Rapport hijackthis [Résolu]

Réponse 1 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Télécharges ToolBar S&D ( de Eric_71 )
= = = = >>> En cliquant ici <<< = = = =

Tuto si besoin en cliquant ICI

!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipulation !!
* Double-cliques sur l’exécutable pour lancer l’outil
* Une fois fait, tape F pour sélectionner le Français
* Choisis l’option 1 (Recherche) et tape sur Entrée.
* Une fois le scan finit, un rapport va apparaître au format .txt.
* Copie-colle l’intégralité de son contenu dans ta prochaine réponse ...
Note :
Le rapport est sauvegardé ici : C:\TB.txt

nana

merci de m'aider.
voici le rapport:

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 1500+ )
BIOS : Default System BIOS
USER : famille ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 090104-0] 4.8.1296 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:37 Go (Free:1 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (USB) - FAT32 - Total:3816 Mo (Free:1 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 05/01/2009| 0:31 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\FBrowserAdvisor
C:\Program Files\FBrowsingAdvisor
C:\Program Files\FBrowsingAdvisor\IXPCOMEvents.xpt
C:\Program Files\FBrowsingAdvisor\Logo.png
C:\Program Files\FBrowsingAdvisor\main.db
C:\Program Files\FBrowsingAdvisor\unins000.dat
C:\Program Files\FBrowsingAdvisor\unins000.exe
C:\Program Files\FBrowsingAdvisor\XPCOMEvents.dll
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\06-10-03-09-49-51
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\about.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\action.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\arcade.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\Azada16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\buy.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cards.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\caribbean_hideaway16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cradle_of_persia16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cradle_rome16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\deals.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\death_nile16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\deep_quest16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\download.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\dr_daisy_pet_vet16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\family_restaurant16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\farm_frenzy16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\fashion_craze16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\feedback.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\help.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\highlight.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\jigsaw.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\kids.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mahjong.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\multiplayer.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mygames.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\newGames.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\oberonconfig.xm_
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\partner.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\pirate_poker16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\pirate_stories_kit_ellis16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_off.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_on.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\puzzle.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\search.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\seasonmatch16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sendafriend.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\solitaire_cruise16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sports.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\supercow16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\trial.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\Turbo_Subs16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\uninstall.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\update.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\webgame.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\about.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\action.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\arcade.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\Azada16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\buy.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\cards.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\cradle_rome16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\deals.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\death_nile16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\download.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\feedback.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\help.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\highlight.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\jigsaw.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\kids.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\luxor3_new16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\mahjong.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\multiplayer.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\mygames.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\newGames.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\partner.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\popup_off.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\popup_on.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\puzzle.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\search.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\sendafriend.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\sports.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\trial.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\uninstall.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\update.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05\webgame.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\about.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\action.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\arcade.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\Azada16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\buy.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\cards.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\caribbean_hideaway16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\cradle_of_persia16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\cradle_rome16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\deals.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\death_nile16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\deep_quest16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\download.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\dr_daisy_pet_vet16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\family_restaurant16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\farm_frenzy16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\fashion_craze16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\feedback.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\help.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\highlight.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\jigsaw.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\kids.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\mahjong.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\multiplayer.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\mygames.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\newGames.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\partner.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\pirate_poker16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\pirate_stories_kit_ellis16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\popup_off.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\popup_on.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\puzzle.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\search.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\seasonmatch16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\sendafriend.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\solitaire_cruise16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\sports.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\supercow16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\trial.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\Turbo_Subs16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\uninstall.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\update.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20\webgame.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\about.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\action.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\arcade.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\Azada16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\buy.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\cards.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\caribbean_hideaway16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\cradle_of_persia16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\cradle_rome16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\deals.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\death_nile16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\deep_quest16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\download.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\dr_daisy_pet_vet16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\family_restaurant16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\farm_frenzy16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\fashion_craze16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\feedback.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\help.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\highlight.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\jigsaw.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\kids.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\mahjong.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\multiplayer.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\mygames.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\newGames.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\partner.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\pirate_poker16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\pirate_stories_kit_ellis16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\popup_off.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\popup_on.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\puzzle.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\search.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\seasonmatch16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\sendafriend.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\solitaire_cruise16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\sports.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\supercow16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\trial.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\Turbo_Subs16x16.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\uninstall.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\update.gif
C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25\webgame.gif
C:\Program Files\GamesBar
C:\Program Files\GamesBar\OBGet.exe
C:\Program Files\GamesBar\search.bin
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\GamesBar
C:\DOCUME~1\ALLUSE~1\APPLIC~1\KaZaA
C:\DOCUME~1\ALLUSE~1\APPLIC~1\KaZaA\db
C:\DOCUME~1\ALLUSE~1\APPLIC~1\KaZaA\db\data1024.dbb
C:\DOCUME~1\ALLUSE~1\APPLIC~1\KaZaA\db\data256.dbb
C:\DOCUME~1\ALLUSE~1\APPLIC~1\KaZaA\db\np.tmp
C:\Program Files\Myway
C:\Program Files\Myway\myBar
C:\Program Files\Myway\myBar\History
C:\Program Files\Myway\myBar\Settings
C:\Program Files\Myway\myBar\History\search
C:\Program Files\Myway\myBar\Settings\prevcfg.htm
C:\Program Files\PlayMP3z
C:\Program Files\PlayMP3z\uninstall.exe
C:\WINDOWS\iun6002.exe

-----------\\ Extensions

(Invit‚) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
"Search Bar"="http://fr.rd.yahoo.com/customize/ie/defaults/sb/ymsgr6/fr/*http://www.yahoo.com/ext/search/search.html"
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"

--------------------\\ Recherche d'autres infections

C:\Program Files\Instant Access
C:\Program Files\Instant Access\Center
C:\Program Files\Instant Access\DesktopIcons
C:\Program Files\Instant Access\Multi
C:\WINDOWS\Pack.epk

C:\WINDOWS\System32\ukfjnqn.dat
C:\WINDOWS\System32\ukfjnqn_nav.dat
C:\WINDOWS\System32\ukfjnqn_navps.dat
[b]==> EGDACCESS <==/b

1 - "C:\ToolBar SD\TB_1.txt" - 05/01/2009| 0:32 - Option : [1]

-----------\\ Fin du rapport a 0:32:46,48

Réponse 2 / 21

pimprenelle27 Messages postés 20857 Date d'inscription Statut Contributeur sécurité Dernière intervention 2 502

T'aider à quoi faire?

Réponse 3 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Nettoyage avec ToolBar S&D :

!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipulation !!

Relance Toolbar-S&D en double-cliquant sur le raccourci.
* Tape l’option 2 (Nettoyage) puis tapes sur Entrée.
Notes :
Ne touche à rien lors de la suppression !
Un rapport sera généré à la fin du processus : postes son contenu dans ta prochaine réponse.

**************************

Télécharge sur le bureau Navilog1 (Merci à IL-MAFIOSO)
= = = = >>> En cliquant ici <<< = = = =
* La console noire de Navilog1 doit s’ouvrir après l’installation
* Sinon, pour l’ouvrir, double-clique sur le raccourci « Navilog1 » sur ton bureau
* Appuie sur la lettre F de ton clavier puis sur la touche Entrée
* Appuie sur une touche de ton clavier pour continuer...
* Tape 1, puis appuie sur la touche Entrée de ton clavier
* Ainsi, Navilog1 va effectuer la recherche des fichiers infectieux sur ton PC.
* NE PAS UTILISER L’OPTION 2, 3, 4 SANS AVIS
* Sois patient, cela peut prendre une dizaine de minutes
* Navilog1 t’informe que la recherche est terminée
* Appuie sur une touche de ton clavier pour afficher le rapport qu’il a généré
* Le rapport sera sauvegardé dans le fichier suivant : « fixnavi.txt » à la racine de ton disque dur (C:\fixnavi.txt).
* Poste le rapport généré

nana

1er rapport:
-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 1500+ )
BIOS : Default System BIOS
USER : famille ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 090104-0] 4.8.1296 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:37 Go (Free:1 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (USB) - FAT32 - Total:3816 Mo (Free:1 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 05/01/2009| 0:39 )

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\FBrowsingAdvisor\IXPCOMEvents.xpt
Supprime! - C:\Program Files\FBrowsingAdvisor\Logo.png
Supprime! - C:\Program Files\FBrowsingAdvisor\main.db
Supprime! - C:\Program Files\FBrowsingAdvisor\unins000.dat
Supprime! - C:\Program Files\FBrowsingAdvisor\unins000.exe
Supprime! - C:\Program Files\FBrowsingAdvisor\XPCOMEvents.dll
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\06-10-03-09-49-51
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-09-14-14-05.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-13-49-20.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-14-11-25-25.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\about.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\action.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\arcade.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\Azada16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\buy.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cards.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\caribbean_hideaway16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cradle_of_persia16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cradle_rome16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\deals.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\death_nile16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\deep_quest16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\download.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\dr_daisy_pet_vet16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\family_restaurant16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\farm_frenzy16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\fashion_craze16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\feedback.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\help.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\highlight.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\jigsaw.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\kids.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mahjong.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\multiplayer.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mygames.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\newGames.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\oberonconfig.xm_
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\partner.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\pirate_poker16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\pirate_stories_kit_ellis16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_off.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_on.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\puzzle.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\search.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\seasonmatch16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sendafriend.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\solitaire_cruise16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sports.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\supercow16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\trial.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\Turbo_Subs16x16.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\uninstall.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\update.gif
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\webgame.gif
Supprime! - C:\Program Files\GamesBar\OBGet.exe
Supprime! - C:\Program Files\GamesBar\search.bin
Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\GamesBar
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\KaZaA\db
Supprime! - C:\Program Files\Myway\myBar
Supprime! - C:\Program Files\PlayMP3z\uninstall.exe
Supprime! - C:\WINDOWS\iun6002.exe
Supprime! - C:\Program Files\FBrowserAdvisor
Supprime! - C:\Program Files\FBrowsingAdvisor
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
Supprime! - C:\Program Files\GamesBar
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\KaZaA
Supprime! - C:\Program Files\Myway
Supprime! - C:\Program Files\PlayMP3z

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ Extensions

(Invit‚) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="https://www.msn.com/fr-fr/"
"Search Bar"="http://fr.rd.yahoo.com/customize/ie/defaults/sb/ymsgr6/fr/*http://www.yahoo.com/ext/search/search.html"
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"

--------------------\\ Recherche d'autres infections

C:\Program Files\Instant Access
C:\Program Files\Instant Access\Center
C:\Program Files\Instant Access\DesktopIcons
C:\Program Files\Instant Access\Multi
C:\WINDOWS\Pack.epk

C:\WINDOWS\System32\ukfjnqn.dat
C:\WINDOWS\System32\ukfjnqn_nav.dat
C:\WINDOWS\System32\ukfjnqn_navps.dat
[b]==> EGDACCESS <==/b

1 - "C:\ToolBar SD\TB_1.txt" - 05/01/2009| 0:32 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 05/01/2009| 0:43 - Option : [2]

-----------\\ Fin du rapport a 0:43:02,84

nana > nana

je n'arrive pas avec navilog,il rete bloquer sur patienter plus de 30 mn sans resultat, voici ce qu'il affiche:

Creation de la liste des programmes installes

Veuillez patienter

Search Navipromo version 3.7.1 commence le 05/01/2009 a 9:05:27,23

!!! Attention,ce rapport peut indiquer des fichiers/programmes legitimes !!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie desinfection sans l'avis d'un specialiste !!!

*** Recherche programmes installes ***

Veuillez patienter

Recherche terminee

*** Recherche dossiers dans "C:\WINDOWS" ***

Veuillez patienter

Recherche terminee

*** Recherche dossiers dans "C:\Program Files" ***

Veuillez patienter

Recherche terminee

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra
~1" ***

Veuillez patienter

Recherche terminee

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

Veuillez patienter

Recherche terminee

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

Veuillez patienter

Recherche terminee

*** Recherche dossiers dans "C:\Documents and Settings\famille\applic~1" ***

Veuillez patienter

Recherche terminee
Accès refusé.

*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\applic~1" ***

Veuillez patienter

Recherche terminee

*** Recherche dossiers dans "C:\Documents and Settings\famille\locals~1\applic~1
" ***

Veuillez patienter

Recherche terminee

Accès refusé.

*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" ***

Veuillez patienter

Recherche terminee

*** Recherche dossiers dans "C:\Documents and Settings\famille\menudm~1\progra~1
" ***

Veuillez patienter

Recherche terminee

Accès refusé.

*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\menudm~1\progra~1" ***

Veuillez patienter

Recherche terminee

*** Recherche avec Catchme par gmer ***
pour + d'infos : http://www.gmer.net

Veuillez patienter ... Le scan peut durer une dizaine de minutes ...

nana > nana

je viens de telecharger catchme à part et le lancer: voici le rapport:

catchme 0.2 W2K/XP/Vista - userland rootkit detector by Gmer, 17 October 2006
http://www.gmer.net

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
AppInit_DLLs = ????????????

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

Réponse 4 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Reste sur navilog.
Ton rapport n'est pas complet.

nana

salut,

j'ai fais aussi un scan complet :

Malwarebytes' Anti-Malware 1.31
Version de la base de données: 1615
Windows 5.1.2600 Service Pack 3

05/01/2009 12:26:11
mbam-log-2009-01-05 (12-26-11).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 129673
Temps écoulé: 2 hour(s), 36 minute(s), 38 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 6
Dossier(s) infecté(s): 8
Fichier(s) infecté(s): 15

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\sais (Adware.180Solutions) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\activedesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Program Files\Instant Access (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Center (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\DesktopIcons (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Multi (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Multi\20070111140111 (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Multi\20070111140111\Common (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Multi\20070111140111\js (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Multi\20070111140111\medias (Trojan.Dialer) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\System Volume Information\_restore{2101F79C-312F-4188-898C-EDF87E9ED83B}\RP540\A0090042.dll (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\ToolBar SD\Backup-TB\Program Files\FBrowsingAdvisor\XPCOMEvents.dll (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\Program Files\Mozilla Firefox\regxpcom.exe (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Center\Acces-Sex.lnk (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\DesktopIcons\Acces-Sex.lnk (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Multi\20070111140111\dialerexe.ini (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Multi\20070111140111\Common\module.php (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Multi\20070111140111\js\js_api_dialer.php (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Multi\20070111140111\medias\3804_dialer.ico (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Multi\20070111140111\medias\button1.gif (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Multi\20070111140111\medias\button2.gif (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Multi\20070111140111\medias\button3.gif (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Instant Access\Multi\20070111140111\medias\button4.gif (Trojan.Dialer) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ukfjnqn_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ukfjnqn_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.

nana > nana

navilog ne veut pas terminer le rapport.
Je sais pas quoi faire???

Réponse 5 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Comment ça il ne termine pas le rapport ?
Pourquoi ? Il s'arrête et message d'erreur ?
As-tu copié-collé l'intégralité du rapport ?
Le rapport devrait se trouver ici :
C:\fixnavi.txt

nana

c bon, j'ai relancé encot=re une fois et voici le rapport complet:

Search Navipromo version 3.7.1 commencé le 05/01/2009 à 22:03:54,43

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 1500+ )
BIOS : Default System BIOS
USER : famille ( Administrator )
BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1296 [VPS 090105-0] 4.8.1296 (Activated)

A:\ (USB)
C:\ (Local Disk) - NTFS - Total:37 Go (Free:0 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (USB) - FAT32 - Total:3816 Mo (Free:1 Go)

Recherche executé en mode normal

*** Recherche Programmes installés ***

*** Recherche dossiers dans "C:\WINDOWS" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\famille\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\famille\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\famille\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\menudm~1\progra~1" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\famille\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" *

*** Recherche fichiers ***

C:\WINDOWS\dialerexe.ini trouvé !
C:\WINDOWS\pack.epk trouvé !

*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :

aqgwrtlkz.exe trouvé !
fabyiqnjek.exe trouvé !
tlzdrg.exe trouvé !
ukfjnqn.dat trouvé !

* Dans "C:\Documents and Settings\famille\locals~1\applic~1" :

* Dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" :

3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche autres dossiers et fichiers connus :

*** Analyse terminée le 05/01/2009 à 22:20:53,39 ***

Réponse 6 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Nettoyage :

* Ferme toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts
* Relance Navilog en faisant un clic droit sur le raccourci Navilog présent sur ton bureau et en choisissant
« Exécuter en tant qu’administrateur ». (si tu as Vista)
* Au menu principal, choisis 2 et valide.
* Il va t’informer qu’il va alors redémarrer ton PC
* Appuie sur une touche comme demandé (Si ton Pc ne redémarre pas automatiquement, fais le toi même)
* Au redémarrage de ton PC, choisis ta session habituelle.

* Patiente jusqu’au message :
*** Nettoyage Termine le ..... ***

* Le bloc note va s’ouvrir, copie/colle ici le rapport, comme tu l’as fait pour l’autre.

nana

Clean Navipromo version 3.7.1 commencé le 05/01/2009 à 22:43:36,79

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 1500+ )
BIOS : Default System BIOS
USER : famille ( Administrator )
BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1296 [VPS 090105-0] 4.8.1296 (Activated)

A:\ (USB)
C:\ (Local Disk) - NTFS - Total:37 Go (Free:0 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (USB) - FAT32 - Total:3816 Mo (Free:1 Go)

Mode suppression automatique
avec prise en charge résultats Catchme et GNS

Nettoyage exécuté au redémarrage de l'ordinateur

*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *

* Suppression dans "C:\Documents and Settings\famille\locals~1\applic~1" *

* Suppression dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" *

*** Suppression dossiers dans "C:\WINDOWS" ***

*** Suppression dossiers dans "C:\Program Files" ***

*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\famille\applic~1" ***

*** Suppression dossiers dans "C:\DOCUME~1\INVIT~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\famille\locals~1\applic~1" ***

*** Suppression dossiers dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\famille\menudm~1\progra~1" ***

*** Suppression dossiers dans "C:\DOCUME~1\INVIT~1\menudm~1\progra~1" ***

*** Suppression fichiers ***

C:\WINDOWS\dialerexe.ini supprimé !
C:\WINDOWS\pack.epk supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\famille\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :

* Dans "C:\WINDOWS\system32" *

aqgwrtlkz.exe trouvé !
Copie aqgwrtlkz.exe réalisée avec succès !
aqgwrtlkz.exe supprimé !

fabyiqnjek.exe trouvé !
Copie fabyiqnjek.exe réalisée avec succès !
fabyiqnjek.exe supprimé !

tlzdrg.exe trouvé !
Copie tlzdrg.exe réalisée avec succès !
tlzdrg.exe supprimé !

ukfjnqn.dat trouvé !
Copie ukfjnqn.dat réalisée avec succès !
ukfjnqn.dat supprimé !

* Dans "C:\Documents and Settings\famille\locals~1\applic~1" *

* Dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" *

*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok

*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltdt absent !

*** Recherche autres dossiers et fichiers connus ***

*** Nettoyage terminé le 05/01/2009 à 22:50:29,65 ***

Réponse 7 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Très bien, poste un nouveau rapport hijackthis pour vérification stp.

nana

Voici:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:03:11, on 05/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\lxczcoms.exe
C:\Program Files\NTR global\NTRconnect\NTRconnect.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\USB Disk Win98 Driver\Res.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://fr.rd.yahoo.com/customize/ie/defaults/sb/ymsgr6/fr/*http://www.yahoo.com/ext/search/search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn5\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn5\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SemanticInsight] C:\Program Files\RXToolBar\Semantic Insight\SemanticInsight.exe
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [USB Storage Toolbox] C:\Program Files\USB Disk Win98 Driver\Res.EXE
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\Office12\REFIEBAR.DLL (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O16 - DPF: {2472DCCC-68CE-49DA-AA81-E7E6D83C1DFA} (PackageHTML) - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypix.com/importer/ImageUploader4.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - http://www.pixdiscount.com/clients/ImageUploader3.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5C5EB074-792A-4579-8274-6A391263894C}: NameServer = 86.64.145.140
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: lxcz_device - - C:\WINDOWS\system32\lxczcoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NTRconnect (ntrconnect) - Net Transmit & Receive - C:\Program Files\NTR global\NTRconnect\NTRconnect.exe

Réponse 8 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Télécharges ToolBar S&D ( de Eric_71 )
= = = = >>> En cliquant ici <<< = = = =

Tuto si besoin en cliquant ICI

!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipulation !!
* Double-cliques sur l’exécutable pour lancer l’outil
* Une fois fait, tape F pour sélectionner le Français
* Choisis l’option 1 (Recherche) et tape sur Entrée.
* Une fois le scan finit, un rapport va apparaître au format .txt.
* Copie-colle l’intégralité de son contenu dans ta prochaine réponse ...
Note :
Le rapport est sauvegardé ici : C:\TB.txt

nana

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 1500+ )
BIOS : Default System BIOS
USER : famille ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1296 [VPS 090105-0] 4.8.1296 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:37 Go (Free:1 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (USB) - FAT32 - Total:3816 Mo (Free:1 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 05/01/2009|23:13 )

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ Extensions

(Invit‚) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="https://www.msn.com/fr-fr/"
"Search Bar"="http://fr.rd.yahoo.com/customize/ie/defaults/sb/ymsgr6/fr/*http://www.yahoo.com/ext/search/search.html"
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

1 - "C:\ToolBar SD\TB_1.txt" - 05/01/2009| 0:32 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 05/01/2009| 0:43 - Option : [2]
3 - "C:\ToolBar SD\TB_3.txt" - 05/01/2009|23:15 - Option : [1]

-----------\\ Fin du rapport a 23:15:05,79

Réponse 9 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Relance Hijackthis.
Clic sur "Do a system scan only".
Coche ces lignes :
R3 - Default URLSearchHook is missing
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - HKLM\..\Run: [SemanticInsight] C:\Program Files\RXToolBar\Semantic Insight\SemanticInsight.exe
O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe"
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {2472DCCC-68CE-49DA-AA81-E7E6D83C1DFA} (PackageHTML) - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -

Clic ensuite sur fix checked.

***********************

/!\ Seule nana peut suivre cette procédure, script vérifié/!\

Télécharge OTMoveIt3 (de Old_Timer) sur ton Bureau.
= = = = >>> En cliquant ici <<< = = = =
Une fois installé sur le bureau, double-clique sur OTMoveIt.exe pour le lancer.
Assure toi que la case Unregister Dll’s and Ocx’s soit bien cochée
Copie la liste qui se trouve en gras ci-dessous, et colle-la dans le cadre de gauche de OTMoveIt :
Paste List of Files/Folders to be moved.

:Processes
explorer.exe

:Files
C:\Program Files\Fichiers communs\DriveCleaner Free
C:\Program Files\DriveCleaner 2006 Free
C:\Program Files\RXToolBar

:Commands
[purity]
[emptytemp]
[Reboot]

Clique sur MoveIt! pour lancer la suppression.
Le résultat apparaitra dans le cadre "Results".
Clique sur Exit pour fermer.
Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

nana

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
File/Folder C:\Program Files\Fichiers communs\DriveCleaner Free not found.
File/Folder C:\Program Files\DriveCleaner 2006 Free not found.
File/Folder C:\Program Files\RXToolBar not found.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\famille\LOCALS~1\Temp\etilqs_zhJiFLORfhoYKLkoM7XA scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\famille\LOCALS~1\Temp\~DFC214.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_564.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
File delete failed. C:\Documents and Settings\famille\Local Settings\Application Data\Mozilla\Firefox\Profiles\a4mjd18u.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\famille\Local Settings\Application Data\Mozilla\Firefox\Profiles\a4mjd18u.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\famille\Local Settings\Application Data\Mozilla\Firefox\Profiles\a4mjd18u.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\famille\Local Settings\Application Data\Mozilla\Firefox\Profiles\a4mjd18u.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\famille\Local Settings\Application Data\Mozilla\Firefox\Profiles\a4mjd18u.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 01052009_234334

Files moved on Reboot...
File C:\DOCUME~1\famille\LOCALS~1\Temp\etilqs_zhJiFLORfhoYKLkoM7XA not found!
C:\DOCUME~1\famille\LOCALS~1\Temp\~DFC214.tmp moved successfully.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
File C:\WINDOWS\temp\_avast4_\Webshlock.txt not found!
File C:\WINDOWS\temp\Perflib_Perfdata_564.dat not found!
C:\Documents and Settings\famille\Local Settings\Application Data\Mozilla\Firefox\Profiles\a4mjd18u.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\famille\Local Settings\Application Data\Mozilla\Firefox\Profiles\a4mjd18u.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\famille\Local Settings\Application Data\Mozilla\Firefox\Profiles\a4mjd18u.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\famille\Local Settings\Application Data\Mozilla\Firefox\Profiles\a4mjd18u.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\famille\Local Settings\Application Data\Mozilla\Firefox\Profiles\a4mjd18u.default\urlclassifier3.sqlite moved successfully.

Réponse 10 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Pour supprimer les anciennes versions de Java et télécharger la nouvelle,
Télécharge JavaRa.zip de Paul 'Prm753' McLain et Fred de Vries sur ton Bureau :
= = = =>>> En cliquant ici <<<= = = =
* Décompresse le fichier sur le Bureau (Clic droit > Extraire tout).
* Double-clique sur le répertoire JavaRa
* Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s'afficher).
* Clique sur Search For Updates
* Sélectionne Update Using jucheck.exe puis clique sur Search.
* Autorise le processus à se connecter s'il le demande, clique sur Install et suis les instructions d'installation qui prennent quelques minutes
* L'installation est terminée
* Reviens à l'écran de JavaRa et clique sur Remove Older Versions.
* Clique sur Oui pour confirmer. Laisse travailler et clique ensuite sur Ok, puis une deuxième fois sur Ok.
* Un rapport va s'ouvrir. Poste-le dans ta prochaine réponse.
* Ferme l'application.
Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log.

*************************

Télécharge Random’s System Information Tool (RSIT) de random/random et enregistre l’exécutable sur le Bureau.

= = = = >>> En cliquant ici <<< = = = =

* Double-clique sur RSIT.exe pour le lancer.

* Une première fenêtre s’ouvre, clique alors sur Continue (Disclaimer).

* Si la dernière version de HijackThis n’est pas détectée sur ton PC, RSIT le téléchargera et te demandera d’accepter la licence.

* Lorsque l’analyse sera terminée, deux fichiers texte s’ouvriront (probablement avec le bloc-notes).

* Poste le contenu de log.txt (c’est celui qui apparaît à l’écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

nana

JavaRa 1.13 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Tue Jan 06 00:10:16 2009

Found and removed: C:\Program Files\Java\j2re1.4.2

Found and removed: C:\Program Files\Java\jre1.6.0_01

Found and removed: C:\Program Files\Java\jre1.6.0_03

Found and removed: C:\Program Files\Java\jre1.6.0_05

Found and removed: C:\Program Files\Java\jre1.6.0_07

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\JavaPlugin.150_06

Found and removed: SOFTWARE\Classes\JavaPlugin.150_09

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610001

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610003

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610005

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610001

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610003

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610005

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610001

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610003

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610005

Found and removed: SOFTWARE\Classes\JavaPlugin.160_01

Found and removed: SOFTWARE\Classes\JavaPlugin.160_03

Found and removed: SOFTWARE\Classes\JavaPlugin.160_05

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_01

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_03

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_05

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_01

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_03

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_05

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610001

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610003

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610005

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610001

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610003

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610005

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610001

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610003

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610005

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160010}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160030}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160050}

Found and removed: Software\Classes\JavaPlugin.160_01

Found and removed: Software\Classes\JavaPlugin.160_03

Found and removed: Software\Classes\JavaPlugin.160_05

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_01

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_05

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_01\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_03\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_05\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_01\bin\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_03\bin\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_05\bin\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_07\bin\

------------------------------------

Finished reporting.

nana > nana

Logfile of random's system information tool 1.05 (written by random/random)
Run by famille at 2009-01-06 00:15:43
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 2 GB (5%) free of 38 GB
Total RAM: 495 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:16:09, on 06/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\lxczcoms.exe
C:\Program Files\NTR global\NTRconnect\NTRconnect.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\USB Disk Win98 Driver\Res.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Documents and Settings\famille\Bureau\JavaRa.exe
C:\WINDOWS\System32\msiexec.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\famille\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\famille.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://fr.rd.yahoo.com/customize/ie/defaults/sb/ymsgr6/fr/*http://www.yahoo.com/ext/search/search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn5\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn5\yt.dll
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [USB Storage Toolbox] C:\Program Files\USB Disk Win98 Driver\Res.EXE
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\Office12\REFIEBAR.DLL (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypix.com/importer/ImageUploader4.cab
O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - http://www.pixdiscount.com/clients/ImageUploader3.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5C5EB074-792A-4579-8274-6A391263894C}: NameServer = 86.64.145.140
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: lxcz_device - - C:\WINDOWS\system32\lxczcoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NTRconnect (ntrconnect) - Net Transmit & Receive - C:\Program Files\NTR global\NTRconnect\NTRconnect.exe

Réponse 11 / 21

nana

info.txt logfile of random's system information tool 1.05 2009-01-06 00:16:18

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{854A5F01-D692-11D4-A984-009027EC0A9C}\setup.exe"
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{945E2519-C2B9-11D3-9D56-0060B0A4823E}\setup.exe"
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CD47EFC1-D692-11D4-A984-009027EC0A9C}\setup.exe"
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E7E518B2-B174-11D3-9D4E-0060B0A4823E}\setup.exe"
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-00BA-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
AC3Filter (remove only)-->C:\Program Files\AC3Filter\uninstall.exe
Adobe Acrobat 5.0-->C:\WINDOWS\ISUN0407.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Reader 8.1.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81000000003}
Adobe® Photoshop® Album Edition Découverte 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
ArcSoft Panorama Maker 3.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1CABB679-3958-44AA-BFFF-4E68A2684255}\Setup.exe" -l0x40c -uninst
Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Barre d'outils Outlook de Windows Live (Windows Live Toolbar)-->MsiExec.exe /X{6E15BEDF-7EB5-4010-998E-B430DB4EFE45}
Bloqueur de fenêtres pop-up (Windows Live Toolbar)-->MsiExec.exe /X{A425C250-A0E1-4D78-B1C1-A5CBC7385E7C}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif Windows XP - KB834707-->C:\WINDOWS\$NtUninstallKB834707$\spuninst\spuninst.exe
Correctif Windows XP - KB867282-->C:\WINDOWS\$NtUninstallKB867282$\spuninst\spuninst.exe
Correctif Windows XP - KB887742-->C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe
Correctif Windows XP - KB888113-->C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
Correctif Windows XP - KB890047-->C:\WINDOWS\$NtUninstallKB890047$\spuninst\spuninst.exe
Correctif Windows XP - KB890923-->"C:\WINDOWS\$NtUninstallKB890923$\spuninst\spuninst.exe"
Cryptext (Remove Only)-->rundll32 setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\system32\ShellExt\Cryptext.inf
Détecteur de flux Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{EFFCB0F1-CFEC-48D4-B793-EBFCAE852976}
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
Free - Kit de connexion-->C:\Program Files\Free.fr\uninstall.exe
GamesBar 1.0.0.9-->C:\DOCUME~1\ALLUSE~1\APPLIC~1\TARMAI~1\{666A0~1\Setup.exe /remove /q0
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Ma-Config.com-->MsiExec.exe /X{EC7FE2ED-F305-41B7-90B8-3DAE9E35307A}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Data Access Components KB870669-->C:\WINDOWS\muninst.exe C:\WINDOWS\INF\KB870669.inf
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Groove MUI (French) 2007-->MsiExec.exe /X{90120000-00BA-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007 (Beta)-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PRO /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 8 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP8$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB883939)-->"C:\WINDOWS\$NtUninstallKB883939$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB903235)-->"C:\WINDOWS\$NtUninstallKB903235$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB896727)-->"C:\WINDOWS\$NtUninstallKB896727$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mozilla Firefox (3.0.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
Navilog1 3.7.1-->"C:\Program Files\Navilog1\unins000.exe"
NTRconnect-->MsiExec.exe /X{549514BF-2BDA-422B-9134-67B5A79C2487}
OneCare Advisor (Windows Live Toolbar)-->MsiExec.exe /X{F242B06B-517F-4D62-B654-16B11564A912}
Packard Bell ActivDoc-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7AD717E4-0099-11D4-98C1-009027E9C183}\setup.exe"
Protectis-->"C:\Program Files\Protectis\unins000.exe"
QuickTime-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
Roller Rush fr-->"G:\jeux\Roller Rush\unins000.exe"
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB958439)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6491B8AA-D11C-4648-A461-6234B31EB7E2}
Security Update for 2007 Microsoft Office System (KB958439)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {6491B8AA-D11C-4648-A461-6234B31EB7E2}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB958437)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {648FC016-2D6B-4A16-8D87-404533642F4B}
Security Update for Microsoft Office Excel 2007 (KB958437)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {648FC016-2D6B-4A16-8D87-404533642F4B}
Security Update for Microsoft Office OneNote 2007 (KB950130)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {F1B2401C-B610-4BF2-AA1C-52C55827A8F4}
Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
Security Update for Visio 2007 (KB947590)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41}
SoundMAX-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\setup.exe"
Super Power 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0FE27C06-E02D-45B0-FBF8-5E2ABE8C60C2}\setup.exe" -l0x9 -removeonly
SUPERAntiSpyware Professional-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
Update for Office 2007 (KB946691)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
Update for Office 2007 (KB946691)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
Update for Outlook 2007 Junk Email Filter (kb958619)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {79B301C1-DBC0-467C-AFDA-2A6CDAFA4302}
Update for Outlook 2007 Junk Email Filter (kb958619)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {79B301C1-DBC0-467C-AFDA-2A6CDAFA4302}
USB Disk Win98 Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4E79A62F-7A2D-4058-BCE0-94E6B9E2F162}\Setup.exe"
USB MODEM Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{042E2C9D-6647-4C5F-9CEF-387D72023128}\setup.exe" -l0x9 UNINSTALL
USB Storage Driver-->DelUIDrv.exe
VIA Gestionnaire de périphériques de plate-forme-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169}
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803$\spuninst\spuninst.exe"
Windows Installer Clean Up-->MsiExec.exe /X{121634B0-2F4B-11D3-ADA3-00C04F52DD52}
Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Yahoo! Messenger-->C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG
Yahoo! Toolbar avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

=====HijackThis Backups=====

O16 - DPF: {2472DCCC-68CE-49DA-AA81-E7E6D83C1DFA} (PackageHTML) - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O4 - HKLM\..\Run: [SemanticInsight] C:\Program Files\RXToolBar\Semantic Insight\SemanticInsight.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -

======Security center information======

AV: avast! antivirus 4.8.1296 [VPS 090105-0]

System event log

Computer Name: OPSP-OUUJLN740J
Event Code: 7
Message: Le périphérique \Device\Harddisk0\D comporte un bloc défectueux.

Record Number: 70857
Source Name: Disk
Time Written: 20081128202200.000000+060
Event Type: erreur
User:

Computer Name: OPSP-OUUJLN740J
Event Code: 7
Message: Le périphérique \Device\Harddisk0\D comporte un bloc défectueux.

Record Number: 70856
Source Name: Disk
Time Written: 20081128202154.000000+060
Event Type: erreur
User:

Computer Name: OPSP-OUUJLN740J
Event Code: 7
Message: Le périphérique \Device\Harddisk0\D comporte un bloc défectueux.

Record Number: 70855
Source Name: Disk
Time Written: 20081128202148.000000+060
Event Type: erreur
User:

Computer Name: OPSP-OUUJLN740J
Event Code: 7
Message: Le périphérique \Device\Harddisk0\D comporte un bloc défectueux.

Record Number: 70854
Source Name: Disk
Time Written: 20081128202142.000000+060
Event Type: erreur
User:

Computer Name: OPSP-OUUJLN740J
Event Code: 7
Message: Le périphérique \Device\Harddisk0\D comporte un bloc défectueux.

Record Number: 70853
Source Name: Disk
Time Written: 20081128202136.000000+060
Event Type: erreur
User:

Application event log

Computer Name: OPSP-OUUJLN740J
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 5
Source Name: SecurityCenter
Time Written: 20080930134122.000000+120
Event Type: Informations
User:

Computer Name: OPSP-OUUJLN740J
Event Code: 1517
Message: Windows a sauvegardé le Registre utilisateur OPSP-OUUJLN740J\hadri alors qu'une application ou un service utilisait toujours le Registre pendant la fermeture de la session. La mémoire utilisée par le Registre de l'utilisateur n'a pas été libérée. le Registre sera déchargé lorsqu'il ne sera plus utilisé.

Cela est souvent causé par des services s'exécutant en tant que compte d'utilisateur, essayez de configurer les services pour s'exécuter dans le compte service réseau ou service local.

Record Number: 4
Source Name: Userenv
Time Written: 20080930114733.000000+120
Event Type: Avertissement
User: AUTORITE NT\SYSTEM

Computer Name: OPSP-OUUJLN740J
Event Code: 1001
Message: Détecteur d'erreurs 949059324.

Record Number: 3
Source Name: Application Error
Time Written: 20080930113335.000000+120
Event Type: erreur
User:

Computer Name: OPSP-OUUJLN740J
Event Code: 1000
Message: Application défaillante firefox.exe, version 1.9.0.3188, module défaillant unknown, version 0.0.0.0, adresse de défaillance 0x054ac51b.

Record Number: 2
Source Name: Application Error
Time Written: 20080930113328.000000+120
Event Type: erreur
User:

Computer Name: OPSP-OUUJLN740J
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 1
Source Name: SecurityCenter
Time Written: 20080930102726.000000+120
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 6 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=0602
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO

-----------------EOF-----------------

Réponse 12 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Télécharges Ad-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :
= = = =>>> En cliquant ici <<<= = = =

/!\ Déconnectes toi et fermes toutes applications en cours, désactive ton antivirus le temps de la manipulation/!\

● Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. (C:\Program files )
● Double clique sur l'icône Ad-remover située sur ton bureau
● Au menu principal choisi l'option "A"
● Postes le rapport qui apparaît à la fin .

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

(CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

Note :

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.

nana

------- Logfile of AD-Remover 1.0.8.5 by C_XX | ONLY XP/VISTA -------

# START at: 0:30:51 | Mar 06/01/2009 | Microsoft® Windows XP™ SP3 (v5.1.2600)
# BOOT MODE: Normal
# OPTION: Scan | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
# PC: HASNA | USER: famille ( Current user is an administrator)
# DRIVE(S):
- C:\ (File System: NTFS)
- F:\ (File System: FAT32)
# Internet Explorer v7.0.5730.11

# RUNNING PROCESSES: 32

+-----------------------| Boonty/Boonty Games Elements found :

.
Service: "Boonty Games"
.
HKCR\boontybox
HKLM\Software\Boonty
HKLM\Software\Classes\boontybox
HKLM\SYSTEM\ControlSet001\Services\Boonty Games
HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_BOONTY_GAMES
HKLM\SYSTEM\ControlSet002\Services\Boonty Games
HKLM\SYSTEM\CurrentControlSet\Services\Boonty Games
.
C:\Program Files\Boonty
C:\Program Files\Boonty\Components
C:\Program Files\Boonty\Components\apiprotection_20060623.cab
C:\Program Files\Boonty\Components\BoontyBox_01net_setup.exe
C:\Program Files\Boonty\Components\gamepages_208498_20070106.cab
C:\Program Files\Boonty\Components\Restaurant_Empire_Telecharger(fr_484){29037}.exe
C:\Program Files\Boonty\Components\sitepages_298_20061017.cab
C:\Program Files\Boonty\Components\tools
C:\Program Files\Boonty\Components\tools\extract.exe
C:\Program Files\BoontyGames
C:\Program Files\BoontyGames\180searchassistant
C:\Program Files\BoontyGames\208498.ini
C:\Program Files\BoontyGames\7wonders.exe
C:\Program Files\BoontyGames\7wondersii{293808}.exe
C:\Program Files\BoontyGames\7wonders{169670}.exe
C:\Program Files\BoontyGames\abraacademy{288460}.exe
C:\Program Files\BoontyGames\Atlantis Quest
C:\Program Files\BoontyGames\atlantisadventure.exe
C:\Program Files\BoontyGames\atlantisskypatrol.exe
C:\Program Files\BoontyGames\bejeweled2_popcap.exe
C:\Program Files\BoontyGames\bejeweled2_popcap{217390}.exe
C:\Program Files\BoontyGames\Believe in Santa
C:\Program Files\BoontyGames\believeinsanta.exe
C:\Program Files\BoontyGames\blockbreakerdeluxe.exe
C:\Program Files\BoontyGames\blocmania3d2.exe
C:\Program Files\BoontyGames\Bricks of Egypt 2
C:\Program Files\BoontyGames\Components
C:\Program Files\BoontyGames\Digby Donuts
C:\Program Files\BoontyGames\dinerdashfloonthego.exe
C:\Program Files\BoontyGames\DNA
C:\Program Files\BoontyGames\dna.exe
C:\Program Files\BoontyGames\escapefromparadise{291808}.exe
C:\Program Files\BoontyGames\fairies{170139}.exe
C:\Program Files\BoontyGames\hiddenexpeditiontitanic_ms{208498}.exe
C:\Program Files\BoontyGames\jewelquest2.exe
C:\Program Files\BoontyGames\luxor2.exe
C:\Program Files\BoontyGames\Mahjong holidays 2005
C:\Program Files\BoontyGames\Mystic Inn
C:\Program Files\BoontyGames\packluxor.exe
C:\Program Files\BoontyGames\racecars_emme{268427}.exe
C:\Program Files\BoontyGames\rainbowmystery.exe
C:\Program Files\BoontyGames\rollerrush{170107}.exe
C:\Program Files\BoontyGames\supergranny3.exe
C:\Program Files\BoontyGames\The Feebs
C:\Program Files\BoontyGames\thefeebs.exe
C:\Program Files\BoontyGames\virtualvillagersthelostchildren{247889}.exe
C:\Program Files\BoontyGames\westward.exe
C:\Program Files\BoontyGames\180searchassistant\saisau.dat
C:\Program Files\BoontyGames\Atlantis Quest\Atlantis.ENG
C:\Program Files\BoontyGames\Atlantis Quest\Error.log
C:\Program Files\BoontyGames\Atlantis Quest\Fenetre.bmp
C:\Program Files\BoontyGames\Atlantis Quest\fenetrepop.bmp
C:\Program Files\BoontyGames\Atlantis Quest\Fonts
C:\Program Files\BoontyGames\Atlantis Quest\Htm
C:\Program Files\BoontyGames\Atlantis Quest\Languages
C:\Program Files\BoontyGames\Atlantis Quest\Levels
C:\Program Files\BoontyGames\Atlantis Quest\Options.txt
C:\Program Files\BoontyGames\Atlantis Quest\Particles
C:\Program Files\BoontyGames\Atlantis Quest\PlayerData
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML
C:\Program Files\BoontyGames\Atlantis Quest\Sound
C:\Program Files\BoontyGames\Atlantis Quest\Textures
C:\Program Files\BoontyGames\Atlantis Quest\unins000.dat
C:\Program Files\BoontyGames\Atlantis Quest\website.url
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\Arts.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\BlackCourier11.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\GameFont.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\GameScore.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\GameScore_Small.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\History.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\History2.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\InteractiveHelp.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\MenuBigActButtons.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\MenuBigButtons.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\MenuStdActButtons.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\MenuStdButtons.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\MenuTitle.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\PlayerFont2.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\PlayerFont_Gray.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\PlayerFont_Yellow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\Welcome.tga
C:\Program Files\BoontyGames\Atlantis Quest\Fonts\WhiteCourier11.tga
C:\Program Files\BoontyGames\Atlantis Quest\Htm\AlreadyPaid.htm
C:\Program Files\BoontyGames\Atlantis Quest\Htm\BuyNow.htm
C:\Program Files\BoontyGames\Atlantis Quest\Htm\Logo1.htm
C:\Program Files\BoontyGames\Atlantis Quest\Htm\Logo2.htm
C:\Program Files\BoontyGames\Atlantis Quest\Htm\OtherGames.htm
C:\Program Files\BoontyGames\Atlantis Quest\Languages\TextResourses.eng
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis1
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis2
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Babylon
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Carthage
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Countries.txt
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt1
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt2
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Greece
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Rome
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis1\01.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis1\02.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis1\03.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis1\04.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis1\05.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis1\06.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis1\07.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis1\08.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis1\09.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis1\10.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis1\11.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis2\01.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis2\02.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis2\03.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis2\04.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis2\05.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis2\06.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis2\07.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis2\08.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis2\09.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis2\10.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis2\11.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Atlantis2\12.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Babylon\01.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Babylon\02.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Babylon\03.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Babylon\04.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Babylon\05.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Babylon\06.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Babylon\07.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Babylon\08.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Carthage\01.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Carthage\02.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Carthage\03.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Carthage\04.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Carthage\05.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Carthage\06.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Carthage\07.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Carthage\08.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Carthage\09.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Carthage\10.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt1\01.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt1\02.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt1\03.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt1\04.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt1\05.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt1\06.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt1\07.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt1\08.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt1\09.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt2\01.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt2\02.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt2\03.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt2\04.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt2\05.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt2\06.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt2\07.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt2\08.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt2\09.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Egypt2\10.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Greece\01.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Greece\02.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Greece\03.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Greece\04.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Greece\05.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Greece\06.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Rome\01.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Rome\02.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Rome\03.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Rome\04.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Rome\05.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Rome\06.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Rome\07.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Rome\08.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Rome\09.map
C:\Program Files\BoontyGames\Atlantis Quest\Levels\Rome\10.map
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@ArtMagic.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@Bubbles1.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@Bubbles2.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@Bubbles3.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@Bubbles4.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@Bubbles5.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@Expl_Paint.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@Expl_Sap.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@Fire.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@Fire2.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@Fire3.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@Fire4.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@LitExpl.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@LitExpl2.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@LittleExplosion_Black.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@LittleExplosion_Blue.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@LittleExplosion_Brown.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@LittleExplosion_Green.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@LittleExplosion_In.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@LittleExplosion_Purple.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@LittleExplosion_Red.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@LittleExplosion_Turq.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@LittleExplosion_White.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@LittleExplosion_Yellow.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@Magic.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@MoneyExpl.prt
C:\Program Files\BoontyGames\Atlantis Quest\Particles\@TimeOff.prt
C:\Program Files\BoontyGames\Atlantis Quest\PlayerData\Game.dat
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\buy_connectionrequired.html
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\connectionrequired.html
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\css
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\js
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\manualtransaction.html
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\pageerror.html
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\pleasewait.html
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\repairstart.html
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\thankyou.html
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\transfailure.html
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\trialexit.html
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\trialexpired.html
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\trialstart.html
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\~pleasewait.html
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\css\ShellStyle.css
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\css\ShellStyle_br.css
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\css\ShellStyle_de.css
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\css\ShellStyle_en.css
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\css\ShellStyle_fr.css
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\css\ShellStyle_it.css
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\css\ShellStyle_nl.css
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\css\ShellStyle_po.css
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\css\ShellStyle_sp.css
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bg_nomjeu.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bg_table.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgDELOCK.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgDELOCK_Bottom.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgDELOCK_Coin.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgDELOCK_Left.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgDELOCK_Right.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgERROR.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgERROR_Bottom.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgERROR_Coin.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgERROR_Left.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgERROR_Right.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgOK.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgOK_Bottom.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgOK_Coin.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgOK_Left.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgOK_Right.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgREDUC.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgREDUC_Bottom.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgREDUC_Coin.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgREDUC_Left.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgREDUC_Right.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgSECURE.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgSECURE_Bottom.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgSECURE_Coin.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgSECURE_Left.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgSECURE_Right.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgSUPPORT.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgSUPPORT_Bottom.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgSUPPORT_Coin.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgSUPPORT_Left.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\bkgSUPPORT_Right.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocBkg.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocBottom.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocBottomLeft.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocBottomLeftC.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocBottomLeftCN.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocBottomLeftCR.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocBottomRight.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocCoinCadenas.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocError.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocExpiredTop.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocJouezMiddle.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocJouezTop.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocLeft.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocMiddle.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocRight.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocTop.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocTopLeft.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\blocTopRight.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\boontysecure.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\Bottom.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\BottomLeft.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\BottomLeftEast.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\BottomLeftNorth.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\BottomRight.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\BottomRightNorth.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\BottomRightWest.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btAcheterLeft.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btAcheterMiddle.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btAcheterRight.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\BtBlueLeft.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\BtBlueMiddle.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\BtBlueRight.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btJouerLeft.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btJouerMiddle.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btJouerRight.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\BtnBuyExit.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btn_acheter.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btn_fermer.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btn_infos.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btn_jouer.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btn_nomjeu2.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btn_reactiver.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btn_reduc.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btn_suivant.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\btn_suivant2.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\BtYellowLeft.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\BtYellowMiddle.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\BtYellowQuestion.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\BtYellowRight.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\ButtonBkgLeft_Off.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\ButtonBkgLeft_On.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\ButtonBkgMiddle_Off.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\ButtonBkgMiddle_On.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\ButtonBkgRight_Off.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\ButtonBkgRight_On.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\CacheImgJeu.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\caddie.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\cadenas.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\CloseOff.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\CloseOn.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\fleche.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\flechetrial.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\greypoint.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\jeu.jpg
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\jouer_gratuitement.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\Left.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\MaximizeOff.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\MaximizeOn.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\MinimizeOff.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\MinimizeOn.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\PopBottom.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\PopBottomLeft.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\PopBottomRight.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\PopLeft.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\PopRight.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\PopTop.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\PopTopLeft.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\PopTopRight.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\Right.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\scroll.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\scroll_bkg.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\separator2.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\separatorEnd.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\separatorMiddle.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\separatorStart.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\Shell_popup_03.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\Shell_popup_06.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\Shell_popup_08.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\Shell_popup_09.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\spacer.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\test.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\Top.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\TopLeft.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\TopLeftSouth.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\TopRight.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\TopRightWest.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\transp.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\Images\wait.gif
C:\Program Files\BoontyGames\Atlantis Quest\SHELL_DEFAULT_HTML\js\ShellScripts.js
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Mus
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Mus\descr.txt
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\ArtMagic.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Bonus.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Button1.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Button2.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\ChangeChips.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Click.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\ClockUsed.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\descr.txt
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\EndLevel_Explode.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\EndLevel_GameWin1.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\EndLevel_GameWin2.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Extralife.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\FallenAngryChip.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\FallenArtefact.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\FallenBonusXX.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\FallenMoney.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\FallenVisBonus.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\HammerUsed.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\HelpAppear.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\LowTime.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\MagicLampUsed.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\match1.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\match2.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\MatchLock.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\MisMatch.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Music_Game10.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Music_Game11.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Music_Game20.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Music_Game21.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Music_Game30.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Music_Game31.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Music_Intro.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Music_Map.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Music_Menu.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\No.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\SapUsed.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Scores.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\StartLevel_FallDown.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\StartLevel_Go.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\TrackBarMove.ogg
C:\Program Files\BoontyGames\Atlantis Quest\Sound\Snd\Typing.wav
C:\Program Files\BoontyGames\Atlantis Quest\Textures\ActSel.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\ActSel.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_BackTexture.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_BackTexture.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Controls.dscr
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Controls.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Controls.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Controls_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Down.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Down.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Down_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Left.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Left.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Left_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Right.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Right.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Right2.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Right2.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Right2_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Right_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_TempBack.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_TempBack.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Up.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Up.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Artefacts_Up_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts
C:\Program Files\BoontyGames\Atlantis Quest\Textures\BlurPen.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Bonuses.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Chips.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Chips.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Countries
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Cursors.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Cursor_1.xcr
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Cursor_2.xcr
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Cursor_3.xcr
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Cursor_Hammer_Active.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Cursor_Hammer_Passive.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Fields.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\GameMenu_Panel.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\GameMenu_Panel.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\GameMenu_Panel_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Game_LabelPanel.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Game_LabelPanel.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Game_LabelPanel_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Game_MenuButton.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Game_MenuButton.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Game_MenuButton_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Game_PanelLeft.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Game_PanelLeft.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Game_PanelRight.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Game_PanelRight.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Game_PanelRight_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Game_Timer.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Glares1.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Glares2.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\GlaresMask.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Hearts.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Help
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Help_Panel.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Help_Panel.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\HiScores_Panel.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\HiScores_Panel.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\History
C:\Program Files\BoontyGames\Atlantis Quest\Textures\InteractiveHelp
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Logo
C:\Program Files\BoontyGames\Atlantis Quest\Textures\MainMenu_ButtonAbout.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\MainMenu_ButtonBig.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\MainMenu_ButtonExit.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\MainMenu_ButtonHiScores.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\MainMenu_ButtonOptions.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\MainMenu_ButtonStart.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\MainMenu_Panel.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\MainMenu_Panel.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\MainMenu_Panel_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Maps
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_BorderDown.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_BorderDown.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_BorderDown_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_BorderLeft.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_BorderLeft.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_BorderLeft_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_BorderRight.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_BorderRight.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_BorderRight_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_BorderUp.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_BorderUp.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_BorderUp_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_Mark_Current.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_Mark_Done.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Map_Mark_Virgin.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\MenuBack
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Options_Mark.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Options_MusicMark.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Options_MusicTrack.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Options_MusicTrack.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Options_MusicTrack_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Options_Panel.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Options_Panel.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Options_Panel_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Particles.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Particles.uv
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Player_Marker.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Player_Panel.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Player_Panel.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Player_Panel_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Stats
C:\Program Files\BoontyGames\Atlantis Quest\Textures\StdDialog_Panel.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\StdDialog_Panel.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\StdDialog_Panel_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\tga2jpgANDmask.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\YourName_Cursor.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\YourName_Panel.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\YourName_Panel.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\YourName_Panel_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Babylon
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Carthage
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Egypt1
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Egypt2
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Greece
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Rome
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\!Colors.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\001
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\002
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\003
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\004
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\005
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\006
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\007
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\008
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\009
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\010
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\011
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\012
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\013
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\014
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\015
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\016
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\017
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\018
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\019
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\020
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\021
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\022
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\023
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\024
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\025
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\026
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\027
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\028
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\029
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\030
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\031
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\032
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\033
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\034
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\035
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\036
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\037
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\038
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\039
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\040
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\041
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\042
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\043
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\044
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\045
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\Body.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\Mask.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\Norm.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\Norm.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\Norm_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\Shad.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\Split.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\Split.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\Split_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\001\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\001\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\001\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\002\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\002\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\002\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\003\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\003\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\003\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\004\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\004\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\004\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\005\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\005\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\005\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\006\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\006\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\006\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\007\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\007\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\007\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\008\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\008\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\008\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\009\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\009\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\009\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\010\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\010\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\010\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\011\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\011\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\011\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\012\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\012\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\012\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\013\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\013\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\013\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\014\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\014\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\014\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\015\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\015\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\015\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\016\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\016\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\016\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\017\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\017\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\017\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\018\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\018\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\018\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\019\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\019\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\019\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\020\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\020\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\020\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\021\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\021\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\021\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\022\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\022\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\022\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\023\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\023\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\023\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\024\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\024\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\024\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\025\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\025\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\025\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\026\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\026\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\026\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\027\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\027\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\027\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\028\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\028\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\028\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\029\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\029\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\029\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\030\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\030\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\030\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\031\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\031\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\031\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\032\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\032\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\032\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\033\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\033\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\033\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\034\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\034\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\034\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\035\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\035\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\035\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\036\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\036\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\036\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\037\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\037\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\037\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\038\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\038\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\038\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\039\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\039\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\039\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\040\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\040\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\040\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\041\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\041\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\041\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\042\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\042\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\042\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\043\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\043\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\043\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\044\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\044\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\044\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\045\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\045\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis1\045\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\!Colors.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\001
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\002
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\003
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\004
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\005
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\006
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\007
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\008
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\009
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\010
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\011
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\012
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\013
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\014
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\015
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\016
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\017
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\018
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\019
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\020
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\021
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\022
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\023
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\024
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\025
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\026
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\027
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\028
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\029
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\030
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\031
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\032
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\033
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\034
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\035
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\036
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\037
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\038
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\039
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\040
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\041
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\042
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\043
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\044
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\045
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\Body.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\Mask.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\Norm.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\Norm.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\Norm_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\Shad.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\Split.jpg
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\Split.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\Split_Alpha.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\001\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\001\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\001\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\002\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\002\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\002\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\003\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\003\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\003\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\004\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\004\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\004\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\005\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\005\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\005\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\006\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\006\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\006\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\007\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\007\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\007\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\008\Coords.txt
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\008\Glow.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlantis2\008\Slice.tga
C:\Program Files\BoontyGames\Atlantis Quest\Textures\Arts\Atlant

Réponse 13 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Ton rapport n'est pas complet mais ce n'est pas grave.

***********************************

▶ ! Déconnecte toi et fermes toutes applications en cours !

▶ Relance "Ad-remover" : au menu principal choisi l'option "B".
= = = =>>> Comme sur cette image <<<= = = =

▶ Ensuite tape

A

▶ Puis "S" (si rien ne se passe)

▶ Le programme va travailler ...

▶ Postes le rapport qui apparaît à la fin + un nouvel Hijackthis pour analyse ...

( le rapport est sauvegardé aussi sous C:\Ad-report.log )

/!\ Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides) /!\

Réactive ton antivirus si tu l’avais bien désactivé !

******************************

Mets à jour Adobe Acrobat Reader en téléchargeant la version 9 = = = =>>> En cliquant ici <<<= = = =

****************************

Fais suivre d'un nouveau rapport hijackthis stp.

Réponse 14 / 21

nana

------- Logfile of AD-Remover 1.0.8.5 by C_XX | ONLY XP/VISTA -------

*** Limited to ***

Boonty/BoontyGames
Eorezo
Everest Poker
Funwebproduct/MyWay/MyWebsearch
It's TV
Sweetim

******************

# START at: 0:43:30 | Mar 06/01/2009 | Microsoft® Windows XP™ SP3 (v5.1.2600)
# BOOT MODE: Normal
# OPTION: Clean | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
# PC: HASNA | USER: famille ( Current user is an administrator)
# DRIVE(S):
- C:\ (File System: NTFS)
- F:\ (File System: FAT32)
# Internet Explorer v7.0.5730.11

# RUNNING PROCESSES: 32

(!) ---- IE start pages reset

+-----------------------| Boonty/Boonty Games Elements Deleted :

.
Service: "Boonty Games"
.
HKCR\boontybox
HKLM\Software\Boonty
HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_BOONTY_GAMES
HKLM\SYSTEM\ControlSet002\Services\Boonty Games
.
C:\Program Files\Boonty
C:\Program Files\BoontyGames
C:\Program Files\Fichiers communs\BOONTY Shared
C:\Documents and Settings\All Users\Application Data\BOONTY
C:\Documents and Settings\All Users\Application Data\Escape From Paradise\Boonty
C:\Documents and Settings\All Users\MENUDM~1\PROGRA~1\BoontyGames

+-----------------------| Eorezo Elements Deleted :

.
.

+-----------------------| Everest Poker Elements Deleted :

.
.

+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Deleted :

.
.

+-----------------------| It's TV Elements Deleted :

.

+-----------------------| Sweetim Elements Deleted :

.
.

(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.

+-----------------------| ADDED SCAN :

+---------- Scanning prefs.js ... ( # Mozilla User Preferences )

..\a4mjd18u.default\prefs.js :

~~~~ Mozilla FireFox version 3.0.4 ~~~~

.

+---------------------------------------------------------------------------+

+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

Start Page : hxxp://fr.msn.com/

+---------------------------------------------------------------------------+

[~2209 bytes] - "C:\AD-report-Clean-06.01.2009.log"
[~225009 bytes] - "C:\AD-report-Scan-06.01.2009.log"

# END at: 0:47:56 | 06/01/2009 - Time elapsed: 4 minutes, 25 seconds

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 61 lines ]
+---------------------------------------------------------------------------+

Réponse 15 / 21

nana

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:48:49, on 06/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\lxczcoms.exe
C:\Program Files\NTR global\NTRconnect\NTRconnect.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\USB Disk Win98 Driver\Res.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://fr.rd.yahoo.com/customize/ie/defaults/sb/ymsgr6/fr/*http://www.yahoo.com/ext/search/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn5\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn5\yt.dll
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [USB Storage Toolbox] C:\Program Files\USB Disk Win98 Driver\Res.EXE
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\Office12\REFIEBAR.DLL (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypix.com/importer/ImageUploader4.cab
O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - http://www.pixdiscount.com/clients/ImageUploader3.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5C5EB074-792A-4579-8274-6A391263894C}: NameServer = 86.64.145.140
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: lxcz_device - - C:\WINDOWS\system32\lxczcoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NTRconnect (ntrconnect) - Net Transmit & Receive - C:\Program Files\NTR global\NTRconnect\NTRconnect.exe

Réponse 16 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Télécharge Malwarebytes’ Anti-Malware
= = = = >>> En cliquant ici <<< = = = =

- Sur la page cliques sur Télécharger Malwarebyte’s Anti-Malware
- Enregistres le sur le bureau
- Double cliques sur le fichier téléchargé pour lancer le processus d’installation
- Lorsqu’il te le sera demandé, met à jour Malwarebytes anti malware
- Si le pare-feu demande l’autorisation de se connecter pour malwarebytes, acceptes
- Une fois la mise à jour terminée, ferme Malwarebytes
- Double-cliques sur l’icône de malwarebytes pour le relancer
- Dans l’onglet, Recherche, probablement ouvert par défaut,
- Sélectionne Exécuter un examen complet
- Clique sur Rechercher
- Le scan démarre
- A la fin de l’analyse, un message s’affiche : L’examen s’est terminé normalement. Cliquez sur ‘Afficher les résultats’ pour afficher tous les objets trouvés.
- Cliques sur Ok pour poursuivre.
- Si des malwares ont été détectés, cliques sur Afficher les résultats
- Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
- Malwarebytes va ouvrir le bloc-notes et y copier le rapport d’analyse.
- Rends toi dans l’onglet rapport/log
- Tu cliques dessus pour l’afficher une fois affiché
- Tu cliques sur édition en haut du bloc notes, et puis sur sélectionner tout
- Tu recliques sur édition et puis sur copier et tu reviens sur le forum et dans ta réponse
- Tu cliques droit dans le cadre de la réponse et coller

Si tu as besoin d’aide regarde ce tutorial ICI

nana

Malwarebytes' Anti-Malware 1.31
Version de la base de données: 1615
Windows 5.1.2600 Service Pack 3

06/01/2009 12:34:13
mbam-log-2009-01-06 (12-34-13).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 126328
Temps écoulé: 2 hour(s), 1 minute(s), 50 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Réponse 17 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Je te donne du boulot :
Suis bien les étapes suivantes.
Dis moi bien si tu as eu des problèmes et que tu n'as pas fait certaines manipulations demandées.
Poste le rapport demandé de toolscleaner.
L'ordre des manipulations est important.

*********************

Relance Hijackthis.
Clic sur "Do a system scan only".
Coche ces lignes :
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')

Clic ensuite sur fix checked.

*******************

OK, tout est bon :

Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques :

Télécharge toolscleaner sur ton Bureau
= = = =>>> En cliquant ici <<<= = = =
* Double-clique sur ToolsCleaner2.exe et laisse le travailler
* Clique sur Recherche et laisse le scan se terminer.
* Clique sur Suppression pour finaliser.
* Tu peux, si tu le souhaites, te servir des Options facultatives.
* Clique sur Quitter, pour que le rapport puisse se créer.
* Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse.

*****************

Installe un pare feu car celui de Windows n’est pas suffisant.
ZoneAlarm :
= = = = >>> En cliquant ici <<< = = = =
Un tutorial pour le configurer
= = = = >>> En cliquant ici <<< = = = =

************

Pour information, Antivir d’Avira est meilleur qu’Avast ou autre antivirus gratuit.
Si ça t’intéresse, désinstalle le tien et installe Antivir.
Tout est expliqué sur ce lien, du téléchargement à la configuration.

*************

Mets à jour Adobe Acrobat Reader en téléchargeant la version 9 = = = =>>> En cliquant ici <<<= = = =

*************

Désinstalle à partir de l'ajout/suppression de programmes ces programmes s'ils sont présents :
Adobe Acrobat 5.0
Adobe Acrobat 8.1
/!\ Mais pas Adobe Acrobat 9 /!\

*************

* Télécharge Ccleaner (N’installe pas la barre d’outil Yahoo):

= = = = >>> En cliquant ici <<< = = = =

* L´installer.

* Choisis l’onglet Nettoyeur

Quitte ton navigateur Internet avant de le lancer, décoche la dernière case (Avancé si elle est cochée) puis click sur "lancer le nettoyage" quand il aura terminé le scan cliques en bas à droite sur "lancer le nettoyage" et accepte par oui.
Attention, il risque de vider ta corbeille : si tu veux récupérer des fichiers effacés par erreur, mieux vaut le faire maintenant.

* Choisis l’onglet Registre

- Clic sur Chercher des erreurs
- Une fois la recherche terminée, clic sur Réparer les erreurs sélectionnées (par défaut, tout est sélectionné, laisse comme ça)
- Au message Voulez-vous sauvegarder les changements faits dans le registre, répond oui et enregistre le fichier « .reg » en le nommant par la date par exemple en le mettant sur le bureau. Puis continue.
- A la fenêtre qui s’ouvre ensuite, clic sur Corriger toutes les erreurs sélectionnées puis OK
- Ferme Ccleaner.

* Tutoriel en image ICI si besoin.

Note : La sauvegarde utilisée permet de remettre tel que la base était avant la manipulation au cas où il y aurait des soucis mais cela ne m’est jamais arrivé ! Il vaut mieux prendre des précautions, c’est tout. ;-)

nana

[ Rapport ToolsCleaner version 2.3.0 (par A.Rothstein & dj QUIOU) ]

-->- Recherche:

C:\fixnavi.txt: trouvé !
C:\cleannavi.txt: trouvé !
C:\TB.txt: trouvé !
C:\_OtMoveIt: trouvé !
C:\Toolbar SD: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
C:\Documents and Settings\famille\Bureau\nadia\HijackThis.lnk: trouvé !
C:\Documents and Settings\famille\Bureau\nadia\Navilog1.exe: trouvé !
C:\Documents and Settings\famille\Bureau\nadia\Navilog1.lnk: trouvé !
C:\Documents and Settings\famille\Bureau\nadia\HJTInstall.exe: trouvé !
C:\Documents and Settings\famille\Bureau\nadia\ToolBarSD.exe: trouvé !
C:\Documents and Settings\famille\Bureau\nadia\OTMoveIt3.exe: trouvé !
C:\Documents and Settings\famille\Bureau\nadia\Rsit.exe: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

---------------------------------
-->- Suppression:

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
C:\Documents and Settings\famille\Bureau\nadia\HijackThis.lnk: supprimé !
C:\Documents and Settings\famille\Bureau\nadia\Navilog1.exe: supprimé !
C:\Documents and Settings\famille\Bureau\nadia\Navilog1.lnk: supprimé !
C:\Documents and Settings\famille\Bureau\nadia\HJTInstall.exe: supprimé !
C:\Documents and Settings\famille\Bureau\nadia\ToolBarSD.exe: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\fixnavi.txt: supprimé !
C:\cleannavi.txt: supprimé !
C:\TB.txt: supprimé !
C:\Documents and Settings\famille\Bureau\nadia\OTMoveIt3.exe: supprimé !
C:\Documents and Settings\famille\Bureau\nadia\Rsit.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\_OtMoveIt: supprimé !
C:\Toolbar SD: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
C:\Program Files\Navilog1: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Fichiers temporaires nettoyés !

Réponse 18 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Parfait, tu as fait la suite ou pas encore ?

nana

c en cours.
je voulais savoir si mcafee est bien comme antivirus ou si celui que tu me propose est mieux?

Réponse 19 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Si tu as Mac Afee gratuitement, celui que je te propose est mieux !

nana

salut,
j'ai fais tout ce que tu m'as dis.
que faut t-il faire maintenant?
tu crois que je crains plus rien maintenant?
merci

Réponse 20 / 21

crapoulou Messages postés 28195 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention 8 013

Supprime Toolscleaner et c'est bon.
Si tu installes antivir, supprime bien Mac Afee ! Si besoin :
Utilise ceci pour désinstaller Mac Afee :
http://download.mcafee.com/products/licensed/cust_support_pa¬tches/MCPR.exe
Bonne continuation.

nana

Merci beaucoup beaucoup de ton aide!!!!!!!!!!!!!!!!!!!!!!
c super gentil d'aider des personnes qui ne s'y connaissent pas trop.....
Bonne continuation;-)

Rapport hijackthis

21 réponses

Votre réponse

Discussions similaires