Pc lent, envie de le reparer, besoin d'aide !

jeremy -  
 gen-hackman -
Bonjour,
Mon pc est tres tres lent depuis plusieurs mois, je ne m'en sert jamais mais ma copine l'utilise tout le temps et je crois qu'il y a des virus mais je ne sais pas comment les supprimer...
Je ne m'y connais pas trop en pc et si vous pouviez m'aidez sa serais sympa.
J'ai lu des post identique a celui la mais je ne comprend pas le "language technique".

Si vous pouviez m'eclairer sur ce que je dois faire exactement, le nombre de scan a faire comment enlever les virus etc etc...
j'attends vos reponses :)
merci beaucoup.
Configuration: Windows XP
Internet Explorer 7.0

16 réponses

  1. gen-hackman
     
    Salut :

    Salut,

    commences par ceci pour voir ce qu'il en est,avoir un diagnostic précis et donc repérer les infections possibles et les neutraliser:

    Télécharges et installes le logiciel de diagnostic :

    ici Hijackthis
    ou ici Hijackthis
    ou ici Hijackthis

    ou renommé

    1- Cliques sur le setup pour lancer l'installe : laisses toi guider et ne modifies pas les paramètres d'installation .
    A la fin de l'installe , le prg ce lance automatiquement : fermes le en cliquant sur la croix rouge .
    Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
    "C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

    tuto pour utilisation :(merci balltrap34)
    Regardes ici, c'est parfaitement expliqué en images ,

    ( Ne fixes encore AUCUNE ligne de ton plein gré, cela pourrait empêcher ton PC de fonctionner correctement )

    2- !! Déconnectes toi et fermes toute tes applications en cours !!

    Cliques sur le raccourci du bureau pour lancer le prg :
    fais un scan HijackThis en cliquant sur : "Do a system scan and save a logfile"

    --->copies-colles le rapport généré pour analyse
    0
  2. jeremy
     
    Merci de ta reponse rapide :)
    je viens de faire un scan, voici le rapport :
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 16:34:57, on 05/04/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16791)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
    c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
    C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
    c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
    c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\HP\QuickPlay\QPService.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
    C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
    C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
    C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
    C:\Program Files\Logitech\QuickCam\Quickcam.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Windows Live\Family Safety\fsssvc.exe
    C:\Program Files\Windows Live\Family Safety\fsui.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
    C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
    C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE
    C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: BHO Barre de Confiance - {988B07F5-7392-455A-8A1F-64935CB8B6ED} - C:\Program Files\BarreConfCMCIC\TAPBar.dll
    O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Barre de confiance - {55BDF3B0-C0A8-481A-B8A6-01CD2BE0F3FD} - C:\Program Files\BarreConfCMCIC\TAPBar.dll
    O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect
    O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
    O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
    O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
    O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Windows UDP Control Center] fxstaller.exe
    O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
    O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [neufbox_reminder] "C:\Program Files\Kit ADSL\Wizard\PostInstall_Checker.exe" -r
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqthb08.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {54BE6B6F-3056-470B-97E1-BB92E051B6C4} - http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\ccPwdSvc.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
    O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Norton Internet Security\comHost.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
    O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
    O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
    O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    O23 - Service: Service Norton Protection Center (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
    0
  3. gen-hackman
     
    infecté :

    Télécharge SDFix sur ton bureau :
    ici :SDFix
    ou ici SDFix
    ou ici SDFix

    --> Double-clique sur SDFix.exe et choisis "Install" .

    Tuto

    Puis une fois l'installe faite ,

    Impératif : Démarrer en mode sans echec .

    /!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\

    Comment aller en Mode sans échec :
    1) Redémarre ton ordi .
    2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" .
    3) Tu tapotes jusqu' à l'apparition de l'écran avec les options de démarrage .
    4) Choisis la première option : Sans Échec , et valide en tapant sur [Entrée] .
    5) Choisis ton compte habituel ( et pas Administrateur ).
    attention : pas de connexion possible en mode sans échec , donc copie ou imprime bien la manipe pour éviter les erreurs ...

    Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double-clique sur RunThis.bat pour lancer l'outil .
    -->Tapes Y pour lancer le script ...
    Le Fix supprime les services du virus et nettoie le registre, de ce fait un redémarrage est nécessaire , donc :
    presses une touche pour redémarrer quand il te le sera demandé .

    Le PC va mettre du temps avant de démarrer ( c'est normal ), après le chargement du Bureau presses une touche lorsque "Finished" s'affiche .

    Le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier
    C:\SDFix sous le nom "Report.txt".

    Poste ce dernier dans ta prochaine réponse

    Si SDfix ne se lance pas (ça arrive!)

    * Démarrer->Exécuter

    * Copie/colle ceci :

    %systemroot%\system32\cmd.exe /K %systemdrive%\SDFix\apps\FixPath.exe

    * Clique sur ok, et valide.

    * Redémarre et essaye de nouveau de lancer SDfix.
    0
  4. jeremy
     
    Merci, desoler du temps de reponse ca a pri un peu de temps !!!
    voila le raport :

    [b]Checking Files [/b]:

    No Trojan Files Found

    Removing Temp Files

    [b]ADS Check [/b]:

    [b]Final Check [/b]:

    catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-04-05 17:35:51
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden services & system hive ...

    scanning hidden registry entries ...

    scanning hidden files ...

    scan completed successfully
    hidden processes: 0
    hidden services: 0
    hidden files: 0

    [b]Remaining Services [/b]:

    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\\Program Files\\AOL 9.0\\waol.exe"="C:\\Program Files\\AOL 9.0\\waol.exe:*:Enabled:AOL France"
    "C:\\Program Files\\Kit ADSL\\Wizard\\NetAgent_USB_PPPoE.exe"="C:\\Program Files\\Kit ADSL\\Wizard\\NetAgent_USB_PPPoE.exe:*:Enabled:Assistant de configuration ADSL"
    "C:\\Program Files\\Neuf\\Kit\\9mail.exe"="C:\\Program Files\\Neuf\\Kit\\9mail.exe:*:Enabled:Assistant de messagerie"
    "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
    "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
    "C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
    "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
    "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe"
    "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe"
    "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpofxm08.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe"
    "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hposfx08.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe"
    "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe"
    "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqscnvw.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
    "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
    "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqCopy.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe"
    "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpfccopy.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe"
    "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpzwiz01.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
    "C:\\Program Files\\Hp\\Digital Imaging\\Unload\\HpqPhUnl.exe"="C:\\Program Files\\Hp\\Digital Imaging\\Unload\\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
    "C:\\Program Files\\Hp\\Digital Imaging\\Unload\\HpqDIA.exe"="C:\\Program Files\\Hp\\Digital Imaging\\Unload\\HpqDIA.exe:*:Enabled:hpqdia.exe"
    "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe"
    "C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqnrs08.exe"="C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
    "C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

    [b]Remaining Files [/b]:

    [b]Files with Hidden Attributes [/b]:

    Sat 24 Nov 2007 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
    Sat 15 Sep 2007 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.key.bak"
    Mon 14 Mar 2005 299,008 A..H. --- "C:\Program Files\Canon\MP Navigator 2.0\Maint.exe"
    Mon 25 Apr 2005 61,440 A..H. --- "C:\Program Files\Canon\MP Navigator 2.0\uinstrsc.dll"
    Mon 24 Sep 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
    Sun 1 Mar 2009 1,409 ...H. --- "C:\Documents and Settings\M@rgo\Local Settings\Temp\FOR209.tmp"
    Sun 1 Mar 2009 1,409 ...H. --- "C:\Documents and Settings\M@rgo\Local Settings\Temp\FOR20B.tmp"
    Sun 1 Mar 2009 1,409 ...H. --- "C:\Documents and Settings\M@rgo\Local Settings\Temp\FOR20E.tmp"
    Sun 1 Mar 2009 1,409 ...H. --- "C:\Documents and Settings\M@rgo\Local Settings\Temp\FOR210.tmp"
    Sun 1 Mar 2009 13,588 ...H. --- "C:\Documents and Settings\M@rgo\Local Settings\Temp\ZTR208.tmp"
    Sun 1 Mar 2009 21,600 ...H. --- "C:\Documents and Settings\M@rgo\Local Settings\Temp\ZTR20A.tmp"
    Sun 1 Mar 2009 13,588 ...H. --- "C:\Documents and Settings\M@rgo\Local Settings\Temp\ZTR20D.tmp"
    Sun 1 Mar 2009 21,600 ...H. --- "C:\Documents and Settings\M@rgo\Local Settings\Temp\ZTR20F.tmp"
    Sat 24 Nov 2007 4,348 A..H. --- "C:\Documents and Settings\M@rgo\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
    Sat 24 Nov 2007 20 A..H. --- "C:\Documents and Settings\M@rgo\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
    Sat 24 Nov 2007 400 A.SH. --- "C:\Documents and Settings\M@rgo\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"

    [b]Finished![/b]

    voila :) d'autres manip a realiser je suppose ?? merci beaucoup
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. gen-hackman
     
    > Télécharge Dr Web CureIt sur ton Bureau :

    - Double clique <drweb-cureit.exe> et ensuite clique sur <Analyse>;

    - Clique <Ok> à l'invite de l'analyse rapide. S'il trouve des processus infectés alors clique le bouton <Oui>.
    Note : une fenêtre s'ouvrira avec options pour "Commander" ou "50% de réduction" : Quitte en cliquant le "X".
    - Lorsque le scan rapide est terminé, clique sur le menu <Options> puis <Changer la configuration> ; Choisis l'onglet <Scanner>, et décoche <Analyse heuristique>. Clique ensuite sur <Ok>.
    - De retour à la fenêtre principale : clique pour activer <Analyse complète>
    - Clique le bouton avec flèche verte sur la droite, et le scan débutera.
    - Clique <Oui> pour tout à l'invite "Désinfecter ?" lorsqu'un fichier est détecté, et ensuite clique "Désinfecter".
    - Lorsque le scan sera complété, regarde si tu peux cliquer sur l' icône, adjacente aux fichiers détectés (plusieurs feuilles l'une sur l'autre). Si oui, alors clique dessus et ensuite clique sur l'icône <Suivant>, au dessous, et choisis <Déplacer en quarantaine l'objet indésirable>.
    - Du menu principal de l'outil, au haut à gauche, clique sur le menu <Fichier> et choisis <Enregistrer le rapport>. Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv
    - Ferme Dr.Web Cureit
    - Redémarre ton ordi (important car certains fichiers peuvent être déplacés/réparés au redémarrage).
    - Suite au redémarrage, poste (Copie/Colle) le contenu du rapport de Dr.Web dans ta prochaine réponse.
    0
  7. jeremy
     
    Bonjour,
    le scan a duré une longue nuit donc je n'ai pas pu reposter avant, en esperant que tu soit toujours la ^^
    je te post le rapport du scan :
    087B15AB.exe;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Packed.155;Supprimé.;
    0EA323F2.tmp;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Packed.650;Supprimé.;
    0ECB44B8.exe;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Packed.155;Supprimé.;
    17BB567D.exe;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;BackDoor.Bulknet.92;Supprimé.;
    20501CB5.exe;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;BackDoor.IRC.Sdbot.3258;Supprimé.;
    36856194.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Spambot.3508;Supprimé.;
    372D539F.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.NtRootKit.319;Supprimé.;
    37375194.exe;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;BackDoor.Bulknet;Supprimé.;
    39A77B76.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Spambot.3508;Supprimé.;
    39AA2572.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Spambot.3508;Supprimé.;
    3AE13A1D.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Spambot.3508;Supprimé.;
    3B1B2DDC.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Spambot.3508;Supprimé.;
    3B2201D5.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Spambot.3508;Supprimé.;
    3B2855CE.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Spambot.3508;Supprimé.;
    3B2F29C7.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Spambot.3508;Supprimé.;
    3B357DBF.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Spambot.3508;Supprimé.;
    3B3C51B8.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Spambot.3508;Supprimé.;
    3B4325B1.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Spambot.3508;Supprimé.;
    3B4979AA.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Spambot.3508;Supprimé.;
    525551A2.exe;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;BackDoor.IRC.Sdbot.3762;Supprimé.;
    53F70AAB.exe;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;BackDoor.IRC.Sdbot.3762;Supprimé.;
    5FC06B5E.exe;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;BackDoor.IRC.Sdbot.3762;Supprimé.;
    601661FD.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;BackDoor.Bulknet;Supprimé.;
    7C4D3F93.sys;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.Spambot.3508;Supprimé.;
    7E191DDD.exe;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.DownLoader.based;Supprimé.;
    7E2A6FCB.exe;C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine;Trojan.DownLoader.based;Supprimé.;
    SDFix.exe\SDFix\apps\Process.exe;C:\Documents and Settings\M@rgo\Bureau\SDFix.exe;Tool.Prockill;;
    SDFix.exe;C:\Documents and Settings\M@rgo\Bureau;L'archive contient des éléments infectés;Quarantaine.;
    slghex.dll;C:\Program Files\Fichiers communs\Sandlot Shared;Adware.SpywareStorm;Quarantaine.;
    F3EZSETP.DLL;C:\Program Files\FunWebProducts\Installr\1.bin;Trojan.Funweb;Supprimé.;
    toolbar.dll;C:\Program Files\Macrogaming\SweetIMBarForIE;Adware.Softomate.98;Quarantaine.;
    SlgClientServicesRedists.exe\data002;C:\Program Files\MSN Games\Cake Mania\SlgClientServicesRedists.exe;Adware.SpywareStorm;;
    SlgClientServicesRedists.exe;C:\Program Files\MSN Games\Cake Mania;L'archive contient des éléments infectés;Quarantaine.;
    Dc1884.exe;C:\RECYCLER\S-1-5-21-1997472778-284307407-1591097776-1007;Trojan.Click.19011;Supprimé.;
    Process.exe;C:\SDFix\apps;Tool.Prockill;Quarantaine.;
    A0040597.exe;C:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP408;Tool.Prockill;Quarantaine.;
    A0040674.exe\SDFix\apps\Process.exe;C:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP409\A0040674.exe;Tool.Prockill;;
    A0040674.exe;C:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP409;L'archive contient des éléments infectés;Quarantaine.;
    A0040675.DLL;C:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP409;Trojan.Funweb;Supprimé.;
    A0040676.exe\data002;C:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP409\A0040676.exe;Adware.SpywareStorm;;
    A0040676.exe;C:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP409;L'archive contient des éléments infectés;Quarantaine.;
    A0040677.exe;C:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP409;Trojan.Click.19011;Supprimé.;
    A0040678.com\bur.exe;C:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP409\A0040678.com;BackDoor.IRC.Sdbot.3762;;
    A0040678.com;C:\System Volume Information\_restore{B0D22BE2-A227-4068-A48A-E6B79217B4BA}\RP409;L'archive contient des éléments infectés;Quarantaine.;

    voila, j'ai l'impression qu'il s'est arreter un tout petit peu avant la fin mais je ne sais pas je n'etait pas devant l'ordi pour verifier

    Si tu peux m'eclairé...
    Merci beaucoup :)
    0
  8. gen-hackman
     
    oui bien sur super on avance :)

    Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

    Télécharges :
    Malwarebytes ou :
    Malwarebytes

    * Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

    (NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX

    * Potasses le Tuto pour te familiariser avec le prg :

    ( cela dis, il est très simple d'utilisation ).

    relance malwarebytes en suivant scrupuleusement ces consignes :

    ! Déconnecte toi et ferme toutes applications en cours !

    * Lance Malwarebyte's .

    Fais un examen dit "Complet" .

    --> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
    --> à la fin tu cliques sur "résultat" .
    --> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

    Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

    Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)
    0
  9. jeremy
     
    voila le rapport du scan :
    Malwarebytes' Anti-Malware 1.35
    Version de la base de données: 1944
    Windows 5.1.2600 Service Pack 3

    06/04/2009 15:56:26
    mbam-log-2009-04-06 (15-56-26).txt

    Type de recherche: Examen complet (C:\|D:\|)
    Eléments examinés: 278521
    Temps écoulé: 1 hour(s), 47 minute(s), 2 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 0
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 12
    Fichier(s) infecté(s): 8

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\History (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\Settings (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr\setups (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\ScreenSaver (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\ScreenSaver\Images (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Shared (Adware.MyWebSearch) -> Quarantined and deleted successfully.

    Fichier(s) infecté(s):
    C:\Program Files\MyWebSearch\bar\History\search2 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\Settings\setting2.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\Settings\settings.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr\Cache\01757662.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\Installr\Cache\files.ini (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts\ScreenSaver\Images\0175F873.urr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\spc.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    je crois que tout est supprimer.
    Il y a d'autres manip a faire ou je n'ai plus de virus?
    merci :)
    0
  10. gen-hackman
     
    *****************************************************
    ************** Option A (Recherche) **************
    *****************************************************

    Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :

    /!\ Déconnectes toi et fermes toutes applications en cours

    ? Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
    ? Double clique sur l'icône Ad-removersituée sur ton bureau
    ? Au menu principal choisi l'option "Recherche"
    ? Postes le rapport qui apparait à la fin .

    ( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

    (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    Note :

    "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall)

    Aides en images (Installation)
    Aides en images (Recherche)--
    G3и-н@¢км@и™©®
    0
  11. jeremy
     
    voici le rapport

    ------- LOGFILE OF AD-REMOVER 1.1.2.5 | ONLY XP/VISTA -------

    Updated by C_XX on 01/04/2009 at 20:00
    Contact: AdRemover.contact@gmail.com
    Website: http://pagesperso-orange.fr/FindyKill.Ad.Remover/

    Start at: 17:47:55, Lun 06/04/2009 | Boot mode: Normal Boot
    Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
    Operating System: Microsoft® Windows XP™ Service Pack 3 (version 5.1.2600)
    Computer Name: PC835617709412
    Current User: M@rgo - Administrator
    Drive(s):
    - C:\ (File System: NTFS)
    - D:\ (File System: FAT32)
    System Drive: C:\
    Windows Directory: C:\WINDOWS\
    System Directory: C:\WINDOWS\System32\

    --- Running Processes: 66

    +-----------------| Boonty/Boonty Games Elements Found:

    .
    .

    +-----------------| Eorezo Elements Found:

    .
    C:\Documents and Settings\Nathalie\Cookies\nathalie@eorezo[1].txt

    +-----------------| Infected Poker Softwares Elements Found:

    .
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@partygaming.122.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fr.partypoker[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@partypoker[1].txt

    +-----------------| FunWebProducts/MyWay/MyWebSearch Elements Found:

    .
    .
    C:\WINDOWS\Downloaded Program Files\F3initialsetup1.0.0.15-3.inf

    +-----------------| It's TV Elements Found:

    .

    +-----------------| Sweetim Elements Found:

    .
    C:\WINDOWS\Installer\17f06e1.msi
    C:\WINDOWS\Installer\17f06e7.msi
    C:\Program Files\Macrogaming

    ============ Other Adwares Found ============

    .
    .
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@ads.addynamix[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@atdmt[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@bs.serving-sys[1].txt

    +-----------------| Added Scan:

    ---- Internet Explorer Version 7.0.5730.13 ----

    +-[HKEY_CURRENT_USER\..\Internet Explorer\Main]

    Search bar: hxxp://www.google.com/ie
    Search Page: hxxp://www.google.com
    Start page: hxxp://www.google.fr/

    +-[HKEY_USERS\S-1-5-21-1997472778-284307407-1591097776-1007\..\Internet Explorer\Main]

    Search bar: hxxp://www.google.com/ie
    Search Page: hxxp://www.google.com
    Start page: hxxp://www.google.fr/

    +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
    Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

    +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

    Tabs: hxxp://ieframe.dll/tabswelcome.htm

    +---------------------------------------------------------------------------+

    2725 Byte(s) - C:\Ad-Report-Scan-06.04.2009.log

    0 File(s) - C:\Program Files\Ad-remover\TOOLS\BACKUP
    0 File(s) - C:\Program Files\Ad-remover\TOOLS\QUARANTINE

    End at: 17:58:10 | 06/04/2009
    .
    +-----------------| E.O.F - 62 Lines
    .

    Tu arrive a voir quelque chose qui cloche dans tout ce que tu m'a dit???
    Il me reste quoi a faire pour que l'ordi soit entierement nettoyer?
    merci beaucoup :)
    0
  12. gen-hackman
     
    ca suit son cours on y arrive les choses qui ont ete reperées a cette epreuve devraient disparaitre avec cette partie suppression

    verifions :

    *******************************************************
    ************** Option B (Suppression) **************
    *******************************************************

    /!\ Déconnecte-toi et ferme toutes applications en cours /!\

    Double-clique sur AD-Remover pour le lancer : au menu principal, choisis l'option B.

    Choisis A

    Puis choisis S, le programme va travailler.

    Poste le rapport qui apparaît à la fin.

    (Le rapport est sauvegardé aussi sous C:\Ad-report.log)

    /!\ Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide) /!\

    Note :

    "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...)

    Aides en images ( Nettoyage )
    0
  13. jeremy
     
    voici le rapport :)

    ------- LOGFILE OF AD-REMOVER 1.1.2.5 | ONLY XP/VISTA -------

    Updated by C_XX on 01/04/2009 at 20:00
    Contact: AdRemover.contact@gmail.com
    Website: http://pagesperso-orange.fr/FindyKill.Ad.Remover/

    **** LIMITED TO ****

    Boonty/BoontyGames
    Eorezo
    Infected Poker Softwares
    FunWebProduct/MyWay/MyWebSearch
    It's TV
    Sweetim
    Other Adwares

    ********************

    Start at: 18:22:12, Lun 06/04/2009 | Boot mode: Normal Boot
    Option: CLEAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
    Operating System: Microsoft® Windows XP™ Service Pack 3 (version 5.1.2600)
    Computer Name: PC835617709412
    Current User: M@rgo - Administrator
    Drive(s):
    - C:\ (File System: NTFS)
    - D:\ (File System: FAT32)
    System Drive: C:\
    Windows Directory: C:\WINDOWS\
    System Directory: C:\WINDOWS\System32\

    --- Running Processes: 65

    (!) ---- IE start pages/Tabs reset

    +-----------------| Boonty/Boonty Games Elements Deleted :

    .
    .

    +-----------------| Eorezo Elements Deleted :

    .
    C:\Documents and Settings\Nathalie\Cookies\nathalie@eorezo[1].txt

    +-----------------| Infected Poker Softwares Elements Deleted :

    .
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@partygaming.122.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fr.partypoker[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@partypoker[1].txt

    +-----------------| FunWebProducts/MyWay/MyWebSearch Elements Deleted :

    .
    .
    C:\WINDOWS\Downloaded Program Files\F3initialsetup1.0.0.15-3.inf

    +-----------------| It's TV Elements Deleted :

    .

    +-----------------| Sweetim Elements Deleted :

    .
    C:\WINDOWS\Installer\17f06e1.msi
    C:\WINDOWS\Installer\17f06e7.msi
    C:\Program Files\Macrogaming

    ============ Other Adwares Deleted ============

    .
    .
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@ads.addynamix[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@atdmt[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@bs.serving-sys[1].txt

    ---- Complementary Cleaning + Heuristic ----

    ... Done !

    (!) ---- Temp files deleted.
    (!) ---- Recycle bin emptied in all drives.

    +-----------------| Added Scan :

    ---- Internet Explorer Version 7.0.5730.13 ----

    +-[HKEY_CURRENT_USER\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    Search Page: hxxp://www.google.com
    Start page: hxxp://www.google.fr/

    +-[HKEY_USERS\S-1-5-21-1997472778-284307407-1591097776-1007\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    Search Page: hxxp://www.google.com
    Start page: hxxp://www.google.fr/

    +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search bar: hxxp://search.msn.com/spbasic.htm
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

    +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

    Tabs: hxxp://ieframe.dll/tabswelcome.htm

    +---------------------------------------------------------------------------+

    3570 Byte(s) - C:\Ad-Report-Clean-06.04.2009.log
    2965 Byte(s) - C:\Ad-Report-Scan-06.04.2009.log

    0 File(s) - C:\Program Files\Ad-remover\TOOLS\BACKUP
    10 File(s) - C:\Program Files\Ad-remover\TOOLS\QUARANTINE

    End at: 18:36:49 | 06/04/2009
    .
    +-----------------| E.O.F - 81 Lines
    .

    ca a marché? ^^
    merci beaucoup
    0
  14. gen-hackman
     
    *************************************************************
    *************** Option C (Désinstallation) ****************
    *************************************************************

    * Relance "Ad-remover" : au menu principal choisis l'option "C" .
    * Clique sur ok quand l avertissement apparait.

    ensuite :

    Télécharge Superantispyware (SAS)

    Choisis "enregistrer" et enregistre-le sur ton bureau.

    Double-clique sur l'icône d'installation qui vient de se créer et suis les instructions.

    Créé une icône sur le bureau.

    Double-clique sur l'icône de SAS (une tête dans un cercle rouge barré) pour le lancer.

    - Si l'outil te demande de mettre à jour le programme ("update the program definitions", clique sur yes.
    - Sous Configuration and Preferences, clique sur le bouton "Preferences"
    - Clique sur l'onglet "Scanning Control "
    - Dans "Scanner Options ", assure toi que la case devant lles lignes suivantes est cochée :

    Close browsers before scanning
    Scan for tracking cookies
    Terminate memory threats before quarantining
    - Laisse les autres lignes décochées.

    - Clique sur le bouton "Close" pour quitter l'écran du centre de contrôle.

    - Dans la fenêtre principale, clique, dans "Scan for Harmful Software", sur "Scan your computer".

    Dans la colonne de gauche, coche C:\Fixed Drive.

    Dans la colonne de droite, sous "Complete scan", clique sur "Perform Complete Scan"

    Clique sur "next" pour lancer le scan. Patiente pendant la durée du scan.

    A la fin du scan, une fenêtre de résultats s'ouvre . Clique sur OK.

    Assure toi que toutes les lignes de la fenêtre blanche sont cochées et clique sur "Next".

    Tout ce qui a été trouvé sera mis en quarantaine. S'il t'es demandé de redémarrer l'ordi ("reboot"), clique sur Yes.

    Pour recopier les informations sur le forum, fais ceci :

    - après le redémarrage de l'ordi, double-clique sur l'icône pour lancer SAS.
    - Clique sur "Preferences" puis sur l'onglet "Statistics/Logs ".
    - Dans "scanners logs", double-clique sur SUPERAntiSpyware Scan Log.

    - Le rapport va s'ouvrir dans ton éditeur de texte par défaut.

    - Copie son contenu dans ta réponse.

    Regarde bien le tuto SUPERAntiSpyware il est très bien expliqué. --
    G3и-н@¢км@и™©®
    0
  15. jeremy
     
    Bonjour,
    je post le nouveau rapport apres une journée d'absence.
    J'espere que vous etes toujours la.
    Voila le rappport :
    SUPERAntiSpyware Scan Log
    https://www.superantispyware.com/

    Generated 04/07/2009 at 09:17 PM

    Application Version : 4.26.1000

    Core Rules Database Version : 3832
    Trace Rules Database Version: 1788

    Scan type : Complete Scan
    Total Scan Time : 02:36:13

    Memory items scanned : 830
    Memory threats detected : 0
    Registry items scanned : 6339
    Registry threats detected : 0
    File items scanned : 162001
    File threats detected : 643

    Adware.Tracking Cookie
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@ehg-neuftelecom.hitbox[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@cacharelsaintvalentin.solution.weborama[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@mediaplex[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@hertz.122.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@cdiscount[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@doubleclick[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@www.boutiquelingeriesexy[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fnac.112.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@zedo[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@ad.zanox[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@content.yieldmanager[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@2o7[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@www.cibleclick[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@adviva[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@tracker.affistats[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@hitbox[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@audi.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@cetelem.solution.weborama[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@track.effiliation[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@serving-sys[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@adserver.aol[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@ad.yieldmanager[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@questionmarket[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@himedia.individuad[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@stats.federal-hotel[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@revenue[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@yourmedia[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@adrevolver[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@ads.pointroll[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@media.adrevolver[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@click-fr[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@aoleusearch.122.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@galderma.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@tradedoubler[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@clickintext[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@bluestreak[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@gettyimages.122.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@advertising[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@roiservice[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@dynamic.media.adrevolver[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@x-trashy-sex.skyrock[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@smartadserver[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@dbainteractive.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@statsweb.bnpparibas[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@femina.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@lorealparis.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@webpopulation.112.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fr.13.slidein.clickintext[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@overture[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@aolfr.122.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@bnpparibasnet.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fr.17.slidein.clickintext[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fr.15.slidein.clickintext[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@webstat.yamaha[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@estat[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@media.mtvnservices[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@imrworldwide[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@boursoramabanque.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fastclick[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@himedia.112.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@realmedia[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@casalemedia[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@zbox.zanox[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@nrjmobile.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@media.adrevolver[3].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@sfr.122.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@account.live[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@xiti[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@weba.cdiscount[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@msnportal.112.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@adopt.euroclick[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@bs.serving-sys[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@advertstream[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@tracking.publicidees[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@atdmt[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@stats.canalblog[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fl01.ct2.comclick[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@garnieratelierdelacouleur.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@my-shit-fucking-snob.skyrock[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@adtech[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fortunecity[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@ehg-ctv.hitbox[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@wysistat[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@msnaccountservices.112.2o7[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@publicidad1.webfg[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@bagnolesdelorne.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@atwola[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@uk.sitestat[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@stats.searchtrack[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@easysexe[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@linkstat.neckermann[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fr.sitestat[3].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@statse.webtrendslive[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@rocku.adbureau[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@adcentriconline[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@sexyavenue[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@partygaming.122.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@metacafe.122.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@ad.yourmedia[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@ehg-telecomitalia.hitbox[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@chitika[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@tribalfusion[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@yamaha.122.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@revsci[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@dealtime[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@track.webtrekk[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@adlegend[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@top-sexe-gratuit.3x[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@valueclick[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@adbrite[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fr.classic.clickintext[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@milonga.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@date.ventivmedia[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@garnierpure.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@stat.osez-desir[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fr.sitestat[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@banquepopulaire.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@partypoker[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@mortecouille.love.easysexe[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@server.iad.liveperson[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@garnier2009.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@redcats.122.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@statcounter[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@nestlecereals.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@mcm.solution.weborama[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@dieselbarapoches13avr15mai.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@apmebf[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@247realmedia[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@samsung.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@pierrefabre.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@stats.sports[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@specificclick[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@gemeypuremineralpoudres.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@banana-sexshop[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@uk.sitestat[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@wwwmynewsbarfr.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@ladynett.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@vitamine.networldmedia[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@www.smartadserver[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@notrefamille.112.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@windowsmedia[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fr.sitestat[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@argenius.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@laredoute.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fr.partypoker[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@dekio.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@aimfar.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@top-porno[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@www.sexyavenue[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@tele7jours.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@kontera[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@casio.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@samsungpinkribbon.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@shop.zanox[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@dartycom.solution.weborama[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@adserver.chien[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@kitkat.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@www.liomedia[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@altimasa.112.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@paypal.112.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@livenation.122.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@vahine.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@www.googleadservices[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@intermarche.solution.weborama[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@nestle.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@ads.addynamix[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fr.sitestat[4].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@premiere.solution.weborama[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@tacoda[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@zanox[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@www.jackpotmadness[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@iv2.bluestreak[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@lascad.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@content.yieldmanager.edgesuite[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@media.webstore-internet[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@vivelledop.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@stats.urlis.oxys[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@networldmedia[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@hollywood.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@idfmedias[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@media6degrees[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@mediadico[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@ads.networldmedia[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@stat.dealtime[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@virginmedia[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@insightexpressai[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@piwik.wikimedia[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@bubblestat[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@www.googleadservices[3].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@data.coremetrics[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@parismatch.solution.weborama[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@boutiquelingeriesexy[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@georgiapacificvania.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@yieldmanager[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@ttbdurex.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@at.atwola[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@stats.paypal[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@ice.112.2o7[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@euroclick[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@fr.at.atwola[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@elle.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@tracking.lsfinteractive[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@media.photobucket[1].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@interhome.solution.weborama[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@tracking.veille-referencement[2].txt
    C:\Documents and Settings\M@rgo\Cookies\m@rgo@numericable.112.2o7[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@2o7[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@626.stats.stats[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@ad.yieldmanager[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@ad.zanox[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@adrevolver[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@ads.canalblog[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@ads.highmetrics[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@ads.sports[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@adserver.aol[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@adtech[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@advertising[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@adviva[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@aimfar.solution.weborama[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@apmebf[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@atdmt[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@bluestreak[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@bnpparibasnet.solution.weborama[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@bs.serving-sys[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@cetelem.solution.weborama[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@doubleclick[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@dynamic.media.adrevolver[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@ehg-telecomitalia.hitbox[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@elle.solution.weborama[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@fl01.ct2.comclick[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@garnierambresolaire.solution.weborama[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@hitbox[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@ladynett.solution.weborama[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@media.adrevolver[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@media.adrevolver[3].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@mediaplex[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@msnportal.112.2o7[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@overture[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@paypal.112.2o7[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@revsci[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@richmedia.yahoo[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@sanofi.solution.weborama[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@serving-sys[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@smartadserver[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@statcounter[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@stats.canalblog[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@statse.webtrendslive[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@tradedoubler[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@weborama[2].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@www.googleadservices[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@xiti[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@yourmedia[1].txt
    C:\Documents and Settings\aukazou\Cookies\aukazou@zbox.zanox[2].txt
    C:\Documents and Settings\Margaux\Cookies\margaux@2o7[1].txt
    C:\Documents and Settings\Margaux\Cookies\margaux@atdmt[2].txt
    C:\Documents and Settings\Margaux\Cookies\margaux@bluestreak[1].txt
    C:\Documents and Settings\Margaux\Cookies\margaux@doubleclick[1].txt
    C:\Documents and Settings\Margaux\Cookies\margaux@msninvite.112.2o7[1].txt
    C:\Documents and Settings\Margaux\Cookies\margaux@msnportal.112.2o7[1].txt
    C:\Documents and Settings\Margaux\Cookies\margaux@overture[1].txt
    C:\Documents and Settings\Margaux\Cookies\margaux@weborama[2].txt
    C:\Documents and Settings\Margaux\Cookies\margaux@ww3.shoshkeles[1].txt
    C:\Documents and Settings\Margaux\Cookies\margaux@www.smartadserver[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@112.2o7[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@247realmedia[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@2o7[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@3.adbrite[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@599.stats.misstrends[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ad.cibleclick[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ad.ifrance[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ad.uk.tangozebra[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ad.yieldmanager[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ad.zanox[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@adbrite[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@adlegend[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@adopt.euroclick[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@adrevolver[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.128b[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.adbrite[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.allotraffic[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.babybelgique[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.benegil[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.e-planning[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.expedia[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.ims[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.mediamayhemcorp[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.multimania.lycos[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.palpix[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.pointroll[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.stardoll[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.tetesacl.streamtheworld[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.tetesacl.streamtheworld[3].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ads.wanadooregie[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@adserver.aol[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@adtech[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@adv.surinter[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@advertising[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@advertstream[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@adviva[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@aolfr.122.2o7[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@apmebf[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@atdmt[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@bluestreak[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@bs.serving-sys[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@burstnet[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@carasexe[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@casalemedia[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@click-fr[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@clickaider[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@clickbank[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@clubmed.112.2o7[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@counter2.sextracker[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@discountis[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@doubleclick[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@eas.apm.emediate[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ehg-dig.hitbox[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ehg-foxmovies.hitbox[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ehg-neuftelecom.hitbox[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ehg-telecomitalia.hitbox[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ehg-youtube.hitbox[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@eqtracking[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@fastclick[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@fl01.ct2.comclick[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@fnac.112.2o7[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@fr.drivecleaner[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@fr.winantivirus[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@gettyimages.122.2o7[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@gostats[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@h.starware[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@hitbox[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@hotelscom.122.2o7[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@imrworldwide[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@incredimailltd.112.2o7[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@indextools[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@insightexpressai[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@iv2.bluestreak[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@karavel.112.2o7[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@kontera[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ltur.112.2o7[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@maxserving[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@media.adrevolver[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@media.adrevolver[3].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@media.hotels[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@mediametrics.mpsa[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@mediaplex[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@metacafe.122.2o7[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@msnaccountservices.112.2o7[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@msnportal.112.2o7[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@mywebsearch[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@network-ca.247realmedia[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@networldmedia[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@opodo.122.2o7[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@overture[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@partner2profit[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@questionmarket[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@questions-existentielles.skyblog[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@richmedia.yahoo[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@roiservice[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@serving-sys[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@sextracker[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@sexy-football.skyrock[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@smartadserver[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@smileycentral[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@specificclick[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@stat.dealtime[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@stat.hi-pi[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@statcounter[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@stats.canalblog[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@stats.conapt[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@stats.drivecleaner[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@stats.searchtrack[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@stats1.reliablestats[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@statse.webtrendslive[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@statsserver.contensis.co[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@statsserver.contensis.co[3].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@tacoda[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@track.effiliation[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@track.espaceclient[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@track.webtrekk[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@track.webtrekk[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@tracker.affistats[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@tracking.lsfinteractive[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@tracking.publicidees[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@tradedoubler[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@tribalfusion[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@try.starware[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@try.starware[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@virtualbartendertrack.beer[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@vitamine.networldmedia[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@web-mediaplayer[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@weborama[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@winantivirus[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@ww3.shoshkeles[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@www.addfreestats[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@www.burstnet[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@www.cibleclick[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@www.clickxchange[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@www.drivecleaner[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@www.googleadservices[11].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@www.googleadservices[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@www.googleadservices[2].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@www.googleadservices[3].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@www.googleadservices[4].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@www.googleadservices[5].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@www.itrack24[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@www1.addfreestats[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@www6.addfreestats[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@xiti[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@yourcountry.swiss[1].txt
    C:\Documents and Settings\Nathalie\Cookies\nathalie@yourmedia[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@112.2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@247realmedia[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ad-self[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ad.caradisiac[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ad.ifrance[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ad.yieldmanager[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ad.yn-ads[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ad.yourmedia[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ad.zanox[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adbrite[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adcentriconline[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adecn[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adfarm1.adition[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adinsert.buddymedia[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adinterax[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adlegend[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adopt.euroclick[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adopt.specificclick[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adrevolver[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ads.118000[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ads.ad4game[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ads.benegil[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ads.blogg[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ads.bridgetrack[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ads.canalblog[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ads.expedia[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ads.loudsocial[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ads.pointroll[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ads.revsci[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ads.shopreflex[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ads.socialreach[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ads.us.e-planning[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ads.widgetbucks[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adserver.aol[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adserver.cherchons[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adserver.easyad[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adserver.pharmanetis[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adserving.adtraktion[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adtech[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adv.surinter[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@advertising[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@advertstream[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@adviva[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@agefiph2.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@agircarrco.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@aimfar.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@annoncesexpress[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@aoleusearch.122.2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@aolfr.122.2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@aoluk.122.2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@apmebf[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@argenius.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@at.atwola[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@atdmt[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@atwola[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@audi.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@azjmp[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@baccarat.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@banquepopulairecendrillon.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@beacons.hottraffic[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@bizrate[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@bluestreak[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@bnpparibasnet.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@boursoramabanque.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@bs.serving-sys[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@burstnet[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@cetelem.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@click-fr[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@clickaider[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@clickintext[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@clickmeon[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@cmpmedica.112.2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@cnam.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@conforamalancementsite.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@content.yieldmanager[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@content.yieldmanager[3].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@cpdhbjo.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@creditfoncier2.solution.weborama[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@data.coremetrics[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@dealtime[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@dieselbarapoches13avr15mai.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@dolcegusto16avril11juin.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@doubleclick[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@dynamic.media.adrevolver[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@eas.apm.emediate[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ehg-dig.hitbox[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ehg-nestlefr.hitbox[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ehg-neuftelecom.hitbox[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ehg-nokiafin.hitbox[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ehg-telecomitalia.hitbox[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@elle.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@fastclick[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@fl01.ct2.comclick[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@fr.at.atwola[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@fruitform.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@garnierbodytonic.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@garnierpure.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@garnierultradoux.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@gemeydreamsatinfluide.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@gmeurope.112.2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@goal.adbureau[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@himedia.112.2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@himedia.individuad[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@hitbox[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@iacas.adbureau[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@imrworldwide[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@indextools[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@infobebes.solution.weborama[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@infoclipper.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@insightexpressai[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@interclick[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@interhome.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@intermarche.solution.weborama[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@intermarche2009.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@intermarcheselection8avr19avr.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@iv2.bluestreak[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@karavel.112.2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@laboratoiresferrosanimedeentp.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ladynett.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@laredoute.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@laredoutebranding.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@lascad.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@lechevalfrancais.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@lekiosquenumerique.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@lorealparis.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@luxe-discount[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@m1.webstats.motigo[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@media.adrevolver[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@media.adrevolver[3].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@media.webstore-internet[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@media6degrees[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@mediadico[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@mediaplex[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@mediastorehouse[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@msnaccountservices.112.2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@msnportal.112.2o7[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@myroitracking[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@nestle.solution.weborama[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@notrefamille.112.2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@nrjmobile.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ocirp.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@openmedia[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@opodo.122.2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@optimost[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@orpigroupe.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@overture[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@perf.overture[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@premium.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@prevadies.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@printemps.112.2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@questionmarket[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@radiofrance.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@realmedia[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@redcats.122.2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@revsci[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@richmedia.yahoo[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@rm.piximedia[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@roiservice[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@sales.liveperson[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@sales.liveperson[3].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@samsung.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@sanofi.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@serial-kombi[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@server.iad.liveperson[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@serving-sys[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@serving-sys[3].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@serving-sys[4].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@sexandthecity.spaces.live[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@sfr.122.2o7[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@smartadserver[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@socialmedia[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@specificclick[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@specificmedia[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@stat.dealtime[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@statcounter[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@stats.arobas[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@stats.canalblog[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@stats.equinoa[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@stats.federal-hotel[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@stats.planfrance[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@stats.searchtrack[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@stats.siegler-informatique[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@stats.sports[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@statsadv.dada[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@statse.webtrendslive[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@statsweb.bnpparibas[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@tacoda[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@toyotaauris21mars09avril.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@track.effiliation[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@track.webgains[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@tracker.affistats[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@tracking.3gnet[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@tracking.lsfinteractive[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@tracking.publicidees[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@tracking.veille-referencement[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@tradedoubler[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@trafficmp[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@traffic[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ttbkomilfo.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ttbpgsm.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@ucbgroupe.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@uk.at.atwola[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@vahine.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@vosquestionsante.dhblogs[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@webo.solution.weborama[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@weborama[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@windowslivemessenger.solution.weborama[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.addfreestats[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.burstnet[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.cibleclick[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.etracker[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.googleadservices[10].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.googleadservices[11].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.googleadservices[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.googleadservices[4].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.googleadservices[6].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.googleadservices[7].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.googleadservices[8].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.meteomedia[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.openmedia[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.smartadserver[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.socialtrack[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@www.stats-reports[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@xiti[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@yourmedia[1].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@zanox[2].txt
    C:\Documents and Settings\Nathalie.PC835617709412\Cookies\nathalie@zedo[2].txt

    Adware.Vundo/Variant-MSFake
    C:\DOCUMENTS AND SETTINGS\NATHALIE.PC835617709412\APPLICATION DATA\MICROSOFT\LIVE SEARCH\MISE-A-JOUR-LIVESEARCH.EXE
    C:\DOCUMENTS AND SETTINGS\NATHALIE.PC835617709412\APPLICATION DATA\MICROSOFT\LIVE SEARCH\NOTIFICATION-LIVESEARCH.EXE
    C:\DOCUMENTS AND SETTINGS\NATHALIE.PC835617709412\APPLICATION DATA\MICROSOFT\LIVE SEARCH\SUPPRESSION-LIVE-SEARCH.EXE
    C:\WINDOWS\Prefetch\NOTIFICATION-LIVESEARCH.EXE-2C66D2E1.pf

    dite moi si il y a d'autres manip et si on s'approche de la fin -_-'
    merci beaucoup :)
    0
  16. jeremy
     
    Plus de reponses?
    J'ai l'impressionque cela n'est pas changé grand chose, mon ordi rame toujours autans si ce n'est plus... (je crois)
    Ca a vraiment marcher ce que j'ai fait? Il n'y ya plus de virus?
    Je dois rien faire d'autres?
    Merci
    0
  17. gen-hackman
     
    salut t inquietes a la fin y a le grand menage vu qu'apparemment il n est jamais fait (ou peu) dans ce pc :)

    Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

    ! Déconnecte toi et ferme toutes tes applications en cours !

    Double-clique sur " RSIT.exe " pour le lancer .

    -> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

    * Devant l'option "List files/folders created ..." , tu choisis : 2 months

    * clique ensuite sur " Continue " pour lancer l'analyse ...

    -> laisse faire le scan et ne touche pas au PC ...

    Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

    Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

    Important : poste un rapport, puis l'autre dans la réponse suivante
    Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum

    ( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
    0