[LOGICIEL] [Centralisation] .:::: Hijackthis ::::.

snooky · le 20 novembre 2008

Désinstalle Avast et Spybot .

Lance ce remover Symantec :

http://kb.kaspersky.fr/index.php?article=680&onglet=1

Désactive Windows Defender :

http://infomars.fr/forum/index.php?showtopic=1244

Lance MBAM et supprime tout ce qu'il trouve .

Poste le rapport créé.

Ave Hijackthis , coche et Fix checked sur toutes les lignes 04.

zygomatikdan · le 21 novembre 2008

Voilà j'ai fait tout ce que tu as indiqué,à ma grande surprise il n'a rien trouvé avec Mbam(en scan rapide,je n'avais pas le temps de faire un scan normal,s'il faut le refaire dis le moi)

Malwarebytes' Anti-Malware 1.30

Version de la base de données: 1414

Windows 6.0.6000

21/11/2008 18:07:38

mbam-log-2008-11-21 (18-07-38).txt

Type de recherche: Examen rapide

Eléments examinés: 46540

Temps écoulé: 13 minute(s), 1 second(s)

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 0

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

Fichier(s) infecté(s):

(Aucun élément nuisible détecté)

Et voilà le dernier rapport HijackThis apres avoir check et fix les lignes 04

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 18:15:31, on 21/11/2008

Platform: Windows Vista (WinNT 6.00.1904)

MSIE: Internet Explorer v7.00 (7.00.6000.16681)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe

C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE

C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Internet Explorer\ieuser.exe

J:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll

O1 - Hosts: ::1 localhost

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Windows\system32\SysMonitor.exe

O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe

O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe

O4 - HKLM\..\Run: [systrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"

O4 - HKLM\..\Run: [PCMService] "C:\Acer\Empowering Technology\eMode\PCM\PCMService.exe"

O4 - HKLM\..\Run: [snpstd3] C:\Windows\vsnpstd3.exe

O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto

O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

O4 - HKCU\..\Run: [?????????] ??????????????e

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: Empowering Technology Launcher.lnk = ?

O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O13 - Gopher Prefix:

O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe

O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Acer\Empowering Technology\eMode\PCM\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Acer\Empowering Technology\eMode\PCM\Kernel\TV\CLSched.exe

O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe

O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

--

End of file - 5970 bytes

Merci pour la rapidité à laquelle tu as repondu :transpi:

snooky · le 21 novembre 2008

Supprime les balises Quote de tes rapports , merci . :transpi:

zygomatikdan · le 21 novembre 2008

Il me semblait qu'on quotait les rapport à l'epoque..voilou c'est edité.

Du coté infection il n'y a plus rien?J'ai plus qu'à instaler Antivir si j'ai bien compris?

snooky · le 22 novembre 2008

Redémarre le pc .

Coche et fix checked ces lignes avec Hijackthis :

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Windows\system32\SysMonitor.exe

O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe

O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe

O4 - HKLM\..\Run: [PCMService] "C:\Acer\Empowering Technology\eMode\PCM\PCMService.exe"

O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto

O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

O4 - HKCU\..\Run: [?????????] ??????????????e

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: Empowering Technology Launcher.lnk = ?

Redémarre à nouveau le pc .

Lance ComboFix et poste le rapport créé :

http://www.bleepingcomputer.com/combofix/f...iliser-combofix

Lance une analyse complète avec MBAM ET Antivir .

nico6259 · le 24 novembre 2008

Bonjour,

J'ai exposé hier mon problème sur le forum windows : la capacité de mon disque dur fond à vue d'oeil!

Noisette m'a proposé de poster mon rapport Hijacking...

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 09:40:24, on 24/11/2008

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\WINDOWS\System32\rundll32.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\IDT\WDM\sttray.exe

C:\Program Files\HP\QuickPlay\QPService.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe

C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe

C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe

C:\Program Files\Alwil Software\Avast4\ashDisp.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

C:\WINDOWS\ehome\ehtray.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE

C:\Windows\ehome\ehmsas.exe

C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...ion&pf=cnnb

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...ion&pf=cnnb

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...ion&pf=cnnb

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...ion&pf=cnnb

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [sysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe

O4 - HKLM\..\Run: [uCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"

O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start

O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [NeroCheck] C:\Windows\system32\NeroCheck.exe

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe

O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll

O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O13 - Gopher Prefix:

O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe

O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe

O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe

O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe

--

End of file - 8719 bytes

Je n'y comprends pas grand chose!

Merci beaucoup pour votre aide.

snooky · le 24 novembre 2008

@ nico6259 :

Désinstalle Avast et Spybot.

Désactive Windows Defender :

http://infomars.fr/forum/index.php?showtopic=1244

Lance Clean v2.0 , procédure 1 .

Redémarre le pc .

Fait une analyse complète avec MBAM , supprime tout ce qu'il trouve et poste le rapport créé.

zygomatikdan · le 24 novembre 2008

Hello Snooky,

Juste un petit message pour t'informer que je suis en deplacement pendant 1 sem,je continuerai la desinfection à mon retour.Merci

nico6259 · le 25 novembre 2008

Merci Snooky!

Si je comprends bien je dois désinstaller définitivement Avast, Spybot et windows defender?

Il faudra bien que je remplace par un antivirus efficace après?...AVG?

Je vais récupérer Clean v2.0, merci pour ton aide!

snooky · le 25 novembre 2008

Chaque chose en son temps ...

matt30-bis · le 25 novembre 2008

@2C.LiryC : Voilà le rapport que tu m'as demandé de poster.

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 17:03:06, on 28/11/2008

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

C:\Program Files\AVC Finger-sensing Pad Driver\FspadSvr.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\AVC Finger-sensing Pad Driver\fscp.exe

C:\PROGRA~1\AVG\AVG8\avgtray.exe

C:\Program Files\PeerGuardian2\pg2.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\RocketDock\RocketDock.exe

C:\PROGRA~1\AVG\AVG8\avgam.exe

C:\PROGRA~1\AVG\AVG8\avgrsx.exe

C:\PROGRA~1\AVG\AVG8\avgemc.exe

C:\Program Files\Opera\opera.exe

C:\Program Files\eMule\emule.exe

C:\PROGRA~1\AVG\AVG8\avgnsx.exe

C:\WINDOWS\regedit.exe

C:\Documents and Settings\Mathias\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: Loader Class - {F880A4A8-C436-4AC4-AFD1-AA0BDC9552DD} - C:\WINDOWS\BricoPacks\LeopardXP\FindeXer.dll (file missing)

O4 - HKLM\..\Run: [NvCplDaemon] "C:\WINDOWS\system32\RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] "C:\WINDOWS\system32\nwiz.exe" /install

O4 - HKLM\..\Run: [RTHDCPL] "C:\WINDOWS\RTHDCPL.EXE"

O4 - HKLM\..\Run: [skyTel] "C:\WINDOWS\SkyTel.EXE"

O4 - HKLM\..\Run: [Alcmtr] "C:\WINDOWS\ALCMTR.EXE"

O4 - HKLM\..\Run: [AzMixerSel] "C:\Program Files\Realtek\InstallShield\AzMixerSel.exe"

O4 - HKLM\..\Run: [fscp] "C:\Program Files\AVC Finger-sensing Pad Driver\fscp.exe"

O4 - HKLM\..\Run: [AVG8_TRAY] "C:\PROGRA~1\AVG\AVG8\avgtray.exe"

O4 - HKCU\..\Run: [PeerGuardian] "C:\Program Files\PeerGuardian2\pg2.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"

O4 - HKCU\..\Run: [CursorXP] "C:\Program Files\CursorXP\CursorXP.exe" -s

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab_srl.cab

O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/sit...b?1221291596828

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1215636809854

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1215636997245

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll

O20 - AppInit_DLLs: avgrsstx.dll

O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe

O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

O23 - Service: FspadSvc - Unknown owner - C:\Program Files\AVC Finger-sensing Pad Driver\FspadSvr.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

--

End of file - 6637 bytes

2C.LiryC · le 25 novembre 2008

Merci Snooky!
Si je comprends bien je dois désinstaller définitivement Avast, Spybot et windows defender?

Il faudra bien que je remplace par un antivirus efficace après?...AVG?

Je vais récupérer Clean v2.0, merci pour ton aide!

AntiVir et la derniere version en date.

@2C.LiryC : Voilà le rapport que tu m'as demandé de poster.
...

:smack: , mais ce n'est pas moi le spécialiste :mdr: .

Attendons l'avis de Snooky. :francais:

Angelus68 · le 26 novembre 2008

Bonjour,

s'il vous plaît pourriez vous m'aider?

Je suis sur Firefox et j'ai une ouverture intempestive de fenêtres vers de la publicité sur des casinos, de la voyance et même du porno donc c'est assez embêtant.

J'ai utilisé Hijacthis et voici le rapport:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 11:41:34, on 26/11/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe

C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe

C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Softex\OmniPass\Omniserv.exe

C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe

C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\Softex\OmniPass\OPXPApp.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\WINDOWS\Explorer.EXE

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\QuickTime\qttask.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Club-Internet\Agent Wi-Fi V2.1\McciTrayApp.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm

O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm

O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O23 - Service: Ac Profile Manager Service (AcPrfMgrSvc) - Unknown owner - C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe

O23 - Service: Access Connections Main Service (AcSvc) - Lenovo - C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Program Files\Softex\OmniPass\Omniserv.exe

O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - (no file)

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

O23 - Service: ThinkVantage System Update (UCLauncherService) - Unknown owner - C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe

--

End of file - 5055 bytes

Merci beaucoup.

snooky · le 26 novembre 2008

@ Angelus68 :

Retire les balises " Quote " du rapport ...

Désinstalle Avast .

Lance une analyse complète avec MBAM , supprime tout ce qu'il trouve et poste le rapport créé.

Angelus68 · le 26 novembre 2008

Ok merci je vais faire ça.

Mais si je désinstalle avast, je n'aurais plus d'antivirus, faut-il que j'en prenne un autre?

snooky · le 26 novembre 2008

Oui , mais chaque chose en son temps ... :chinois:

Angelus68 · le 26 novembre 2008

Voici le rapport obtenu avec mbda: (attention c'est un peu long)

Malwarebytes' Anti-Malware 1.30

Version de la base de données: 1424

Windows 5.1.2600 Service Pack 2

26/11/2008 14:49:56

mbam-log-2008-11-26 (14-49-56).txt

Type de recherche: Examen complet (C:\|D:\|F:\|)

Eléments examinés: 226081

Temps écoulé: 1 hour(s), 2 minute(s), 57 second(s)

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 4

Valeur(s) du Registre infectée(s): 1

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 9

Fichier(s) infecté(s): 298

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):

HKEY_CLASSES_ROOT\Installer\UpgradeCodes\a1dc0fc00707a5a47b1b8c47064e8e01 (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\a1dc0fc00707a5a47b1b8c47064e8e01 (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Purchased Products (Rogue.Multiple) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\c:\documents and settings\all users\menu démarrer\programmes\registrysmart\ (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

Dossier(s) infecté(s):

C:\Program Files\RegistrySmart (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\AdwareAlert (Rogue.AdwareAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\AdwareAlert\Quarantine (Rogue.AdwareAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\AdwareAlert\Registry Backups (Rogue.AdwareAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\All Users\Application Data\SalesMonitor (Rogue.Multiple) -> Quarantined and deleted successfully.

C:\Documents and Settings\All Users\Application Data\SalesMonitor\Data (Rogue.Multiple) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Log (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):

C:\Documents and Settings\DZEUANG\Local Settings\Application Data\umgksqa_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Local Settings\Application Data\umgksqa_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Local Settings\Application Data\umgksqa.dat (Adware.Navipromo.H) -> Delete on reboot.

C:\Documents and Settings\DZEUANG\Local Settings\Application Data\umgksqa.exe (Adware.Navipromo.H) -> Delete on reboot.

C:\Documents and Settings\DZEUANG\Local Settings\Application Data\xhyjtduf_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Local Settings\Application Data\xhyjtduf_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Local Settings\Application Data\xhyjtduf.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.

C:\Program Files\RegistrySmart\RegCleaner.dll (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-21_11-23-28.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-22_15-51-27.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-22_18-09-01.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-23_17-22-18.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-23_18-32-54.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-24_09-19-31.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-24_19-37-47.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-25_13-06-18.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-25_18-27-18.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-25_18-49-18.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-25_19-30-29.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-25_21-43-26.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-26_10-23-32.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-26_10-29-20.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-26_17-54-08.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-26_21-23-32.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-27_09-49-18.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-27_09-56-31.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-27_12-04-54.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-27_16-02-53.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-27_18-23-06.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-27_19-53-09.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-28_09-29-03.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-28_18-31-04.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-29_09-24-59.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-29_18-58-07.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-30_18-54-27.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-31_09-05-15.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-08-31_18-55-53.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-01_21-17-44.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-02_11-57-08.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-02_21-58-06.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-03_17-17-39.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-05_22-54-03.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-06_11-46-05.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-06_11-56-26.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-06_18-05-20.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-07_10-49-22.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-08_12-18-51.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-09_11-37-03.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-10_12-06-58.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-10_16-30-11.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-10_17-58-33.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-10_20-22-35.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-11_14-31-14.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-11_15-05-04.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-11_23-19-46.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-13_14-15-31.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-14_09-16-27.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-15_14-17-05.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-18_10-41-30.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-18_16-32-12.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-18_20-36-44.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-19_20-49-48.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-23_20-41-49.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-23_20-48-57.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-23_23-00-12.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-24_09-55-00.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-25_21-02-06.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-26_09-51-46.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-27_11-13-29.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-27_13-08-08.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-28_18-09-58.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-28_20-31-24.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-28_22-58-13.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-28_23-47-13.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-29_17-08-35.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-29_18-16-13.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-09-29_18-34-34.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-01_15-36-23.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-02_13-04-51.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-02_16-36-53.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-03_17-39-39.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-04_13-07-37.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-04_18-50-45.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-05_12-08-14.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-05_23-25-31.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-06_14-53-21.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-06_18-31-53.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-06_19-57-57.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-06_23-08-28.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-07_14-04-21.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-07_20-56-24.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-08_18-15-19.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-09_12-46-00.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-09_17-23-21.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-10_12-42-11.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-10_17-41-44.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-11_12-55-56.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-11_13-27-17.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-11_19-07-06.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-12_09-00-26.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-13_16-56-25.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-16_12-42-22.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-17_12-33-20.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-17_21-10-21.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-17_21-34-07.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-18_17-49-20.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-20_11-06-39.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-20_13-51-05.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-21_10-36-30.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-23_08-40-01.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-23_16-33-53.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-24_18-19-38.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-25_13-31-43.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-26_12-37-01.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-26_15-57-19.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-27_11-58-25.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-28_20-29-47.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-29_12-16-23.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-30_14-13-27.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-10-31_15-51-34.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-02_10-47-10.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-04_20-50-33.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-04_21-31-58.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-05_12-23-50.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-06_03-20-39.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-06_03-30-38.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-06_12-40-53.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-07_12-36-37.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-09_18-36-16.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-09_18-39-37.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-10_10-17-51.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-12_12-34-13.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-13_09-02-41.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-13_12-56-09.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-14_12-41-51.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-17_09-59-47.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-25_17-04-55.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-11-29_12-39-11.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-01_10-29-20.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-02_11-06-47.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-02_19-35-05.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-02_23-28-17.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-03_16-15-24.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-04_12-55-58.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-06_08-51-44.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-07_12-50-51.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-07_12-53-23.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-08_09-41-47.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-08_18-29-30.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-09_10-53-02.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-10_10-17-21.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-11_08-29-14.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-11_12-44-45.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-11_12-48-05.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-12_12-28-03.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-12_17-50-38.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-12_18-31-11.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-13_00-07-40.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-13_08-55-31.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-13_12-43-56.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-14_12-55-05.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-15_10-15-56.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-15_10-19-20.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-15_15-40-31.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-15_19-36-42.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-16_10-20-19.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-16_14-17-29.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-17_11-21-38.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-17_18-39-13.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-18_17-12-16.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-18_23-55-41.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-19_12-29-25.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-21_12-45-30.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-21_12-51-28.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-22_17-59-23.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-22_21-38-54.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-23_16-38-50.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-23_18-25-11.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-24_13-23-33.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-24_18-05-49.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-25_14-09-58.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-26_14-33-02.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-27_20-35-43.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-27_21-10-23.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-28_12-33-26.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-29_12-17-34.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2007-12-30_23-48-59.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-01_12-37-45.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-03_12-30-15.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-04_12-48-36.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-04_16-55-18.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-05_11-28-00.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-07_12-34-03.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-08_08-52-02.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-08_08-55-17.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-09_09-12-59.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-09_09-19-13.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-10_07-47-12.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-13_11-03-28.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-14_12-16-09.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-14_23-15-34.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-15_08-58-20.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-15_12-48-04.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-15_17-28-20.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-16_07-58-26.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-17_12-39-36.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-18_12-27-21.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-18_15-54-18.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-19_10-23-09.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-19_12-31-25.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-20_11-14-42.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-20_11-18-36.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-21_05-54-01.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-21_12-45-33.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-21_16-03-18.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-22_08-58-52.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-23_10-08-10.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-24_09-28-02.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-25_12-53-39.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-27_10-43-15.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-28_12-52-53.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-29_12-56-26.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-30_11-55-29.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-31_09-09-23.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-01-31_20-05-33.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-01_11-36-06.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-02_10-30-29.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-02_16-03-41.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-03_10-51-17.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-04_07-42-23.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-05_17-36-20.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-09_10-26-00.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-10_10-26-11.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-11_10-55-05.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-12_08-39-03.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-13_11-31-40.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-14_07-51-00.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-16_16-49-30.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-17_09-31-09.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-18_12-21-51.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-18_19-51-42.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-19_10-30-29.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-20_08-15-25.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-21_11-36-37.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-21_21-23-41.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-22_14-34-35.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-22_15-55-24.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-23_14-22-53.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-23_17-08-28.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-23_19-47-46.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-24_12-36-45.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-25_12-53-03.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-25_12-55-27.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-26_10-49-02.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-27_11-16-38.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-27_19-57-21.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-28_10-39-48.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-28_10-44-19.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-29_10-46-16.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-02-29_10-48-04.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-01_11-31-20.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-02_12-45-18.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-04_12-11-45.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-06_14-01-46.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-07_13-16-30.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-07_19-51-40.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-08_11-00-50.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-09_11-09-13.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-10_13-53-13.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-11_10-59-06.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-11_12-34-17.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-13_10-40-36.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-13_11-23-57.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-14_10-32-49.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-14_12-02-25.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-15_11-00-47.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-15_13-37-28.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-15_13-42-49.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-15_19-40-17.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-15_19-52-37.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-15_21-11-46.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-15_23-27-07.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-16_18-02-28.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-16_18-34-17.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-17_17-38-18.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-18_14-04-03.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-18_14-55-25.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-18_18-07-56.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-20_12-27-12.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-21_11-54-18.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-21_20-53-03.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-22_11-22-07.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-22_16-13-47.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-22_16-35-02.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-22_17-49-14.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-23_12-29-56.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-24_16-14-58.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

C:\Documents and Settings\DZEUANG\Application Data\RegistrySmart\Registry Backups\2008-03-25_10-19-32.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully.

snooky · le 26 novembre 2008

1) Désactive la restauration système .

2) Lance Clean v2.0 by FRUiT , procédure 1.

3) Redémarre le pc .

4) Installe le fichier Hosts de Mvps.

5) Installe Antivir et lance une analyse complète.

Angelus68 · le 26 novembre 2008

Comment on désactive la restauration système? (Désolé mais je suis nul en info)

snooky · le 26 novembre 2008

Pose ce genre de questions , demande à notre ami google :

Clique ici

Angelus68 · le 26 novembre 2008

Ok merci c'est bon j'ai trouvé pour la restauration du système.

Désolé mais comment on installe Clean v2.0?

J'essaye de le chercher sur google et à partir de ce lien: http://www.pcinpact.com/forum/index.php?sh...p;mode=threaded mais je trouve pas comment le télécharger.

A chaque fois, après avoir cliqué sur un lien vers le téléchargement j'arrive sur une page où il y a erreur ou bien sur une page avec un script.

CaseyN · le 26 novembre 2008

Petite question Snooky, où peut)on trouver la liste exhaustive de ce que fait Clean2.0? Je trouve la liste sur le topic approprié un peu courte et je ne sais plus très bien lire la commande DOS :transpi:

Merci d'avance :byebye:

snooky · le 26 novembre 2008

Hello , ouvre Clean.cmd avec Notepad .

CaseyN · le 26 novembre 2008

J'ai regardé un petit peu, mais c'est pas super clair, c'est pour cela que je demandais, mais merci quand même

Angelus68 · le 26 novembre 2008

Ah j'ai réussi à tout faire et pour l'instant ça va il n'y a plus d'ouverture intempestive de fenêtres.

Un grand merci à snooky!

Connexion

[LOGICIEL] [Centralisation] .:::: Hijackthis ::::.

Messages recommandés

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Lien vers le commentaire

Partager sur d’autres sites

Archivé