trojan

Question

Bonjour, j'ai un trojan que je n'arrive pas à me débarasser mon antivirus me dit qu'il à suprimé mais quand je suis pas sur mon ordinateur il se met en veille et c'est à se moment la qu'il apparaît pouvez vous m'aider à y remédier Merci beaucoup annie PJ rapport bitdefender C:\ D:\

InfernO.vir · Answer

affening stop ca tout de suite !! j'ai prevenu les modos pour prendre les decisions necessaires ! si il faut te bannir ce sera fait !!

ninidu17 · Answer

cela veut dire quoi ces réponses je ne viens que rarement sur se site, je demande de l'aide et je me fais rabarrer
basta j'irai voir un autre site merci de m'avoir répondu

InfernO.vir · Answer

ninidu17

ce n'etait en aucun cas envers toi, ce message etait destiné a affening pour ses reponses n'ayant aucun sens !

ninidu17 · Answer

ok je suis désolé ce qui est dommage c'est que je suppose que tous le monde reçoit se message aussi
encore désole je voualis de l'aide pour le trojan que j'ai dans mon pc et je ne sais pas me servir de hijacktis car si je fais un mauvaise manip je risque de palnter mon pc grrr lol

Est ce que je peux vous envoyer le rapport de hijacktis ? et avoir une aide, si non bien tans pis pour moi je vais m'inscrire sur une autre forum...
merci quand même nini

InfernO.vir · Answer

Oui poste le rapport de hijackthis !



PS: je serais la que demain !

ninidu17 · Answer

ok pas de problème je te le poste et j'attend à demain 
merci encore par ta genrtillesse
nini

pj hijacktis 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:53:13, on 21/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20935)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UPHClean\uphclean.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\FinePixViewer\QuickDCF2.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\PROGRA~1\Deenero\DEENER~1.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww.yahoo.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.easy-ordi.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr9/*https://fr.search.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://eo.st
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/toolbar/ie8/sidebar.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr9/*https://fr.search.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: Deenero - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - C:\Program Files\Deenero\deenero_1,0,0,11.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Global Startup: ExifLauncher2.lnk = C:\Program Files\FinePixViewer\QuickDCF2.exe
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://m6jeux.oberon-media.com/online/online2/luxor_2/mjolauncher.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://3dlifeplayer.dl.3dvia.com/player/install/installer.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. https://www.bitdefender.fr/ - C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\system32\Brmfrmps.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe

ninidu17 · Answer

bonsoir,
tout d'abord bonne année 2009 a vous!!!

je souhaiterai que l'on m'aide car j'ai un trojan voir 2, il ralenti mon pc j'ai faite des analyses avec bitdefender il les détect mais je ne pense pas qu'il fait un nettoyage complet car il apparait toujours pouvez vous m'aider à m'en débarasser
je vous en remerci d'avance nini

pj rapport bitdenfder
<?xml version="1.0" encoding="utf-8"?>
<?xml-stylesheet type="text/xsl" href="C:\Program Files\BitDefender\BitDefender 2009\uiscan_log.xsl"?>
<ScanSession creator="BitDefender Internet Security 2009" version="BitDefender UIScanner v.12" creationDate="17:20:43 31/12/2008" installPath="C:\Program Files\BitDefender\BitDefender 2009" originalPath="C:\Documents and Settings\All Users\Application Data\Bitdefender\Desktop\Profiles\Logs\deep_scan\1230740443_1_02.xml" scanClient="C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe" taskName="Analyse approfondie">
<ScanOptions
showWarnings="1" >
<ScanPaths>
<path id="0000">C:\</path>
<path id="0001">D:\</path>
</ScanPaths>
<ScanObjects
scanViruses="1"
scanAddware="1"
scanSpyware="1"
scanApplications="1"
scanDialers="1"
scanRootkits="1"
/>
<TargetSelection
heuristicScan="1"
scanArchives="1"
scanRegistryKeys="1"
scanRegistry="1"
scanCookies="1"
memoryProcesses="1"
scanBootSectors="1"
scanEmail="1"
scanAllFiles="1"
scanPackedFiles="1"
scanSubfolders="1"
includeExtensions=""
excludeExtensions=""
/>
<TargetProcessing
infectedAction="3"
suspiciousAction="1"
hiddenAction="1"
/>
</ScanOptions>
<EngineSummary
archivePlugins="45"
mailPlugins="6"
scanPlugins="13"
totalSignatures="2398409"
systemPlugins="5"
unpackPlugins="7"
/>
<ScanSummary
scannedItems="132741"
passProtItems="1"
infectedItems="2"
suspiciousItems="0"
resolvedItems="2"
unresolvedItems="1"
scannedArchives="1787"
bootSectorCount="6"
scannedDirectories="7102"
inputOutputErrors="41"
virusesNumber="2"
scanTime="00:39:24"
filesPerSecond="55"
>
<FileSummary
scanned="131576"
archives="1787"
packed="7882"
infected="2"
suspicious="0"
resolved="1"
deleted="2"
moved="0"
copied="0"
/>
<RegistryKeySummary
scanned="1074"
infected="0"
suspicious="0"
/>
<CookieSummary
scanned="51"
infected="0"
suspicious="0"
/>
<ProcessSummary
scanned="40"
infected="0"
suspicious="0"
/>
<MailSummary
scanned="0"
infected="0"
suspicious="0"
/>
</ScanSummary>
<ScanDetails>
<AffectedItem itemType ="Cookie" path="[System]=]C:\Documents and Settings\Propriétaire\Cookies\propriétaire@overture[1].txt" threatType="virus" threatName="Cookie.Overture" action="disinfect" finalStatus= "clean" error= "deleted"/>
<AffectedItem itemType ="File" path="C:\Documents and Settings\Propriétaire\Local Settings\Temp\GLB73.tmp=](Dropped 0)" threatType="Unknown" threatName="Ultracompressé" action="none" finalStatus= "not scanned" error= "no action possible"/>
<AffectedItem itemType ="File" path="C:\System Volume Information\_restore{DC326F2D-6F05-4763-9B26-EA1B514ADF21}\RP263\A0062425.msi=](Embedded CAB)=]_255311685EC0439E9B51F19CA2877AB9" threatType="virus" threatName="Trojan.Zlob.9156" action="disinfect" finalStatus= "clean" error= "deleted"/>
</ScanDetails>
</ScanSession>

PJ: rapport hijactis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:02:16, on 01/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20935)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UPHClean\uphclean.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Kelkoo_Fr_Toolbar\klkofrt.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\FinePixViewer\QuickDCF2.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Kelkoo_Fr_Toolbar\klkofrp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww.yahoo.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.easy-ordi.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr9/*https://fr.search.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://eo.st
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/toolbar/ie8/sidebar.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr9/*https://fr.search.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Deenero - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - C:\Program Files\Deenero\deenero_1,0,0,11.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Kelkoo France Toolbar - {52DE91C6-8F53-4989-BE4A-90F1CAA0B48A} - C:\Program Files\Kelkoo_Fr_Toolbar\klkofrb.dll
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [klkofrm] "C:\Program Files\Kelkoo_Fr_Toolbar\klkofrt.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Global Startup: ExifLauncher2.lnk = C:\Program Files\FinePixViewer\QuickDCF2.exe
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Kelkoo Toolbar - file://C:\Documents and Settings\Propriétaire\Application Data\Kelkoo_Fr_Toolbar\klkofrt\klkofrC5.htm
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://m6jeux.oberon-media.com/online/online2/luxor_2/mjolauncher.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://3dlifeplayer.dl.3dvia.com/player/install/installer.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. https://www.bitdefender.fr/ - C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\system32\Brmfrmps.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe

InfernO.vir · Answer

Slt,

Bonne année 2009, meilleurs voeux et desolé du retard mais la teuf, tu sais ce que c'est je pense :)

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.

===>>>> http://downloads.andymanchesta.com/RemovalTools/SDFix.exe <<<<===

Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié dans C:\. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :

• Redémarre ton ordinateur

• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la
touche F8 (une pression par seconde).

• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.

• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".

• Choisis ton compte.

Déroule la liste des instructions ci-dessous :

• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le
scrïpt.

• Appuie sur Y pour commencer le processus de nettoyage.

• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.

• Appuie sur une touche pour redémarrer le PC.

• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.

• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.

• Appuie sur une touche pour finir l'exécution du scrïpt et charger les icônes de ton Bureau.

• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.

• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum.

ninidu17 · Answer

bonjour,
merci bonne année 2009 a toi aussi et j'espère avec trop d'indigestion lol
merci pour m'avoir répondu. j'ai fait ce que tu m'a demandé et je t'envoie le rapport
encore merci a bientôt annie

pj : 

[b]Checking Files [/b]: 

No Trojan Files Found

Removing Temp Files

[b]ADS Check [/b]:
 


                                 [b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-02 13:54:15
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:dd,e2,de,51,6c,ad,f1,05,44,7c,60,a9,e8,e4,11,20,64,14,4f,c3,4a,..
"p0"="C:\Program Files\DAEMON Tools Lite\"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"khjeh"=hex:bb,13,d2,81,2b,58,1a,49,76,64,cf,dc,ea,95,d2,b2,7d,62,b9,eb,a1,..
"a0"=hex:20,01,00,00,23,8b,69,a6,a9,af,b6,a4,17,30,73,97,55,df,66,12,85,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:4d,48,4c,cf,b6,13,0a,fc,1a,74,6e,1d,51,08,79,34,91,73,f8,92,ef,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:dd,e2,de,51,6c,ad,f1,05,44,7c,60,a9,e8,e4,11,20,64,14,4f,c3,4a,..
"p0"="C:\Program Files\DAEMON Tools Lite\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"khjeh"=hex:bb,13,d2,81,2b,58,1a,49,76,64,cf,dc,ea,95,d2,b2,7d,62,b9,eb,a1,..
"a0"=hex:20,01,00,00,23,8b,69,a6,a9,af,b6,a4,17,30,73,97,55,df,66,12,85,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:4d,48,4c,cf,b6,13,0a,fc,1a,74,6e,1d,51,08,79,34,91,73,f8,92,ef,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:dd,e2,de,51,6c,ad,f1,05,44,7c,60,a9,e8,e4,11,20,64,14,4f,c3,4a,..
"p0"="C:\Program Files\DAEMON Tools Lite\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"khjeh"=hex:bb,13,d2,81,2b,58,1a,49,76,64,cf,dc,ea,95,d2,b2,7d,62,b9,eb,a1,..
"a0"=hex:20,01,00,00,23,8b,69,a6,a9,af,b6,a4,17,30,73,97,55,df,66,12,85,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:4d,48,4c,cf,b6,13,0a,fc,1a,74,6e,1d,51,08,79,34,91,73,f8,92,ef,..

scanning hidden registry entries ...

scanning hidden files ...

C:\WINDOWS\system32\wbem\Performance\WmiApRpl_new.ini 948 bytes

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 1


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Ares\Ares.exe"="C:\Program Files\Ares\Ares.exe:*:Enabled:Ares p2p for windows"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[b]Remaining Files [/b]:



[b]Files with Hidden Attributes [/b]:

Mon 14 Apr 2008        60,416 A.SH. --- "C:\Program Files\Outlook Express\msimn.exe"
Sat 10 May 2008         4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Sat 10 May 2008             0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"

[b]Finished![/b]

InfernO.vir · Answer

-Télécharge Combofix de sUBs

-Enregistre-le impérativement sur ton bureau

-Déconnecte-toi du net et désactive ton antivirus (juste le temps de la procédur]).

-Ferme toutes les fenêtres.

-Double-clique sur combofix.exe (ne clique pas sur la fenêtre qui s'ouvre).

-Appuie sur Y pour lancer le scan.

-A la fin du scan (cela peut prendre du temps), un rapport sera créé.

-Poste ce rapport dans ton / tes prochain(s) message(s).

ninidu17 · Answer

InfernO.vir,

 je n'arrive pas a trouver Combofix, même en cliquant sur Combofix de ton message il me marque erreur de page, je suis donc allée sur clubic, il ne trouve pas non plus.

de plus vous êtes 2 a vous occuper de "moi" et mon pc, c'est très genti mais si cela me dérrange un peu car vous me faite pas faire la mêm chose excuse moi zapato si je continue avec InfernO.vir,
merci annie

InfernO.vir · Answer

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Excuse moi pour le lien...Et moi aussi ca me derange que zapato vienne ici, il n'y connait rien donc suis moi jusqu'au bout.

Deja, je serais toi, juste un conseil, ne fait pas confiance aux utilisateurs de CCM non enregistrés !

ninidu17 · Answer

merci de m'avoir prévenu. il m'avait fait télécharger "trojankiller" et comme je n'avais pas fait attention qui m'avais envoyer ce message, j'ai cru que c'était toi grrrr, mais de quoi il se mele quand on connait rien on laisse faire les pros.
 pfff bon bref pour le lien j'ai trouvé par google je l'ai téléchargé et enregister sur mon bureau mais je n'arrive pas a désactiver bitdenfender 2009 pourquoi je ne sais pas et sa m'énerve crois moi... je cherche encore pourquoi.
 
merci et j'espère que tu peux contacter zapato pour ne plus me contacter
a plus tard annie

InfernO.vir · Answer

Bon laisse tomber pour l'antivirus laisse le activer

Fait combofix et poste moi le rapport.

zapato · Answer

1/je suis abonnée sue le site 
2/j'y connait quand meme un rayon 
3/ si c'et pour lui donner quelques choses  qu'elle ne comprend pas 4/arrete de te la peter comme le sauveur

zapato · Answer

je viens te donner un coup de main et tu rale pauvre petite celle qui a petit sucis avec t'on pc c'et bien toi et non moi j'y connait un bon rayon coté pc

ninidu17 · Answer

zapato,
 je ne t'insulte pas j'ai été correct c'est toi qui c'est miniser dans nos discution et aide il serait bie nque tu respect tes collègues qui aide les petites cellle comme tu me dis si bien, alors basta je suis avec Inferno que cela te palise ou non bye bon vent

InfernO.vir · Answer

1/ T'apprendras que si tu etais inscrit sur CCM, ton pseudo serait en bleu, tu aurais tes propres messages privés ton profil etc...

2/ Si tu y connaissais quelque chose, tu ne ferais pas telecharger cet utilitaire hasardeux !

3/ Ce n'est pas qu'elle ne comprend pas, c'est qu'elle ne pouvais pas acceder au site, nuance !


je rajoute un petit 4/ Si tu continue j'alerte les moderateurs !


On est benevole sur CCM, alors tu sais les boulets de ton genre, on en a vu passer et c'est de pire en pire... ca se la pete et ca sait a peine ouvrir une session, faut arreter les conneries la ..

ninidu17 · Answer

coucou me revoila jai faite l'analyse que tu m'as demandé et en plus j'ai envoyé un message a ton collègue pas sympa le garçon.....merci bonne soirée

pj
ComboFix 09-01-01.02 - Propriétaire 2009-01-02 18:24:52.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.2038.1475 [GMT 1:00]
Lancé depuis: c:\documents and settings\Propriétaire\Bureau\ComboFix.exe
* Un nouveau point de restauration a été créé
* Resident AV is active

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\BitDefender\BitDefender 2009\BitDefender InnerFire\midas32-v1_7\leaktests.m32
c:\program files\INSTALL.LOG
D:\Autorun.inf

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_BOONTY_GAMES
-------\Service_Boonty Games

((((((((((((((((((((((((((((( Fichiers créés du 2008-12-02 au 2009-01-02 ))))))))))))))))))))))))))))))))))))
.

2009-01-02 15:39 . 2009-01-02 17:15 <REP> d-------- c:\program files\Trojan Killer
2009-01-02 13:49 . 2009-01-02 13:49 <REP> d-------- c:\windows\ERUNT
2009-01-02 13:33 . 2009-01-02 13:56 <REP> d-------- C:\SDFix
2008-12-30 22:02 . 2008-12-30 22:02 410,984 --a------ c:\windows\system32\deploytk.dll
2008-12-30 20:36 . 2008-12-30 20:37 <REP> d-------- c:\windows\system32\Adobe
2008-12-30 13:08 . 2009-01-02 18:29 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\Kelkoo_Fr_Toolbar
2008-12-30 13:07 . 2008-12-31 08:51 <REP> d-------- c:\program files\Kelkoo_Fr_Toolbar
2008-12-29 20:19 . 2008-12-29 20:19 <REP> d-------- c:\documents and settings\Propriétaire\Saved Games
2008-12-29 20:19 . 2008-12-29 20:19 <REP> d-------- c:\documents and settings\Propriétaire\Saved Games
2008-12-29 19:38 . 2008-12-29 19:38 <REP> d-------- C:\games
2008-12-29 18:04 . 2008-12-29 18:04 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\BloodTies
2008-12-29 17:58 . 2008-12-30 21:54 <REP> d-------- c:\program files\Zylom Games
2008-12-20 10:09 . 2008-12-20 10:09 <REP> d-------- c:\program files\Sweet Home 3D
2008-12-18 17:38 . 2008-12-18 17:38 <REP> d-------- c:\documents and settings\Propriétaire\décoration
2008-12-18 17:38 . 2008-12-18 17:38 <REP> d-------- c:\documents and settings\Propriétaire\décoration
2008-12-14 11:44 . 2008-12-14 11:44 <REP> d-------- c:\program files\AnglaisFacile.com
2008-12-12 10:45 . 2008-10-23 13:36 286,720 -----c--- c:\windows\system32\dllcache\gdi32.dll
2008-12-07 12:23 . 2008-12-07 12:23 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\Windows Search
2008-12-06 14:56 . 2008-12-06 14:56 <REP> d-------- c:\documents and settings\Propriétaire\Application Data\Malwarebytes
2008-12-06 14:56 . 2008-12-06 14:56 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-01 21:10 --------- d-----w c:\program files\+-DicoScrabble-+
2009-01-01 21:10 --------- d-----w c:\documents and settings\Propriétaire\Application Data\Zylom
2009-01-01 18:17 --------- d-----w c:\program files\CCleaner
2009-01-01 12:54 --------- d-----w c:\program files\FinePixViewer
2008-12-30 21:02 --------- d-----w c:\program files\Java
2008-12-18 16:55 --------- d-----w c:\program files\Google
2008-12-15 18:07 --------- d-----w c:\program files\iTunes
2008-12-15 18:07 --------- d-----w c:\program files\iPod
2008-12-15 18:07 --------- d-----w c:\program files\Fichiers communs\Apple
2008-12-15 16:03 --------- d-----w c:\program files\scrabbleproB1.0.7
2008-12-12 09:52 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
2008-12-08 16:05 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-26 21:26 --------- d-----w c:\program files\Diettes et tics
2008-11-26 21:23 --------- d-----w c:\program files\Yahoo!
2008-11-25 20:16 --------- d-----w c:\program files\QuickTime
2008-11-22 07:36 --------- d-----w c:\program files\Windows Live
2008-11-18 20:22 104,328 ----a-w c:\windows\system32\drivers\bdfndisf.sys
2008-11-18 20:21 230,920 ----a-w c:\windows\system32\drivers\bdfsfltr.sys
2008-11-18 20:21 111,112 ----a-w c:\windows\system32\drivers\bdfm.sys
2008-11-18 08:48 --------- d-----w c:\program files\Windows Live Toolbar
2008-11-18 08:48 --------- d-----w c:\program files\Windows Live Favorites
2008-11-18 08:44 --------- d-----w c:\documents and settings\All Users\Application Data\WLInstaller
2008-11-12 18:30 --------- d-----w c:\program files\Gamenext
2008-11-08 19:39 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2008-11-06 15:15 --------- d-----w c:\documents and settings\Propriétaire\Application Data\Skype
2008-11-06 15:02 --------- d-----w c:\documents and settings\Propriétaire\Application Data\skypePM
2008-04-18 15:23 9,296 ----a-w c:\documents and settings\Propriétaire\Application Data\mdb.bin
2008-02-24 21:19 32 ----a-w c:\documents and settings\All Users\Application Data\ezsid.dat
2008-12-03 18:26 61,440 ----a-w c:\program files\mozilla firefox\components\FFComm.dll
2007-12-24 13:51 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012007122420071225\index.dat
2008-09-09 13:57 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008090920080910\index.dat
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{66886C4D-B307-4ECA-A228-52CA9B9851A4}"= "c:\program files\Deenero\deenero_1,0,0,11.dll" [2008-05-26 536488]
"{52DE91C6-8F53-4989-BE4A-90F1CAA0B48A}"= "c:\program files\Kelkoo_Fr_Toolbar\klkofrb.dll" [2008-11-24 329040]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-03-09 68856]
"msnmsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2008-11-05 4347120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BDAgent"="c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2008-11-18 741376]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2008-11-18 69632]
"REGSHAVE"="c:\program files\REGSHAVE\REGSHAVE.EXE" [2002-02-04 53248]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-11-04 413696]
"klkofrm"="c:\program files\Kelkoo_Fr_Toolbar\klkofrt.exe" [2008-11-24 574800]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-30 136600]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_3"="advpack.dll" [2008-10-16 c:\windows\system32\advpack.dll]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
ExifLauncher2.lnk - c:\program files\FinePixViewer\QuickDCF2.exe [2008-10-13 303104]
Status Monitor.lnk - c:\program files\Brother\Brmfcmon\BrMfcWnd.exe [2008-02-23 819200]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-05-26 123904]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-26 304128]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Propriétaire^Menu Démarrer^Programmes^Démarrage^BoontyBox GamePlazza.lnk]
path=c:\documents and settings\Propriétaire\Menu Démarrer\Programmes\Démarrage\BoontyBox GamePlazza.lnk
backup=c:\windows\pss\BoontyBox GamePlazza.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares]
--a------ 2007-05-04 01:32 961024 c:\program files\Ares\Ares.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
--a------ 2008-08-08 13:11 490952 c:\program files\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
-ra------ 2001-07-09 10:50 155648 c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-11-04 10:30 413696 c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
-ra------ 2008-04-23 16:45 22058792 c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
--a------ 2008-03-09 17:14 68856 c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Boonty Games"=3 (0x3)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Ares\\Ares.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"6346:TCP"= 6346:TCP:shareaza
"6346:UDP"= 6346:UDP:shareaza

R0 iastor76;iastor76;c:\windows\system32\drivers\iastor76.sys [2007-11-28 305176]
R2 BDVEDISK;BDVEDISK;\??\c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [2008-07-02 82440]
R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [2008-08-12 111112]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\bdfndisf.sys [2008-08-14 104328]
S3 ADM8511;Convertisseur USB vers Fast Ethernet ADMtek ADM8511/AN986;c:\windows\system32\DRIVERS\ADM8511.SYS [2007-12-24 20160]
S3 Arrakis3;BitDefender Arrakis Server;"c:\program files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe" [2008-07-17 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{905b5184-960f-11dd-aa0c-001c26c2ded6}]
\Shell\AutoRun\command - g:\programs\nu2menu\nu2menu.exe
.
Contenu du dossier 'Tâches planifiées'

2008-12-30 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2009-01-02 c:\windows\Tasks\User_Feed_Synchronization-{045DB067-6D71-4E9D-8468-AC83E53A656A}.job
- c:\windows\system32\msfeedssync.exe [2007-11-27 22:44]

2009-01-02 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 11:20]
.
- - - - ORPHELINS SUPPRIMES - - - -

WebBrowser-{6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - (no file)
WebBrowser-{00000002-F180-0FC6-8B20-3A774F000000} - (no file)
WebBrowser-{00000002-BFB4-0298-8B20-3A774F000000} - (no file)
WebBrowser-{00000002-D378-0298-8B20-3A774F000000} - (no file)
WebBrowser-{0298D378-D378-0298-7C00-26055B5FF404} - (no file)
WebBrowser-{0298E5F0-E5F0-0298-7C00-26055B5FF404} - (no file)
WebBrowser-{0294EF64-EF64-0294-7C00-68045B5F3604} - (no file)
WebBrowser-{000009C8-DC14-0294-0CDC-9402C8090000} - (no file)
WebBrowser-{00000B10-EFD8-0294-D0EF-9402100B0000} - (no file)
WebBrowser-{0D79EF64-EF64-0D79-7C00-68045B5F3604} - (no file)
WebBrowser-{0294E5F0-E5F0-0294-7C00-68045B5F3604} - (no file)
WebBrowser-{0298EF64-EF64-0298-7C00-7F045B5F4D04} - (no file)
WebBrowser-{00000BC0-DC14-0298-0CDC-9802C00B0000} - (no file)
WebBrowser-{000009DC-EFD8-0298-D0EF-9802DC090000} - (no file)
WebBrowser-{0732EF64-EF64-0732-7C00-7F045B5F4D04} - (no file)
WebBrowser-{0FFAEF64-EF64-0FFA-7C00-7F045B5F4D04} - (no file)
WebBrowser-{1021EF64-EF64-1021-7C00-7F045B5F4D04} - (no file)
WebBrowser-{15FBEF64-EF64-15FB-7C00-7F045B5F4D04} - (no file)
WebBrowser-{17ADEF64-EF64-17AD-7C00-7F045B5F4D04} - (no file)
WebBrowser-{15EFEF64-EF64-15EF-7C00-7F045B5F4D04} - (no file)
WebBrowser-{0298EF64-EF64-0298-7C00-10045B5FDE03} - (no file)
WebBrowser-{000009D0-EFD8-0298-D0EF-9802D0090000} - (no file)
WebBrowser-{05B5EF64-EF64-05B5-7C00-10045B5FDE03} - (no file)
WebBrowser-{0298E66C-E66C-0298-7C00-7F045B5F4D04} - (no file)
WebBrowser-{0294EF64-EF64-0294-7C00-F9035B5FC703} - (no file)
WebBrowser-{00000BCC-DB98-0294-90DB-9402CC0B0000} - (no file)
WebBrowser-{00000BCC-EFD8-0294-D0EF-9402CC0B0000} - (no file)
WebBrowser-{0294E5F0-E5F0-0294-7C00-F9035B5FC703} - (no file)
WebBrowser-{00000BC0-DB98-0294-90DB-9402C00B0000} - (no file)
WebBrowser-{00000BC8-EFD8-0294-D0EF-9402C80B0000} - (no file)
WebBrowser-{095CEF64-EF64-095C-7C00-F9035B5FC703} - (no file)
WebBrowser-{09AAEF64-EF64-09AA-7C00-F9035B5FC703} - (no file)
WebBrowser-{0295EF64-EF64-0295-7C00-FF035B5FCD03} - (no file)
WebBrowser-{00000BD0-DC14-0295-0CDC-9502D00B0000} - (no file)
WebBrowser-{00000BD4-EFD8-0295-D0EF-9502D40B0000} - (no file)
WebBrowser-{0797EF64-EF64-0797-7C00-FF035B5FCD03} - (no file)
WebBrowser-{0F7DEF64-EF64-0F7D-7C00-FF035B5FCD03} - (no file)
WebBrowser-{1081EF64-EF64-1081-7C00-FF035B5FCD03} - (no file)
WebBrowser-{1641EF64-EF64-1641-7C00-FF035B5FCD03} - (no file)
WebBrowser-{163EEF64-EF64-163E-7C00-FF035B5FCD03} - (no file)
WebBrowser-{19A7EF64-EF64-19A7-7C00-FF035B5FCD03} - (no file)
WebBrowser-{1B65EF64-EF64-1B65-7C00-FF035B5FCD03} - (no file)
WebBrowser-{0295E5F0-E5F0-0295-7C00-FF035B5FCD03} - (no file)
WebBrowser-{0298EF64-EF64-0298-7C00-00045B5FCE03} - (no file)
WebBrowser-{00000A10-DB98-0298-90DB-9802100A0000} - (no file)
WebBrowser-{00000A24-EFD8-0298-D0EF-9802240A0000} - (no file)
WebBrowser-{0799EF64-EF64-0799-7C00-00045B5FCE03} - (no file)
WebBrowser-{0298E5F0-E5F0-0298-7C00-00045B5FCE03} - (no file)
WebBrowser-{00000B7C-DC14-0294-0CDC-94027C0B0000} - (no file)
WebBrowser-{00000BEC-EFD8-0294-D0EF-9402EC0B0000} - (no file)
WebBrowser-{0294EF64-EF64-0294-7C00-09045B5FD703} - (no file)
WebBrowser-{00000B1C-DB98-0294-90DB-94021C0B0000} - (no file)
WebBrowser-{00000974-EFD8-0294-D0EF-940274090000} - (no file)
WebBrowser-{0D4FEF64-EF64-0D4F-7C00-09045B5FD703} - (no file)
WebBrowser-{0D48EF64-EF64-0D48-7C00-09045B5FD703} - (no file)
WebBrowser-{0F03EF64-EF64-0F03-7C00-09045B5FD703} - (no file)
WebBrowser-{0E3CEF64-057C-0002-7C00-09045B5FD703} - (no file)
WebBrowser-{13B6EF64-EF64-13B6-7C00-09045B5FD703} - (no file)
WebBrowser-{1544EF64-EF64-1544-7C00-09045B5FD703} - (no file)
WebBrowser-{0294E5F0-E5F0-0294-7C00-09045B5FD703} - (no file)
WebBrowser-{092EEF64-EF64-092E-7C00-09045B5FD703} - (no file)
WebBrowser-{092EE92C-E92C-092E-7C00-09045B5FD703} - (no file)
WebBrowser-{142AEF64-EF64-142A-7C00-09045B5FD703} - (no file)
WebBrowser-{092EE5F0-E5F0-092E-7C00-09045B5FD703} - (no file)
WebBrowser-{1AE8EF64-EF64-1AE8-7C00-09045B5FD703} - (no file)
WebBrowser-{16FFEF64-EF64-16FF-7C00-09045B5FD703} - (no file)
WebBrowser-{16B1EF64-EF64-16B1-7C00-09045B5FD703} - (no file)
WebBrowser-{16A5EF64-EF64-16A5-7C00-09045B5FD703} - (no file)
WebBrowser-{200EEF64-EF64-200E-7C00-09045B5FD703} - (no file)
WebBrowser-{215CEF64-EF64-215C-7C00-09045B5FD703} - (no file)
WebBrowser-{0294EF64-EF64-0294-7C00-E9035B5FB703} - (no file)
WebBrowser-{00000B58-EFD8-0294-D0EF-9402580B0000} - (no file)
WebBrowser-{01A2EF64-EF64-01A2-7C00-CB025B5F0910} - (no file)
WebBrowser-{00000774-EFD8-01A2-D0EF-A20174070000} - (no file)
WebBrowser-{064CEF64-EF64-064C-7C00-CB025B5F0910} - (no file)
WebBrowser-{0B3BEF64-EF64-0B3B-7C00-CB025B5F0910} - (no file)
WebBrowser-{0F28EF64-EF64-0F28-7C00-CB025B5F0910} - (no file)
WebBrowser-{0F27EF64-EF64-0F27-7C00-CB025B5F0910} - (no file)
WebBrowser-{0FA0EF64-EF64-0FA0-7C00-CB025B5F0910} - (no file)
WebBrowser-{104EEF64-EF64-104E-7C00-CB025B5F0910} - (no file)
WebBrowser-{162AEF64-EF64-162A-7C00-CB025B5F0910} - (no file)
WebBrowser-{0CE5EF64-EF64-0CE5-7C00-CB025B5F0910} - (no file)
WebBrowser-{0CF5EF64-EF64-0CF5-7C00-CB025B5F0910} - (no file)
WebBrowser-{0D3CEF64-EF64-0D3C-7C00-CB025B5F0910} - (no file)
WebBrowser-{11D4EF64-EF64-11D4-7C00-CB025B5F0910} - (no file)
WebBrowser-{1CACEF64-EF64-1CAC-7C00-CB025B5F0910} - (no file)
WebBrowser-{1978EF64-EF64-1978-7C00-CB025B5F0910} - (no file)
WebBrowser-{0ECAEF64-EF64-0ECA-7C00-CB025B5F0910} - (no file)
WebBrowser-{0F83EF64-EF64-0F83-7C00-CB025B5F0910} - (no file)
WebBrowser-{00000ADC-EFD8-0294-D0EF-9402DC0A0000} - (no file)
WebBrowser-{00000B8C-EFD8-0298-D0EF-98028C0B0000} - (no file)
WebBrowser-{0736EF64-EF64-0736-7C00-10045B5FDE03} - (no file)
WebBrowser-{0F48EF64-EF64-0F48-7C00-10045B5FDE03} - (no file)
WebBrowser-{00000BC4-EFD8-0294-D0EF-9402C40B0000} - (no file)
WebBrowser-{0BB5EF64-EF64-0BB5-7C00-E9035B5FB703} - (no file)
WebBrowser-{0B74EF64-EF64-0B74-7C00-E9035B5FB703} - (no file)
WebBrowser-{1011EF64-EF64-1011-7C00-E9035B5FB703} - (no file)
WebBrowser-{0FBAEF64-EF64-0FBA-7C00-E9035B5FB703} - (no file)
WebBrowser-{0F4FEF64-EF64-0F4F-7C00-E9035B5FB703} - (no file)
WebBrowser-{0FE1EF64-EF64-0FE1-7C00-E9035B5FB703} - (no file)
WebBrowser-{0BB4EF64-EF64-0BB4-7C00-E9035B5FB703} - (no file)
WebBrowser-{0F16EF64-EF64-0F16-7C00-E9035B5FB703} - (no file)
WebBrowser-{00000B40-EFD8-0294-D0EF-9402400B0000} - (no file)
WebBrowser-{0B38EF64-EF64-0B38-7C00-E9035B5FB703} - (no file)
WebBrowser-{0297EF64-EF64-0297-7C00-FE035B5FCC03} - (no file)
WebBrowser-{00000B40-EFD8-0297-D0EF-9702400B0000} - (no file)
WebBrowser-{09DEEF64-EF64-09DE-7C00-FE035B5FCC03} - (no file)
WebBrowser-{0B47EF64-EF64-0B47-7C00-FE035B5FCC03} - (no file)
WebBrowser-{0BF8EF64-EF64-0BF8-7C00-FE035B5FCC03} - (no file)
WebBrowser-{00000B7C-EFD8-0294-D0EF-94027C0B0000} - (no file)
WebBrowser-{0BB2EF64-EF64-0BB2-7C00-F9035B5FC703} - (no file)
WebBrowser-{0B73EF64-EF64-0B73-7C00-F9035B5FC703} - (no file)
WebBrowser-{00000AFC-EFD8-0298-D0EF-9802FC0A0000} - (no file)
WebBrowser-{071BEF64-EF64-071B-7C00-00045B5FCE03} - (no file)
WebBrowser-{0DBFEF64-EF64-0DBF-7C00-00045B5FCE03} - (no file)
WebBrowser-{0DD3EF64-EF64-0DD3-7C00-00045B5FCE03} - (no file)
WebBrowser-{0295EF64-EF64-0295-C400-9A045B5F6804} - (no file)
WebBrowser-{00000CE8-EFD8-0295-D0EF-9502E80C0000} - (no file)
WebBrowser-{0375EF64-EF64-0375-C400-9A045B5F6804} - (no file)
WebBrowser-{0295EF64-EF64-0295-7C00-0F045B5FDD03} - (no file)
WebBrowser-{00000B2C-EFD8-0295-D0EF-95022C0B0000} - (no file)
WebBrowser-{070FEF64-EF64-070F-7C00-0F045B5FDD03} - (no file)
WebBrowser-{00000988-EFD8-0295-D0EF-950288090000} - (no file)
WebBrowser-{0759EF64-EF64-0759-7C00-0F045B5FDD03} - (no file)
WebBrowser-{0EFDEF64-EF64-0EFD-7C00-0F045B5FDD03} - (no file)
WebBrowser-{00000B10-EFD8-0298-D0EF-9802100B0000} - (no file)
WebBrowser-{072AEF64-EF64-072A-7C00-10045B5FDE03} - (no file)
WebBrowser-{00000B0C-EFD8-0298-D0EF-98020C0B0000} - (no file)
WebBrowser-{00000B38-EFD8-0294-D0EF-9402380B0000} - (no file)
WebBrowser-{0CE6EF64-EF64-0CE6-7C00-E9035B5FB703} - (no file)
WebBrowser-{00000B60-EFD8-0295-D0EF-9502600B0000} - (no file)
WebBrowser-{075CEF64-EF64-075C-7C00-FF035B5FCD03} - (no file)
WebBrowser-{0E05EF64-EF64-0E05-7C00-FF035B5FCD03} - (no file)
WebBrowser-{0D5CEF64-EF64-0D5C-7C00-FF035B5FCD03} - (no file)
WebBrowser-{0E02EF64-EF64-0E02-7C00-FF035B5FCD03} - (no file)
WebBrowser-{18D5EF64-EF64-18D5-7C00-FF035B5FCD03} - (no file)
WebBrowser-{00000BC4-EFD8-0298-D0EF-9802C40B0000} - (no file)
WebBrowser-{078CEF64-EF64-078C-7C00-00045B5FCE03} - (no file)
WebBrowser-{0CAAEF64-EF64-0CAA-7C00-00045B5FCE03} - (no file)
WebBrowser-{0F1EEF64-EF64-0F1E-7C00-00045B5FCE03} - (no file)
WebBrowser-{0DF5EF64-EF64-0DF5-7C00-00045B5FCE03} - (no file)
WebBrowser-{00000B00-EFD8-0298-D0EF-9802000B0000} - (no file)
WebBrowser-{074AEF64-EF64-074A-7C00-00045B5FCE03} - (no file)
WebBrowser-{0D9FEF64-EF64-0D9F-7C00-00045B5FCE03} - (no file)
WebBrowser-{0D1AEF64-EF64-0D1A-7C00-00045B5FCE03} - (no file)
WebBrowser-{0D33EF64-EF64-0D33-7C00-00045B5FCE03} - (no file)
WebBrowser-{0D1BEF64-EF64-0D1B-7C00-00045B5FCE03} - (no file)
WebBrowser-{00000B68-EFD8-0298-D0EF-9802680B0000} - (no file)
WebBrowser-{0C1AEF64-EF64-0C1A-7C00-10045B5FDE03} - (no file)
WebBrowser-{0C5FEF64-EF64-0C5F-7C00-10045B5FDE03} - (no file)
WebBrowser-{0960EF64-EF64-0960-7C00-10045B5FDE03} - (no file)
WebBrowser-{0FFEEF64-EF64-0FFE-7C00-10045B5FDE03} - (no file)
WebBrowser-{0FF7EF64-EF64-0FF7-7C00-10045B5FDE03} - (no file)
WebBrowser-{1025EF64-EF64-1025-7C00-10045B5FDE03} - (no file)
WebBrowser-{1083EF64-EF64-1083-7C00-10045B5FDE03} - (no file)
WebBrowser-{0CADEF64-EF64-0CAD-7C00-10045B5FDE03} - (no file)
WebBrowser-{00000B04-EFD8-0294-D0EF-9402040B0000} - (no file)
WebBrowser-{0B9CEF64-EF64-0B9C-7C00-E9035B5FB703} - (no file)
WebBrowser-{026AEF64-EF64-026A-7C00-CF035B5F9D03} - (no file)
WebBrowser-{00000AFC-EFD8-026A-D0EF-6A02FC0A0000} - (no file)
WebBrowser-{0C56EF64-EF64-0C56-7C00-CF035B5F9D03} - (no file)
WebBrowser-{0AB5EF64-EF64-0AB5-7C00-CF035B5F9D03} - (no file)
WebBrowser-{0AC5EF64-EF64-0AC5-7C00-CF035B5F9D03} - (no file)
WebBrowser-{00000AA4-EFD8-0295-D0EF-9502A40A0000} - (no file)
WebBrowser-{05A4EF64-EF64-05A4-7C00-FF035B5FCD03} - (no file)
WebBrowser-{0298EF64-EF64-0298-7C00-30045B5FFE03} - (no file)
WebBrowser-{07CAEF64-EF64-07CA-7C00-30045B5FFE03} - (no file)
WebBrowser-{00000B54-EFD8-0294-D0EF-9402540B0000} - (no file)
WebBrowser-{0B0FEF64-EF64-0B0F-7C00-E9035B5FB703} - (no file)
WebBrowser-{0CB6EF64-EF64-0CB6-7C00-E9035B5FB703} - (no file)
WebBrowser-{0B86EF64-EF64-0B86-7C00-E9035B5FB703} - (no file)
WebBrowser-{0890EF64-EF64-0890-7C00-E9035B5FB703} - (no file)
WebBrowser-{0BA2EF64-EF64-0BA2-7C00-E9035B5FB703} - (no file)
WebBrowser-{0EBCEF64-EF64-0EBC-7C00-E9035B5FB703} - (no file)
WebBrowser-{0C52EF64-EF64-0C52-7C00-E9035B5FB703} - (no file)
WebBrowser-{1389EF64-EF64-1389-7C00-E9035B5FB703} - (no file)
WebBrowser-{144CEF64-EF64-144C-7C00-E9035B5FB703} - (no file)
WebBrowser-{0DF7EF64-EF64-0DF7-7C00-E9035B5FB703} - (no file)
WebBrowser-{073AEF64-EF64-073A-7C00-00045B5FCE03} - (no file)
WebBrowser-{0E75EF64-EF64-0E75-7C00-00045B5FCE03} - (no file)
WebBrowser-{0DD0EF64-EF64-0DD0-7C00-00045B5FCE03} - (no file)
WebBrowser-{15C1EF64-EF64-15C1-7C00-00045B5FCE03} - (no file)
WebBrowser-{1783EF64-EF64-1783-7C00-00045B5FCE03} - (no file)
WebBrowser-{172CEF64-EF64-172C-7C00-00045B5FCE03} - (no file)
WebBrowser-{071AEF64-EF64-071A-7C00-00045B5FCE03} - (no file)
WebBrowser-{0D83EF64-EF64-0D83-7C00-00045B5FCE03} - (no file)
WebBrowser-{0D81EF64-EF64-0D81-7C00-00045B5FCE03} - (no file)
WebBrowser-{0E14EF64-EF64-0E14-7C00-00045B5FCE03} - (no file)
WebBrowser-{00000B1C-EFD8-0298-D0EF-98021C0B0000} - (no file)
WebBrowser-{076BEF64-EF64-076B-7C00-10045B5FDE03} - (no file)
WebBrowser-{0D1DEF64-EF64-0D1D-7C00-10045B5FDE03} - (no file)
WebBrowser-{0D31EF64-EF64-0D31-7C00-10045B5FDE03} - (no file)
WebBrowser-{00E0EF64-EF64-00E0-7C00-10045B5FDE03} - (no file)
WebBrowser-{00000B60-EFD8-0294-D0EF-9402600B0000} - (no file)
WebBrowser-{0ACFEF64-EF64-0ACF-7C00-F9035B5FC703} - (no file)
WebBrowser-{0B49EF64-EF64-0B49-7C00-F9035B5FC703} - (no file)
WebBrowser-{0E05EF64-EF64-0E05-7C00-F9035B5FC703} - (no file)
WebBrowser-{0E0CEF64-EF64-0E0C-7C00-F9035B5FC703} - (no file)
WebBrowser-{0E07EF64-EF64-0E07-7C00-F9035B5FC703} - (no file)
WebBrowser-{0297EF64-EF64-0297-7C00-F6035B5FC403} - (no file)
WebBrowser-{00000B24-EFD8-0297-D0EF-9702240B0000} - (no file)
WebBrowser-{00000B64-EFD8-0294-D0EF-9402640B0000} - (no file)
WebBrowser-{02F5EF64-EF64-02F5-7C00-F9035B5FC703} - (no file)
WebBrowser-{0DD0EF64-EF64-0DD0-7C00-F9035B5FC703} - (no file)
WebBrowser-{0D85EF64-EF64-0D85-7C00-F9035B5FC703} - (no file)
WebBrowser-{0D28EF64-EF64-0D28-7C00-F9035B5FC703} - (no file)
WebBrowser-{1206EF64-EF64-1206-7C00-F9035B5FC703} - (no file)
WebBrowser-{1599EF64-EF64-1599-7C00-F9035B5FC703} - (no file)
WebBrowser-{00000AAC-EFD8-0298-D0EF-9802AC0A0000} - (no file)
WebBrowser-{1071EF64-EF64-1071-7C00-10045B5FDE03} - (no file)
WebBrowser-{00000A64-EFD8-0298-D0EF-9802640A0000} - (no file)
WebBrowser-{0709EF64-EF64-0709-7C00-00045B5FCE03} - (no file)
WebBrowser-{104FEF64-EF64-104F-7C00-F9035B5FC703} - (no file)
WebBrowser-{1B10EF64-EF64-1B10-7C00-F9035B5FC703} - (no file)
WebBrowser-{1C2FEF64-EF64-1C2F-7C00-F9035B5FC703} - (no file)
WebBrowser-{1C3FEF64-EF64-1C3F-7C00-F9035B5FC703} - (no file)
WebBrowser-{1C6EEF64-EF64-1C6E-7C00-F9035B5FC703} - (no file)
WebBrowser-{1BC8EF64-EF64-1BC8-7C00-F9035B5FC703} - (no file)
WebBrowser-{00000950-EFD8-0295-D0EF-950250090000} - (no file)
WebBrowser-{05B1EF64-EF64-05B1-7C00-FF035B5FCD03} - (no file)
WebBrowser-{0D66EF64-EF64-0D66-7C00-FF035B5FCD03} - (no file)
WebBrowser-{121AEF64-EF64-121A-7C00-F9035B5FC703} - (no file)
WebBrowser-{1087EF64-EF64-1087-7C00-F9035B5FC703} - (no file)
WebBrowser-{20E7EF64-EF64-20E7-7C00-F9035B5FC703} - (no file)
WebBrowser-{01A1EF64-EF64-01A1-7C00-AB025B5F0910} - (no file)
WebBrowser-{00000704-EFD8-01A1-D0EF-A10104070000} - (no file)
WebBrowser-{01A1DD40-DD40-01A1-7C00-AB025B5F0910} - (no file)
WebBrowser-{01A1F180-F180-01A1-7C00-AB025B5F0910} - (no file)
WebBrowser-{01A1E5F0-E5F0-01A1-7C00-AB025B5F0910} - (no file)
WebBrowser-{01A2EF64-EF64-01A2-7C00-C3025B5F0910} - (no file)
WebBrowser-{000007F4-DB98-01A2-90DB-A201F4070000} - (no file)
WebBrowser-{000007F8-EFD8-01A2-D0EF-A201F8070000} - (no file)
WebBrowser-{062FEF64-EF64-062F-7C00-C3025B5F0910} - (no file)
WebBrowser-{0F90EF64-EF64-0F90-7C00-C3025B5F0910} - (no file)
WebBrowser-{01A2E66C-E66C-01A2-7C00-C3025B5F0910} - (no file)
WebBrowser-{01A2EF64-EF64-01A2-7C00-D3025B5F0910} - (no file)
WebBrowser-{0000080C-DB98-01A2-90DB-A2010C080000} - (no file)
WebBrowser-{00000824-EFD8-01A2-D0EF-A20124080000} - (no file)
WebBrowser-{01A2E5F0-E5F0-01A2-7C00-D3025B5F0910} - (no file)
WebBrowser-{0000079C-DB98-01A2-90DB-A2019C070000} - (no file)
WebBrowser-{000007A4-EFD8-01A2-D0EF-A201A4070000} - (no file)
WebBrowser-{0679EF64-EF64-0679-7C00-D3025B5F0910} - (no file)
WebBrowser-{0D81EF64-EF64-0D81-7C00-D3025B5F0910} - (no file)
WebBrowser-{0D76EF64-EF64-0D76-7C00-D3025B5F0910} - (no file)
WebBrowser-{0EA0EF64-EF64-0EA0-7C00-D3025B5F0910} - (no file)
WebBrowser-{0D48EF64-EF64-0D48-7C00-D3025B5F0910} - (no file)
WebBrowser-{0D95EF64-EF64-0D95-7C00-D3025B5F0910} - (no file)
WebBrowser-{0D34EF64-EF64-0D34-7C00-D3025B5F0910} - (no file)
WebBrowser-{1265EF64-EF64-1265-7C00-D3025B5F0910} - (no file)
WebBrowser-{1255EF64-EF64-1255-7C00-D3025B5F0910} - (no file)
WebBrowser-{0A98EF64-024E-0004-7C00-D3025B5F0910} - (no file)
WebBrowser-{15CFEF64-EF64-15CF-7C00-D3025B5F0910} - (no file)
WebBrowser-{01A1EF64-EF64-01A1-7C00-BD025B5F0910} - (no file)
WebBrowser-{000007A4-DB98-01A1-90DB-A101A4070000} - (no file)
WebBrowser-{000007F0-EFD8-01A1-D0EF-A101F0070000} - (no file)
WebBrowser-{01A1E5F0-E5F0-01A1-7C00-BD025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-D4025B5F0910} - (no file)
WebBrowser-{000005A4-DB98-01A5-90DB-A501A4050000} - (no file)
WebBrowser-{00000820-EFD8-01A5-D0EF-A50120080000} - (no file)
WebBrowser-{0630EF64-EF64-0630-7C00-D4025B5F0910} - (no file)
WebBrowser-{0A8EEF64-07FA-0001-7C00-D4025B5F0910} - (no file)
WebBrowser-{01A5E5F0-E5F0-01A5-7C00-D4025B5F0910} - (no file)
WebBrowser-{000007A8-DB98-01A5-90DB-A501A8070000} - (no file)
WebBrowser-{000007AC-EFD8-01A5-D0EF-A501AC070000} - (no file)
WebBrowser-{0643EF64-EF64-0643-7C00-D4025B5F0910} - (no file)
WebBrowser-{01A2EF64-EF64-01A2-7C00-C1025B5F0910} - (no file)
WebBrowser-{000007D4-DB98-01A2-90DB-A201D4070000} - (no file)
WebBrowser-{000007D8-EFD8-01A2-D0EF-A201D8070000} - (no file)
WebBrowser-{01A2E66C-E66C-01A2-7C00-C1025B5F0910} - (no file)
WebBrowser-{00000870-DC14-01A2-0CDC-A20170080000} - (no file)
WebBrowser-{00000880-EFD8-01A2-D0EF-A20180080000} - (no file)
WebBrowser-{062FEF64-EF64-062F-7C00-D3025B5F0910} - (no file)
WebBrowser-{0AEFEF64-EF64-0AEF-7C00-D3025B5F0910} - (no file)
WebBrowser-{0D8CEF64-EF64-0D8C-7C00-D3025B5F0910} - (no file)
WebBrowser-{0F88EF64-EF64-0F88-7C00-D3025B5F0910} - (no file)
WebBrowser-{0B1BEF64-EF64-0B1B-7C00-D3025B5F0910} - (no file)
WebBrowser-{00000794-DB98-01A1-90DB-A10194070000} - (no file)
WebBrowser-{00000784-EFD8-01A1-D0EF-A10184070000} - (no file)
WebBrowser-{00000964-DC14-01A2-0CDC-A20164090000} - (no file)
WebBrowser-{0000096C-EFD8-01A2-D0EF-A2016C090000} - (no file)
WebBrowser-{01A2E5F0-E5F0-01A2-7C00-C3025B5F0910} - (no file)
WebBrowser-{000007B4-DB98-01A2-90DB-A201B4070000} - (no file)
WebBrowser-{0656EF64-EF64-0656-7C00-D3025B5F0910} - (no file)
WebBrowser-{0DE8EF64-EF64-0DE8-7C00-D3025B5F0910} - (no file)
WebBrowser-{0DE7EF64-EF64-0DE7-7C00-D3025B5F0910} - (no file)
WebBrowser-{0DFCEF64-EF64-0DFC-7C00-D3025B5F0910} - (no file)
WebBrowser-{00000920-DC14-01A1-0CDC-A10120090000} - (no file)
WebBrowser-{00000920-EFD8-01A1-D0EF-A10120090000} - (no file)
WebBrowser-{000007A8-DC14-01A1-0CDC-A101A8070000} - (no file)
WebBrowser-{0000079C-EFD8-01A1-D0EF-A1019C070000} - (no file)
WebBrowser-{000007E4-DB98-01A1-90DB-A101E4070000} - (no file)
WebBrowser-{000007F8-EFD8-01A1-D0EF-A101F8070000} - (no file)
WebBrowser-{00000794-EFD8-01A1-D0EF-A10194070000} - (no file)
WebBrowser-{0000079C-DB98-01A1-90DB-A1019C070000} - (no file)
WebBrowser-{000007A4-EFD8-01A1-D0EF-A101A4070000} - (no file)
WebBrowser-{0AC7EF64-EF64-0AC7-7C00-BD025B5F0910} - (no file)
WebBrowser-{0AE3EF64-EF64-0AE3-7C00-BD025B5F0910} - (no file)
WebBrowser-{0AEBEF64-EF64-0AEB-7C00-BD025B5F0910} - (no file)
WebBrowser-{1127EF64-EF64-1127-7C00-BD025B5F0910} - (no file)
WebBrowser-{0A89EF64-EF64-0A89-7C00-BD025B5F0910} - (no file)
WebBrowser-{0AA4EF64-EF64-0AA4-7C00-BD025B5F0910} - (no file)
WebBrowser-{1185EF64-EF64-1185-7C00-BD025B5F0910} - (no file)
WebBrowser-{1402EF64-EF64-1402-7C00-BD025B5F0910} - (no file)
WebBrowser-{126CEF64-EF64-126C-7C00-BD025B5F0910} - (no file)
WebBrowser-{00000844-DC14-01A5-0CDC-A50144080000} - (no file)
WebBrowser-{000008A8-EFD8-01A5-D0EF-A501A8080000} - (no file)
WebBrowser-{0670EF64-EF64-0670-7C00-D4025B5F0910} - (no file)
WebBrowser-{0EADEF64-EF64-0EAD-7C00-D4025B5F0910} - (no file)
WebBrowser-{12DBEF64-EF64-12DB-7C00-D4025B5F0910} - (no file)
WebBrowser-{12DCEF64-EF64-12DC-7C00-D4025B5F0910} - (no file)
WebBrowser-{1048EF64-EF64-1048-7C00-D4025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-C4025B5F0910} - (no file)
WebBrowser-{00000594-DB98-01A5-90DB-A50194050000} - (no file)
WebBrowser-{000007D4-EFD8-01A5-D0EF-A501D4070000} - (no file)
WebBrowser-{0646EF64-EF64-0646-7C00-C4025B5F0910} - (no file)
WebBrowser-{01A5E5F0-E5F0-01A5-7C00-C4025B5F0910} - (no file)
WebBrowser-{0000075C-DB98-01A5-90DB-A5015C070000} - (no file)
WebBrowser-{00000814-EFD8-01A5-D0EF-A50114080000} - (no file)
WebBrowser-{06B0EF64-EF64-06B0-7C00-D4025B5F0910} - (no file)
WebBrowser-{01A4EF64-EF64-01A4-7C00-C4025B5F0910} - (no file)
WebBrowser-{000007FC-DB98-01A4-90DB-A401FC070000} - (no file)
WebBrowser-{00000728-EFD8-01A4-D0EF-A40128070000} - (no file)
WebBrowser-{00000710-EFD8-01A5-D0EF-A50110070000} - (no file)
WebBrowser-{05C7EF64-EF64-05C7-7C00-D4025B5F0910} - (no file)
WebBrowser-{000006FC-EFD8-01A5-D0EF-A501FC060000} - (no file)
WebBrowser-{0469EF64-EF64-0469-7C00-C4025B5F0910} - (no file)
WebBrowser-{0D9CEF64-EF64-0D9C-7C00-C4025B5F0910} - (no file)
WebBrowser-{01A4E5F0-E5F0-01A4-7C00-C4025B5F0910} - (no file)
WebBrowser-{0000070C-DB98-01A1-90DB-A1010C070000} - (no file)
WebBrowser-{000007B8-EFD8-01A1-D0EF-A101B8070000} - (no file)
WebBrowser-{00000720-DB98-01A1-90DB-A10120070000} - (no file)
WebBrowser-{00000788-EFD8-01A1-D0EF-A10188070000} - (no file)
WebBrowser-{00000894-DB98-01A2-90DB-A20194080000} - (no file)
WebBrowser-{00000894-EFD8-01A2-D0EF-A20194080000} - (no file)
WebBrowser-{0F19EF64-EF64-0F19-7C00-D3025B5F0910} - (no file)
WebBrowser-{00000714-EFD8-01A2-D0EF-A20114070000} - (no file)
WebBrowser-{05D7EF64-EF64-05D7-7C00-D3025B5F0910} - (no file)
WebBrowser-{01A3EF64-EF64-01A3-7C00-D2025B5F0910} - (no file)
WebBrowser-{000007EC-DC14-01A3-0CDC-A301EC070000} - (no file)
WebBrowser-{000007F0-EFD8-01A3-D0EF-A301F0070000} - (no file)
WebBrowser-{064DEF64-EF64-064D-7C00-D2025B5F0910} - (no file)
WebBrowser-{093FEF64-EF64-093F-7C00-D2025B5F0910} - (no file)
WebBrowser-{026EEF64-EF64-026E-7C00-D2025B5F0910} - (no file)
WebBrowser-{094FEF64-EF64-094F-7C00-D2025B5F0910} - (no file)
WebBrowser-{06F6EF64-EF64-06F6-7C00-D2025B5F0910} - (no file)
WebBrowser-{0723EF64-EF64-0723-7C00-D2025B5F0910} - (no file)
WebBrowser-{1579EF64-EF64-1579-7C00-D2025B5F0910} - (no file)
WebBrowser-{095FEF64-EF64-095F-7C00-D2025B5F0910} - (no file)
WebBrowser-{17ECEF64-EF64-17EC-7C00-D2025B5F0910} - (no file)
WebBrowser-{1850EF64-EF64-1850-7C00-D2025B5F0910} - (no file)
WebBrowser-{1D33EF64-EF64-1D33-7C00-D2025B5F0910} - (no file)
WebBrowser-{01A3E5F0-E5F0-01A3-7C00-D2025B5F0910} - (no file)
WebBrowser-{01A1EF64-EF64-01A1-7C00-6B025B5F0910} - (no file)
WebBrowser-{00000798-EFD8-01A1-D0EF-A10198070000} - (no file)
WebBrowser-{06DBEF64-EF64-06DB-7C00-6B025B5F0910} - (no file)
WebBrowser-{0B98EF64-EF64-0B98-7C00-6B025B5F0910} - (no file)
WebBrowser-{01F7EF64-EF64-01F7-7C00-6B025B5F0910} - (no file)
WebBrowser-{0732EF64-EF64-0732-7C00-6B025B5F0910} - (no file)
WebBrowser-{01A1E5F0-E5F0-01A1-7C00-6B025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-84025B5F0910} - (no file)
WebBrowser-{00000780-DB98-01A5-90DB-A50180070000} - (no file)
WebBrowser-{00000780-EFD8-01A5-D0EF-A50180070000} - (no file)
WebBrowser-{0607EF64-EF64-0607-7C00-84025B5F0910} - (no file)
WebBrowser-{01A5E5F0-E5F0-01A5-7C00-84025B5F0910} - (no file)
WebBrowser-{01A4EF64-EF64-01A4-7C00-95025B5F0910} - (no file)
WebBrowser-{000007B0-DB98-01A4-90DB-A401B0070000} - (no file)
WebBrowser-{000007B0-EFD8-01A4-D0EF-A401B0070000} - (no file)
WebBrowser-{01A4E5F0-E5F0-01A4-7C00-95025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-98025B5F0910} - (no file)
WebBrowser-{000007F8-DB98-01A5-90DB-A501F8070000} - (no file)
WebBrowser-{0000080C-EFD8-01A5-D0EF-A5010C080000} - (no file)
WebBrowser-{05F5EF64-EF64-05F5-7C00-98025B5F0910} - (no file)
WebBrowser-{04E8EF64-EF64-04E8-7C00-98025B5F0910} - (no file)
WebBrowser-{0B37EF64-EF64-0B37-7C00-98025B5F0910} - (no file)
WebBrowser-{0F07EF64-EF64-0F07-7C00-98025B5F0910} - (no file)
WebBrowser-{0185EF64-EF64-0185-7C00-98025B5F0910} - (no file)
WebBrowser-{0670EF64-EF64-0670-7C00-98025B5F0910} - (no file)
WebBrowser-{0B29EF64-EF64-0B29-7C00-98025B5F0910} - (no file)
WebBrowser-{0AF7EF64-EF64-0AF7-7C00-98025B5F0910} - (no file)
WebBrowser-{0650EF64-EF64-0650-7C00-98025B5F0910} - (no file)
WebBrowser-{14A7EF64-EF64-14A7-7C00-98025B5F0910} - (no file)
WebBrowser-{1574EF64-EF64-1574-7C00-98025B5F0910} - (no file)
WebBrowser-{161AEF64-EF64-161A-7C00-98025B5F0910} - (no file)
WebBrowser-{0F66EF64-EF64-0F66-7C00-98025B5F0910} - (no file)
WebBrowser-{1578EF64-EF64-1578-7C00-98025B5F0910} - (no file)
WebBrowser-{1883EF64-EF64-1883-7C00-98025B5F0910} - (no file)
WebBrowser-{1B10EF64-EF64-1B10-7C00-98025B5F0910} - (no file)
WebBrowser-{1BE0EF64-EF64-1BE0-7C00-98025B5F0910} - (no file)
WebBrowser-{1DECEF64-EF64-1DEC-7C00-98025B5F0910} - (no file)
WebBrowser-{0660EF64-EF64-0660-7C00-98025B5F0910} - (no file)
WebBrowser-{01A5E5F0-E5F0-01A5-7C00-98025B5F0910} - (no file)
WebBrowser-{01A1EF64-EF64-01A1-7C00-7D025B5F0910} - (no file)
WebBrowser-{000007CC-DB98-01A1-90DB-A101CC070000} - (no file)
WebBrowser-{000007D0-EFD8-01A1-D0EF-A101D0070000} - (no file)
WebBrowser-{01A1E5F0-E5F0-01A1-7C00-7D025B5F0910} - (no file)
WebBrowser-{01A1EF64-EF64-01A1-7C00-97025B5F0910} - (no file)
WebBrowser-{000008FC-DB98-01A1-90DB-A101FC080000} - (no file)
WebBrowser-{00000924-EFD8-01A1-D0EF-A10124090000} - (no file)
WebBrowser-{01A1E5F0-E5F0-01A1-7C00-97025B5F0910} - (no file)
WebBrowser-{000007AC-EFD8-01A1-D0EF-A101AC070000} - (no file)
WebBrowser-{058AEF64-052E-0001-7C00-97025B5F0910} - (no file)
WebBrowser-{01A1E66C-E66C-01A1-7C00-97025B5F0910} - (no file)
WebBrowser-{000007A0-DC14-01A1-0CDC-A101A0070000} - (no file)
WebBrowser-{000007BC-EFD8-01A1-D0EF-A101BC070000} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-9D025B5F0910} - (no file)
WebBrowser-{00000788-EFD8-01A5-D0EF-A50188070000} - (no file)
WebBrowser-{05F3EF64-EF64-05F3-7C00-9D025B5F0910} - (no file)
WebBrowser-{FFFF0000-07BE-0000-48AE-5802D4D1A501} - (no file)
WebBrowser-{01A5E5F0-E5F0-01A5-7C00-9D025B5F0910} - (no file)
WebBrowser-{01A1EF64-EF64-01A1-7C00-85025B5F0910} - (no file)
WebBrowser-{00000758-DB98-01A1-90DB-A10158070000} - (no file)
WebBrowser-{00000758-EFD8-01A1-D0EF-A10158070000} - (no file)
WebBrowser-{01A1E5F0-E5F0-01A1-7C00-85025B5F0910} - (no file)
WebBrowser-{000008AC-DB98-01A1-90DB-A101AC080000} - (no file)
WebBrowser-{000008B4-EFD8-01A1-D0EF-A101B4080000} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-AE025B5F0910} - (no file)
WebBrowser-{000007DC-DB98-01A5-90DB-A501DC070000} - (no file)
WebBrowser-{00000810-EFD8-01A5-D0EF-A50110080000} - (no file)
WebBrowser-{05E9EF64-EF64-05E9-7C00-AE025B5F0910} - (no file)
WebBrowser-{01A5E66C-E66C-01A5-7C00-AE025B5F0910} - (no file)
WebBrowser-{000007A4-DB98-01A5-90DB-A501A4070000} - (no file)
WebBrowser-{000007A8-EFD8-01A5-D0EF-A501A8070000} - (no file)
WebBrowser-{05D9EF64-EF64-05D9-7C00-AE025B5F0910} - (no file)
WebBrowser-{066BEF64-EF64-066B-7C00-AE025B5F0910} - (no file)
WebBrowser-{0F4CEF64-EF64-0F4C-7C00-AE025B5F0910} - (no file)
WebBrowser-{0593EF64-EF64-0593-7C00-AE025B5F0910} - (no file)
WebBrowser-{1911EF64-EF64-1911-7C00-AE025B5F0910} - (no file)
WebBrowser-{01A5E5F0-E5F0-01A5-7C00-AE025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-B0025B5F0910} - (no file)
WebBrowser-{000007BC-DB98-01A5-90DB-A501BC070000} - (no file)
WebBrowser-{000007CC-EFD8-01A5-D0EF-A501CC070000} - (no file)
WebBrowser-{05DBEF64-EF64-05DB-7C00-B0025B5F0910} - (no file)
WebBrowser-{01A5E5F0-E5F0-01A5-7C00-B0025B5F0910} - (no file)
WebBrowser-{01A1EF64-EF64-01A1-7C00-9A025B5F0910} - (no file)
WebBrowser-{00000678-DB98-01A1-90DB-A10178060000} - (no file)
WebBrowser-{0A6DEF64-EF64-0A6D-7C00-9A025B5F0910} - (no file)
WebBrowser-{01A1E5F0-E5F0-01A1-7C00-9A025B5F0910} - (no file)
WebBrowser-{000005F8-DB98-01A1-90DB-A101F8050000} - (no file)
WebBrowser-{000007F4-EFD8-01A1-D0EF-A101F4070000} - (no file)
WebBrowser-{00000674-DC14-01A1-0CDC-A10174060000} - (no file)
WebBrowser-{00000580-EFD8-01A1-D0EF-A10180050000} - (no file)
WebBrowser-{0943EF64-EF64-0943-7C00-9A025B5F0910} - (no file)
WebBrowser-{00000648-DB98-01A1-90DB-A10148060000} - (no file)
WebBrowser-{0829EF64-EF64-0829-7C00-9A025B5F0910} - (no file)
WebBrowser-{01A1E66C-E66C-01A1-7C00-9A025B5F0910} - (no file)
WebBrowser-{01A1EF64-EF64-01A1-7C00-8B025B5F0910} - (no file)
WebBrowser-{000008B4-DB98-01A1-90DB-A101B4080000} - (no file)
WebBrowser-{0000078C-EFD8-01A1-D0EF-A1018C070000} - (no file)
WebBrowser-{0934EF64-EF64-0934-7C00-8B025B5F0910} - (no file)
WebBrowser-{0B15EF64-EF64-0B15-7C00-8B025B5F0910} - (no file)
WebBrowser-{01A1E66C-E66C-01A1-7C00-8B025B5F0910} - (no file)
WebBrowser-{01A2EF64-EF64-01A2-7C00-B1025B5F0910} - (no file)
WebBrowser-{00000828-DB98-01A2-90DB-A20128080000} - (no file)
WebBrowser-{00000830-EFD8-01A2-D0EF-A20130080000} - (no file)
WebBrowser-{05EDEF64-EF64-05ED-7C00-B1025B5F0910} - (no file)
WebBrowser-{0D20EF64-EF64-0D20-7C00-B1025B5F0910} - (no file)
WebBrowser-{0E0DEF64-EF64-0E0D-7C00-B1025B5F0910} - (no file)
WebBrowser-{01A2E5F0-E5F0-01A2-7C00-B1025B5F0910} - (no file)
WebBrowser-{01A1EF64-EF64-01A1-7C00-9B025B5F0910} - (no file)
WebBrowser-{00000898-DB98-01A1-90DB-A10198080000} - (no file)
WebBrowser-{00000894-EFD8-01A1-D0EF-A10194080000} - (no file)
WebBrowser-{01F0EF64-EF64-01F0-7C00-9B025B5F0910} - (no file)
WebBrowser-{0576EF64-EF64-0576-7C00-9B025B5F0910} - (no file)
WebBrowser-{0584EF64-EF64-0584-7C00-9B025B5F0910} - (no file)
WebBrowser-{01A1E66C-E66C-01A1-7C00-9B025B5F0910} - (no file)
WebBrowser-{01A6EF64-EF64-01A6-7C00-AB025B5F0910} - (no file)
WebBrowser-{00000898-DB98-01A6-90DB-A60198080000} - (no file)
WebBrowser-{0000089C-EFD8-01A6-D0EF-A6019C080000} - (no file)
WebBrowser-{05F8EF64-EF64-05F8-7C00-AB025B5F0910} - (no file)
WebBrowser-{0FCCEF64-EF64-0FCC-7C00-AB025B5F0910} - (no file)
WebBrowser-{0D8DEF64-EF64-0D8D-7C00-AB025B5F0910} - (no file)
WebBrowser-{0F9AEF64-EF64-0F9A-7C00-AB025B5F0910} - (no file)
WebBrowser-{15A8EF64-EF64-15A8-7C00-AB025B5F0910} - (no file)
WebBrowser-{01A6E5F0-E5F0-01A6-7C00-AB025B5F0910} - (no file)
WebBrowser-{000007EC-DB98-01A1-90DB-A101EC070000} - (no file)
WebBrowser-{01A1E5F0-E5F0-01A1-7C00-9B025B5F0910} - (no file)
WebBrowser-{000007AC-DB98-01A1-90DB-A101AC070000} - (no file)
WebBrowser-{0781EF64-EF64-0781-7C00-9B025B5F0910} - (no file)
WebBrowser-{00000880-DB98-01A1-90DB-A10180080000} - (no file)
WebBrowser-{0000087C-EFD8-01A1-D0EF-A1017C080000} - (no file)
WebBrowser-{00000868-DB98-01A1-90DB-A10168080000} - (no file)
WebBrowser-{0000088C-EFD8-01A1-D0EF-A1018C080000} - (no file)
WebBrowser-{09D6EF64-EF64-09D6-7C00-9B025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-B2025B5F0910} - (no file)
WebBrowser-{00000810-DB98-01A5-90DB-A50110080000} - (no file)
WebBrowser-{01A5E66C-E66C-01A5-7C00-B2025B5F0910} - (no file)
WebBrowser-{00000390-DB98-01A1-90DB-A10190030000} - (no file)
WebBrowser-{00000790-EFD8-01A1-D0EF-A10190070000} - (no file)
WebBrowser-{09F7EF64-EF64-09F7-7C00-9B025B5F0910} - (no file)
WebBrowser-{000007B4-EFD8-01A2-D0EF-A201B4070000} - (no file)
WebBrowser-{05ECEF64-EF64-05EC-7C00-B1025B5F0910} - (no file)
WebBrowser-{000005C8-DB98-01A1-90DB-A101C8050000} - (no file)
WebBrowser-{000006F4-EFD8-01A1-D0EF-A101F4060000} - (no file)
WebBrowser-{0925EF64-EF64-0925-7C00-8B025B5F0910} - (no file)
WebBrowser-{01A1E5F0-E5F0-01A1-7C00-8B025B5F0910} - (no file)
WebBrowser-{01A2EF64-EF64-01A2-7C00-AF025B5F0910} - (no file)
WebBrowser-{00000798-DB98-01A2-90DB-A20198070000} - (no file)
WebBrowser-{0000079C-EFD8-01A2-D0EF-A2019C070000} - (no file)
WebBrowser-{01A2E5F0-E5F0-01A2-7C00-AF025B5F0910} - (no file)
WebBrowser-{01A2EF64-EF64-01A2-7C00-A1025B5F0910} - (no file)
WebBrowser-{00000824-DB98-01A2-90DB-A20124080000} - (no file)
WebBrowser-{00000838-EFD8-01A2-D0EF-A20138080000} - (no file)
WebBrowser-{05F2EF64-EF64-05F2-7C00-A1025B5F0910} - (no file)
WebBrowser-{01CBEF64-EF64-01CB-7C00-A1025B5F0910} - (no file)
WebBrowser-{01A2E5F0-E5F0-01A2-7C00-A1025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-A1025B5F0910} - (no file)
WebBrowser-{000007F4-DB98-01A5-90DB-A501F4070000} - (no file)
WebBrowser-{000007F0-EFD8-01A5-D0EF-A501F0070000} - (no file)
WebBrowser-{05E7EF64-EF64-05E7-7C00-A1025B5F0910} - (no file)
WebBrowser-{01A5E66C-E66C-01A5-7C00-A1025B5F0910} - (no file)
WebBrowser-{01A2EF64-EF64-01A2-7C00-90025B5F0910} - (no file)
WebBrowser-{00000860-DB98-01A2-90DB-A20160080000} - (no file)
WebBrowser-{00000858-EFD8-01A2-D0EF-A20158080000} - (no file)
WebBrowser-{01A2E5F0-E5F0-01A2-7C00-90025B5F0910} - (no file)
WebBrowser-{000007CC-DB98-01A2-90DB-A201CC070000} - (no file)
WebBrowser-{000007C4-EFD8-01A2-D0EF-A201C4070000} - (no file)
WebBrowser-{000007B8-DB98-01A1-90DB-A101B8070000} - (no file)
WebBrowser-{0377EF64-EF64-0377-7C00-9B025B5F0910} - (no file)
WebBrowser-{0634EF64-EF64-0634-7C00-9B025B5F0910} - (no file)
WebBrowser-{0D52EF64-EF64-0D52-7C00-9B025B5F0910} - (no file)
WebBrowser-{0F16EF64-EF64-0F16-7C00-9B025B5F0910} - (no file)
WebBrowser-{0ED9EF64-EF64-0ED9-7C00-9B025B5F0910} - (no file)
WebBrowser-{00000668-DB98-01A2-90DB-A20168060000} - (no file)
WebBrowser-{00000854-EFD8-01A2-D0EF-A20154080000} - (no file)
WebBrowser-{0DA0EF64-EF64-0DA0-7C00-B1025B5F0910} - (no file)
WebBrowser-{0DA7EF64-EF64-0DA7-7C00-B1025B5F0910} - (no file)
WebBrowser-{1048EF64-EF64-1048-7C00-B1025B5F0910} - (no file)
WebBrowser-{1088EF64-EF64-1088-7C00-B1025B5F0910} - (no file)
WebBrowser-{01EBEF64-EF64-01EB-7C00-B1025B5F0910} - (no file)
WebBrowser-{01A2E66C-E66C-01A2-7C00-B1025B5F0910} - (no file)
WebBrowser-{01A1EF64-EF64-01A1-7C00-A2025B5F0910} - (no file)
WebBrowser-{00000848-DB98-01A1-90DB-A10148080000} - (no file)
WebBrowser-{00000844-EFD8-01A1-D0EF-A10144080000} - (no file)
WebBrowser-{05AEEF64-EF64-05AE-7C00-A2025B5F0910} - (no file)
WebBrowser-{01A1E5F0-E5F0-01A1-7C00-A2025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-BA025B5F0910} - (no file)
WebBrowser-{000007C4-DB98-01A5-90DB-A501C4070000} - (no file)
WebBrowser-{05F5EF64-EF64-05F5-7C00-BA025B5F0910} - (no file)
WebBrowser-{0637EF64-EF64-0637-7C00-BA025B5F0910} - (no file)
WebBrowser-{01A5E66C-E66C-01A5-7C00-BA025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-A9025B5F0910} - (no file)
WebBrowser-{000008A4-DC14-01A5-0CDC-A501A4080000} - (no file)
WebBrowser-{000008AC-EFD8-01A5-D0EF-A501AC080000} - (no file)
WebBrowser-{05D5EF64-EF64-05D5-7C00-A9025B5F0910} - (no file)
WebBrowser-{01A5E66C-E66C-01A5-7C00-A9025B5F0910} - (no file)
WebBrowser-{000007D4-DB98-01A5-90DB-A501D4070000} - (no file)
WebBrowser-{000007E8-EFD8-01A5-D0EF-A501E8070000} - (no file)
WebBrowser-{05E5EF64-EF64-05E5-7C00-A9025B5F0910} - (no file)
WebBrowser-{01A5E5F0-E5F0-01A5-7C00-A9025B5F0910} - (no file)
WebBrowser-{00000770-DB98-01A5-90DB-A50170070000} - (no file)
WebBrowser-{00000784-EFD8-01A5-D0EF-A50184070000} - (no file)
WebBrowser-{0615EF64-EF64-0615-7C00-A9025B5F0910} - (no file)
WebBrowser-{000006F0-EFD8-01A5-D0EF-A501F0060000} - (no file)
WebBrowser-{0555EF64-EF64-0555-7C00-A9025B5F0910} - (no file)
WebBrowser-{0355EF64-EF64-0355-7C00-A9025B5F0910} - (no file)
WebBrowser-{12A8EF64-EF64-12A8-7C00-A9025B5F0910} - (no file)
WebBrowser-{01A1EF64-EF64-01A1-7C00-73025B5F0910} - (no file)
WebBrowser-{000007E8-EFD8-01A1-D0EF-A101E8070000} - (no file)
WebBrowser-{01A1E5F0-E5F0-01A1-7C00-73025B5F0910} - (no file)
WebBrowser-{01A1EF64-EF64-01A1-7C00-A3025B5F0910} - (no file)
WebBrowser-{000007A8-EFD8-01A1-D0EF-A101A8070000} - (no file)
WebBrowser-{01A1E5F0-E5F0-01A1-7C00-A3025B5F0910} - (no file)
WebBrowser-{0000080C-DB98-01A5-90DB-A5010C080000} - (no file)
WebBrowser-{0000081C-EFD8-01A5-D0EF-A5011C080000} - (no file)
WebBrowser-{01A5E5F0-E5F0-01A5-7C00-BA025B5F0910} - (no file)
WebBrowser-{0000072C-DB98-01A5-90DB-A5012C070000} - (no file)
WebBrowser-{00000864-EFD8-01A5-D0EF-A50164080000} - (no file)
WebBrowser-{0600EF64-EF64-0600-7C00-A9025B5F0910} - (no file)
WebBrowser-{0BC9EF64-EF64-0BC9-7C00-A9025B5F0910} - (no file)
WebBrowser-{0FBEEF64-EF64-0FBE-7C00-A9025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-B9025B5F0910} - (no file)
WebBrowser-{00000798-DC14-01A5-0CDC-A50198070000} - (no file)
WebBrowser-{00000798-EFD8-01A5-D0EF-A50198070000} - (no file)
WebBrowser-{0625EF64-EF64-0625-7C00-B9025B5F0910} - (no file)
WebBrowser-{01A5E5F0-E5F0-01A5-7C00-B9025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-99025B5F0910} - (no file)
WebBrowser-{000007B0-DB98-01A5-90DB-A501B0070000} - (no file)
WebBrowser-{000007DC-EFD8-01A5-D0EF-A501DC070000} - (no file)
WebBrowser-{01A5E66C-E66C-01A5-7C00-99025B5F0910} - (no file)
WebBrowser-{0000067C-DB98-01A5-90DB-A5017C060000} - (no file)
WebBrowser-{00000770-EFD8-01A5-D0EF-A50170070000} - (no file)
WebBrowser-{04CBEF64-EF64-04CB-7C00-A9025B5F0910} - (no file)
WebBrowser-{0A9EEF64-EF64-0A9E-7C00-A9025B5F0910} - (no file)
WebBrowser-{0000082C-DB98-01A5-90DB-A5012C080000} - (no file)
WebBrowser-{000008B0-EFD8-01A5-D0EF-A501B0080000} - (no file)
WebBrowser-{00000730-EFD8-01A5-D0EF-A50130070000} - (no file)
WebBrowser-{05B6EF64-EF64-05B6-7C00-BA025B5F0910} - (no file)
WebBrowser-{0AD7EF64-EF64-0AD7-7C00-BA025B5F0910} - (no file)
WebBrowser-{0376EF64-EF64-0376-7C00-BA025B5F0910} - (no file)
WebBrowser-{00000724-EFD8-01A5-D0EF-A50124070000} - (no file)
WebBrowser-{05B7EF64-EF64-05B7-7C00-BA025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-AA025B5F0910} - (no file)
WebBrowser-{00000720-EFD8-01A5-D0EF-A50120070000} - (no file)
WebBrowser-{0566EF64-EF64-0566-7C00-AA025B5F0910} - (no file)
WebBrowser-{0C24EF64-EF64-0C24-7C00-AA025B5F0910} - (no file)
WebBrowser-{151BEF64-EF64-151B-7C00-AA025B5F0910} - (no file)
WebBrowser-{0E2DEF64-EF64-0E2D-7C00-AA025B5F0910} - (no file)
WebBrowser-{152BEF64-EF64-152B-7C00-AA025B5F0910} - (no file)
WebBrowser-{00000700-EFD8-01A1-D0EF-A10100070000} - (no file)
WebBrowser-{0A20EF64-EF64-0A20-7C00-A3025B5F0910} - (no file)
WebBrowser-{0994EF64-EF64-0994-7C00-A3025B5F0910} - (no file)
WebBrowser-{00000718-EFD8-01A1-D0EF-A10118070000} - (no file)
WebBrowser-{00000774-EFD8-01A5-D0EF-A50174070000} - (no file)
WebBrowser-{0578EF64-EF64-0578-7C00-BA025B5F0910} - (no file)
WebBrowser-{01A4EF64-EF64-01A4-7C00-BA025B5F0910} - (no file)
WebBrowser-{00000754-EFD8-01A4-D0EF-A40154070000} - (no file)
WebBrowser-{00000748-EFD8-01A5-D0EF-A50148070000} - (no file)
WebBrowser-{0577EF64-EF64-0577-7C00-BA025B5F0910} - (no file)
WebBrowser-{0576EF64-EF64-0576-7C00-BA025B5F0910} - (no file)
WebBrowser-{0C38EF64-EF64-0C38-7C00-BA025B5F0910} - (no file)
WebBrowser-{0F04EF64-EF64-0F04-7C00-BA025B5F0910} - (no file)
WebBrowser-{0F77EF64-EF64-0F77-7C00-BA025B5F0910} - (no file)
WebBrowser-{01C9EF64-EF64-01C9-7C00-BA025B5F0910} - (no file)
WebBrowser-{000005B0-EFD8-01A5-D0EF-A501B0050000} - (no file)
WebBrowser-{059CEF64-EF64-059C-7C00-BA025B5F0910} - (no file)
WebBrowser-{052FEF64-EF64-052F-7C00-BA025B5F0910} - (no file)
WebBrowser-{01A6EF64-EF64-01A6-7C00-F3025B5FC102} - (no file)
WebBrowser-{00000754-EFD8-01A6-D0EF-A60154070000} - (no file)
WebBrowser-{087AEF64-EF64-087A-7C00-F3025B5FC102} - (no file)
WebBrowser-{09DDEF64-EF64-09DD-7C00-F3025B5FC102} - (no file)
WebBrowser-{00000850-EFD8-01A5-D0EF-A50150080000} - (no file)
WebBrowser-{0C45EF64-EF64-0C45-7C00-BA025B5F0910} - (no file)
WebBrowser-{000005C4-EFD8-01A5-D0EF-A501C4050000} - (no file)
WebBrowser-{0356EF64-EF64-0356-7C00-BA025B5F0910} - (no file)
WebBrowser-{00000768-EFD8-01A1-D0EF-A10168070000} - (no file)
WebBrowser-{0AACEF64-EF64-0AAC-7C00-A3025B5F0910} - (no file)
WebBrowser-{01A6EF64-EF64-01A6-7C00-E2025B5FB002} - (no file)
WebBrowser-{0000072C-EFD8-01A6-D0EF-A6012C070000} - (no file)
WebBrowser-{000006EC-EFD8-01A5-D0EF-A501EC060000} - (no file)
WebBrowser-{0557EF64-EF64-0557-7C00-AA025B5F0910} - (no file)
WebBrowser-{0500EF64-EF64-0500-7C00-AA025B5F0910} - (no file)
WebBrowser-{0516EF64-EF64-0516-7C00-AA025B5F0910} - (no file)
WebBrowser-{050BEF64-EF64-050B-7C00-AA025B5F0910} - (no file)
WebBrowser-{106CEF64-EF64-106C-7C00-AA025B5F0910} - (no file)
WebBrowser-{00000568-EFD8-01A5-D0EF-A50168050000} - (no file)
WebBrowser-{0346EF64-EF64-0346-7C00-AA025B5F0910} - (no file)
WebBrowser-{000006E0-EFD8-01A5-D0EF-A501E0060000} - (no file)
WebBrowser-{05A7EF64-EF64-05A7-7C00-AA025B5F0910} - (no file)
WebBrowser-{0177EF64-EF64-0177-7C00-79025B5F0910} - (no file)
WebBrowser-{000006F4-EFD8-0177-D0EF-7701F4060000} - (no file)
WebBrowser-{08BDEF64-EF64-08BD-7C00-79025B5F0910} - (no file)
WebBrowser-{08EDEF64-EF64-08ED-7C00-79025B5F0910} - (no file)
WebBrowser-{0ADAEF64-EF64-0ADA-7C00-79025B5F0910} - (no file)
WebBrowser-{0AC1EF64-EF64-0AC1-7C00-79025B5F0910} - (no file)
WebBrowser-{082BEF64-EF64-082B-7C00-79025B5F0910} - (no file)
WebBrowser-{0F60EF64-EF64-0F60-7C00-79025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-BB025B5F0910} - (no file)
WebBrowser-{00000750-EFD8-01A5-D0EF-A50150070000} - (no file)
WebBrowser-{0357EF64-EF64-0357-7C00-BB025B5F0910} - (no file)
WebBrowser-{0D16EF64-EF64-0D16-7C00-BB025B5F0910} - (no file)
WebBrowser-{1397EF64-EF64-1397-7C00-BB025B5F0910} - (no file)
WebBrowser-{0577EF64-EF64-0577-7C00-BB025B5F0910} - (no file)
WebBrowser-{0B8FEF64-EF64-0B8F-7C00-BB025B5F0910} - (no file)
WebBrowser-{01A1EF64-EF64-01A1-7C00-94025B5F0910} - (no file)
WebBrowser-{01A1EF64-EF64-01A1-7C00-A4025B5F0910} - (no file)
WebBrowser-{00000548-EFD8-01A1-D0EF-A10148050000} - (no file)
WebBrowser-{0564EF64-EF64-0564-7C00-AA025B5F0910} - (no file)
WebBrowser-{0BDBEF64-EF64-0BDB-7C00-AA025B5F0910} - (no file)
WebBrowser-{00000700-EFD8-01A5-D0EF-A50100070000} - (no file)
WebBrowser-{0451EF64-EF64-0451-7C00-AA025B5F0910} - (no file)
WebBrowser-{0D07EF64-EF64-0D07-7C00-AA025B5F0910} - (no file)
WebBrowser-{0AD6EF64-EF64-0AD6-7C00-AA025B5F0910} - (no file)
WebBrowser-{000008D4-EFD8-01A1-D0EF-A101D4080000} - (no file)
WebBrowser-{078CEF64-EF64-078C-7C00-A4025B5F0910} - (no file)
WebBrowser-{0BC8EF64-04CC-0001-7C00-A4025B5F0910} - (no file)
WebBrowser-{0E0AEF64-EF64-0E0A-7C00-A4025B5F0910} - (no file)
WebBrowser-{0E2DEF64-EF64-0E2D-7C00-A4025B5F0910} - (no file)
WebBrowser-{0DD1EF64-EF64-0DD1-7C00-A4025B5F0910} - (no file)
WebBrowser-{0EC3EF64-EF64-0EC3-7C00-A4025B5F0910} - (no file)
WebBrowser-{083BEF64-058E-0006-7C00-A4025B5F0910} - (no file)
WebBrowser-{0000072C-EFD8-01A5-D0EF-A5012C070000} - (no file)
WebBrowser-{0576EF64-EF64-0576-7C00-BB025B5F0910} - (no file)
WebBrowser-{00000554-EFD8-01A1-D0EF-A10154050000} - (no file)
WebBrowser-{05A7EF64-EF64-05A7-7C00-BB025B5F0910} - (no file)
WebBrowser-{0000075C-EFD8-01A5-D0EF-A5015C070000} - (no file)
WebBrowser-{047EEF64-EF64-047E-7C00-BB025B5F0910} - (no file)
WebBrowser-{0B03EF64-EF64-0B03-7C00-BB025B5F0910} - (no file)
WebBrowser-{0CFBEF64-EF64-0CFB-7C00-BB025B5F0910} - (no file)
WebBrowser-{12AAEF64-EF64-12AA-7C00-BB025B5F0910} - (no file)
WebBrowser-{00000774-EFD8-01A1-D0EF-A10174070000} - (no file)
WebBrowser-{08AAEF64-EF64-08AA-7C00-94025B5F0910} - (no file)
WebBrowser-{0000076C-EFD8-01A1-D0EF-A1016C070000} - (no file)
WebBrowser-{00000874-EFD8-01A5-D0EF-A50174080000} - (no file)
WebBrowser-{0567EF64-EF64-0567-7C00-BA025B5F0910} - (no file)
WebBrowser-{00000768-EFD8-01A5-D0EF-A50168070000} - (no file)
WebBrowser-{0496EF64-EF64-0496-7C00-BA025B5F0910} - (no file)
WebBrowser-{00000704-EFD8-01A5-D0EF-A50104070000} - (no file)
WebBrowser-{000006F4-EFD8-01A5-D0EF-A501F4060000} - (no file)
WebBrowser-{0558EF64-EF64-0558-7C00-AA025B5F0910} - (no file)
WebBrowser-{00000714-EFD8-01A5-D0EF-A50114070000} - (no file)
WebBrowser-{00000758-EFD8-01A5-D0EF-A50158070000} - (no file)
WebBrowser-{058EEF64-EF64-058E-7C00-AA025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-A2025B5F0910} - (no file)
WebBrowser-{00000708-EFD8-01A5-D0EF-A50108070000} - (no file)
WebBrowser-{0555EF64-EF64-0555-7C00-A2025B5F0910} - (no file)
WebBrowser-{00000778-EFD8-01A5-D0EF-A50178070000} - (no file)
WebBrowser-{0B12EF64-EF64-0B12-7C00-BB025B5F0910} - (no file)
WebBrowser-{1272EF64-EF64-1272-7C00-BB025B5F0910} - (no file)
WebBrowser-{00BBEF64-EF64-00BB-7C00-BB025B5F0910} - (no file)
WebBrowser-{0525EF64-EF64-0525-7C00-BB025B5F0910} - (no file)
WebBrowser-{0578EF64-EF64-0578-7C00-BB025B5F0910} - (no file)
WebBrowser-{00000570-EFD8-01A5-D0EF-A50170050000} - (no file)
WebBrowser-{0520EF64-EF64-0520-7C00-BB025B5F0910} - (no file)
WebBrowser-{01A5EF64-EF64-01A5-7C00-CB025B5F0910} - (no file)
WebBrowser-{0000079C-EFD8-01A5-D0EF-A5019C070000} - (no file)
WebBrowser-{0587EF64-EF64-0587-7C00-CB025B5F0910} - (no file)
WebBrowser-{00000744-EFD8-01A5-D0EF-A50144070000} - (no file)
WebBrowser-{00000738-EFD8-01A5-D0EF-A50138070000} - (no file)
WebBrowser-{0471EF64-EF64-0471-7C00-CB025B5F0910} - (no file)
WebBrowser-{0C90EF64-EF64-0C90-7C00-CB025B5F0910} - (no file)
WebBrowser-{0E4AEF64-EF64-0E4A-7C00-CB025B5F0910} - (no file)
WebBrowser-{0461EF64-EF64-0461-7C00-BB025B5F0910} - (no file)
WebBrowser-{0995EF64-EF64-0995-7C00-A4025B5F0910} - (no file)
WebBrowser-{0DAAEF64-EF64-0DAA-7C00-BB025B5F0910} - (no file)
WebBrowser-{038BEF64-EF64-038B-7C00-BB025B5F0910} - (no file)
WebBrowser-{1324EF64-EF64-1324-7C00-BB025B5F0910} - (no file)
WebBrowser-{1275EF64-EF64-1275-7C00-BB025B5F0910} - (no file)
WebBrowser-{0D9EEF64-EF64-0D9E-7C00-BB025B5F0910} - (no file)
WebBrowser-{0528EF64-EF64-0528-7C00-BB025B5F0910} - (no file)
WebBrowser-{1347EF64-EF64-1347-7C00-BB025B5F0910} - (no file)
WebBrowser-{161AEF64-EF64-161A-7C00-BB025B5F0910} - (no file)
WebBrowser-{1692EF64-EF64-1692-7C00-BB025B5F0910} - (no file)
WebBrowser-{028CEF64-01B4-0031-7C00-BB025B5F0910} - (no file)
WebBrowser-{0D4AEF64-EF64-0D4A-7C00-BB025B5F0910} - (no file)
WebBrowser-{073AEF64-EF64-073A-7C00-BB025B5F0910} - (no file)
WebBrowser-{00000830-EFD8-01A1-D0EF-A10130080000} - (no file)
WebBrowser-{0525EF64-EF64-0525-7C00-A4025B5F0910} - (no file)
WebBrowser-{0000070C-EFD8-01A1-D0EF-A1010C070000} - (no file)
WebBrowser-{078DEF64-EF64-078D-7C00-94025B5F0910} - (no file)
WebBrowser-{0A34EF64-EF64-0A34-7C00-94025B5F0910} - (no file)
WebBrowser-{08CDEF64-EF64-08CD-7C00-94025B5F0910} - (no file)
WebBrowser-{0B7CEF64-EF64-0B7C-7C00-94025B5F0910} - (no file)
WebBrowser-{144CEF64-EF64-144C-7C00-94025B5F0910} - (no file)
WebBrowser-{123EEF64-EF64-123E-7C00-94025B5F0910} - (no file)
WebBrowser-{192EEF64-EF64-192E-7C00-94025B5F0910} - (no file)
WebBrowser-{1590EF64-EF64-1590-7C00-94025B5F0910} - (no file)
WebBrowser-{01A2EF64-EF64-01A2-7C00-BA025B5F0910} - (no file)
WebBrowser-{000008BC-EFD8-01A2-D0EF-A201BC080000} - (no file)
WebBrowser-{057DEF64-EF64-057D-7C00-BA025B5F0910} - (no file)
WebBrowser-{1048EF64-EF64-1048-7C00-BA025B5F0910} - (no file)
WebBrowser-{000005A0-EFD8-01A5-D0EF-A501A0050000} - (no file)
WebBrowser-{05A4EF64-EF64-05A4-7C00-BB025B5F0910} - (no file)
WebBrowser-{057DEF64-EF64-057D-7C00-BB025B5F0910} - (no file)
WebBrowser-{0527EF64-EF64-0527-7C00-BB025B5F0910} - (no file)
WebBrowser-{0E7AEF64-EF64-0E7A-7C00-BB025B5F0910} - (no file)
WebBrowser-{1058EF64-EF64-1058-7C00-BB025B5F0910} - (no file)
WebBrowser-{195EEF64-EF64-195E-7C00-BB025B5F0910} - (no file)
WebBrowser-{0EEFEF64-EF64-0EEF-7C00-BB025B5F0910} - (no file)

InfernO.vir · Answer

Ok, il me manque juste la fin du rapport stp.


Comment va le pc ?

Poste un rapport hijackthis.

ninidu17 · Answer

j'espère te satisfaire avec ceci car c'est tous ce que j'ai 
et je voulaus te dire merci beaucoup du message que tu as envoyé à zapato merci
je t'envoie je rapport hijactis après celui ci merci annie

pj le reste du rapport de bonbofix

------- Examen supplémentaire -------
.
uStart Page = hxxp://ww.yahoo.fr/
mStart Page = hxxp://eo.st
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://fr.rd.yahoo.com/customize/ie/defaults/su/msgr9/*https://fr.search.yahoo.com/
IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
IE: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
IE: Download with &Shareaza - c:\program files\Shareaza\Plugins\RazaWebHook.dll/3000
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Kelkoo Toolbar - file://c:\documents and settings\Propriétaire\Application Data\Kelkoo_Fr_Toolbar\klkofrt\klkofrC5.htm

c:\windows\Downloaded Program Files\InstallerControl.dll - c:\windows\Downloaded Program Files\CONFLICT.1\InstallerControl.dll
O16 -: CabBuilder
hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
c:\windows\Downloaded Program Files\CONFLICT.1\OSDC5.OSD

O16 -: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - hxxp://fichiers.touslesdrivers.com/fichiers/hardwaredetection/hardwaredetection_2_0_4_12.cab
c:\windows\Downloaded Program Files\hardwaredetection.inf
FF - ProfilePath - c:\documents and settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\iiozwa4i.default\
FF - component: c:\program files\Mozilla Firefox\components\FFComm.dll
FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer
pzylomgamesplayer.dll
FF - plugin: c:\program files\Microsoft Silverlight\2.0.31005.0
pctrl.1.0.30716.0.dll
FF - plugin: c:\program files\Microsoft Silverlight\2.0.31005.0
pctrl.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins
pzylomgamesplayer.dll
FF - plugin: c:\program files\Yahoo!\Shared
pYState.dll

[color=red]ATTENTION: FIREFOX POLICES IS IN FORCE /color
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz3");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz3");
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-02 18:29:37
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
c:\program files\BitDefender\BitDefender 2009\vsserv.exe
c:\windows\system32\brss01a.exe
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\Brmfrmps.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\UPHClean\uphclean.exe
c:\windows\system32\searchindexer.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\BitDefender\BitDefender 2009\seccenter.exe
c:\program files\Kelkoo_Fr_Toolbar\klkofrp.exe
.
**************************************************************************
.
Heure de fin: 2009-01-02 18:49:01 - La machine a redémarré
ComboFix-quarantined-files.txt  2009-01-02 17:48:55

Avant-CF: 18 316 484 608 octets libres
Après-CF: 18,980,814,848 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

2740	--- E O F ---	2008-12-18 12:20:35

ninidu17 · Answer

voici le rapport d'hijackthis
a plus tard....

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:12:19, on 02/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20935)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UPHClean\uphclean.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
C:\Program Files\Kelkoo_Fr_Toolbar\klkofrt.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
C:\Program Files\FinePixViewer\QuickDCF2.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Kelkoo_Fr_Toolbar\klkofrp.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\Deenero\DEENER~1.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww.yahoo.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://eo.st
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr9/*https://fr.search.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Deenero - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - C:\Program Files\Deenero\deenero_1,0,0,11.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Kelkoo France Toolbar  - {52DE91C6-8F53-4989-BE4A-90F1CAA0B48A} - C:\Program Files\Kelkoo_Fr_Toolbar\klkofrb.dll
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [klkofrm] "C:\Program Files\Kelkoo_Fr_Toolbar\klkofrt.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Global Startup: ExifLauncher2.lnk = C:\Program Files\FinePixViewer\QuickDCF2.exe
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Kelkoo Toolbar - file://C:\Documents and Settings\Propriétaire\Application Data\Kelkoo_Fr_Toolbar\klkofrt\klkofrC5.htm
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://m6jeux.oberon-media.com/online/online2/luxor_2/mjolauncher.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://3dlifeplayer.dl.3dvia.com/player/install/installer.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. https://www.bitdefender.fr/ - C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\system32\Brmfrmps.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe

InfernO.vir · Answer

Ok mais comment va le pc ?

Télécharge Toolbar-S&D sur ton Bureau : 

https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2 

* Lance l'installation du programme en exécutant le fichier téléchargé. 
* Double-clique sur le raccourci de Toolbar-S&D. 
* Sélectionne la langue puis valide. 
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche. 
* Copie/colle le contenu du rapport situé dans C:\TB.txt .

ninidu17 · Answer

bien écoute mon pc va un peu mieux on dirait bien, je continue les actions en espérant que je n'aurai plus rien et qu'il retrouvra sa rapidité. a tout a l'heure
a + nini

Utilisateur anonyme · Answer

Un petit passage en force, il a le processus Bountygame qui est encore la, un Ad-Remover sera le bienvenue !

Je te laisse le sujet, a+

ninidu17 · Answer

me revoila
je te poste le rapport comme convenu je suis sous XP familiale
merci encore 

pj rapport 

   -----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual  CPU  T2310  @ 1.46GHz )
   BIOS : Default System BIOS
   USER : Propriétaire ( Administrator )
   BOOT : Normal boot
   Antivirus : BitDefender Antivirus 12.0 (Activated)
   Firewall  : BitDefender Firewall 12.0 (Activated)
   C:\ (Local Disk) - NTFS - Total:39 Go (Free:17 Go)
   D:\ (Local Disk) - NTFS - Total:35 Go (Free:35 Go)
   E:\ (CD or DVD)
   F:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [1] ( 02/01/2009|19:32 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\Program Files\DAEMON Tools Toolbar
   C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
   C:\Program Files\GamesBar
   C:\Program Files\GamesBar\Localization-English.ini

   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="http://ww.yahoo.fr/"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Local Page"="C:\WINDOWS\system32\blank.htm"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="http://eo.st"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "C:\ToolBar SD\TB_1.txt" - 02/01/2009|19:33 - Option : [1]

   -----------\  Fin du rapport a 19:33:33,75

InfernO.vir · Answer

Merci loicdem ;-)

-Relance Toolbar s&d

-Fait l'option 2

-Poste le rapport


Ensuite :

-Télécharge AD-Remover de C_XX sur ton Bureau :


http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe

-Ferme toutes les applications en cours, y compris ton navigateur *.

-Désactive ton antivirus.

-Double-clique sur AD-R.exe et installe-le dans le répertoire par défaut. ( C:\Program files )

-Double clique sur l'icône Ad-remover 

https://i75.servimg.com/u/f75/11/05/93/83/ad-r10.jpg

-Au menu principal choisis l'option A

-Poste le rapport qui apparait à la fin du scan.

-Il est sauvegardé ici : C:\Ad-report(date).log

* Process.exe, un composant de l'outil, est détecté par certains antivirus, (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
C'est pourquoi il faut désactiver provisoirement ton antivirus.

ninidu17 · Answer

remoi bon c'est reparti rapport Toolbar s&d 
a tout nin


   -----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual  CPU  T2310  @ 1.46GHz )
   BIOS : Default System BIOS
   USER : Propriétaire ( Administrator )
   BOOT : Normal boot
   Antivirus : BitDefender Antivirus 12.0 (Activated)
   Firewall  : BitDefender Firewall 12.0 (Activated)
   C:\ (Local Disk) - NTFS - Total:39 Go (Free:17 Go)
   D:\ (Local Disk) - NTFS - Total:35 Go (Free:35 Go)
   E:\ (CD or DVD)
   F:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [2] ( 02/01/2009|20:54 )

   -----------\ SUPPRESSION

   Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
   Supprime! - C:\Program Files\GamesBar\Localization-English.ini
   Supprime! - C:\Program Files\DAEMON Tools Toolbar
   Supprime! - C:\Program Files\GamesBar

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="http://ww.yahoo.fr/"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Local Page"="C:\WINDOWS\system32\blank.htm"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "C:\ToolBar SD\TB_1.txt" - 02/01/2009|19:33 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - 02/01/2009|20:56 - Option : [2]

   -----------\  Fin du rapport a 20:56:07,70

ninidu17 · Answer

je suis désolé, jai fait tous ce que tu m'as demandé mais il ne veut pas faire le scan je crois que bitdefender bloque tous je vais être obliger de le désinstaller si non je ne pourrais rien faire qu'en penses tu
merci pour ta réponse

InfernO.vir · Answer

J'ai trouvé ceci :

"Salut.
Pour désactiver l’antivirus et le pare-feu de Bis 2008 il faut arrêter le service vsserv.exe.
Pour ce faire il existe un petit utilitaire stop.bat à cette adresse
ftp://ftp.editions-profil.fr/support/BitDefender2008 .
L’exécution de ce fichier arrête vsserv.exe . Apres il faut mettre en manuel ce service :
Démarrer-->panneau de configuration-->outils d’administration-->services des composant-->services(local)-->Bitdefender Virus Shield (double click)-->type de démarrage-->manuel
Voilà l’antivirus et le pare-feu ne peuvent plus demarrer même au cour d'un redemarrage Windows. Attention je n'ai pas dit que cela permettait de tester un autre antivirus ou un autre pare-feu!. 
Pour redémarrer l'antivirus et le pare-feu il faut remettre Bitdefender Virus Shield en automatique et redémarrer le service. Le pare-feu et l’antivirus redeviennent actifs."

Source : forum.bitdefender (oldbadger)

ninidu17 · Answer

slt, je suis désolé j'ai éxécuter ce que tu m'as dit pour bitdefender il refuse l'accès j'ai essayer sur les 3 formes refus cathégorique il ne veut pas me donner l'accès manuel bon je crois que nous verons cela demain je le désinstallerai je ferai ce quetu m'a demandé et je le réinstallerai après je t'envoie tous les rapports
je te remercie pour se soir. je te dis a demain enfin dès que tu seras disponible tu aura tous dans ta boite mail
encore merci pour ta patience et ta gentillesse
nini

Trojan

31 réponses

Discussions similaires

Newsletters