419B0-E2BF-47FE-A96C-C4360825A9DD}\Microsoft\Outlook Express\Boîte d'envoi.dbx/[From "Cynthia Thomas-Maher" <cynthiax666x@hotmail.com>][Date Mon, 19 Feb 2007 18:25:11 -0500]/MSNbloke.zip </td>
<td>Infecté : not-virus:BadJoke.Win32.Farce.b </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{BFC419B0-E2BF-47FE-A96C-C4360825A9DD}\Microsoft\Outlook Express\Boîte d'envoi.dbx </td>
<td>Mail MS Outlook 5: infecté - 2 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Messenger\cynthiax666x@hotmail.com\SharingMetadata\Logs\Dfsr00005.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Messenger\cynthiax666x@hotmail.com\SharingMetadata\pending.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Messenger\cynthiax666x@hotmail.com\SharingMetadata\Working\database_874_C5E2_74C5_D29C\dfsr.db </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Messenger\cynthiax666x@hotmail.com\SharingMetadata\Working\database_874_C5E2_74C5_D29C\fsr.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Messenger\cynthiax666x@hotmail.com\SharingMetadata\Working\database_874_C5E2_74C5_D29C\fsrtmp.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Messenger\cynthiax666x@hotmail.com\SharingMetadata\Working\database_874_C5E2_74C5_D29C\tmp.edb </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Windows Live Contacts\cynthiax666x@hotmail.com\real\members.stg </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Windows Live Contacts\cynthiax666x@hotmail.com\shadow\members.stg </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\MSHist012007060820070609\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Temp\~DFBB27.tmp </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Temp\~DFBB34.tmp </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Temp\~DFC3B8.tmp </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Temp\~DFC3C5.tmp </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Temp\~ROMFN_00000F50 </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\NTUSER.DAT </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\ntuser.dat.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\logs\starwind.2007-06-08.18-12-30.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\cache\CACHE.NDB </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\1B14ZDBA.NQF/win98.exe </td>
<td>Infecté : Trojan.Win16.Parkin </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\1B14ZDBA.NQF </td>
<td>RAR: infecté - 1 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\1B14ZDBA.NQF </td>
<td>PE-Crypt.XorPE: infecté - 1 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\3LOOQUCA.NQF </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\5JVAX5BA.NQF </td>
<td>Infecté : Trojan.Win32.Agent.anr </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\BSDDEUDA.NQF/WISE0053.BIN </td>
<td>Infecté : Trojan-Downloader.Win32.Agent.avz </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\BSDDEUDA.NQF/WISE0054.BIN </td>
<td>Infecté : Trojan-Downloader.Win32.Agent.avz </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\BSDDEUDA.NQF/WISE0055.BIN </td>
<td>Infecté : Trojan-Downloader.Win32.Agent.avz </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\BSDDEUDA.NQF </td>
<td>WiseSFX: infecté - 3 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\BSDDEUDA.NQF </td>
<td>WiseSFX Dropper: infecté - 3 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\BSDDEUDA.NQF </td>
<td>PE-Crypt.XorPE: infecté - 3 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\EPDYK2DA.NQF/win98.exe </td>
<td>Infecté : Trojan.Win16.Parkin </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\EPDYK2DA.NQF </td>
<td>RAR: infecté - 1 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\EPDYK2DA.NQF </td>
<td>PE-Crypt.XorPE: infecté - 1 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\EVSF44CA.NQF </td>
<td>Infecté : not-virus:Hoax.Win32.Renos.eo </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\I4XPBPDA.NQF/WISE0072.BIN </td>
<td>Infecté : Trojan-Downloader.Win32.Agent.avz </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\I4XPBPDA.NQF </td>
<td>WiseSFX: infecté - 1 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\I4XPBPDA.NQF </td>
<td>WiseSFX Dropper: infecté - 1 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\I4XPBPDA.NQF </td>
<td>PE-Crypt.XorPE: infecté - 1 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\RFCJHGAA.NQF/WISE0072.BIN </td>
<td>Infecté : Trojan-Downloader.Win32.Agent.avz </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\RFCJHGAA.NQF </td>
<td>WiseSFX: infecté - 1 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\RFCJHGAA.NQF </td>
<td>WiseSFX Dropper: infecté - 1 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\RFCJHGAA.NQF </td>
<td>PE-Crypt.XorPE: infecté - 1 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\UWFFZCDA.NQF </td>
<td>Infecté : not-virus:Hoax.Win32.Renos.eo </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\infected\ZYO2N5BA.NQF </td>
<td>Infecté : not-virus:Hoax.Win32.Renos.eo </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\logs\virlog.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\logs\warnlog.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\MountPointManagerRemoteDatabase </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP201\A0018675.exe/email.exe </td>
<td>Infecté : not-virus:BadJoke.Win32.Enfin.a </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP201\A0018675.exe </td>
<td>RAR: infecté - 1 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021732.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021740.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021741.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021742.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021743.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021754.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021756.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021763.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021779.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021780.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021781.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021782.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021802.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021804.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP221\A0021824.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP224\A0023243.exe </td>
<td>Infecté : Trojan.Win32.Obfuscated.en </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023467.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023478.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023488.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023493.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023495.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023497.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023500.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023504.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023507.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023513.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023523.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023526.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023528.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023530.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023532.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023538.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP226\A0023540.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023602.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023613.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023623.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023628.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023630.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023632.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023635.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023639.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023642.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023648.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023658.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023661.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023663.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023665.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023667.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023673.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\A0023675.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP227\change.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\Debug\PASSWD.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\SchedLgU.Txt </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\SoftwareDistribution\EventCache\{F6BFDF77-BE3C-41B4-B887-EF96CEB11697}.bin </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\SoftwareDistribution\ReportingEvents.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\Sti_Trace.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\CatRoot2\edb.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\CatRoot2\tmp.edb </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\AppEvent.Evt </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\default </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\default.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\Internet.evt </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\SAM </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\SAM.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\SecEvent.Evt </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\SECURITY </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\SECURITY.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\software </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\software.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\SysEvent.Evt </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\system </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\system.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\h323log.txt </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\LogFiles\HTTPERR\httperr1.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\wiadebug.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\wiaservc.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\WindowsUpdate.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\thunk mp3\inter mpeg default.exe </td>
<td>Infecté : Trojan.Win32.Obfuscated.en </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp113C.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp14B8.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp1504.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp151.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp174.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp18E6.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp1925.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp1A5.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp1A9.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp1B11.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp1D7.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp1D9.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp1EC5.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp1FAA.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp1FDC.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp209.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp20B6.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp260.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp2657.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp268.tmp.exe </td>
<td>Infecté : Trojan.Win32.Agent.agv </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp2BC9.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp2BD4.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp2BE0.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp31A.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp34.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp390.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp3C3.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp3D9E.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp400.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp42C4.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp44B.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp451.tmp.exe </td>
<td>Infecté : Trojan.Win32.Agent.agv </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp465.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp485.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp4C7.tmp.exe </td>
<td>Infecté : Trojan.Win32.Agent.agv </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp4F7.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp51.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp52.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp544.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp5D6.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp63E.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp656.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp68A.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp740.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp75.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp794.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp7CC9.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmp9A0.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpA45.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpB27A.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpB793.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpB79C.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpB7A5.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpB7AA.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpB8.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpB8C.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpB90.tmp.exe </td>
<td>Infecté : Trojan.Win32.Agent.agv </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpC7.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpC80.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpEA.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpEE.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpF1.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\_OTMoveIt\MovedFiles\Documents and Settings\Propriétaire\Application Data\tmpF6.tmp.exe </td>
<td>Infecté : Trojan.Win32.BHO.g </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td colspan='3' height='20'><b>Analyse terminée.</b></td>
</tr>
</table>
</body>
</html>

..................

Euh ...
Je te rappelle que nous sommes bénévoles et que nous avons une vie en dehors des forums.
Aujourd'hui, je travaillais.

Pas grand chose dans ce rapport.

Supprime ceci

C:\Documents and Settings\Propri�taire\Application Data\tmp36F.tmp.exe
C:\_OTMoveIt\MovedFiles


C:\Program Files\ESET\infected ---> Vide ce dossier qui correspond à la quarantaine de Nod32


Vide la corbeille


Clique sur Démarrer - Clic droit sur le Poste de Travail - Propriétés - Restauration du systéme - Cocher la case Désactiver la restauration du systéme et cliquer sur Appliquer.

Puis redémarrer l'ordinateur et faire l'opération inverse en décochant la case Désactiver la restauration systéme.


As tu encore des dysfonctionnements ?

salu la fille cool si ta réglé ton problème moi mon pc ram et personne ne vient donc si un pro li ca q'il vienne voir mon sujet merci

<html>
<head>
<title>KASPERSKY ON-LINE SCANNER REPORT</title>
<meta http-equiv='Content-Type' content='text/html; charset=utf-8'>
</head>

<style>
.pagetitle { font-size:20px; color:#FFFFFF; font-family: Arial, Geneva, sans-serif; }
.text { font-size:11px; font-family: Arial, Geneva, sans-serif; }
TD { font-size:11px; font-family: Arial, Geneva, sans-serif; }
</style>

<body>
<table width='100%' height='110' border='0'>
<tr height='30' align='center' bgcolor='#005447'>
<td colspan='2' height='30' class='pagetitle'>
<b>KASPERSKY ON-LINE SCANNER REPORT</b>
</td>
</tr>
<tr height='70'>
<td colspan='2' height='70'>
Saturday, June 09, 2007 5:31:50 PM<br>
Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)<br>
Kaspersky On-line Scanner version : 5.0.83.0<br>
Dernière mise à jour de la base antivirus Kaspersky : 9/06/2007<br>
Enregistrements dans la base antivirus Kaspersky : 320513<br>
</td>
</tr>
<tr height='10'>
<td colspan='2' height='10'>
</td>
</tr>
</table>
<table width='100%' height='145' border='0'>
<tr height='20' bgcolor='#EFEBDE'>
<td colspan='2' height='20'><b>Paramètres d'analyse</b></td>
</tr>
<tr height='15'>
<td height='15' width='250'>Analyser avec la base antivirus suivante</td>
<td>standard</td>
</tr>
<tr height='15'>
<td height='15'>Analyser les archives</td>
<td>vrai</td>
</tr>
<tr height='15'>
<td height='15'>Analyser les bases de messagerie</td>
<td>vrai</td>
</tr>
<tr height='10'>
<td colspan='2' height='10'>
</td>
</tr>
<tr height='20' bgcolor='#EFEBDE'>
<td height='20'><b>Cible de l'analyse</b></td>
<td>Poste de travail</td>
</tr>
<tr height='20'>
<td colspan='2' height='20'>
A:\<br>
C:\<br>
D:\
</td>
</tr>
<tr height='10'>
<td colspan='2' height='10'>
</td>
</tr>
<tr height='20' bgcolor='#EFEBDE'>
<td colspan='2' height='20'><b>Statistiques de l'analyse</b></td>
</tr>
<tr height='15'>
<td height='15'>Total d'objets analysés</td>
<td>41546</td>
</tr>
<tr height='15'>
<td height='15'>Nombre de virus trouvés</td>
<td>1</td>
</tr>
<tr height='15'>
<td height='15'>Nombre d'objets infectés</td>
<td>3 / 0</td>
</tr>
<tr height='15'>
<td height='15'>Nombre d'objets suspects</td>
<td>0</td>
</tr>
<tr height='15'>
<td height='15'>Durée de l'analyse</td>
<td>00:22:55</td>
</tr>
</table>
<br>
<table width='100%' border='0'>
<tr height='20' bgcolor='#EFEBDE'>
<td height='20'><b>Nom de l'objet infecté</b></td>
<td width='200'><b>Nom du virus</b></td>
<td width='100'><b>Dernière action</b></td>
</tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\LocalService\Cookies\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\LocalService\NTUSER.DAT </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\LocalService\ntuser.dat.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\NetworkService\Cookies\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\NetworkService\NTUSER.DAT </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\NetworkService\ntuser.dat.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Cookies\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{BFC419B0-E2BF-47FE-A96C-C4360825A9DD}\Microsoft\Outlook Express\Boîte d'envoi.dbx/[From "Cynthia Thomas-Maher" <cynthiax666x@hotmail.com>][Date Mon, 19 Feb 2007 18:25:11 -0500]/MSNbloke.zip/MSNbloke.exe </td>
<td>Infecté : not-virus:BadJoke.Win32.Farce.b </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{BFC419B0-E2BF-47FE-A96C-C4360825A9DD}\Microsoft\Outlook Express\Boîte d'envoi.dbx/[From "Cynthia Thomas-Maher" <cynthiax666x@hotmail.com>][Date Mon, 19 Feb 2007 18:25:11 -0500]/MSNbloke.zip </td>
<td>Infecté : not-virus:BadJoke.Win32.Farce.b </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Identities\{BFC419B0-E2BF-47FE-A96C-C4360825A9DD}\Microsoft\Outlook Express\Boîte d'envoi.dbx </td>
<td>Mail MS Outlook 5: infecté - 2 </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Messenger\cynthiax666x@hotmail.com\SharingMetadata\Logs\Dfsr00005.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Messenger\cynthiax666x@hotmail.com\SharingMetadata\pending.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Messenger\cynthiax666x@hotmail.com\SharingMetadata\Working\database_874_C5E2_74C5_D29C\dfsr.db </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Messenger\cynthiax666x@hotmail.com\SharingMetadata\Working\database_874_C5E2_74C5_D29C\fsr.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Messenger\cynthiax666x@hotmail.com\SharingMetadata\Working\database_874_C5E2_74C5_D29C\tmp.edb </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Windows Live Contacts\cynthiax666x@hotmail.com\real\members.stg </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Windows Live Contacts\cynthiax666x@hotmail.com\shadow\members.stg </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\MSHist012007060920070610\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Temp\~DF7391.tmp </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Temp\~DF73A4.tmp </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Temp\~DF9B41.tmp </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Temp\~DF9B4E.tmp </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\index.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\NTUSER.DAT </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Documents and Settings\Propriétaire\ntuser.dat.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\logs\starwind.2007-06-09.17-01-02.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\cache\CACHE.NDB </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\logs\virlog.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\Program Files\ESET\logs\warnlog.dat </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\MountPointManagerRemoteDatabase </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\System Volume Information\_restore{096551AE-646A-46C6-9519-8F2F06F46E06}\RP1\change.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\Debug\PASSWD.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\SchedLgU.Txt </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\SoftwareDistribution\ReportingEvents.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\Sti_Trace.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\AppEvent.Evt </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\default </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\default.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\Internet.evt </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\SAM </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\SAM.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\SecEvent.Evt </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\SECURITY </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\SECURITY.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\software </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\software.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\SysEvent.Evt </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\system </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\config\system.LOG </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\h323log.txt </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\LogFiles\HTTPERR\httperr1.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\wiadebug.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\wiaservc.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td height='20'>C:\WINDOWS\WindowsUpdate.log </td>
<td>L'objet est verrouillé </td>
<td>ignoré </td>
</tr>
<tr><td colspan='3' height='1' bgcolor='#EFEBDE'></td></tr>
<tr height='20'>
<td colspan='3' height='20'><b>Analyse terminée.</b></td>
</tr>
</table>
</body>
</html>

bon j'ai tenté ce que tu m'as dit,mais je ne suis pas certaine si ça a fonctionné...je ne pouvais pas supprimer,alors j'ai essayer en mode sans echec,dans rechercher..mais il ne trouvais pas les meme fichiers que en mode normal..alors la je refais un scan.je me dis que si ça a marché,il ne detectera plus rien..!!?

Oui