Virus win32.worm.bagle.bx

pantoboom -  
 pantoboom -
Bonjour à tous,

J'ai un rapport de scan BitD qui me précise que j'ai cette bebete dans le fichier: C:\Program Files\a-squared\a2start.exe.

Peut on s'en debarrasser ?
Je joins un HJ dans lequel il y a quelque chose d'autre: un fichier XSUONJMC qui avait pourtant été sup par BFU il y a quelques temps.

Merci beaucoup
Pantoboom

Logfile of HijackThis v1.99.1
Scan saved at 11:24:59, on 03/07/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\Program Files\EzButton\CPLDBL10.EXE
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
c:\progra~1\softwin\bitdef~1\bdmcon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\MAGIX\Common\Database\bin\fbserver.exe
C:\MAGIX\Common\Database\bin\fabs.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32Info.exe
C:\Documents and Settings\JENSSENS Wilfried\Mes documents\PROTECT\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
O4 - HKLM\..\Run: [CPLDBL10] C:\Program Files\EzButton\CPLDBL10.EXE
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDNewsAgent] C:\PROGRA~1\softwin\BITDEF~1\bdnagent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [xsuonjmc] c:\windows\system32\xsuonjmc.exe xsuonjmc
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: CeEPwrSvc - COMPAL ELECTRONIC INC. - C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
O23 - Service: Dcfssvc - Eastman Kodak Company - C:\WINDOWS\system32\drivers\dcfssvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

11 réponses

  1. green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    Salut

    colle le rapport stp

    ++
    0
  2. pantoboom
     
    Bonsoir,

    Voici le rapport Bit,
    De plus Avast a détecté un Trojan: Win32 Agent RE.

    Merci beaucoup

    //-----------------------------------------------------------------
    //
    // Fichier journal BitDefender
    //
    // Créé le: 04/07/2006 21:28:16
    //
    //-----------------------------------------------------------------

    Statistiques

    Chemin cible: C:\
    Dossiers : 85
    Fichiers : 1908
    Archives : 96
    Fichiers empaquetés : 407
    Virus trouvés : 0
    Fichiers infectés : 0
    Alertes : 0
    Fichiers suspects : 0
    Fichiers désinfectés : 0
    Fichiers effacés : 0
    Fichiers copiés : 0
    Fichiers déplacés : 0
    Fichiers renommés : 0
    Erreurs I/O : 0
    Temps d'analyse := 00:00:38
    Fichiers/seconde :50

    Définitions virus : 406164
    Plugins d'analyse : 13
    Plugins archives : 39
    Plug-ins décompression : 5
    Plug-ins messagerie : 6
    Plug-ins système : 1

    Options d'analyse

    Détection
    [X] Analyser le secteur de boot
    [X] Analyser les archives
    [X] Analyser les fichiers en paquets
    [X] Analyser la messagerie

    Masque fichiers
    [X] Programmes
    [ ] Tous les fichiers
    [ ] Extensions définies par l'utilisateur:
    [ ] Exclure les extensions: ;

    Action

    Objets infectés
    [X] Ignorer
    [ ] Désinfecter
    [ ] Effacer
    [ ] Copier
    [ ] Déplacer dans le dossier infectés
    [ ] Renommer
    [ ] Demander l'action

    Seconde action
    [X] Ignorer
    [ ] Effacer
    [ ] Copier
    [ ] Déplacer dans le dossier infectés
    [ ] Renommer
    [ ] Demander l'action

    Options d'analyse
    [ ] Activer les alertes
    [X] Activer l'heuristique
    [X] Afficher tous les fichiers dans le journal
    [X] Fichier journal : vscan.log
    [ ] Rajouter au rapport existant
    Fichiers analysésC:\=>Master Boot Record OK
    C:\=>Primary partition 1 (Active) OK
    C:\AVG7DB_F.DAT OK
    C:\BFU\BFU.exe OK
    C:\boot.ini OK
    C:\Bootfont.bin OK
    C:\coktel\adibou2\Adibou.lnk OK
    C:\coktel\adibou2\Adibou.lnk=>:KAVICHS:$DATA OK
    C:\coktel\adibou2\Adibou.lnk=>C:\coktel\adibou2\WLOADER.EXE OK
    C:\coktel\adibou2\CMDLINE.CMD OK
    C:\coktel\adibou2\CURSOR32.DLL OK
    C:\coktel\adibou2\CURSOR32.DLL=>:KAVICHS:$DATA OK
    C:\coktel\adibou2\ENVIR\APPLI_01.INI OK
    C:\coktel\adibou2\ENVIR\APPLI_01.INI=>:KAVICHS:$DATA OK
    C:\coktel\adibou2\ENVIR\APPLI_02.INI OK
    C:\coktel\adibou2\ENVIR\APPLI_02.INI=>:KAVICHS:$DATA OK
    C:\coktel\adibou2\ENVIR\APPLI_03.INI OK
    C:\coktel\adibou2\ENVIR\APPLI_03.INI=>:KAVICHS:$DATA OK
    C:\coktel\adibou2\ENVIR\APPLI_04.INI OK
    C:\coktel\adibou2\ENVIR\APPLI_04.INI=>:KAVICHS:$DATA OK
    C:\coktel\adibou2\LOADSERV.DLL OK
    C:\coktel\adibou2\LOADSERV.DLL=>:KAVICHS:$DATA OK
    C:\coktel\adibou2\MDO.INI OK
    C:\coktel\adibou2\MDO.INI=>:KAVICHS:$DATA OK
    C:\coktel\adibou2\SOUNDDLL.DLL OK
    C:\coktel\adibou2\SOUNDDLL.DLL=>:KAVICHS:$DATA OK
    C:\coktel\adibou2\SOUNDLIB.DLL OK
    C:\coktel\adibou2\SOUNDLIB.DLL=>:KAVICHS:$DATA OK
    C:\coktel\adibou2\UNINST.INI OK
    C:\coktel\adibou2\UNINST.INI=>:KAVICHS:$DATA OK
    C:\coktel\adibou2\WLOADER.EXE OK
    C:\coktel\adibou2\WLOADER.EXE=>:KAVICHS:$DATA OK
    C:\CONFIG.SYS OK
    C:\Documents and Settings\All Users\Application Data\Adobe\Photoshop Album\PSASE.dat OK
    C:\Documents and Settings\All Users\Application Data\Adobe\Photoshop Album\PSASE.dat=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\desktop.ini OK
    C:\Documents and Settings\All Users\Application Data\desktop.ini=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\Quick Launch\Ad-Aware SE Personal.lnk OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\Quick Launch\Ad-Aware SE Personal.lnk=>C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player\DefaultStore_59R.bin OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player\UserMigratedStore_59R.bin OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\about.dat OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\about.dat=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\asset.ini OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\asset.ini=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\backuphelp.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\backuphelp.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\bdgtwlcm.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\bdgtwlcm.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\canceled.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\canceled.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\canceled.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\college.dat OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\college.dat=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\communty.ini OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\communty.ini=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\compUpdate.xml OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\compUpdate.xml=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\contfbck.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\contfbck.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\datasrcschema.xml OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\datasrcschema.xml=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\debtwlcm.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\debtwlcm.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\defenrll.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\defenrll.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\defserv.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\defserv.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\drizzleupdate.xml OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\drizzleupdate.xml=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\dynaerr.ini OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\ebpp.ini OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\fipartnr.ini OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\fipartnr.ini=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\getting started.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\getting started.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\GettingISP.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\GettingISP.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\GettingISP.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\headline.ini OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\headline.ini=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\HHsku.xml OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\HHsku.xml=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\althome.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\althome.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\guide.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\guide.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\_althome.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\_althome.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\_altLeft.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\_altLeft.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\hpthemes.xml OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\hpthemes.xml=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\invacct.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\invacct.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\InvestmentResearch.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\InvestmentResearch.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\InvestmentResearch.htm=>(JAVASCRIPT 2) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\invhome.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\invhome.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\invport.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\invport.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\InvResearchOnline.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\InvResearchOnline.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\InvResearchOnline.htm=>(JAVASCRIPT 2) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\ltwelco2.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\ltwelco2.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\ltwelcom.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\ltwelcom.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mc.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mc.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mcleft.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mcleft.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mcmodule.ini OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mcmodule.ini=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mcright.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mcright.htm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\misurls.xml OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\misurls.xml=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mnypass.ini OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mnypass.ini=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mny_schema.xml OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mny_schema.xml=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>:KAVICHS:$DATA OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/#SYSTEM OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AboutCategoryGroups.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AboutCategoryGroups.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Acceptalldownloadeddefinitetransactionmatches.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Acceptalldownloadeddefinitetransactionmatches.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AcceptAllUnreadTransactionsInTheAccountRegisterAtOnce.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AcceptDownloadedTransactionsInTheAccountRegister.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/activateatickersymbolforonlinedownloads.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addahomeloan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addahometoordeleteahomefromthehousecenter.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddahousetomyLifetimePlan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addalifeinsurancepolicytomylifetimeplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addalifeinsurancepolicytomylifetimeplan.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addalivingexpenseadjustmenttomyplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addanadjustmenttransactiontoupdatemyaccountbalance.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddanassettomyLifetimePlan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddANewDebtAccountToMyDebtPlan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddanewinvestmentaccounttoSavingsInvestments.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddanewloanintheLifetimePlanner.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addanewonetimeexpensetomyplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddaninvestmentorindextoInvestmentstoWatch.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addanitemtoyourcashflowforecast.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addaonetimeitemtoabudget.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addavehicleloan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addavehicletoordeleteavehiclefromthecarcenter.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddaWebPagetoInetFavoritesinMoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addcurrentcollegeexpensestomyplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddExistingTransactiontoYourScheduledTransactions.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddExistingTransactiontoYourScheduledTransactions.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addfuturecollegeexpensestomyplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddInformationAboutClassesandSubclasses.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddInformationtoaCategoryorSubcategory.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addinformationtotheimportantrecordsorganizer.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addordeleteahomerelatedcontact.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addordeleteavehiclerelatedcontact.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addoreditagrouporcategorywhilecreatingabudget.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addoreditagrouporcategorywithacompletedbudget.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addoreditasavingsgoal.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddorremoveapriorityfromyourMoneyfile.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddRentalExpensesToMyPlan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addsharestoaninvestmentaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Adjustbudgetedspendinglimitsfromtheaccountregister.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Adjustthereportcolumnwidth.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ArchiverYourRecords.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ArchiverYourRecords.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Assignabanktoanexistingaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Assignacategorytoatransaction.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Assignaclassificationtoatransaction.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Assignaclassificationtoatransaction.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Assignbudgetamountstoaccounts.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AssignChangeorDeleteAPassword.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AssociatedownloadedstatementswithaMoneyaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AutoBalancemycreditcardaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AutoBalancemycreditcardaccount.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AutomaticallyBackUpMyFileWhenExiting.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Automaticallyclearunuseddownloadeddata.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AutomaticallyDisplayCategoryLists.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AutomaticallyDisplayCategoryLists.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Automaticallyenterbillsintoyourregisterbeforetheduedate.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AutomaticallymarkacceptedtransactionsasR.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AutomaticallymarkacceptedtransactionsasR.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Backgroundbankingrequirements.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/BackUpMyFile.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Balanceacashaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Balancealiabilityaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Balancealoanaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Balanceanassetaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Balancereconcileanaccounttopaperstatement.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/dummy.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/BrowseInternetInsideMoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/BrowseInternetInsideMoney.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Calculateloancostsusingmoneyviewer.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Calculatingyournetworth.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CancelOnlineServicesformyaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CancelOnlineServicesformyaccount.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Cancelonlineservicesthroughmybankswebsite.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeaCategoryType.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeaCategoryType.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeAccountDetails.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changeanaccountsopeningbalance.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changecharttypeandoptionsspecifictocharts.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/changedaterangeinaccountregister.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeDialUpConnectionSettings.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeDialUpConnectionSettings.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changehowmoneyforecastsatrendeditem.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changehowmoneyforecastscashflow.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changehowmoneynavigatesafteryouacceptatransaction.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeinformationaboutaSavingsInvestmentsaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changeinformationinagroupoftransactions.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/changeinvestmentaccountdetails.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeLoanaccountinformation.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeMoneyOptions.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeMoneyssounds.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeMyBackupOptions.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeMyBalanceForecast.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeMyStartupLocation.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changeorresetachartsstartorenddates.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changesettingsformoneyexpress.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changesettingsformoneyexpress.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeStockOptionDetails.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethebalancescreentomatchmystatement.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeTheCategoryAssignedToAnInvestmentActivity.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/changethecategorygroupassignedtoacategory.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/changethecategorygroupassignedtoacategory.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethedefaultcurrencyforanaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangethedefaultcurrencyformyMoneyfile.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/changethedetailsofacareereventthataffectssalary.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethedetailsofahouseorassetinmyplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeTheDetailsOfAnExistingDebtAccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeTheDetailsOfAnExistingDebtAccount.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethedetailsofaonetimeexpenseinmyplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethedetailsofasavingscontribution.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethedetailsofotherincome(notfrommycareer).htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethefontsinareportorchart.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changetheincomeandexpensesrelatedtoahouseorasset.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changetheloanassociatedwithahouseorasset.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changetheownerofanaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethepassportyouusewithmoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethepurchaseinformationforahouseorasset.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changetherateofreturnforagroupofinvestments.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changetherowsandcolumnsinareportorchart.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethesalesinformationforahouseorasset.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethestartorenddateofacareer.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethetitleofareportorchart.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changeyourpassportpasswordinmoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Chooseanarchivedate.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Chooseanarchivedate.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Chooseascenarioandseehowitwouldaffectmyplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChooseWhichInvestmentAccountsToSetUp.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChooseWhichInvestmentAccountsToSetUp.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Choosewhichwordstoignoreinpayeenamevariations.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Clearafollowupflag.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Cleardownloadedquotesforunusedstocks.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Closeanaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CombineCategories.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CombineCategories.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/combinepayees.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/combinepayees.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CompareLifetimePlannerplanningpro.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ConfigureMoneyToConnectToTheInternet.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ConfigureMoneyToConnectToTheInternet.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Connectanddownloadstatementsforallmyonlineaccounts.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Connectanddownloadstatementsforallmyonlineaccounts.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/convertaninvestmentaccounttoaretirementaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/convertaninvestmentaccounttoaretirementaccount.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ConvertAQuickenFileToMoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Convertatransactionfromaforeigncurrency.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ConvertForeignCurrenciesForInvestments.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ConvertstockoptionsfromearlierversionsofMoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ConvertstockoptionsfromearlierversionsofMoney.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Copyareportorchart.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Correctadependentsnameordateofbirth.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Correctanexchangerate.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createabudgetinmoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateACashTransactionsSectionInYourInvestmentAccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createaccuratereportsandcharts.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createacheckingaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaClassification.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaClassification.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaClassorSubclass.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaClassorSubclass.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateADebtReductionPlan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateADebtReductionPlan.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createafollowupinmoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createahomeequityreport.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createaliabilityaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createalifetimeplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createaloanaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createaloanaccount.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createanaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createanassetaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createanassetaccount.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaNewCategoryorSubcategory.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaNewCategoryorSubcategory.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateANewFile.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createanewfollowupinmoneyviewer.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaNewPayee.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaNewPayee.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createaninvestmentaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createanmsnpassporttousewithmoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateARetirementAccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateARetirementAccount.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createorviewareportorchart.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateTwoRecurringPaymentsforPayrollChecks.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountRegister.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountRegister.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountRegister.htm=>(JAVASCRIPT 3) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/hcToc.htc OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/hcToc.htc=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CustomizeAdvisorFYI.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Customizebudgetdetailsview.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Customizemoneysdefaultbudgetvalues.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Customizemoneyviewersettings.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CustomizeOnlineServicesInMoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Customizethemoneytoolbar.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Customizeviewofbillsanddepositslist.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Customizeyourhomepageview.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deactivateatickersymbolfromonlinedownloads.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Decidewhatamounttouseforanopeningbalance.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Definemycurrentannuallivingexpenses.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Definemycurrentannuallivingexpenses.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteaCategoryorSubcategory.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteaCategoryorSubcategory.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteaClassificationorSubclassification.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteaClassificationorSubclassification.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteADependent.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteagrouporcategoryfromacompletedbudget.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteagrouporcategorywhilecreatingabudget.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteahouseorassetfrommyplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deletealifeinsurancepolicyfrommyplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deletealifeinsurancepolicyfrommyplan.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deletealivingexpenseadjustmentfrommyplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteanaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteanassociatedcashaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteaninvestmentaccountfromSavingsInvestments.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteaonetimeexpensefrommyplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteaPayee.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteaPayee.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteastockoptiongrant.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteAStockSplit.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteAStockSplit.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteatransaction.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteClassorSubClass.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteClassorSubClass.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteUnusedCategories.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteUnusedCategories.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DisableCallWaiting.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DisableCallWaiting.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DisableMoneyCentralSynchronization.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DisassociateadownloadedstatementwithaMoneyaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DisplayandentertheEurocurrencysymbol.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Displayareportasachartorviceversa.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Displayonlyunreconciledtransactions.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DisplaytransactionformsintheAccountRegister.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DisplaytransactionformsintheAccountRegister.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DownloadastatementviamybankorbrokersWebsite.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DownloadMarketPricesUsingOnlineQuotes.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/moneytoc.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/moneytoc.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/dummy.xml OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editahomeloan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editahomerelatedcontact.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editalivingexpenseadjustmentinmyplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editanentryforanunassignedamountinadownloadedstatement.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editaniteminyourcashflowforecast.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editatransaction.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editatransaction.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/editatransactionwithmultiplecategories.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editavehicleloan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editavehiclerelatedcontact.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EditClassesAndSubClasses.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EditDetailsofRecentlyRecordedScheduledTransactions.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EditDetailsofScheduledTransaction.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EditloantermsintheLifetimePlanner.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EditPayeeInformation.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EmailareportfromyourMoneyfile.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EmailareportfromyourMoneyfile.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterABond.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterADebtWithANointerestNopaymentPeriod.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterADebtWithANointerestNopaymentPeriod.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enteraloanfromme(ormypartner)toanotherperson.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnteranextraloanpaymentintheLifetimePlanner.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterasavingsbond.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterashortsell.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterashortsell.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterastockoptiongrant.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterAStockOrMutualFundPurchaseSaleOrOtherActivity.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterAStockOrMutualFundPurchaseSaleOrOtherActivity.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterastocksplit.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterataxdeferredannuity.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterataxdeferredfixedannuity.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enteratransaction.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enteratransaction.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnteratransactiondirectlyintotheAccountRegister.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnteratransactiondirectlyintotheAccountRegister.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enteratransactioninmoneyviewer.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterATransactionInTheCashTransactionsSectionOfAnInvestmentAccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterCapitalGainsDistributions.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterCapitalGainsDistributions.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Entercareereventsthataffectsalary.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Entercreditcardpayments.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Entercreditcardpayments.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterIncomeInformationForMyselfAndMyPartner.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterinformationaboutannualraisesandsalarycap.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterInformationAboutMyDependents.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterinterestreceiveddividendsorcapitalgainsdistributions.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterLatefees.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterLoanpayments.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/enterloanrefinanceinformation.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Entermyowneffectivetaxrate.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Entermyowneffectivetaxrate.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterOrChangeInformationAboutMySpouseOrPartner.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterOrChangeMyPersonalInformation.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterotherincome(notfrommycareer).htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterpayeesaddressfromtheAccountRegister.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterselfemploymentincome.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Entertransactionsfromapreviousmonthsstatement.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Estimatebillamountsbasedonpreviouspayments.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Exerciseanstockoptiongrant.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Exerciseanstockoptiongrant.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Experimentwithwhatifsinmylifetimeplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Explorethedifferentscenariosyoucantryout.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ExportAnAccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Exportareport.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Figureloanaccountsintomynetworth.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Figureloanaccountsintomynetworth.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Figureoutarealisticrateofreturn.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Filloutwebformsusingmoneyviewermyinfofeatures.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Findaspecifictransaction.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindoutaboutsecurityinMicrosoftMoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindouthowoftenshouldIcheckmyplan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindOutHowToGetOntoTheInternetFromMoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindOutHowToGetOntoTheInternetFromMoney.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Findoutifmybankorbrokersonlineserviceofferingshavechanged.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Findoutifmybankorbrokersonlineserviceofferingshavechanged.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindOutTheIssuesRelatedToQIFImportFiles.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindOutWhatHappensToIntelliChargeAccounts.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindoutwhathappenswhenIconnecttotheInternetinMoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindoutwhathappenswhenIconnecttotheInternetinMoney.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindOutWhatsNewInMoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindoutwhattodowhenIchangebanks.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindoutwhattodowhenIchangebanks.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindOutWhyICantOpenAWebPage.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindOutWhyMyStockSplitHasTheWrongNumberOfShares.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindoutwhysomeaccountsmaynotbelistedbyOnlineSetup.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindoutwhysomeaccountsmaynotbelistedbyOnlineSetup.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindQuickenCommandsInMoney.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FiscaliteDesPlusValues.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Fixanegativebalanceinanassociatedcashaccount.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FollowAToDoListAnnually.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FollowAToDoListDaily.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FollowAToDoListMonthly.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FollowAToDoListWeekly.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/GetanInternetServiceProvider.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/GetanInternetServiceProvider.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Gethelpwithaforgottenmsnpassportpassword.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/GetreadytocreateaLifetimePlan.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/HandlerefundsIvereceived.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/HaveMoneyAlertMeWhenTheTransferFieldIsLeftBlank.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountsPayable.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountsPayable.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountsPayable.htm=>(JAVASCRIPT 3) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountsReceivable.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountsReceivable.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountsReceivable.htm=>(JAVASCRIPT 3) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/hhOnstart.xsl OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAdditionalWithholding.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAdditionalWithholding.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAdditionalWithholding.htm=>(JAVASCRIPT 3) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAnnualPercentageRate.htm OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAnnualPercentageRate.htm=>(JAVASCRIPT 1) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAnnualPercentageRate.htm=>(JAVASCRIPT 3) OK
    C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defannualr
    0
  3. green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    Salut

    regarde par là pour le virus :

    virus kit de desinfection pour eradiquer w32 beagle mm bagle

    ensuite suis cette procedure stp :

    virus methode preliminaire de desinfection version fr

    ++
    0
  4. pantoboom
     
    Bonjour green day et merci pour ton aide.

    J'ai utilisé 2 soft anti try(symantec et Btd) et n'ont rien trouvé.
    Je joins comme prescrit le rapport Ewido puis rapport de Btd On line puis le HJ.

    ewido anti-malware - Rapport de scan
    ---------------------------------------------------------

    + Créé le: 23:38:15, 04/07/2006
    + Somme de contrôle: DA51A2E0

    + Résultats du scan:

    C:\Documents and Settings\JENSSENS Wilfried\Cookies\jenssens wilfried@weborama[2].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder

    ::Fin du rapport

    BitDefender Online Scanner - Real Time Virus Report

    Generated at: Wed, Jul 05, 2006 - 11:05:56

    --------------------------------------------------------------------------------

    Scan Info

    Scanned Files
    401402

    Infected Files
    0

    Virus Detected

    No virus found.

    --------------------------------------------------------------------------------

    This summary of the scan process will be used by the BitDefender Antivirus Lab to create agregate statistics about virus activity around the world.

    Logfile of HijackThis v1.99.1
    Scan saved at 11:12:53, on 05/07/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
    C:\WINDOWS\system32\drivers\dcfssvc.exe
    C:\Program Files\ewido anti-malware\ewidoctrl.exe
    C:\WINDOWS\System32\FTRTSVC.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\System32\igfxtray.exe
    C:\WINDOWS\System32\hkcmd.exe
    C:\Program Files\Apoint2K\Apoint.exe
    C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
    C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
    C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
    C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
    C:\Program Files\Java\jre1.5.0\bin\jusched.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Apoint2K\Apntex.exe
    C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
    C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
    C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
    C:\PROGRA~1\Wanadoo\ComComp.exe
    C:\Program Files\Inventel\Gateway\wlancfg.exe
    C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
    C:\PROGRA~1\Wanadoo\Toaster.exe
    C:\PROGRA~1\Wanadoo\Inactivity.exe
    C:\PROGRA~1\Wanadoo\PollingModule.exe
    C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\PROGRA~1\Wanadoo\Watch.exe
    C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
    c:\progra~1\softwin\bitdef~1\bdmcon.exe
    C:\Documents and Settings\JENSSENS Wilfried\Mes documents\PROTECT\hijackthis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
    O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
    O4 - HKLM\..\Run: [CPLDBL10] C:\Program Files\EzButton\CPLDBL10.EXE
    O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
    O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
    O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
    O4 - HKLM\..\Run: [BDNewsAgent] C:\PROGRA~1\softwin\BITDEF~1\bdnagent.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
    O4 - HKLM\..\Run: [xsuonjmc] c:\windows\system32\xsuonjmc.exe xsuonjmc
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
    O23 - Service: CeEPwrSvc - COMPAL ELECTRONIC INC. - C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
    O23 - Service: Dcfssvc - Eastman Kodak Company - C:\WINDOWS\system32\drivers\dcfssvc.exe
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
    O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
    O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

    Il n'y a apparemment pas de virus mais des lignes 04 me semblent suspectes ?

    Merci, à tou't
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    Salut

    oui; en effet ...

    Télécharge Blacklight (de F-Secure):

    https://www.f-secure.com/en

    et sauvegarde le sur ton Bureau.

    Double-clique blbeta.exe et accepte la licence ; clique Scan puis Next

    Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).

    Copie et colle le contenu de ce rapport dans ta prochaine réponse

    ++
    0
  7. pantoboom
     
    Salut,

    voila le rapport scan du beta:

    07/05/06 15:43:25 [Info]: BlackLight Engine 1.0.42 initialized
    07/05/06 15:43:25 [Info]: OS: 5.1 build 2600 (Service Pack 2)
    07/05/06 15:43:25 [Note]: 7019 4
    07/05/06 15:43:25 [Note]: 7005 0
    07/05/06 15:43:31 [Error]: 6024 1
    07/05/06 15:43:31 [Error]: 6024 1
    07/05/06 15:43:31 [Note]: 7006 0
    07/05/06 15:43:31 [Note]: 7011 1488
    07/05/06 15:43:31 [Note]: 7026 0
    07/05/06 15:43:31 [Note]: 7026 0
    07/05/06 15:43:32 [Error]: 6024 1
    07/05/06 15:43:42 [Note]: FSRAW library version 1.7.1019
    07/05/06 15:50:09 [Note]: 7007 0

    Bien à toi
    0
  8. green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    Salut

    ok,

    Relance HijackThis : choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked" :

    O4 - HKLM\..\Run: [xsuonjmc] c:\windows\system32\xsuonjmc.exe xsuonjmc

    ensuite cherche et supprime le fichier en gras :

    c:\windows\system32\xsuonjmc.exe

    dis nous s'il est toujours detecté

    @+

    0
  9. pantoboom Messages postés 4 Statut Membre
     
    Salut,

    J'ai fixé la ligne indiquée. Je n'ai pas trouvé dans l'exploreur le fichier en gras dans c:windows.system32.

    Voila le HJ,apparemment il n'est plus là.

    Logfile of HijackThis v1.99.1
    Scan saved at 20:35:31, on 06/07/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
    C:\WINDOWS\system32\drivers\dcfssvc.exe
    C:\Program Files\ewido anti-malware\ewidoctrl.exe
    C:\WINDOWS\System32\FTRTSVC.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\System32\igfxtray.exe
    C:\WINDOWS\System32\hkcmd.exe
    C:\Program Files\Apoint2K\Apoint.exe
    C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
    C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
    C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
    C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
    C:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
    C:\Program Files\Java\jre1.5.0\bin\jusched.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
    C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
    C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
    C:\Program Files\Apoint2K\Apntex.exe
    C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
    C:\PROGRA~1\Wanadoo\ComComp.exe
    C:\Program Files\Inventel\Gateway\wlancfg.exe
    C:\PROGRA~1\Wanadoo\Toaster.exe
    C:\PROGRA~1\Wanadoo\Inactivity.exe
    C:\PROGRA~1\Wanadoo\PollingModule.exe
    C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
    C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
    C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\PROGRA~1\Wanadoo\Watch.exe
    C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Mozilla Thunderbird\thunderbird.exe
    C:\Documents and Settings\JENSSENS Wilfried\Mes documents\PROTECT\hijackthis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
    O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
    O4 - HKLM\..\Run: [CPLDBL10] C:\Program Files\EzButton\CPLDBL10.EXE
    O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
    O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
    O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
    O4 - HKLM\..\Run: [BDNewsAgent] C:\PROGRA~1\softwin\BITDEF~1\bdnagent.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
    O23 - Service: CeEPwrSvc - COMPAL ELECTRONIC INC. - C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
    O23 - Service: Dcfssvc - Eastman Kodak Company - C:\WINDOWS\system32\drivers\dcfssvc.exe
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
    O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
    O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

    Merci Green day.
    0
  10. pantoboom Messages postés 4 Statut Membre
     
    RE,

    Je suis absent une semaine.
    Je remonterai la file si nécessaire ?

    Merci bien.
    0
  11. green day Messages postés 26374 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   2 166
     
    re

    ton log est clean ! où en sont tes soucis

    ???

    ++
    0
  12. pantoboom
     
    Salut green day,

    Apparemment plus de Pb.
    Je relance un scan ou 2 et j'avise.

    A si je trouve qu'au demarrage l'ordi est un peut lent (ma
    Merci.
    0