Sujet Précédent Sujet Suivant

Virus win32.worm.bagle.bx

pantoboom -  
 pantoboom -
Bonjour à tous,

J'ai un rapport de scan BitD qui me précise que j'ai cette bebete dans le fichier: C:\Program Files\a-squared\a2start.exe.

Peut on s'en debarrasser ?
Je joins un HJ dans lequel il y a quelque chose d'autre: un fichier XSUONJMC qui avait pourtant été sup par BFU il y a quelques temps.

Merci beaucoup
Pantoboom

Logfile of HijackThis v1.99.1
Scan saved at 11:24:59, on 03/07/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\Program Files\EzButton\CPLDBL10.EXE
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
c:\progra~1\softwin\bitdef~1\bdmcon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\MAGIX\Common\Database\bin\fbserver.exe
C:\MAGIX\Common\Database\bin\fabs.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32Info.exe
C:\Documents and Settings\JENSSENS Wilfried\Mes documents\PROTECT\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
O4 - HKLM\..\Run: [CPLDBL10] C:\Program Files\EzButton\CPLDBL10.EXE
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDNewsAgent] C:\PROGRA~1\softwin\BITDEF~1\bdnagent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [xsuonjmc] c:\windows\system32\xsuonjmc.exe xsuonjmc
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: CeEPwrSvc - COMPAL ELECTRONIC INC. - C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
O23 - Service: Dcfssvc - Eastman Kodak Company - C:\WINDOWS\system32\drivers\dcfssvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
A voir également:

11 réponses

Réponse 1 / 11
green day Messages postés 26722 Statut Modérateur, Contributeur sécurité 2 163
 
Salut

colle le rapport stp

++
0
Réponse 2 / 11
pantoboom
 
Bonsoir,

Voici le rapport Bit,
De plus Avast a détecté un Trojan: Win32 Agent RE.

Merci beaucoup

//-----------------------------------------------------------------
//
// Fichier journal BitDefender
//
// Créé le: 04/07/2006 21:28:16
//
//-----------------------------------------------------------------

Statistiques

Chemin cible: C:\
Dossiers : 85
Fichiers : 1908
Archives : 96
Fichiers empaquetés : 407
Virus trouvés : 0
Fichiers infectés : 0
Alertes : 0
Fichiers suspects : 0
Fichiers désinfectés : 0
Fichiers effacés : 0
Fichiers copiés : 0
Fichiers déplacés : 0
Fichiers renommés : 0
Erreurs I/O : 0
Temps d'analyse := 00:00:38
Fichiers/seconde :50

Définitions virus : 406164
Plugins d'analyse : 13
Plugins archives : 39
Plug-ins décompression : 5
Plug-ins messagerie : 6
Plug-ins système : 1

Options d'analyse

Détection
[X] Analyser le secteur de boot
[X] Analyser les archives
[X] Analyser les fichiers en paquets
[X] Analyser la messagerie

Masque fichiers
[X] Programmes
[ ] Tous les fichiers
[ ] Extensions définies par l'utilisateur:
[ ] Exclure les extensions: ;

Action

Objets infectés
[X] Ignorer
[ ] Désinfecter
[ ] Effacer
[ ] Copier
[ ] Déplacer dans le dossier infectés
[ ] Renommer
[ ] Demander l'action

Seconde action
[X] Ignorer
[ ] Effacer
[ ] Copier
[ ] Déplacer dans le dossier infectés
[ ] Renommer
[ ] Demander l'action

Options d'analyse
[ ] Activer les alertes
[X] Activer l'heuristique
[X] Afficher tous les fichiers dans le journal
[X] Fichier journal : vscan.log
[ ] Rajouter au rapport existant
Fichiers analysésC:\=>Master Boot Record OK
C:\=>Primary partition 1 (Active) OK
C:\AVG7DB_F.DAT OK
C:\BFU\BFU.exe OK
C:\boot.ini OK
C:\Bootfont.bin OK
C:\coktel\adibou2\Adibou.lnk OK
C:\coktel\adibou2\Adibou.lnk=>:KAVICHS:$DATA OK
C:\coktel\adibou2\Adibou.lnk=>C:\coktel\adibou2\WLOADER.EXE OK
C:\coktel\adibou2\CMDLINE.CMD OK
C:\coktel\adibou2\CURSOR32.DLL OK
C:\coktel\adibou2\CURSOR32.DLL=>:KAVICHS:$DATA OK
C:\coktel\adibou2\ENVIR\APPLI_01.INI OK
C:\coktel\adibou2\ENVIR\APPLI_01.INI=>:KAVICHS:$DATA OK
C:\coktel\adibou2\ENVIR\APPLI_02.INI OK
C:\coktel\adibou2\ENVIR\APPLI_02.INI=>:KAVICHS:$DATA OK
C:\coktel\adibou2\ENVIR\APPLI_03.INI OK
C:\coktel\adibou2\ENVIR\APPLI_03.INI=>:KAVICHS:$DATA OK
C:\coktel\adibou2\ENVIR\APPLI_04.INI OK
C:\coktel\adibou2\ENVIR\APPLI_04.INI=>:KAVICHS:$DATA OK
C:\coktel\adibou2\LOADSERV.DLL OK
C:\coktel\adibou2\LOADSERV.DLL=>:KAVICHS:$DATA OK
C:\coktel\adibou2\MDO.INI OK
C:\coktel\adibou2\MDO.INI=>:KAVICHS:$DATA OK
C:\coktel\adibou2\SOUNDDLL.DLL OK
C:\coktel\adibou2\SOUNDDLL.DLL=>:KAVICHS:$DATA OK
C:\coktel\adibou2\SOUNDLIB.DLL OK
C:\coktel\adibou2\SOUNDLIB.DLL=>:KAVICHS:$DATA OK
C:\coktel\adibou2\UNINST.INI OK
C:\coktel\adibou2\UNINST.INI=>:KAVICHS:$DATA OK
C:\coktel\adibou2\WLOADER.EXE OK
C:\coktel\adibou2\WLOADER.EXE=>:KAVICHS:$DATA OK
C:\CONFIG.SYS OK
C:\Documents and Settings\All Users\Application Data\Adobe\Photoshop Album\PSASE.dat OK
C:\Documents and Settings\All Users\Application Data\Adobe\Photoshop Album\PSASE.dat=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\desktop.ini OK
C:\Documents and Settings\All Users\Application Data\desktop.ini=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\Quick Launch\Ad-Aware SE Personal.lnk OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\Quick Launch\Ad-Aware SE Personal.lnk=>C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player\DefaultStore_59R.bin OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player\UserMigratedStore_59R.bin OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\about.dat OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\about.dat=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\asset.ini OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\asset.ini=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\backuphelp.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\backuphelp.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\bdgtwlcm.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\bdgtwlcm.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\canceled.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\canceled.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\canceled.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\college.dat OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\college.dat=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\communty.ini OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\communty.ini=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\compUpdate.xml OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\compUpdate.xml=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\contfbck.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\contfbck.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\datasrcschema.xml OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\datasrcschema.xml=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\debtwlcm.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\debtwlcm.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\defenrll.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\defenrll.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\defserv.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\defserv.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\drizzleupdate.xml OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\drizzleupdate.xml=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\dynaerr.ini OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\ebpp.ini OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\fipartnr.ini OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\fipartnr.ini=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\getting started.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\getting started.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\GettingISP.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\GettingISP.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\GettingISP.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\headline.ini OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\headline.ini=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\HHsku.xml OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\HHsku.xml=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\althome.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\althome.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\guide.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\guide.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\_althome.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\_althome.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\_altLeft.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\_altLeft.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\hpthemes.xml OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\hpthemes.xml=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\invacct.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\invacct.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\InvestmentResearch.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\InvestmentResearch.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\InvestmentResearch.htm=>(JAVASCRIPT 2) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\invhome.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\invhome.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\invport.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\invport.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\InvResearchOnline.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\InvResearchOnline.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\InvResearchOnline.htm=>(JAVASCRIPT 2) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\ltwelco2.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\ltwelco2.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\ltwelcom.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\ltwelcom.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mc.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mc.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mcleft.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mcleft.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mcmodule.ini OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mcmodule.ini=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mcright.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mcright.htm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\misurls.xml OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\misurls.xml=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mnypass.ini OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mnypass.ini=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mny_schema.xml OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mny_schema.xml=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>:KAVICHS:$DATA OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/#SYSTEM OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AboutCategoryGroups.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AboutCategoryGroups.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Acceptalldownloadeddefinitetransactionmatches.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Acceptalldownloadeddefinitetransactionmatches.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AcceptAllUnreadTransactionsInTheAccountRegisterAtOnce.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AcceptDownloadedTransactionsInTheAccountRegister.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/activateatickersymbolforonlinedownloads.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addahomeloan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addahometoordeleteahomefromthehousecenter.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddahousetomyLifetimePlan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addalifeinsurancepolicytomylifetimeplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addalifeinsurancepolicytomylifetimeplan.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addalivingexpenseadjustmenttomyplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addanadjustmenttransactiontoupdatemyaccountbalance.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddanassettomyLifetimePlan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddANewDebtAccountToMyDebtPlan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddanewinvestmentaccounttoSavingsInvestments.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddanewloanintheLifetimePlanner.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addanewonetimeexpensetomyplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddaninvestmentorindextoInvestmentstoWatch.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addanitemtoyourcashflowforecast.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addaonetimeitemtoabudget.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addavehicleloan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addavehicletoordeleteavehiclefromthecarcenter.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddaWebPagetoInetFavoritesinMoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addcurrentcollegeexpensestomyplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddExistingTransactiontoYourScheduledTransactions.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddExistingTransactiontoYourScheduledTransactions.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addfuturecollegeexpensestomyplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddInformationAboutClassesandSubclasses.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddInformationtoaCategoryorSubcategory.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addinformationtotheimportantrecordsorganizer.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addordeleteahomerelatedcontact.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addordeleteavehiclerelatedcontact.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addoreditagrouporcategorywhilecreatingabudget.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addoreditagrouporcategorywithacompletedbudget.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addoreditasavingsgoal.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddorremoveapriorityfromyourMoneyfile.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AddRentalExpensesToMyPlan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Addsharestoaninvestmentaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Adjustbudgetedspendinglimitsfromtheaccountregister.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Adjustthereportcolumnwidth.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ArchiverYourRecords.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ArchiverYourRecords.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Assignabanktoanexistingaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Assignacategorytoatransaction.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Assignaclassificationtoatransaction.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Assignaclassificationtoatransaction.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Assignbudgetamountstoaccounts.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AssignChangeorDeleteAPassword.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AssociatedownloadedstatementswithaMoneyaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AutoBalancemycreditcardaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AutoBalancemycreditcardaccount.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AutomaticallyBackUpMyFileWhenExiting.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Automaticallyclearunuseddownloadeddata.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AutomaticallyDisplayCategoryLists.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AutomaticallyDisplayCategoryLists.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Automaticallyenterbillsintoyourregisterbeforetheduedate.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AutomaticallymarkacceptedtransactionsasR.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/AutomaticallymarkacceptedtransactionsasR.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Backgroundbankingrequirements.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/BackUpMyFile.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Balanceacashaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Balancealiabilityaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Balancealoanaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Balanceanassetaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Balancereconcileanaccounttopaperstatement.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/dummy.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/BrowseInternetInsideMoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/BrowseInternetInsideMoney.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Calculateloancostsusingmoneyviewer.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Calculatingyournetworth.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CancelOnlineServicesformyaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CancelOnlineServicesformyaccount.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Cancelonlineservicesthroughmybankswebsite.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeaCategoryType.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeaCategoryType.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeAccountDetails.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changeanaccountsopeningbalance.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changecharttypeandoptionsspecifictocharts.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/changedaterangeinaccountregister.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeDialUpConnectionSettings.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeDialUpConnectionSettings.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changehowmoneyforecastsatrendeditem.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changehowmoneyforecastscashflow.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changehowmoneynavigatesafteryouacceptatransaction.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeinformationaboutaSavingsInvestmentsaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changeinformationinagroupoftransactions.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/changeinvestmentaccountdetails.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeLoanaccountinformation.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeMoneyOptions.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeMoneyssounds.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeMyBackupOptions.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeMyBalanceForecast.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeMyStartupLocation.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changeorresetachartsstartorenddates.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changesettingsformoneyexpress.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changesettingsformoneyexpress.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeStockOptionDetails.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethebalancescreentomatchmystatement.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeTheCategoryAssignedToAnInvestmentActivity.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/changethecategorygroupassignedtoacategory.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/changethecategorygroupassignedtoacategory.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethedefaultcurrencyforanaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangethedefaultcurrencyformyMoneyfile.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/changethedetailsofacareereventthataffectssalary.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethedetailsofahouseorassetinmyplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeTheDetailsOfAnExistingDebtAccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChangeTheDetailsOfAnExistingDebtAccount.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethedetailsofaonetimeexpenseinmyplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethedetailsofasavingscontribution.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethedetailsofotherincome(notfrommycareer).htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethefontsinareportorchart.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changetheincomeandexpensesrelatedtoahouseorasset.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changetheloanassociatedwithahouseorasset.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changetheownerofanaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethepassportyouusewithmoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethepurchaseinformationforahouseorasset.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changetherateofreturnforagroupofinvestments.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changetherowsandcolumnsinareportorchart.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethesalesinformationforahouseorasset.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethestartorenddateofacareer.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changethetitleofareportorchart.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Changeyourpassportpasswordinmoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Chooseanarchivedate.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Chooseanarchivedate.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Chooseascenarioandseehowitwouldaffectmyplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChooseWhichInvestmentAccountsToSetUp.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ChooseWhichInvestmentAccountsToSetUp.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Choosewhichwordstoignoreinpayeenamevariations.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Clearafollowupflag.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Cleardownloadedquotesforunusedstocks.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Closeanaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CombineCategories.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CombineCategories.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/combinepayees.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/combinepayees.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CompareLifetimePlannerplanningpro.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ConfigureMoneyToConnectToTheInternet.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ConfigureMoneyToConnectToTheInternet.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Connectanddownloadstatementsforallmyonlineaccounts.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Connectanddownloadstatementsforallmyonlineaccounts.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/convertaninvestmentaccounttoaretirementaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/convertaninvestmentaccounttoaretirementaccount.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ConvertAQuickenFileToMoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Convertatransactionfromaforeigncurrency.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ConvertForeignCurrenciesForInvestments.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ConvertstockoptionsfromearlierversionsofMoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ConvertstockoptionsfromearlierversionsofMoney.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Copyareportorchart.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Correctadependentsnameordateofbirth.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Correctanexchangerate.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createabudgetinmoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateACashTransactionsSectionInYourInvestmentAccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createaccuratereportsandcharts.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createacheckingaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaClassification.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaClassification.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaClassorSubclass.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaClassorSubclass.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateADebtReductionPlan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateADebtReductionPlan.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createafollowupinmoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createahomeequityreport.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createaliabilityaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createalifetimeplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createaloanaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createaloanaccount.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createanaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createanassetaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createanassetaccount.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaNewCategoryorSubcategory.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaNewCategoryorSubcategory.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateANewFile.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createanewfollowupinmoneyviewer.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaNewPayee.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateaNewPayee.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createaninvestmentaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createanmsnpassporttousewithmoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateARetirementAccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateARetirementAccount.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Createorviewareportorchart.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CreateTwoRecurringPaymentsforPayrollChecks.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountRegister.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountRegister.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountRegister.htm=>(JAVASCRIPT 3) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/hcToc.htc OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/hcToc.htc=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CustomizeAdvisorFYI.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Customizebudgetdetailsview.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Customizemoneysdefaultbudgetvalues.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Customizemoneyviewersettings.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/CustomizeOnlineServicesInMoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Customizethemoneytoolbar.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Customizeviewofbillsanddepositslist.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Customizeyourhomepageview.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deactivateatickersymbolfromonlinedownloads.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Decidewhatamounttouseforanopeningbalance.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Definemycurrentannuallivingexpenses.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Definemycurrentannuallivingexpenses.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteaCategoryorSubcategory.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteaCategoryorSubcategory.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteaClassificationorSubclassification.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteaClassificationorSubclassification.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteADependent.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteagrouporcategoryfromacompletedbudget.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteagrouporcategorywhilecreatingabudget.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteahouseorassetfrommyplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deletealifeinsurancepolicyfrommyplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deletealifeinsurancepolicyfrommyplan.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deletealivingexpenseadjustmentfrommyplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteanaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteanassociatedcashaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteaninvestmentaccountfromSavingsInvestments.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteaonetimeexpensefrommyplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteaPayee.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteaPayee.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteastockoptiongrant.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteAStockSplit.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteAStockSplit.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Deleteatransaction.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteClassorSubClass.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteClassorSubClass.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteUnusedCategories.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DeleteUnusedCategories.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DisableCallWaiting.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DisableCallWaiting.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DisableMoneyCentralSynchronization.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DisassociateadownloadedstatementwithaMoneyaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DisplayandentertheEurocurrencysymbol.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Displayareportasachartorviceversa.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Displayonlyunreconciledtransactions.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DisplaytransactionformsintheAccountRegister.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DisplaytransactionformsintheAccountRegister.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DownloadastatementviamybankorbrokersWebsite.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/DownloadMarketPricesUsingOnlineQuotes.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/moneytoc.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/moneytoc.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/dummy.xml OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editahomeloan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editahomerelatedcontact.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editalivingexpenseadjustmentinmyplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editanentryforanunassignedamountinadownloadedstatement.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editaniteminyourcashflowforecast.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editatransaction.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editatransaction.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/editatransactionwithmultiplecategories.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editavehicleloan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Editavehiclerelatedcontact.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EditClassesAndSubClasses.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EditDetailsofRecentlyRecordedScheduledTransactions.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EditDetailsofScheduledTransaction.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EditloantermsintheLifetimePlanner.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EditPayeeInformation.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EmailareportfromyourMoneyfile.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EmailareportfromyourMoneyfile.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterABond.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterADebtWithANointerestNopaymentPeriod.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterADebtWithANointerestNopaymentPeriod.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enteraloanfromme(ormypartner)toanotherperson.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnteranextraloanpaymentintheLifetimePlanner.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterasavingsbond.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterashortsell.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterashortsell.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterastockoptiongrant.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterAStockOrMutualFundPurchaseSaleOrOtherActivity.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterAStockOrMutualFundPurchaseSaleOrOtherActivity.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterastocksplit.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterataxdeferredannuity.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterataxdeferredfixedannuity.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enteratransaction.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enteratransaction.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnteratransactiondirectlyintotheAccountRegister.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnteratransactiondirectlyintotheAccountRegister.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enteratransactioninmoneyviewer.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterATransactionInTheCashTransactionsSectionOfAnInvestmentAccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterCapitalGainsDistributions.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterCapitalGainsDistributions.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Entercareereventsthataffectsalary.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Entercreditcardpayments.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Entercreditcardpayments.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterIncomeInformationForMyselfAndMyPartner.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterinformationaboutannualraisesandsalarycap.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterInformationAboutMyDependents.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterinterestreceiveddividendsorcapitalgainsdistributions.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterLatefees.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterLoanpayments.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/enterloanrefinanceinformation.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Entermyowneffectivetaxrate.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Entermyowneffectivetaxrate.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterOrChangeInformationAboutMySpouseOrPartner.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterOrChangeMyPersonalInformation.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterotherincome(notfrommycareer).htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/EnterpayeesaddressfromtheAccountRegister.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Enterselfemploymentincome.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Entertransactionsfromapreviousmonthsstatement.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Estimatebillamountsbasedonpreviouspayments.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Exerciseanstockoptiongrant.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Exerciseanstockoptiongrant.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Experimentwithwhatifsinmylifetimeplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Explorethedifferentscenariosyoucantryout.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/ExportAnAccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Exportareport.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Figureloanaccountsintomynetworth.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Figureloanaccountsintomynetworth.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Figureoutarealisticrateofreturn.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Filloutwebformsusingmoneyviewermyinfofeatures.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Findaspecifictransaction.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindoutaboutsecurityinMicrosoftMoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindouthowoftenshouldIcheckmyplan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindOutHowToGetOntoTheInternetFromMoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindOutHowToGetOntoTheInternetFromMoney.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Findoutifmybankorbrokersonlineserviceofferingshavechanged.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Findoutifmybankorbrokersonlineserviceofferingshavechanged.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindOutTheIssuesRelatedToQIFImportFiles.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindOutWhatHappensToIntelliChargeAccounts.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindoutwhathappenswhenIconnecttotheInternetinMoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindoutwhathappenswhenIconnecttotheInternetinMoney.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindOutWhatsNewInMoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindoutwhattodowhenIchangebanks.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindoutwhattodowhenIchangebanks.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindOutWhyICantOpenAWebPage.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindOutWhyMyStockSplitHasTheWrongNumberOfShares.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindoutwhysomeaccountsmaynotbelistedbyOnlineSetup.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindoutwhysomeaccountsmaynotbelistedbyOnlineSetup.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FindQuickenCommandsInMoney.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FiscaliteDesPlusValues.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Fixanegativebalanceinanassociatedcashaccount.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FollowAToDoListAnnually.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FollowAToDoListDaily.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FollowAToDoListMonthly.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/FollowAToDoListWeekly.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/GetanInternetServiceProvider.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/GetanInternetServiceProvider.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/Gethelpwithaforgottenmsnpassportpassword.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/GetreadytocreateaLifetimePlan.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/HandlerefundsIvereceived.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/HaveMoneyAlertMeWhenTheTransferFieldIsLeftBlank.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountsPayable.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountsPayable.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountsPayable.htm=>(JAVASCRIPT 3) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountsReceivable.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountsReceivable.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAccountsReceivable.htm=>(JAVASCRIPT 3) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/hhOnstart.xsl OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAdditionalWithholding.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAdditionalWithholding.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAdditionalWithholding.htm=>(JAVASCRIPT 3) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAnnualPercentageRate.htm OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAnnualPercentageRate.htm=>(JAVASCRIPT 1) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defAnnualPercentageRate.htm=>(JAVASCRIPT 3) OK
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\msmoney.chm=>/defannualr
0
Réponse 3 / 11
green day Messages postés 26722 Statut Modérateur, Contributeur sécurité 2 163
 
Salut

regarde par là pour le virus :

virus kit de desinfection pour eradiquer w32 beagle mm bagle

ensuite suis cette procedure stp :

virus methode preliminaire de desinfection version fr

++
0
Réponse 4 / 11
pantoboom
 
Bonjour green day et merci pour ton aide.

J'ai utilisé 2 soft anti try(symantec et Btd) et n'ont rien trouvé.
Je joins comme prescrit le rapport Ewido puis rapport de Btd On line puis le HJ.

ewido anti-malware - Rapport de scan
---------------------------------------------------------

+ Créé le: 23:38:15, 04/07/2006
+ Somme de contrôle: DA51A2E0

+ Résultats du scan:

C:\Documents and Settings\JENSSENS Wilfried\Cookies\jenssens wilfried@weborama[2].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder

::Fin du rapport

BitDefender Online Scanner - Real Time Virus Report

Generated at: Wed, Jul 05, 2006 - 11:05:56

--------------------------------------------------------------------------------

Scan Info

Scanned Files
401402

Infected Files
0

Virus Detected

No virus found.

--------------------------------------------------------------------------------

This summary of the scan process will be used by the BitDefender Antivirus Lab to create agregate statistics about virus activity around the world.

Logfile of HijackThis v1.99.1
Scan saved at 11:12:53, on 05/07/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
c:\progra~1\softwin\bitdef~1\bdmcon.exe
C:\Documents and Settings\JENSSENS Wilfried\Mes documents\PROTECT\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
O4 - HKLM\..\Run: [CPLDBL10] C:\Program Files\EzButton\CPLDBL10.EXE
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDNewsAgent] C:\PROGRA~1\softwin\BITDEF~1\bdnagent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [xsuonjmc] c:\windows\system32\xsuonjmc.exe xsuonjmc
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: CeEPwrSvc - COMPAL ELECTRONIC INC. - C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
O23 - Service: Dcfssvc - Eastman Kodak Company - C:\WINDOWS\system32\drivers\dcfssvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

Il n'y a apparemment pas de virus mais des lignes 04 me semblent suspectes ?

Merci, à tou't
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 11
green day Messages postés 26722 Statut Modérateur, Contributeur sécurité 2 163
 
Salut

oui; en effet ...

Télécharge Blacklight (de F-Secure):

https://www.f-secure.com/en

et sauvegarde le sur ton Bureau.

Double-clique blbeta.exe et accepte la licence ; clique Scan puis Next

Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).

Copie et colle le contenu de ce rapport dans ta prochaine réponse

++
0
Réponse 6 / 11
pantoboom
 
Salut,

voila le rapport scan du beta:

07/05/06 15:43:25 [Info]: BlackLight Engine 1.0.42 initialized
07/05/06 15:43:25 [Info]: OS: 5.1 build 2600 (Service Pack 2)
07/05/06 15:43:25 [Note]: 7019 4
07/05/06 15:43:25 [Note]: 7005 0
07/05/06 15:43:31 [Error]: 6024 1
07/05/06 15:43:31 [Error]: 6024 1
07/05/06 15:43:31 [Note]: 7006 0
07/05/06 15:43:31 [Note]: 7011 1488
07/05/06 15:43:31 [Note]: 7026 0
07/05/06 15:43:31 [Note]: 7026 0
07/05/06 15:43:32 [Error]: 6024 1
07/05/06 15:43:42 [Note]: FSRAW library version 1.7.1019
07/05/06 15:50:09 [Note]: 7007 0

Bien à toi
0
Réponse 7 / 11
green day Messages postés 26722 Statut Modérateur, Contributeur sécurité 2 163
 
Salut

ok,

Relance HijackThis : choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked" :

O4 - HKLM\..\Run: [xsuonjmc] c:\windows\system32\xsuonjmc.exe xsuonjmc

ensuite cherche et supprime le fichier en gras :

c:\windows\system32\xsuonjmc.exe

dis nous s'il est toujours detecté

@+

0
Réponse 8 / 11
pantoboom Messages postés 4 Statut Membre
 
Salut,

J'ai fixé la ligne indiquée. Je n'ai pas trouvé dans l'exploreur le fichier en gras dans c:windows.system32.

Voila le HJ,apparemment il n'est plus là.

Logfile of HijackThis v1.99.1
Scan saved at 20:35:31, on 06/07/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
C:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\Documents and Settings\JENSSENS Wilfried\Mes documents\PROTECT\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
O4 - HKLM\..\Run: [CPLDBL10] C:\Program Files\EzButton\CPLDBL10.EXE
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDNewsAgent] C:\PROGRA~1\softwin\BITDEF~1\bdnagent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: CeEPwrSvc - COMPAL ELECTRONIC INC. - C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
O23 - Service: Dcfssvc - Eastman Kodak Company - C:\WINDOWS\system32\drivers\dcfssvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

Merci Green day.
0
Réponse 9 / 11
pantoboom Messages postés 4 Statut Membre
 
RE,

Je suis absent une semaine.
Je remonterai la file si nécessaire ?

Merci bien.
0
Réponse 10 / 11
green day Messages postés 26722 Statut Modérateur, Contributeur sécurité 2 163
 
re

ton log est clean ! où en sont tes soucis

???

++
0
Réponse 11 / 11
pantoboom
 
Salut green day,

Apparemment plus de Pb.
Je relance un scan ou 2 et j'avise.

A si je trouve qu'au demarrage l'ordi est un peut lent (ma
Merci.
0

Discussions similaires

Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Problème avec "PUADIManager:Win32/OfferCore
Knaki -
bazfile -

3 réponses
virus Artemis!
mabiche37 -
Malekal_morte- -

14 réponses
Désinstaller Softonic
Diguimette -
lilidurhone -

5 réponses
Message Apple virus !!
Souclik67 -
MPMP10 -

3 réponses