Sujet Précédent Sujet Suivant

Analyse rapport RSIT svp !

Résolu/Fermé
superman1221 Messages postés 128 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 4 juin 2012 - 9 juin 2011 à 20:22
superman1221 Messages postés 128 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 4 juin 2012 - 22 juin 2011 à 18:34
Bonjour,

J'ai des problèmes de virus depuis quelques temps. Quelqu'un pourrait vérifier mon rapport svp ?

Logfile of random's system information tool 1.08 (written by random/random)
Run by Daniel at 2011-06-09 14:18:02
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 18 GB (53%) free of 34 GB
Total RAM: 1535 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:18:17, on 09/06/2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\WINDOWS\System32\gearsec.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\RelevantKnowledge\rlvknlg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TeamViewer\Version6\TeamViewer.exe
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\PROGRA~1\Druide\Antidote\Gestionnaire Antidote.exe
C:\Program Files\BitTorrent\bittorrent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Fichiers communs\VideoMate\ComproRemote.exe
C:\Program Files\Fichiers communs\VideoMate\ComproScheduler.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\System32\wbem\unsecapp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\System32\MDM.EXE
C:\DOCUME~1\Daniel\LOCALS~1\Temp\Ysm.exe
C:\Documents and Settings\Daniel\Bureau\Virus\RSIT.exe
C:\Program Files\trend micro\Daniel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.autocompletepro.com/?si=10206&bi=400
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.autocompletepro.com/?si=10206&bi=400
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.autocompletepro.com/?si=10206&bi=400
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.autocompletepro.com/?si=10206&bi=400
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
R3 - URLSearchHook: (no name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)
R3 - URLSearchHook: (no name) - {4daac69c-cba7-45e2-9bc8-1044483d3352} - (no file)
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SuggestMeYesBHO - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll
O2 - BHO: IE Privacy Keeper - Last IE Window Detector - {1201333E-BAD9-481C-BCF5-6904498CF85B} - C:\Program Files\UnH Solutions\IE Privacy Keeper\IEPKbho.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Interest recogniser for Crazyloader (powered by Spointer) - {C5F65718-341D-4e7d-9842-FCB9CC89527E} - C:\Program Files\CrazyLoader\spointer\extensions\crazyloader_air_ie.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Yyuhesebevaxi] rundll32.exe "C:\WINDOWS\ayenulohufaje.dll",Startup
O4 - HKLM\..\Run: [sp4jke] C:\Documents and Settings\Daniel\Application Data\25e23d.exe
O4 - HKLM\..\Run: [bipro] rundll32 "C:\WINDOWS\$XNTUninstall643$\wktly.dll",,Run
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [Gestionnaire Antidote.exe] C:\PROGRA~1\Druide\Antidote\Gestionnaire Antidote.exe
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe"
O4 - HKCU\..\Run: [4ECYTQ9SIC] C:\DOCUME~1\Daniel\LOCALS~1\Temp\Ysm.exe
O4 - HKCU\..\Run: [KOQMLYTPE7] C:\WINDOWS\Ytadea.exe
O4 - HKCU\..\Run: [Syaxeri] rundll32.exe "C:\WINDOWS\wmsdupi.dll",Startup
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-20 Startup: Launch WhiteSmoke.lnk = C:\Program Files\WhiteSmoke\WSEnrichment.exe (User 'SERVICE RÉSEAU')
O4 - S-1-5-18 Startup: Launch WhiteSmoke.lnk = C:\Program Files\WhiteSmoke\WSEnrichment.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Launch WhiteSmoke.lnk = C:\Program Files\WhiteSmoke\WSEnrichment.exe (User 'Default user')
O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
O4 - Startup: RollerCoaster Tycoon 3 Registration.lnk = C:\Documents and Settings\Daniel\Local Settings\Temp\{C73CE7FF-81AF-4D63-A827-863F32B3C8F1}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe
O4 - Global Startup: ComproRemote.lnk = ?
O4 - Global Startup: ComproScheduler.lnk = ?
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: TL-WN321G Wireless Utility.lnk = C:\Program Files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe
O4 - Global Startup: TweakYC.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Correcteur - {F7C8E5F6-B6D1-45db-8D91-2BCFA5DF11A9} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote K - IE 6.htm (HKCU)
O9 - Extra button: Dictionnaires - {F9B969E8-58D0-4dd9-AC8A-EE2336FF8F65} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote D - IE 6.htm (HKCU)
O9 - Extra button: Guides - {FA089E36-3F1B-4c51-9A1A-C4E7012483AF} - C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote G - IE 6.htm (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
O20 - Winlogon Notify: RelevantKnowledge - C:\Program Files\RelevantKnowledge\rlls.dll
O21 - SSODL: SwUpdate - {003541A1-3BC0-1B1C-AAF3-040114001C01} - C:\Documents and Settings\All Users\Application Data\Macromedia\swfupdate\swfupdate.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Service de sécurité matérielle (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\System32\imapi.exe
O23 - Service: iPod Service (iPodService) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\System32\mnmsrvc.exe
O23 - Service: MouseDriver - Unknown owner - C:\Documents.exe (file missing)
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\System32\wbem\wmiapsrv.exe
A voir également:

19 réponses

Réponse 1 / 19
Xplode Messages postés 8820 Date d'inscription vendredi 21 août 2009 Statut Contributeur sécurité Dernière intervention 2 juillet 2015 726
9 juin 2011 à 20:43
Bonjour,

Ton PC c'est une déchetterie ! :o)

Commence par faire ceci :

▶ Ad-Remover ◀

Télécharge AD-Remover (de C_XX) sur ton Bureau.
Déconnecte toi et ferme toutes les applications en cours
Double-clique sur l'icône AD-Remover
Au menu principal, clique sur "Nettoyer"
Confirme le lancement de l'analyse et laisse l'outil travailler
Poste le rapport qui apparait à la fin (il est aussi sauvegardé sous C:\Ad-report-CLEAN.txt )
0
Réponse 2 / 19
superman1221 Messages postés 128 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 4 juin 2012 3
9 juin 2011 à 22:37
======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [4]) -> Lancé à 16:25:32 le 09/06/2011, Mode normal

Microsoft Windows XP Professionnel Service Pack 2 (X86)
Daniel@P4-2400 ( )

============== ACTION(S) ==============

Service: "Application Updater" Stoppé et supprimé

Fichier supprimé: C:\Program Files\Mozilla Firefox\extensions\searchsettings@spigot.com
Fichier supprimé: C:\Documents and Settings\Daniel\Application Data\Mozilla\FireFox\Profiles\71grxzbe.default\searchplugins\askcom.xml
Fichier supprimé: C:\Documents and Settings\Daniel\Application Data\Mozilla\FireFox\Profiles\71grxzbe.default\searchplugins\conduit.xml
Dossier supprimé: C:\Documents and Settings\Daniel\Local Settings\Application Data\Conduit
Dossier supprimé: C:\Program Files\Conduit
Dossier supprimé: C:\Program Files\Application Updater
Dossier supprimé: C:\Program Files\AutocompletePro
Dossier supprimé: C:\Documents and Settings\Daniel\Menu Démarrer\Programmes\CrazyLoader
Dossier supprimé: C:\Program Files\CrazyLoader
Dossier supprimé: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\RelevantKnowledge
Dossier supprimé: C:\Program Files\RelevantKnowledge
Dossier supprimé: C:\Documents and Settings\Daniel\Application Data\Search Settings
Dossier supprimé: C:\Program Files\Search Settings
Dossier supprimé: C:\WINDOWS\$XNTUninstall643$

(!) -- Fichiers temporaires supprimés.


-- Fichier ouvert: C:\Documents and Settings\Daniel\Application Data\Mozilla\FireFox\Profiles\71grxzbe.default\Prefs.js --
Ligne supprimée: user_pref("CT2542115.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_...
Ligne supprimée: user_pref("CT2542115.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT254...
Ligne supprimée: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.yahoo.com/search?fr=greent...
Ligne supprimée: user_pref("CommunityToolbar.ToolbarsList", "CT2542115");
Ligne supprimée: user_pref("CommunityToolbar.ToolbarsList2", "CT2542115");
Ligne supprimée: user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2542115");
Ligne supprimée: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2542115&Sea...
-- Fichier Fermé --


Clé supprimée: HKLM\Software\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé supprimée: HKLM\Software\Classes\CLSID\{6DF77AA3-27AF-46f2-A1DA-B569AC6BEEFF}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6DF77AA3-27AF-46f2-A1DA-B569AC6BEEFF}
Clé supprimée: HKLM\Software\Classes\CLSID\{6F6C45E4-E231-4F0F-8CD8-AA5770303EAA}
Clé supprimée: HKLM\Software\Classes\Interface\{6F6C45E4-E231-4F0F-8CD8-AA5770303EAA}
Clé supprimée: HKLM\Software\Classes\CLSID\{86460CE5-46A0-4543-B8FE-2D2AE182A2FE}
Clé supprimée: HKLM\Software\Classes\CLSID\{A1755B14-2AFA-42a6-97C3-AA81B4482B71}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1755B14-2AFA-42a6-97C3-AA81B4482B71}
Clé supprimée: HKLM\Software\Classes\CLSID\{C5F65718-341D-4e7d-9842-FCB9CC89527E}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C5F65718-341D-4e7d-9842-FCB9CC89527E}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5F65718-341D-4e7d-9842-FCB9CC89527E}
Clé supprimée: HKLM\Software\Classes\CLSID\{CB1CC8F5-D23C-400F-8472-F6AEFEDE4768}
Clé supprimée: HKLM\Software\Classes\Interface\{CB1CC8F5-D23C-400F-8472-F6AEFEDE4768}
Clé supprimée: HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
Clé supprimée: HKLM\Software\Classes\Interface\{471E3998-588E-41D5-A874-FA11C44B70DE}
Clé supprimée: HKLM\Software\Classes\Interface\{4F309FEB-422A-4808-91D0-71DFACCCA399}
Clé supprimée: HKLM\Software\Classes\Interface\{8F271B52-1E44-42D7-B316-BA23A0FD9DB4}
Clé supprimée: HKLM\Software\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Clé supprimée: HKLM\Software\Classes\Interface\{D4E856E7-C034-49BA-BFEF-B785F3CBD7BA}
Clé supprimée: HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
Clé supprimée: HKLM\Software\Classes\Interface\{DB7A9C36-6C85-48BE-BA8D-151B6B144BE0}
Clé supprimée: HKLM\Software\Classes\Interface\{F77F3DFC-F5DC-4316-AB50-B50B16F2BEF4}
Clé supprimée: HKLM\Software\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Clé supprimée: HKLM\Software\Classes\TypeLib\{63AF3145-D2DC-4F1D-BB3A-3AAD9FEC3430}
Clé supprimée: HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
Clé supprimée: HKLM\Software\Classes\TypeLib\{D530F69A-EB2D-4EC6-BD37-E123AEFCA011}
Clé supprimée: HKLM\Software\Classes\TypeLib\{F5BCBC2A-E8F6-4A47-BBCB-61713EA03787}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\$XNTUninstall643$
Clé supprimée: HKLM\Software\Classes\Crazyloader.Spointer
Clé supprimée: HKLM\Software\Classes\Crazyloader.Spointer.1
Clé supprimée: HKLM\Software\Classes\Crazyloader.SpointerCtrl
Clé supprimée: HKLM\Software\Classes\Crazyloader.SpointerCtrl.1
Clé supprimée: HKLM\Software\Classes\Crazyloader.SpointerWebDisp
Clé supprimée: HKLM\Software\Classes\Crazyloader.SpointerWebDisp.1
Clé supprimée: HKLM\Software\Classes\SearchSettings.BHO
Clé supprimée: HKLM\Software\Classes\SearchSettings.BHO.1
Clé supprimée: HKLM\Software\Classes\SuggestMeYes.SuggestMeYesBHO
Clé supprimée: HKLM\Software\Classes\SuggestMeYes.SuggestMeYesBHO.1
Clé supprimée: HKLM\Software\Classes\Toolbar.CT2542115
Clé supprimée: HKLM\Software\Classes\AppID\AutocompletePro.DLL
Clé supprimée: HKLM\Software\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Clé supprimée: HKLM\Software\Application Updater
Clé supprimée: HKLM\Software\Conduit
Clé supprimée: HKLM\Software\PopCap
Clé supprimée: HKLM\Software\Search Settings
Clé supprimée: HKCU\Software\AutocompletePro
Clé supprimée: HKCU\Software\Conduit
Clé supprimée: HKCU\Software\Search Settings
Clé supprimée: HKCU\Software\Spointer
Clé supprimée: HKU\.DEFAULT\Software\AutocompletePro
Clé supprimée: HKU\.DEFAULT\Software\Search Settings
Clé supprimée: HKU\.DEFAULT\Software\Spointer
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ClickPotato
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\CrazyLoader
Clé supprimée: HKLM\Software\Classes\Installer\Products\D82C50F59AED6DA47AA360145789E8BA
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\D82C50F59AED6DA47AA360145789E8BA
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBA4B812-2415-4000-AFCB-56F53E668DC5}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F05C28D-DEA9-4AD6-A73A-064175988EAB}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D08D9F98-1C78-4704-87E6-368B0023D831}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\AutocompletePro3_is1
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\CrazyLoader
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé supprimée: HKLM\Software\Google\Chrome\Extensions\defdhglnppeioeflggkmglipcecffkhk
Clé supprimée: HKLM\Software\Google\Chrome\Extensions\fikmanfpkongnopggnndbikhhicdpfka
Clé supprimée: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\RelevantKnowledge

Valeur supprimée: HKLM\Software\Mozilla\Firefox\Extensions|{6E19037A-12E3-4295-8915-ED48BC341614}
Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{00000000-6E41-4FD3-8538-502F5495E5FC}
Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}


============== SCAN ADDITIONNEL ==============

**** Mozilla Firefox Version [3.6.17 (fr)] ****

Searchplugins\acpro.xml ( hxxp://search.autocompletepro.com?si=10206&q={searchTerms}/)
Searchplugins\avg_igeared.xml (hxxp://search.avg.com/route/?d=4b91abd2&v=6.103.018.001&i=23&tp=chrome&q={searchTerms}&lng=fr&iy=&ychte=cf/)
HKLM_Extensions|avg@igeared - C:\Program Files\AVG\AVG9\Toolbar\Firefox\avg@igeared
HKLM_Extensions|{CBD934B7-CBF5-4FE0-BEEC-C973C33F8F3C} - C:\Documents and Settings\Daniel\Local Settings\Application Data\{CBD934B7-CBF5-4FE0-BEEC-C973C33F8F3C}

-- C:\Documents and Settings\Daniel\Application Data\Mozilla\FireFox\Profiles\71grxzbe.default --
Extensions\en-CA@dictionaries.addons.mozilla.org (Canadian English Dictionary)
Extensions\support@predictad.com (AutocompletePro - Your handy search suggestions tool)
Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} (Garmin Communicator)
Extensions\{4daac69c-cba7-45e2-9bc8-1044483d3352} (Softonic_France Toolbar)
Prefs.js - browser.download.lastDir, C:\\Documents and Settings\\Daniel\\Bureau
Prefs.js - browser.search.defaultenginename, AVG Secure Search
Prefs.js - browser.search.selectedEngine, AVG Secure Search
Prefs.js - browser.startup.homepage, hxxp://www.google.ca/
Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.17
Prefs.js - keyword.URL, hxxp://search.avg.com/route/?d=4b91abd2&v=6.103.018.001&i=23&tp=ab&iy=&ychte=cf&lng=fr&q=

========================================

**** Internet Explorer Version [6.0.2900.2180] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_URLSearchHooks|{A3BC75A2-1F87-4686-AA43-5347D756017C} - "AVG Security Toolbar BHO" (C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll)
HKCU_URLSearchHooks|{4daac69c-cba7-45e2-9bc8-1044483d3352} (x)
HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "Web Search" (hxxp://search.autocompletepro.com/?si=10206&bi=400&q={searchTerms})
HKCU_SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - "AVG Secure Search" (hxxp://search.avg.com/route/?d=4b91abd2&v=6.10.6.4&i=23&tp=chrome&q={searchTerms...)
HKLM_SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} - "SweetIM Search" (hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms})
HKCU_Toolbar\WebBrowser|{CCC7A320-B3CA-4199-B1A6-9F516DD69829} (C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll)
HKLM_Toolbar|{CCC7A320-B3CA-4199-B1A6-9F516DD69829} (C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll)
HKLM_ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe (?)
HKCU_Extensions\{F7C8E5F6-B6D1-45db-8D91-2BCFA5DF11A9} - "Correcteur" (C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote K - IE 6.ico)
HKCU_Extensions\{F9B969E8-58D0-4dd9-AC8A-EE2336FF8F65} - "Dictionnaires" (C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote D - IE 6.ico)
HKCU_Extensions\{FA089E36-3F1B-4c51-9A1A-C4E7012483AF} - "Guides" (C:\Program Files\Druide\Antidote\Internet Explorer\6\Antidote G - IE 6.ico)
BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "AcroIEHlprObj Class" (C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx)
BHO\{1201333E-BAD9-481C-BCF5-6904498CF85B} - "LastWinDet Class" (C:\Program Files\UnH Solutions\IE Privacy Keeper\IEPKbho.dll)
BHO\{A3BC75A2-1F87-4686-AA43-5347D756017C} - "AVG Security Toolbar BHO" (C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 366 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 18 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 09/06/2011 15:58:36 (427 Octet(s))
C:\Ad-Report-CLEAN[2].txt - 09/06/2011 16:09:22 (427 Octet(s))
C:\Ad-Report-CLEAN[3].txt - 09/06/2011 16:12:53 (427 Octet(s))
C:\Ad-Report-CLEAN[4].txt - 09/06/2011 16:25:49 (13246 Octet(s))
C:\Ad-Report-SCAN[1].txt - 09/06/2011 16:16:14 (8785 Octet(s))

Fin à: 16:27:49, 09/06/2011

============== E.O.F ==============
0
Réponse 3 / 19
superman1221 Messages postés 128 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 4 juin 2012 3
10 juin 2011 à 15:13
Et alors ?
0
Réponse 4 / 19
Xplode Messages postés 8820 Date d'inscription vendredi 21 août 2009 Statut Contributeur sécurité Dernière intervention 2 juillet 2015 726
10 juin 2011 à 17:21
Bonjour, désolé je n'étais pas chez moi aujourd'hui. Fais maintenant ceci :

Télécharge ComboFix ( de sUBs ) à cette adresse.

/!\ Ferme toutes les fenêtres de programme ouvertes /!\

/!\ Désactive temporairement toutes les protections résidentes ( Antivirus, Pare-Feu, AntiSpyware ) /!\

Double clique sur " Combofix.exe "

Suis les indications qui sont données à l'écran, à un moment tu auras un message te demandant d'installer la console de récupération, fais le.

Pendant le scan, ne touche à rien ( souris, clavier )

Tu seras peut être invité à redémarrer ton PC. A la fin du scan, combofix ouvrira un rapport, copie/colle le dans ta prochaine réponse.

Note : Si jamais il ne s'ouvrait pas, il se trouve sous C:\Combofix.txt
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 19
superman1221 Messages postés 128 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 4 juin 2012 3
10 juin 2011 à 20:27
ComboFix 11-06-10.05 - Daniel 10/06/2011 14:06:46.1.1 - x86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.1535.1149 [GMT -4:00]
Lancé depuis: c:\documents and settings\Daniel\Bureau\Virus\ComboFix.exe
.
PEV Error: LocalSettingsFile
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\Macromedia\swfupdate\swFUpdate.dll
c:\documents and settings\Daniel\Application Data\80e81bi6.bat
c:\documents and settings\Daniel\Application Data\MouseDriver.bat
c:\documents and settings\Daniel\Local Settings\Application Data\{CBD934B7-CBF5-4FE0-BEEC-C973C33F8F3C}
c:\documents and settings\Daniel\Local Settings\Application Data\{CBD934B7-CBF5-4FE0-BEEC-C973C33F8F3C}\chrome.manifest
c:\documents and settings\Daniel\Local Settings\Application Data\{CBD934B7-CBF5-4FE0-BEEC-C973C33F8F3C}\chrome\content\_cfg.js
c:\documents and settings\Daniel\Local Settings\Application Data\{CBD934B7-CBF5-4FE0-BEEC-C973C33F8F3C}\chrome\content\overlay.xul
c:\documents and settings\Daniel\Local Settings\Application Data\{CBD934B7-CBF5-4FE0-BEEC-C973C33F8F3C}\install.rdf
c:\windows\ayenulohufaje.dll
D:\AUTORUN.INF
.
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_MOUSEDRIVER
-------\Service_MouseDriver
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-05-10 au 2011-06-10 ))))))))))))))))))))))))))))))))))))
.
.
2011-06-09 20:42 . 2011-06-09 20:42 -------- d-s---w- c:\documents and settings\NetworkService\UserData
2011-06-09 20:28 . 2011-06-09 20:28 -------- d-----w- c:\windows\system32\LogFiles
2011-06-09 19:58 . 2011-06-09 19:58 -------- d-----w- c:\program files\Ad-Remover
2011-06-09 18:18 . 2011-06-09 18:18 -------- d-----w- C:\rsit
2011-06-09 18:18 . 2011-06-09 18:18 -------- d-----w- c:\program files\trend micro
2011-06-08 23:16 . 2011-06-08 23:16 144 ----a-w- c:\documents and settings\Daniel\Application Data\1t81v4bzz.bat
2011-06-08 23:15 . 2011-06-08 23:15 144 ----a-w- c:\documents and settings\Daniel\Application Data\qiwpjt0oo.bat
2011-06-08 23:13 . 2011-06-08 23:14 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\crazyloader Air
2011-06-08 23:13 . 2011-06-08 23:13 -------- d-----r- c:\documents and settings\NetworkService\Favoris
2011-06-08 23:12 . 2011-06-08 23:12 -------- d-----w- c:\documents and settings\NetworkService\Menu Démarrer
2011-06-08 23:11 . 2011-06-08 23:11 -------- d-----w- c:\program files\SweetIM
2011-06-08 23:11 . 2011-06-08 23:11 -------- d-----w- c:\documents and settings\All Users\Application Data\SweetIM
2011-06-08 23:11 . 2011-06-08 23:12 -------- d-----w- c:\program files\WhiteSmoke
2011-06-08 23:11 . 2011-06-08 23:11 144 ----a-w- c:\documents and settings\Daniel\Application Data\tlzsmw3rr.bat
2011-06-08 23:10 . 2011-06-08 23:10 144 ----a-w- c:\documents and settings\Daniel\Application Data\ibpiclsh.bat
2011-06-08 23:06 . 2011-06-08 23:06 144 ----a-w- c:\documents and settings\Daniel\Application Data\h9ohbkrf.bat
2011-06-08 23:03 . 2011-06-08 23:03 144 ----a-w- c:\documents and settings\Daniel\Application Data\4wa4x7e22.bat
2011-06-08 22:59 . 2011-06-08 22:59 144 ----a-w- c:\documents and settings\Daniel\Application Data\7ze70ah5.bat
2011-06-08 22:58 . 2011-06-08 22:58 144 ----a-w- c:\documents and settings\Daniel\Application Data\meslfpwk.bat
2011-06-08 22:56 . 2011-06-08 22:56 144 ----a-w- c:\documents and settings\Daniel\Application Data\jbpiclth.bat
2011-06-08 22:56 . 2011-06-08 22:56 144 ----a-w- c:\documents and settings\Daniel\Application Data\g8mf9iqe.bat
2011-06-08 22:56 . 2011-06-08 22:56 144 ----a-w- c:\documents and settings\Daniel\Application Data\e7le8hod.bat
2011-06-08 22:56 . 2011-06-08 22:56 144 ----a-w- c:\documents and settings\Daniel\Application Data\c5jc6fmb.bat
2011-06-08 22:55 . 2011-06-08 22:55 144 ----a-w- c:\documents and settings\Daniel\Application Data\h9nhakrf.bat
2011-06-08 22:55 . 2011-06-08 22:55 144 ----a-w- c:\documents and settings\Daniel\Application Data\phvoisznn.bat
2011-06-08 22:53 . 2011-06-08 22:53 144 ----a-w- c:\documents and settings\Daniel\Application Data\wo2vpz6uu.bat
2011-06-08 22:51 . 2011-06-08 22:51 144 ----a-w- c:\documents and settings\Daniel\Application Data\b3ib4el9.bat
2011-06-08 22:50 . 2011-06-08 22:50 144 ----a-w- c:\documents and settings\Daniel\Application Data\rjxqku1pp.bat
2011-06-08 22:49 . 2011-06-10 06:59 0 ----a-w- c:\windows\Jgariwawanubili.bin
2011-06-08 22:49 . 2011-06-08 22:49 144 ----a-w- c:\documents and settings\Daniel\Application Data\91f82cj7.bat
2011-06-08 22:47 . 2011-06-08 22:47 144 ----a-w- c:\documents and settings\Daniel\Application Data\phvoirznm.bat
2011-06-08 22:45 . 2011-06-08 22:45 102400 --sha-r- c:\windows\system32\kbdmaorix.dll
2011-06-08 22:45 . 2011-06-08 22:45 102400 --sha-r- c:\windows\system32\kbdbuy.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-02 20:09 . 2011-04-02 20:09 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-04-02 20:01 . 2011-04-02 20:01 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
1999-04-06 13:27 . 1999-04-06 13:27 99840 ----a-w- c:\program files\Fichiers communs\IRAABOUT.DLL
1998-12-09 03:53 . 1998-12-09 03:53 70144 ----a-w- c:\program files\Fichiers communs\IRAMDMTR.DLL
1998-12-09 03:53 . 1998-12-09 03:53 48640 ----a-w- c:\program files\Fichiers communs\IRALPTTR.DLL
1998-12-09 03:53 . 1998-12-09 03:53 31744 ----a-w- c:\program files\Fichiers communs\IRAWEBTR.DLL
1998-12-09 03:53 . 1998-12-09 03:53 186368 ----a-w- c:\program files\Fichiers communs\IRAREG.DLL
1998-12-09 03:53 . 1998-12-09 03:53 17920 ----a-w- c:\program files\Fichiers communs\IRASRIAL.DLL
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Gestionnaire Antidote.exe"="c:\progra~1\Druide\Antidote\Gestionnaire Antidote.exe" [2008-12-03 542136]
"BitTorrent"="c:\program files\BitTorrent\bittorrent.exe" [2011-06-07 400760]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG7_EMC"="c:\progra~1\Grisoft\AVG7\avgemc.exe" [2004-02-29 186420]
"SunJavaUpdateSched"="c:\program files\Fichiers communs\Java\Java Update\jusched.exe" [2010-02-18 248040]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160]
"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2010-07-04 17408]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2004-02-12 49152]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 241664]
"SweetIM"="c:\program files\SweetIM\Messenger\SweetIM.exe" [2011-03-13 114992]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2004-02-29 98304]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"="start http:" [X]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-19 15360]
.
c:\documents and settings\NetworkService\Menu D'marrer\Programmes\D'marrage\
Launch WhiteSmoke.lnk - c:\program files\WhiteSmoke\WSEnrichment.exe [2011-4-12 2162688]
.
c:\documents and settings\NetworkService\Menu D'marrer\Programmes\D'marrage\
Launch WhiteSmoke.lnk - c:\program files\WhiteSmoke\WSEnrichment.exe [2011-4-12 2162688]
.
c:\documents and settings\NetworkService\Menu D'marrer\Programmes\D'marrage\
Launch WhiteSmoke.lnk - c:\program files\WhiteSmoke\WSEnrichment.exe [2011-4-12 2162688]
.
c:\documents and settings\Daniel\Menu D'marrer\Programmes\D'marrage\
MagicDisc.lnk - c:\program files\MagicDisc\MagicDisc.exe [N/A]
RollerCoaster Tycoon 3 Registration.lnk - c:\documents and settings\Daniel\Local Settings\Temp\{C73CE7FF-81AF-4D63-A827-863F32B3C8F1}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe [N/A]
.
c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
ComproRemote.lnk - c:\program files\Fichiers communs\VideoMate\ComproRemote.exe [2010-10-16 147456]
ComproScheduler.lnk - c:\program files\Fichiers communs\VideoMate\ComproScheduler.exe [2010-10-16 69632]
D'marrage rapide du logiciel HP Image Zone.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2004-5-29 53248]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2004-5-28 241664]
TL-WN321G Wireless Utility.lnk - c:\program files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe [2010-3-2 622592]
TweakYC.lnk - c:\program files\VideoMate\ComproPVR 2\TweakYC.exe [2010-10-16 516096]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2004-2-29 106561]
.
c:\documents and settings\NetworkService\Menu D'marrer\Programmes\D'marrage\
Launch WhiteSmoke.lnk - c:\program files\WhiteSmoke\WSEnrichment.exe [2011-4-12 2162688]
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Symantec Fax Starter Edition Port.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Symantec Fax Starter Edition Port.lnk
backup=c:\windows\pss\Symantec Fax Starter Edition Port.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^WinZip Quick Pick.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\WinZip Quick Pick.lnk
backup=c:\windows\pss\WinZip Quick Pick.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2003-12-30 23:10 229376 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2004-02-29 18:57 98304 -c--a-w- c:\program files\QuickTime\qttask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Smapp]
2002-06-26 22:36 90112 -c--a-w- c:\program files\Analog Devices\SoundMAX\SMTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2004-02-29 18:46 151597 -c--a-w- c:\program files\Fichiers communs\Real\Update_OB\realsched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaws.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer_Service.exe"=
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [05/08/2010 23:49 721904]
R2 TeamViewer6;TeamViewer 6;c:\program files\TeamViewer\Version6\TeamViewer_Service.exe [20/02/2011 00:01 2253688]
R3 PhTVTune;VideoMate TV Tuner;c:\windows\system32\drivers\PhTVTune.sys [16/10/2010 19:31 19840]
.
Contenu du dossier 'Tâches planifiées'
.
2011-06-10 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2010-03-06 03:18]
.
.
------- Examen supplémentaire -------
.
uInternet Connection Wizard,ShellNext = iexplore
TCP: DhcpNameServer = 192.168.0.1
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Daniel\Application Data\Mozilla\Firefox\Profiles\71grxzbe.default\
FF - prefs.js: browser.search.selectedEngine - AVG Secure Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.ca/
FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=4b91abd2&v=6.103.018.001&i=23&tp=ab&iy=&ychte=cf&lng=fr&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Softonic_France Toolbar: {4daac69c-cba7-45e2-9bc8-1044483d3352} - %profile%\extensions\{4daac69c-cba7-45e2-9bc8-1044483d3352}
FF - Ext: Canadian English Dictionary: en-CA@dictionaries.addons.mozilla.org - %profile%\extensions\en-CA@dictionaries.addons.mozilla.org
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Garmin Communicator: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E} - %profile%\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF - Ext: AutocompletePro - Your handy search suggestions tool: support@predictad.com - %profile%\extensions\support@predictad.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
- - - - ORPHELINS SUPPRIMES - - - -
.
URLSearchHooks-{4daac69c-cba7-45e2-9bc8-1044483d3352} - (no file)
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
HKCU-Run-KOQMLYTPE7 - c:\windows\Ytadea.exe
HKCU-Run-Syaxeri - c:\windows\wmsdupi.dll
HKLM-Run-Yyuhesebevaxi - c:\windows\ayenulohufaje.dll
HKLM-Run-sp4jke - c:\documents and settings\Daniel\Application Data\25e23d.exe
HKLM-Run-bipro - c:\windows\$XNTUninstall643$\wktly.dll
MSConfigStartUp-AdaptecDirectCD - c:\program files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
MSConfigStartUp-CreateCD50 - c:\progra~1\FICHIE~1\ADAPTE~1\CreateCD\CREATE~1.EXE
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-06-10 14:19
Windows 5.1.2600 Service Pack 2 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - > 'winlogon.exe'(740)
c:\windows\system32\Ati2evxx.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\System32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\System32\gearsec.exe
c:\windows\system32\rundll32.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Analog Devices\SoundMAX\SMAgent.exe
c:\windows\System32\wdfmgr.exe
c:\program files\TeamViewer\Version6\TeamViewer.exe
c:\windows\System32\wbem\wmiapsrv.exe
c:\program files\HP\Digital Imaging\bin\hpqgalry.exe
c:\windows\system32\HPZipm12.exe
.
**************************************************************************
.
Heure de fin: 2011-06-10 14:24:29 - La machine a redémarré
ComboFix-quarantined-files.txt 2011-06-10 18:24
.
Avant-CF: 18 994 372 608 octets libres
Après-CF: 19 090 792 448 octets libres
.
WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /fastdetect /NoExecute=OptIn
.
- - End Of File - - 79C264E5DD777DFD175A427508E5BB8E
0
Réponse 6 / 19
Xplode Messages postés 8820 Date d'inscription vendredi 21 août 2009 Statut Contributeur sécurité Dernière intervention 2 juillet 2015 726
10 juin 2011 à 20:39
Il reste pas mal d'éléments à supprimer.

-+-+-+-+-> CFScript <-+-+-+-+-

/!\ Attention : Cette procédure n'est valable que pour superman1221 /!\

[x] Copie le texte en gras ci dessous :


KillAll::
SysRst::

Firefox::

FF - Ext: Softonic_France Toolbar: {4daac69c-cba7-45e2-9bc8-1044483d3352} - %profile%\extensions\{4daac69c-cba7-45e2-9bc8-1044483d3352}

File::

c:\documents and settings\NetworkService\Menu D'marrer\Programmes\D'marrage\Launch WhiteSmoke.lnk
c:\documents and settings\Daniel\Application Data\*.bat
c:\windows\Jgariwawanubili.bin
c:\windows\system32\kbdbuy.dll
c:\windows\system32\kbdmaorix.dll

Folder::

c:\program files\WhiteSmoke
c:\program files\sweetim
c:\documents and settings\NetworkService\Local Settings\Application Data\crazyloader Air
c:\documents and settings\All Users\Application Data\SweetIM


Registry::

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"=-

Reboot::


[x] Ouvre le bloc-note puis colle le texte ci dessus dedans.

[x] Enregistre ce fichier sur ton bureau ( appelle le CFScript.txt ).

[x] Fais un glisser/déposer de ce fichier sur combofix.exe comme expliqué ici.

[x] Combofix va se lancer, patiente le temps du scan.

/!\ Ne fais rien pendant le scan ( clavier/souris ) /!\

[x] Poste le contenu du rapport qui s'ouvrira dans ta prochaine réponse.
0
Réponse 7 / 19
superman1221 Messages postés 128 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 4 juin 2012 3
10 juin 2011 à 21:56
ComboFix 11-06-10.05 - Daniel 10/06/2011 15:30:54.2.1 - x86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.1535.1162 [GMT -4:00]
Lancé depuis: c:\documents and settings\Daniel\Bureau\Virus\ComboFix.exe
Commutateurs utilisés :: c:\documents and settings\Daniel\Bureau\CFScript.txt
.
FILE ::
"c:\documents and settings\NetworkService\Menu D'marrer\Programmes\D'marrage\Launch WhiteSmoke.lnk"
"c:\windows\Jgariwawanubili.bin"
"c:\windows\system32\kbdbuy.dll"
"c:\windows\system32\kbdmaorix.dll"
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\SweetIM
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\conf\adapter.xml
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\conf\autoupdate.xml
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\conf\contentpackages.xml
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\conf\logger.xml
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\conf\messages.xml
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\conf\sweetim.xml
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\conf\sweetimapp.xml
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\conf\users\main_user_config.xml
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\data\Bars\Default\bar.html
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\data\Bars\Default\bar.js
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\data\Bars\Default\bar.swf
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\data\contentdb\cache_indx.dat
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\data\packages\FailDialog\activationFail.htm
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\data\packages\FailDialog\close_but.gif
c:\documents and settings\All Users\Application Data\SweetIM\Messenger\data\packages\FailDialog\failure_dialog_BG.jpg
c:\documents and settings\NetworkService\Local Settings\Application Data\crazyloader Air
c:\documents and settings\NetworkService\Local Settings\Application Data\crazyloader Air\cid.txt
c:\documents and settings\NetworkService\Local Settings\Application Data\crazyloader Air\config.sxe
c:\documents and settings\NetworkService\Local Settings\Application Data\crazyloader Air\country.sxe
c:\documents and settings\NetworkService\Local Settings\Application Data\crazyloader Air\country.sxe.tmp
c:\documents and settings\NetworkService\Local Settings\Application Data\crazyloader Air\history.db
c:\documents and settings\NetworkService\Local Settings\Application Data\crazyloader Air\update.sxe
c:\documents and settings\NetworkService\Local Settings\Application Data\crazyloader Air\update.xml
c:\program files\sweetim
c:\program files\sweetim\Messenger\ContentPackagesActivationHandler.exe
c:\program files\sweetim\Messenger\default.xml
c:\program files\sweetim\Messenger\mgAdaptersProxy.dll
c:\program files\sweetim\Messenger\mgArchive.dll
c:\program files\sweetim\Messenger\mgcommon.dll
c:\program files\sweetim\Messenger\mgcommunication.dll
c:\program files\sweetim\Messenger\mgconfig.dll
c:\program files\sweetim\Messenger\mgFlashPlayer.dll
c:\program files\sweetim\Messenger\mghooking.dll
c:\program files\sweetim\Messenger\mgICQAuto.dll
c:\program files\sweetim\Messenger\mgICQMessengerAdapter.dll
c:\program files\sweetim\Messenger\mglogger.dll
c:\program files\sweetim\Messenger\mgMediaPlayer.dll
c:\program files\sweetim\Messenger\mgMsnAuto.dll
c:\program files\sweetim\Messenger\mgMsnMessengerAdapter.dll
c:\program files\sweetim\Messenger\mgsimcommon.dll
c:\program files\sweetim\Messenger\mgSweetIM.dll
c:\program files\sweetim\Messenger\mgUpdateSupport.dll
c:\program files\sweetim\Messenger\mgxml_wrapper.dll
c:\program files\sweetim\Messenger\mgYahooAuto.dll
c:\program files\sweetim\Messenger\mgYahooMessengerAdapter.dll
c:\program files\sweetim\Messenger\msvcp71.dll
c:\program files\sweetim\Messenger\msvcr71.dll
c:\program files\sweetim\Messenger\resources\images\AudibleButton.png
c:\program files\sweetim\Messenger\resources\images\DisplayPicturesButton.png
c:\program files\sweetim\Messenger\resources\images\EmoticonButton.png
c:\program files\sweetim\Messenger\resources\images\GamesButton.png
c:\program files\sweetim\Messenger\resources\images\KeyboardButton.png
c:\program files\sweetim\Messenger\resources\images\NudgeButton.png
c:\program files\sweetim\Messenger\resources\images\SoundFxButton.png
c:\program files\sweetim\Messenger\resources\images\WinksButton.png
c:\program files\sweetim\Messenger\resources\sqlite\mgSqlite3.dll
c:\program files\sweetim\Messenger\SweetIM.exe
c:\program files\WhiteSmoke
c:\program files\WhiteSmoke\buy.ico
c:\program files\WhiteSmoke\ComVistaElevator.dll
c:\program files\WhiteSmoke\FloatButtonWhiteApps.txt
c:\program files\WhiteSmoke\FuncServer_WDC_x64.exe
c:\program files\WhiteSmoke\HookDllOE.dll
c:\program files\WhiteSmoke\HookDllOE64.dll
c:\program files\WhiteSmoke\html\english\common\iepngfix\blank.gif
c:\program files\WhiteSmoke\html\english\common\iepngfix\checkerboard.gif
c:\program files\WhiteSmoke\html\english\common\iepngfix\helix.gif
c:\program files\WhiteSmoke\html\english\common\iepngfix\iepngfix.htc
c:\program files\WhiteSmoke\html\english\common\iepngfix\iepngfix.html
c:\program files\WhiteSmoke\html\english\common\iepngfix\opacity.png
c:\program files\WhiteSmoke\html\english\common\js\common.js
c:\program files\WhiteSmoke\html\english\common\js\pngfix.js
c:\program files\WhiteSmoke\html\english\common\js\prototype.js
c:\program files\WhiteSmoke\html\english\common\js\xmlhttp.js
c:\program files\WhiteSmoke\html\english\dictClientDic\dictionary.html
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\ajax-loader.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\corner_bottom_left.png
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\corner_bottom_right.png
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\corner_top_left.png
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\corner_top_right.png
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\down_arrow.png
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\input_bg.png
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\input_bg_old.png
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\left_input.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\leftSide.png
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\leftSide2.png
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\loading_dictionary.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\right_input.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\rightSide.png
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Background\search_strip_bg3.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Buttons\down_arrow.png
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Buttons\go_over.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Buttons\go_press.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Buttons\go_up.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Buttons\humanTranslation_press.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Buttons\humanTranslation_roll.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Buttons\humanTranslation_up.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Buttons\moreLang_press.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Buttons\moreLang_roll.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\img\Buttons\moreLang_up.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\img\spacer.gif
c:\program files\WhiteSmoke\html\english\dictClientDic\index.html
c:\program files\WhiteSmoke\html\english\dictClientDic\js\common.js
c:\program files\WhiteSmoke\html\english\dictClientDic\js\Contextmenu.js
c:\program files\WhiteSmoke\html\english\dictClientDic\js\dictInterface.js
c:\program files\WhiteSmoke\html\english\dictClientDic\js\jquery-1.4.2.min.js
c:\program files\WhiteSmoke\html\english\dictClientDic\js\jquery.combobox.js
c:\program files\WhiteSmoke\html\english\dictClientDic\js\jquery.js
c:\program files\WhiteSmoke\html\english\dictClientDic\js\prototype.js
c:\program files\WhiteSmoke\html\english\dictClientDic\js\transInterface.js
c:\program files\WhiteSmoke\html\english\dictClientDic\js\xmlhttp.js
c:\program files\WhiteSmoke\html\english\dictClientDic\style\combobox.css
c:\program files\WhiteSmoke\html\english\dictClientDic\style\Contextmenu.css
c:\program files\WhiteSmoke\html\english\dictClientDic\style\dictionary.css
c:\program files\WhiteSmoke\html\english\dictClientDic\translator.html
c:\program files\WhiteSmoke\html\english\floatingButton\blue-Q-rollover.gif
c:\program files\WhiteSmoke\html\english\floatingButton\blue-rollover.gif
c:\program files\WhiteSmoke\html\english\floatingButton\blue-X-rollover.gif
c:\program files\WhiteSmoke\html\english\floatingButton\blue.gif
c:\program files\WhiteSmoke\html\english\floatingButton\index.html
c:\program files\WhiteSmoke\html\english\floatingButton\red&blue.gif
c:\program files\WhiteSmoke\html\english\floatingButton\Thumbs.db
c:\program files\WhiteSmoke\html\english\floatingButton_howto\img\Background\howto_bg.gif
c:\program files\WhiteSmoke\html\english\floatingButton_howto\img\spacer.gif
c:\program files\WhiteSmoke\html\english\floatingButton_howto\img\Thumbs.db
c:\program files\WhiteSmoke\html\english\floatingButton_howto\index.html
c:\program files\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\blank.gif
c:\program files\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\checkerboard.gif
c:\program files\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\helix.gif
c:\program files\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\iepngfix.htc
c:\program files\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\iepngfix.html
c:\program files\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\opacity.png
c:\program files\WhiteSmoke\html\english\floatingButton_howto\js\index.js
c:\program files\WhiteSmoke\html\english\floatingButton_howto\style\style.css
c:\program files\WhiteSmoke\html\english\gui\img\Background\ajax-loader.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\base_fade_px.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\blue.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\blue_bg_.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\blue_dark_bg.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\blue_dark_bg_.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\blue_top_bg_.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\bottom_grey_strip.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\buttons_tray_px.p_goldng
c:\program files\WhiteSmoke\html\english\gui\img\Background\buttons_tray_px.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\caption_bar_re_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\caption_bar_re_over.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\caption_bar_re_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\caption_bottom_px.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\caption_px.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\caption_strip_right_corner.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\cascade.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\collapse.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\context_bl2.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\context_br2.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\context_dot.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\context_menu_bg.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\context_sub_menu_bg.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\context_submenu.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\context_submenu_dis.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\context_tl2.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\context_tr2.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\Copy of notice_right_top_bg.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\down_arrow.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\dpreloader.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\edit_footer_left.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\edit_footer_px.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\edit_footer_right.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\edit_header_left.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\edit_header_px.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\edit_header_right.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\edit_sidefade.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\feather.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\green.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\input_bg.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\inputline_fade_px.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\left_input.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\leftBottom3.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\leftSide.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\leftSide2.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\leftSide3.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\logo.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\logo.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\logo2.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\main_background.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\main_background_11.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\main_background_old.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\notice_checkbox_checked.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\notice_checkbox_unchecked.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\red.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\red2.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\resize_gripper.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\result_area_top_bg.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\right_input.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\rightBottom.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\rightSide.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\rightSide2.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\rightSide2_11.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\spacer.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\spacer_.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\strike_blue.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\strike_green.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\strike_green2.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\strike_purple.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\strike_red.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\summaryline_apply_down.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\summaryline_apply_roll.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\summaryline_apply_up.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\summaryline_check_down.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\summaryline_check_roll.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\summaryline_check_up.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\summaryline_left_corner.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\summaryline_px.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\summaryline_right_corner.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\ticket.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\top_grey_strip.gif
c:\program files\WhiteSmoke\html\english\gui\img\Background\topButtonsLeft.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\topButtonsLeft__.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\topButtonsLeft_from_home.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\topButtonsRight.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\topRightBorder.png
c:\program files\WhiteSmoke\html\english\gui\img\Background\wslogo.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\blue.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\bottom_right_corner.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\buttons_tray_px.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\caption_bar_re_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\caption_bar_re_over.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\caption_bar_re_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\caption_bottom_px.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\caption_px.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\caption_strip_right_corner.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\get-full.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\get-full3.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\green.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\help_down.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\help_roll.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\help_up.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\left_input.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\logo.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\logo.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\logo2.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\main_background.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_dictionary_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_dictionary_on.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_dictionary_roll.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_dictionary_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_templates_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_templates_on.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_templates_roll.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_templates_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_toolkit_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_toolkit_on.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_toolkit_roll.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_toolkit_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_translator_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_translator_on.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_translator_roll.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_translator_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_tutorials_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_tutorials_on.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_tutorials_roll.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_tutorials_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_writer_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_writer_on.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_writer_roll.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\menuline_writer_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\red.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\red2.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\right_input.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\sitting_down.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\sitting_roll.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\sitting_up.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\smallclosebutton.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\store_down.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\store_roll.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\store_up.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\summaryline_apply_down.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\summaryline_apply_roll.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\summaryline_apply_up.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\summaryline_check_down.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\summaryline_check_roll.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\summaryline_check_up.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\summaryline_px.png
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\x.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\x.jpg
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\x_hover.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\x_hover_old.gif
c:\program files\WhiteSmoke\html\english\gui\img\Buttons\x_old.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\blue.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\bottom_right_corner.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\buttons_tray_px.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_close_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_close_over.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_close_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_max_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_max_over.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_max_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_re_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_re_over.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_re_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\caption_bottom_px.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\caption_px.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\caption_px_11.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\green.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\left_input.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\leftCaptionCorner.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\leftCaptionCorner2.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\logo.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\logo_1.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\logo3.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\logologo2_11.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\main_background.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_dictionary_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_dictionary_on.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_dictionary_roll.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_dictionary_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_templates_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_templates_on.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_templates_roll.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_templates_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_toolkit_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_toolkit_on.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_toolkit_roll.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_toolkit_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_translator_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_translator_on.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_translator_roll.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_translator_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_tutorials_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_tutorials_on.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_tutorials_roll.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_tutorials_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_writer_down.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_writer_on.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_writer_roll.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\menuline_writer_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\red.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\red2.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\right_input.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner2.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner3.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner3_11.gif
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\store_down.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\store_roll.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\store_up.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\summaryline_apply_down.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\summaryline_apply_roll.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\summaryline_apply_up.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\summaryline_check_down.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\summaryline_check_roll.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\summaryline_check_up.png
c:\program files\WhiteSmoke\html\english\gui\img\captionbar\summaryline_px.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\addto_disabled.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\addto_hover.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\addto_up.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\definition_disabled.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\definition_hover.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\definition_up.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\enrichment_disabled.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\enrichment_hover.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\enrichment_up.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\explanation_disabled.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\explanation_hover.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\explanation_up.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\grammarexpclosebutton.gif
c:\program files\WhiteSmoke\html\english\gui\img\grammar\howto_disabled.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\howto_hover.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\howto_up.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\search_disabled.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\search_hover.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\search_up.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\thesaurus_disabled.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\thesaurus_hover.png
c:\program files\WhiteSmoke\html\english\gui\img\grammar\thesaurus_up.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\closedy2.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\content-review4.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\dot.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\down-content.gif
c:\program files\WhiteSmoke\html\english\gui\img\review-section\down.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\grade1.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\grade2.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\grade3.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\grade4.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\grade5.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\li-content.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\opencq8.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\report.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\score1.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\score2.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\score3.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\score4.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\score5.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\shadow.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\shadow2.png
c:\program files\WhiteSmoke\html\english\gui\img\review-section\shdow.gif
c:\program files\WhiteSmoke\html\english\gui\img\review-section\shdow_good.gif
c:\program files\WhiteSmoke\html\english\gui\img\screens\button_no_down.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\button_no_up.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\button_yes_down.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\button_yes_up.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\caption_bar_close_over.gif
c:\program files\WhiteSmoke\html\english\gui\img\screens\ico_analyze.gif
c:\program files\WhiteSmoke\html\english\gui\img\screens\ico_complete.gif
c:\program files\WhiteSmoke\html\english\gui\img\screens\ico_connection.gif
c:\program files\WhiteSmoke\html\english\gui\img\screens\ico_expired.gif
c:\program files\WhiteSmoke\html\english\gui\img\screens\loading_window.gif
c:\program files\WhiteSmoke\html\english\gui\img\screens\loading_window.swf
c:\program files\WhiteSmoke\html\english\gui\img\screens\myWelcome.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\screen_bg.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\screen_bg_bottom.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\screen_bg_gold.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\screen_bg_old.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\screen_bg_top.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\screen_captionbar_press.gif
c:\program files\WhiteSmoke\html\english\gui\img\screens\screen_captionbar_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\screens\screen_getitnow_press.gif
c:\program files\WhiteSmoke\html\english\gui\img\screens\screen_getitnow_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\screens\screen_ok_press.gif
c:\program files\WhiteSmoke\html\english\gui\img\screens\screen_ok_press.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\screen_ok_up.gif
c:\program files\WhiteSmoke\html\english\gui\img\screens\screen_ok_up.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\screen_ok_up_11.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\welcomeClose_down.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\welcomeClose_over.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\welcomeClose_up.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\welcomeGo_down.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\welcomeGo_over.png
c:\program files\WhiteSmoke\html\english\gui\img\screens\welcomeGo_up.png
c:\program files\WhiteSmoke\html\english\gui\img\spacer.gif
c:\program files\WhiteSmoke\html\english\gui\index.html
c:\program files\WhiteSmoke\html\english\gui\js\appInterface.js
c:\program files\WhiteSmoke\html\english\gui\js\builder.pack.js
c:\program files\WhiteSmoke\html\english\gui\js\common.js
c:\program files\WhiteSmoke\html\english\gui\js\Contextmenu.js
c:\program files\WhiteSmoke\html\english\gui\js\controls.pack.js
c:\program files\WhiteSmoke\html\english\gui\js\dictionaryContextMenu.class.js
c:\program files\WhiteSmoke\html\english\gui\js\dragdrop.pack.js
c:\program files\WhiteSmoke\html\english\gui\js\effects.pack.js
c:\program files\WhiteSmoke\html\english\gui\js\enrichmentContextMenu.class.js
c:\program files\WhiteSmoke\html\english\gui\js\enrichmentsContextMenu.class.js
c:\program files\WhiteSmoke\html\english\gui\js\final.js
c:\program files\WhiteSmoke\html\english\gui\js\gmonitor.js
c:\program files\WhiteSmoke\html\english\gui\js\grammarCache.class.js
c:\program files\WhiteSmoke\html\english\gui\js\grammarContextMenu.class.js
c:\program files\WhiteSmoke\html\english\gui\js\iepngfix\blank.gif
c:\program files\WhiteSmoke\html\english\gui\js\iepngfix\checkerboard.gif
c:\program files\WhiteSmoke\html\english\gui\js\iepngfix\helix.gif
c:\program files\WhiteSmoke\html\english\gui\js\iepngfix\iepngfix.htc
c:\program files\WhiteSmoke\html\english\gui\js\iepngfix\iepngfix.html
c:\program files\WhiteSmoke\html\english\gui\js\iepngfix\opacity.png
c:\program files\WhiteSmoke\html\english\gui\js\iframeTest.js
c:\program files\WhiteSmoke\html\english\gui\js\jqModal.js
c:\program files\WhiteSmoke\html\english\gui\js\jquery-1.2.6.pack.NotUSED.js
c:\program files\WhiteSmoke\html\english\gui\js\jquery-1.3.2.js
c:\program files\WhiteSmoke\html\english\gui\js\jquery-1.3.2.min.js
c:\program files\WhiteSmoke\html\english\gui\js\jquery.ba-throttle-debounce.js
c:\program files\WhiteSmoke\html\english\gui\js\jquery.jeegoocontext.min.js
c:\program files\WhiteSmoke\html\english\gui\js\monitor.js
c:\program files\WhiteSmoke\html\english\gui\js\NonPackedVersion\builder.js
c:\program files\WhiteSmoke\html\english\gui\js\NonPackedVersion\controls.js
c:\program files\WhiteSmoke\html\english\gui\js\NonPackedVersion\dragdrop.js
c:\program files\WhiteSmoke\html\english\gui\js\NonPackedVersion\effects.js
c:\program files\WhiteSmoke\html\english\gui\js\NonPackedVersion\prototype.js
c:\program files\WhiteSmoke\html\english\gui\js\NonPackedVersion\slider.js
c:\program files\WhiteSmoke\html\english\gui\js\NonPackedVersion\sound.js
c:\program files\WhiteSmoke\html\english\gui\js\prototype.pack.js
c:\program files\WhiteSmoke\html\english\gui\js\scriptaculous.js
c:\program files\WhiteSmoke\html\english\gui\js\slider.pack.js
c:\program files\WhiteSmoke\html\english\gui\js\sound.pack.js
c:\program files\WhiteSmoke\html\english\gui\js\spellingContextMenu.class.js
c:\program files\WhiteSmoke\html\english\gui\js\summary.js
c:\program files\WhiteSmoke\html\english\gui\js\supersleight.js
c:\program files\WhiteSmoke\html\english\gui\js\switchcontent.js
c:\program files\WhiteSmoke\html\english\gui\js\tooltip.js
c:\program files\WhiteSmoke\html\english\gui\js\unittest.js
c:\program files\WhiteSmoke\html\english\gui\js\ws_content_manager.js
c:\program files\WhiteSmoke\html\english\gui\js\ws_functions.js
c:\program files\WhiteSmoke\html\english\gui\js\ws_links.js
c:\program files\WhiteSmoke\html\english\gui\js\x.gif
c:\program files\WhiteSmoke\html\english\gui\js\xmlhttp.js
c:\program files\WhiteSmoke\html\english\gui\js\ypSlideOutMenus.js
c:\program files\WhiteSmoke\html\english\gui\js\ypSlideOutMenusContext.js
c:\program files\WhiteSmoke\html\english\gui\style\combobox.css
c:\program files\WhiteSmoke\html\english\gui\style\Contextmenu.css
c:\program files\WhiteSmoke\html\english\gui\style\dictionary.css
c:\program files\WhiteSmoke\html\english\gui\style\enrichment.css
c:\program files\WhiteSmoke\html\english\gui\style\enrichments.css
c:\program files\WhiteSmoke\html\english\gui\style\grammar.css
c:\program files\WhiteSmoke\html\english\gui\style\iframeTest.css
c:\program files\WhiteSmoke\html\english\gui\style\indexnew.css
c:\program files\WhiteSmoke\html\english\gui\style\jeegoo.css
c:\program files\WhiteSmoke\html\english\gui\style\jqModal.css
c:\program files\WhiteSmoke\html\english\gui\style\screens.css
c:\program files\WhiteSmoke\html\english\gui\style\spelling.css
c:\program files\WhiteSmoke\html\english\registration\img\banner.gif
c:\program files\WhiteSmoke\html\english\registration\img\banner.png
c:\program files\WhiteSmoke\html\english\registration\img\captionbar\caption_bar_close_down.gif
c:\program files\WhiteSmoke\html\english\registration\img\captionbar\caption_bar_close_up.gif
c:\program files\WhiteSmoke\html\english\registration\img\captionbar\caption_bar_close_up_over.gif
c:\program files\WhiteSmoke\html\english\registration\img\continue_button_click.gif
c:\program files\WhiteSmoke\html\english\registration\img\continue_button_over.gif
c:\program files\WhiteSmoke\html\english\registration\img\continue_button_up.gif
c:\program files\WhiteSmoke\html\english\registration\img\down.gif
c:\program files\WhiteSmoke\html\english\registration\img\down.png
c:\program files\WhiteSmoke\html\english\registration\img\f2.gif
c:\program files\WhiteSmoke\html\english\registration\index.html
c:\program files\WhiteSmoke\html\english\registration\js\regInterface.js
c:\program files\WhiteSmoke\html\english\registration\style\registration.css
c:\program files\WhiteSmoke\html\english\settings\css\index.css
c:\program files\WhiteSmoke\html\english\settings\img\Background\logo.png
c:\program files\WhiteSmoke\html\english\settings\img\Background\main_bg.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\cancel_disabled.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\cancel_down.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\cancel_over.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\cancel_up.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\save_disabled.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\save_down.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\save_over.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\save_up.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_connection_disabled.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_connection_off.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_connection_on.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_content_disabled.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_content_off.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_content_on.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_general_disabled.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_general_off.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_general_on.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_info_disabled.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_info_off.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_info_on.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_shortcut_disabled.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_shortcut_off.png
c:\program files\WhiteSmoke\html\english\settings\img\Buttons\tab_shortcut_on.png
c:\program files\WhiteSmoke\html\english\settings\img\captionbar\caption_bar_close_down.gif
c:\program files\WhiteSmoke\html\english\settings\img\captionbar\caption_bar_close_over.gif
c:\program files\WhiteSmoke\html\english\settings\img\captionbar\caption_bar_close_up.gif
c:\program files\WhiteSmoke\html\english\settings\index.html
c:\program files\WhiteSmoke\html\english\settings\js\iepngfix\blank.gif
c:\program files\WhiteSmoke\html\english\settings\js\iepngfix\checkerboard.gif
c:\program files\WhiteSmoke\html\english\settings\js\iepngfix\helix.gif
c:\program files\WhiteSmoke\html\english\settings\js\iepngfix\iepngfix.htc
c:\program files\WhiteSmoke\html\english\settings\js\iepngfix\iepngfix.html
c:\program files\WhiteSmoke\html\english\settings\js\iepngfix\opacity.png
c:\program files\WhiteSmoke\html\english\settings\js\settingsInterface.js
c:\program files\WhiteSmoke\html\english\templates\dtree.css
c:\program files\WhiteSmoke\html\english\templates\dtree.js
c:\program files\WhiteSmoke\html\english\templates\General\Apologies\ApologyInnappropriateBehavior.html
c:\program files\WhiteSmoke\html\english\templates\General\Apologies\ApologyUnjustBehavior.html
c:\program files\WhiteSmoke\html\english\templates\General\Community Work\ResignationFromVoluntaryPosition.html
c:\program files\WhiteSmoke\html\english\templates\General\Condolences\LetterOfCondolence.html
c:\program files\WhiteSmoke\html\english\templates\General\Cover Letters\CoverLetter.html
c:\program files\WhiteSmoke\html\english\templates\General\Cover Letters\GrantCoverSheet.html
c:\program files\WhiteSmoke\html\english\templates\General\Family\FamilyNewsUpdate.html
c:\program files\WhiteSmoke\html\english\templates\General\Finance\AgreementToCompromiseDebt.html
c:\program files\WhiteSmoke\html\english\templates\General\Finance\BankError.html
c:\program files\WhiteSmoke\html\english\templates\General\Finance\DebtValidation.html
c:\program files\WhiteSmoke\html\english\templates\General\Finance\InvestigationOfBillingInquiry.html
c:\program files\WhiteSmoke\html\english\templates\General\Finance\LetterOfCreditGeneral.html
c:\program files\WhiteSmoke\html\english\templates\General\Finance\LetterOfCreditIrrevocable.html
c:\program files\WhiteSmoke\html\english\templates\General\Finance\LetterOfCreditRevolving.html
c:\program files\WhiteSmoke\html\english\templates\General\Finance\LetterOfDispute.html
c:\program files\WhiteSmoke\html\english\templates\General\Finance\RemovalOfInadequateInformation.html
c:\program files\WhiteSmoke\html\english\templates\General\Finance\ReplyToApplicationForCredit.html
c:\program files\WhiteSmoke\html\english\templates\General\Finance\RequestForIncreaseOfCreditLimit.html
c:\program files\WhiteSmoke\html\english\templates\General\Finance\ReturningUnsignedCheck.html
c:\program files\WhiteSmoke\html\english\templates\General\Finance\UnauthorizedCreditInquiry.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Christmas\AChristmasWish.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ArrivalOfChristmas.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Christmas\BlessingsAtChristmas.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasGreetings.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasGreetingsMessage.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasGreetingsToASpouse.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasGreetingsToWorkers.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasWishes.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Christmas\HappyChristmasGreeting.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Christmas\InTheStillOfTheNightChristmasGreeting.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Christmas\JoyousOccasion.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Christmas\LovePeaceAndJoy.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Christmas\MerryChristmasAndHappyNewYear.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Christmas\MerryChristmasToFamily.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Graduation\CongratulationsOnYourGraduation.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Graduation\CongratulationsToTheGraduate.html
c:\program files\WhiteSmoke\html\english\templates\General\Greetings\Graduation\YouHaveGraduated.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\EmployeePerformanceReviewAndPlanningSessions.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\EmploymentApplications.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\HealthRelatedIssues.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\NewEmployeeOrientation.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\TerminationOfEmployment.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\TuitionReimbursementPolicy.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\EmploymentReferenceLetter.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\JobReferenceLetter.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\LetterOfReference.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\ReferenceLetterByAcquaintance.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\RequestForEmployeeReferenceLetter.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\VerificationOfEmploymentLetter.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Letter Requesting Pay Raise.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Refusal of Resquest For Raise.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request for Leave of Absence.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request for Letter of Reference.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request for Meeting Regarding Pay Raise.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request for Paid or Unpaid Leave.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request For Salary Increase.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request to Schedule an Interview.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Acknowledgment of Job Application.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Confirmation of Job Dismissal.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Final Warning Before Dismissal.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Job Rejection Letter.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Job Rejection Letter2.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Rejection of Job Offer.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Employment Letter.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Introduction of New Employee.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Letter for Assistant Professor.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\LetterForTenureTrackAssociateProfessor.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Offer of Employment.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Request for Employment Test.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Job Acceptance\Accept or Decline Job Offer.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Job Acceptance\Job Acceptance Letter 2.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Job Acceptance\Job Acceptance Letter.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Job Acceptance\Job Offer Acceptance.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Thank You Letters\Thank You Letter After Interview.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Thank You Letters\Thank You to Applicant for Testing.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Resignation Letters\Acceptance of Employee's Resignation.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Resignation Letters\Employee Termination Notice.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Resignation Letters\Job Resignation Letter.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Personnel Office\Notice of Decision to Reprimand.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Cover Letter Auditor Development Program.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Job Application Letter.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Job Search Cover Letter - Disabled Citizens.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Job Search Cover Letter - Software Employment.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Law Internship Cover Letter.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Resume Cover Letter.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Resume Cover Letter2.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Letters of Recommendation\Letter of Recommendation.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Accounting Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Administrative Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Banking Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Customer Service Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Database and Application Developer Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\End User Trainer and Instructional Designer Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Engineering Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Freelance Marcom Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\General CV Format.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Graphic Designer Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Healthcare Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Internship Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Java Developer Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Management Resume 2.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Management Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Marketing Administrator Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Marketing Director Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Marketing Manager Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Medical Essay Residency Experience.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Medical Resume - Physician.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Medical Resume Partnership in General Practice.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\PowerPoint Designer Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Product Delivery Engineer Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Sales Representative Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Software QA Engineer Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Technical Publication Manager Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Technical Writer.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Web Developer Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Web Maintainer Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Literary\Advertising\Advertising Commitment Form.html
c:\program files\WhiteSmoke\html\english\templates\General\Literary\Advertising\Art Advertising Flyer.html
c:\program files\WhiteSmoke\html\english\templates\General\Literary\Advertising\Request for Advertising Rate.html
c:\program files\WhiteSmoke\html\english\templates\General\Literary\Advertising\Subscriber Letter News Service.html
c:\program files\WhiteSmoke\html\english\templates\General\Literary\Legal\Assignment of Literary Property.html
c:\program files\WhiteSmoke\html\english\templates\General\Literary\Promotions\Comments to Author Regarding Book.html
c:\program files\WhiteSmoke\html\english\templates\General\Literary\Promotions\Introduction of Novel.html
c:\program files\WhiteSmoke\html\english\templates\General\Literary\Promotions\Letter of Interest to Magazine.html
c:\program files\WhiteSmoke\html\english\templates\General\Literary\Promotions\Letter of Recommendation.html
c:\program files\WhiteSmoke\html\english\templates\General\Literary\Promotions\Magazine Review.html
c:\program files\WhiteSmoke\html\english\templates\General\Literary\Promotions\Promotional Letter Antique Shop.html
c:\program files\WhiteSmoke\html\english\templates\General\Literary\Resumes\Actor Resume.html
c:\program files\WhiteSmoke\html\english\templates\General\Personal Matters\Career Change.html
c:\program files\WhiteSmoke\html\english\templates\General\Personal Matters\Letter to a Friend Regarding Change of Job.html
c:\program files\WhiteSmoke\html\english\templates\General\Personal Matters\Sale of Automobile or Other Motor Vehicle.html
c:\program files\WhiteSmoke\html\english\templates\General\Personal Matters\Upset Regarding Loss of Job.html
c:\program files\WhiteSmoke\html\english\templates\General\Students\Admissions Essays\Admissions Essay for Entrance to Theater Institute.html
c:\program files\WhiteSmoke\html\english\templates\General\Students\Admissions Essays\Essay - Describe Events.html
c:\program files\WhiteSmoke\html\english\templates\General\Students\Admissions Essays\Graduate School Literary Essay.html
c:\program files\WhiteSmoke\html\english\templates\General\Students\Careers\Career Letter for Accounting Position.html
c:\program files\WhiteSmoke\html\english\templates\General\Students\Careers\Career Letter in Journalism.html
c:\program files\WhiteSmoke\html\english\templates\General\Students\Personal Correspondence\Compliment Student on Graduation.html
c:\program files\WhiteSmoke\html\english\templates\General\Students\Personal Correspondence\Congratulations to High School Graduate.html
c:\program files\WhiteSmoke\html\english\templates\General\Students\Personal Correspondence\Personal Letter of Recommendation.html
c:\program files\WhiteSmoke\html\english\templates\General\Students\Personal Correspondence\Request for Financial Assistance from Parents.html
c:\program files\WhiteSmoke\html\english\templates\General\Studen
0
Réponse 8 / 19
Xplode Messages postés 8820 Date d'inscription vendredi 21 août 2009 Statut Contributeur sécurité Dernière intervention 2 juillet 2015 726
11 juin 2011 à 13:27
Bonjour,

Le rapport Combofix n'est pas complet, peux-tu l'héberger sur pjjoint : http://pjjoint.malekal.com/ et me poster le lien ?
0
Réponse 9 / 19
superman1221 Messages postés 128 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 4 juin 2012 3
12 juin 2011 à 01:56
Voilà :

https://pjjoint.malekal.com/files.php?id=e8def9e852101414

merci
0
Réponse 10 / 19
superman1221 Messages postés 128 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 4 juin 2012 3
13 juin 2011 à 19:01
tu es toujours avec moi ?
0
Réponse 11 / 19
Xplode Messages postés 8820 Date d'inscription vendredi 21 août 2009 Statut Contributeur sécurité Dernière intervention 2 juillet 2015 726
15 juin 2011 à 17:40
Bonjour,

Désolé pour le délai, je n'étais pas très disponible ces derniers jours.
On poursuit :

-+-+-+-+-> OtMoveIt <-+-+-+-+-


[x] Télécharge OtMoveIt sur ton bureau.

[x] Lance le , puis copie/colle le texte ci dessous dans l'encadré " Paste instructions for items to be moved ". 

:files

c:\documents and settings\Daniel\Application Data\*.bat 

:commands

[emptytemp]


[x] Clique maintenant sur " MoveIt! "

[x] Copie/Colle le contenu du rapport qui s'ouvrira dans ton prochain message.
0
Réponse 12 / 19
superman1221 Messages postés 128 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 4 juin 2012 3
16 juin 2011 à 09:09
All processes killed
========== FILES ==========
c:\documents and settings\Daniel\Application Data\1t81v4bzz.bat moved successfully.
c:\documents and settings\Daniel\Application Data\4wa4x7e22.bat moved successfully.
c:\documents and settings\Daniel\Application Data\7ze70ah5.bat moved successfully.
c:\documents and settings\Daniel\Application Data\91f82cj7.bat moved successfully.
c:\documents and settings\Daniel\Application Data\b3ib4el9.bat moved successfully.
c:\documents and settings\Daniel\Application Data\c5jc6fmb.bat moved successfully.
c:\documents and settings\Daniel\Application Data\e7le8hod.bat moved successfully.
c:\documents and settings\Daniel\Application Data\g8mf9iqe.bat moved successfully.
c:\documents and settings\Daniel\Application Data\h9nhakrf.bat moved successfully.
c:\documents and settings\Daniel\Application Data\h9ohbkrf.bat moved successfully.
c:\documents and settings\Daniel\Application Data\ibpiclsh.bat moved successfully.
c:\documents and settings\Daniel\Application Data\jbpiclth.bat moved successfully.
c:\documents and settings\Daniel\Application Data\meslfpwk.bat moved successfully.
c:\documents and settings\Daniel\Application Data\phvoirznm.bat moved successfully.
c:\documents and settings\Daniel\Application Data\phvoisznn.bat moved successfully.
c:\documents and settings\Daniel\Application Data\qiwpjt0oo.bat moved successfully.
c:\documents and settings\Daniel\Application Data\rjxqku1pp.bat moved successfully.
c:\documents and settings\Daniel\Application Data\tlzsmw3rr.bat moved successfully.
c:\documents and settings\Daniel\Application Data\wo2vpz6uu.bat moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Daniel
->Temp folder emptied: 484689 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 83502 bytes
->FireFox cache emptied: 63198930 bytes
->Flash cache emptied: 39591 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 4068902 bytes
->Flash cache emptied: 669 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 2055 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1119633 bytes
%systemroot%\System32 .tmp files removed: 3072 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1395946 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 307549 bytes
RecycleBin emptied: 1328 bytes

Total Files Cleaned = 68,00 mb


OTM by OldTimer - Version 3.1.18.0 log created on 06162011_030054

Files moved on Reboot...

Registry entries deleted on Reboot...
0
Réponse 13 / 19
Xplode Messages postés 8820 Date d'inscription vendredi 21 août 2009 Statut Contributeur sécurité Dernière intervention 2 juillet 2015 726
16 juin 2011 à 11:30
Ok, maintenant fais ceci :

-+-+-+-+-> ZHPDiag <-+-+-+-+-


[x] Nous allons effectuer un diagnostic de ton ordinateur, pour ce faire, télécharge ZHPDiag ( de Nicolas Coolman ).

[x] Exécute l'installateur ( /!\ Coche la case " créer une icône sur le bureau /!\ ) puis lance le une fois l'installation terminée.

[x] Clique sur l'icône en forme de loupe en haut à gauche ( Lancer le diagnostic ).

[x] Une fois l'analyse terminée, clique sur l'icône en forme de disquette bleue puis sauvegarde le fichier sur ton bureau.

[x] Rend toi sur cjoint puis clique sur " Choisissez un fichier ".

[x] Sélectionne le fichier ZHPDiag.txt présent sur ton bureau, puis clique sur " Ouvrir ".

[x] Clique ensuite sur " Créer le lien cjoint " puis copie/colle dans ta prochaine réponse le lien créé.
0
Réponse 14 / 19
superman1221 Messages postés 128 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 4 juin 2012 3
16 juin 2011 à 19:45
Je ne suis pas capable de mettre le ZHPDiag.txt sur cjoint.com car la page internet m'indique toujours :

La connexion a été réinitialisée


La connexion avec le serveur a été réinitialisée pendant le chargement de la page.



* Le site est peut-être temporairement indisponible ou surchargé. Réessayez plus
tard ;

* Si vous n'arrivez à naviguer sur aucun site, vérifiez la connexion
au réseau de votre ordinateur ;

* Si votre ordinateur ou votre réseau est protégé par un pare-feu ou un proxy,
assurez-vous que Firefox est autorisé à accéder au Web.
0
Réponse 15 / 19
Xplode Messages postés 8820 Date d'inscription vendredi 21 août 2009 Statut Contributeur sécurité Dernière intervention 2 juillet 2015 726
17 juin 2011 à 16:00
Essaie ce site : http://pjjoint.malekal.com/
0
Réponse 16 / 19
superman1221 Messages postés 128 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 4 juin 2012 3
17 juin 2011 à 18:00
Fonctionne pas non plus...c'est vraiment le fichier ZHPDiag.txt qui a un problème.
0
Réponse 17 / 19
Xplode Messages postés 8820 Date d'inscription vendredi 21 août 2009 Statut Contributeur sécurité Dernière intervention 2 juillet 2015 726
17 juin 2011 à 18:46
Zippe le et héberge le .zip
0
Réponse 18 / 19
superman1221 Messages postés 128 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 4 juin 2012 3
17 juin 2011 à 21:03
https://www.cjoint.com/?AFrvdE9qFBF
0
Réponse 19 / 19
superman1221 Messages postés 128 Date d'inscription mercredi 11 février 2009 Statut Membre Dernière intervention 4 juin 2012 3
22 juin 2011 à 18:34
Heumm je te dirais que mon pc va plutôt mal et c'est très pénible de s'en servir donc j'ai besoin d'aide stp !!!!!!!
0

Discussions similaires

Google Chrome "  Échec de l'analyse antivirus "
jmpower -
RBmoon -

18 réponses
Impossible d'afficher le rapport de tableau croisé dynamique sur un rapport
Utilisateur anonyme -
TomH. -

13 réponses
Probleme bogue
Ines -
Pimmer -

1 réponse
écrire un rapport de travail
asi -
REGINALD -

3 réponses
échec de l'analyse antivirus
StalkerShadows -
ness -

19 réponses