Pop-up ads
Solved
Luc
-
Luc_68 Posted messages 10 Status Membre -
Luc_68 Posted messages 10 Status Membre -
Hello,
every time I open a web page or change sites, one or more ad windows pop up at the same time. I have tried scanning with Spybot and Ad-Aware but that did not solve the problem.
If anyone could help me
Best regards
Luc
Attached is the HijackThis report:
Logfile of HijackThis v1.99.1
Scan saved at 18:15:43, on 15/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Apps\ActivBoard\nhksrv.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Apps\ActivBoard\MMKeybd.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\LogProtect\LogProtect.exe
C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Documents and Settings\Anne\My Documents\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Documents and Settings\Anne\My Documents\iPod\bin\iPodService.exe
C:\Apps\ActivBoard\TrayMon.exe
C:\Apps\ActivBoard\OSD.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\YSTEM3~1\attrib.exe
C:\Program Files\LogProtect\lpwchdg.exe
C:\Documents and Settings\Luc\Application Data\W?nSxS\n?pdb.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Luc\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.libertysurf.fr/recherche/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.libertysurf.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Links
R3 - URLSearchHook: (no name) - {85BE3304-A5CA-F23E-98FE-82FA3BA93B97} - C:\WINDOWS\system32\fzgmsup.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Desktop\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {85BE3304-A5CA-F23E-98FE-82FA3BA93B97} - C:\WINDOWS\system32\fzgmsup.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [ActivSurf] C:\apps\ActivSurf\4448364\Program\backweb-4448364.exe
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [LogProtect] "C:\Program Files\LogProtect\LogProtect.exe"
O4 - HKLM\..\Run: [Camera Detector] C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE -autorun
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Documents and Settings\Anne\My Documents\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [loaddvdlistbows] C:\Documents and Settings\All Users\Application Data\Date Debug Load Dvd\ping meta.exe
O4 - HKCU\..\Run: [Update Service] "C:\Program Files\Common Files\Teknum Systems\update.exe" /startup
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Sra] "C:\WINDOWS\system32\YSTEM3~1\attrib.exe" -vt yazb
O4 - HKCU\..\Run: [Zyn] C:\Documents and Settings\Luc\Application Data\W?nSxS\n?pdb.exe
O4 - Global Startup: Ulead Calendar Controller.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: HP Image Zone Software Quick Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Adobe Reader Quick Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.libertysurf.fr
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potg_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spyspotter.com/spyspotter/sp3.02r/spyspottercabinstall.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A09E6E97-F54C-40EA-949D-826497F00F81}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Documents and Settings\Anne\My Documents\iPod\bin\iPodService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
every time I open a web page or change sites, one or more ad windows pop up at the same time. I have tried scanning with Spybot and Ad-Aware but that did not solve the problem.
If anyone could help me
Best regards
Luc
Attached is the HijackThis report:
Logfile of HijackThis v1.99.1
Scan saved at 18:15:43, on 15/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Apps\ActivBoard\nhksrv.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Apps\ActivBoard\MMKeybd.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\LogProtect\LogProtect.exe
C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Documents and Settings\Anne\My Documents\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Documents and Settings\Anne\My Documents\iPod\bin\iPodService.exe
C:\Apps\ActivBoard\TrayMon.exe
C:\Apps\ActivBoard\OSD.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\YSTEM3~1\attrib.exe
C:\Program Files\LogProtect\lpwchdg.exe
C:\Documents and Settings\Luc\Application Data\W?nSxS\n?pdb.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Luc\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.libertysurf.fr/recherche/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.libertysurf.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Links
R3 - URLSearchHook: (no name) - {85BE3304-A5CA-F23E-98FE-82FA3BA93B97} - C:\WINDOWS\system32\fzgmsup.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Desktop\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {85BE3304-A5CA-F23E-98FE-82FA3BA93B97} - C:\WINDOWS\system32\fzgmsup.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [ActivSurf] C:\apps\ActivSurf\4448364\Program\backweb-4448364.exe
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [LogProtect] "C:\Program Files\LogProtect\LogProtect.exe"
O4 - HKLM\..\Run: [Camera Detector] C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE -autorun
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Documents and Settings\Anne\My Documents\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [loaddvdlistbows] C:\Documents and Settings\All Users\Application Data\Date Debug Load Dvd\ping meta.exe
O4 - HKCU\..\Run: [Update Service] "C:\Program Files\Common Files\Teknum Systems\update.exe" /startup
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Sra] "C:\WINDOWS\system32\YSTEM3~1\attrib.exe" -vt yazb
O4 - HKCU\..\Run: [Zyn] C:\Documents and Settings\Luc\Application Data\W?nSxS\n?pdb.exe
O4 - Global Startup: Ulead Calendar Controller.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: HP Image Zone Software Quick Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Adobe Reader Quick Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.libertysurf.fr
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potg_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spyspotter.com/spyspotter/sp3.02r/spyspottercabinstall.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A09E6E97-F54C-40EA-949D-826497F00F81}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Documents and Settings\Anne\My Documents\iPod\bin\iPodService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
Configuration: Windows XP Internet Explorer 6.0
21 réponses
- 1
- 2
Suivant
Hi
Just passing by
Do the following
Download Blacklight (from F-Secure) at one of the 2 addresses:
https://www.f-secure.com/en
https://www.f-secure.com/en
and save it on your Desktop.
Double-click blbeta.exe and accept the license; keep [X]scan through Windows Explorer checked; click Scan then Next
You will see a list of detected files appear. You will also see a report on your Desktop named fsbl.xxxxxxx.log (the xxxxxxx are numbers).
Copy/paste the report
--
Some seem honest, but when they shake your hand, you'd better count your fingers.
Just passing by
Do the following
Download Blacklight (from F-Secure) at one of the 2 addresses:
https://www.f-secure.com/en
https://www.f-secure.com/en
and save it on your Desktop.
Double-click blbeta.exe and accept the license; keep [X]scan through Windows Explorer checked; click Scan then Next
You will see a list of detected files appear. You will also see a report on your Desktop named fsbl.xxxxxxx.log (the xxxxxxx are numbers).
Copy/paste the report
--
Some seem honest, but when they shake your hand, you'd better count your fingers.
Hello
thank you for your response
I downloaded and performed a scan
I got the report which saved three times on my desktop...:
12/13/06 16:53:15 [Info]: BlackLight Engine 1.0.47 initialized
12/13/06 16:53:15 [Info]: OS: 5.1 build 2600 (Service Pack 2)
12/13/06 16:53:16 [Note]: 7019 4
12/13/06 16:53:16 [Note]: 7005 0
12/13/06 16:53:17 [Note]: 7006 0
12/13/06 16:53:17 [Note]: 7011 1156
12/13/06 16:53:17 [Note]: 7026 0
12/13/06 16:53:17 [Note]: 7026 0
thank you in advance if this can help you resolve my issue
kind regards
Luc
thank you for your response
I downloaded and performed a scan
I got the report which saved three times on my desktop...:
12/13/06 16:53:15 [Info]: BlackLight Engine 1.0.47 initialized
12/13/06 16:53:15 [Info]: OS: 5.1 build 2600 (Service Pack 2)
12/13/06 16:53:16 [Note]: 7019 4
12/13/06 16:53:16 [Note]: 7005 0
12/13/06 16:53:17 [Note]: 7006 0
12/13/06 16:53:17 [Note]: 7011 1156
12/13/06 16:53:17 [Note]: 7026 0
12/13/06 16:53:17 [Note]: 7026 0
thank you in advance if this can help you resolve my issue
kind regards
Luc
Hello
Do the following
Download Look2Me-Destroyer.exe to your Desktop.
http://www.atribune.org/ccount/click.php?id=7
* Close all active windows before proceeding to the next step.
* Double-click Look2Me-Destroyer.exe to launch the tool.
* Check Run this program as a task
* A message will appear, telling you: "Look2Me-Destroyer will close and re-open in approximately 10 seconds".
Click OK
* It will relaunch after 10 seconds, then
click the Scan for L2M button;
the icons on your Desktop will disappear: this is normal.
* When the scan finishes,
click the Remove L2M button
* A Done Scanning message will appear, click OK
.
* A new message will appear: Done removing infected files! Look2Me-Destroyer will now shutdown your computer;
click OK.
* Your PC will now shut down.
* Start your PC normally.
Let us know what happens
--
The wise man does not play "jumping sheep" with a unicorn... ...
Do the following
Download Look2Me-Destroyer.exe to your Desktop.
http://www.atribune.org/ccount/click.php?id=7
* Close all active windows before proceeding to the next step.
* Double-click Look2Me-Destroyer.exe to launch the tool.
* Check Run this program as a task
* A message will appear, telling you: "Look2Me-Destroyer will close and re-open in approximately 10 seconds".
Click OK
* It will relaunch after 10 seconds, then
click the Scan for L2M button;
the icons on your Desktop will disappear: this is normal.
* When the scan finishes,
click the Remove L2M button
* A Done Scanning message will appear, click OK
.
* A new message will appear: Done removing infected files! Look2Me-Destroyer will now shutdown your computer;
click OK.
* Your PC will now shut down.
* Start your PC normally.
Let us know what happens
--
The wise man does not play "jumping sheep" with a unicorn... ...
I have followed all your steps, and upon starting my PC, I found a report from Look2Me-Destroyer V1.0.12 on my desktop, which is as follows:
Look2Me-Destroyer V1.0.12
Scanning for infected files.....
Scan started at 18/12/2006 18:06:13
Attempting to delete infected files...
Making registry repairs.
Restoring Windows certificates.
Replaced hosts file with default windows hosts file
Restoring SeDebugPrivilege for Administrators – Succeeded
Sincerely,
Luc
Look2Me-Destroyer V1.0.12
Scanning for infected files.....
Scan started at 18/12/2006 18:06:13
Attempting to delete infected files...
Making registry repairs.
Restoring Windows certificates.
Replaced hosts file with default windows hosts file
Restoring SeDebugPrivilege for Administrators – Succeeded
Sincerely,
Luc
Hi
I’m not really around at the moment
Do the following
1°/ - Download the SmitfraudFix software (created by S!Ri J)
http://siri.urz.free.fr/Fix/SmitfraudFix.zip and unzip it.
In image:
http://siri.urz.free.fr/Fix/SmitfraudFix.php
Once unzipped, double click on smitfraudfix.cmd and choose option 1
this will generate a report.
Copy/paste the report
Restart the PC in safe mode: tap the F8 key on your keyboard (or F5) and choose safe mode)
- Open the "SmitfraudFix" folder and double click on "Smitfraudfix.cmd", choose option 2 and answer yes to everything.
Copy/paste the report on the forum please.
Run a hijackthis again
Talk soon
--
A wise man does not play "jumping sheep" with a unicorn... ...
I’m not really around at the moment
Do the following
1°/ - Download the SmitfraudFix software (created by S!Ri J)
http://siri.urz.free.fr/Fix/SmitfraudFix.zip and unzip it.
In image:
http://siri.urz.free.fr/Fix/SmitfraudFix.php
Once unzipped, double click on smitfraudfix.cmd and choose option 1
this will generate a report.
Copy/paste the report
Restart the PC in safe mode: tap the F8 key on your keyboard (or F5) and choose safe mode)
- Open the "SmitfraudFix" folder and double click on "Smitfraudfix.cmd", choose option 2 and answer yes to everything.
Copy/paste the report on the forum please.
Run a hijackthis again
Talk soon
--
A wise man does not play "jumping sheep" with a unicorn... ...
Hello
I allow myself to write to you under my new nickname as I have become a member of CCM.
I have followed your steps closely, here is the report for step no. 1:
SmitFraudFix v2.131
Report made at 16:33:10.79, 19/12/2006
Executed from C:\Documents and Settings\Luc\Desktop\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
The file system type is NTFS
Fix executed in normal mode
»»»»»»»»»»»»»»»»»»»»»»»» C:\
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Luc
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Luc\Application Data
»»»»»»»»»»»»»»»»»»»»»»»» Start Menu
»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Luc\Favorites
»»»»»»»»»»»»»»»»»»»»»»»» Desktop
»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files
»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys
»»»»»»»»»»»»»»»»»»»»»»»» Desktop items
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My homepage"
»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Warning, the following keys are not necessarily infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Warning, the following keys are not necessarily infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Warning, the following keys are not necessarily infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32
»»»»»»»»»»»»»»»»»»»»»»»» Searching for wininet.dll infection
»»»»»»»»»»»»»»»»»»»»»»»» End
then the report for step no. 2:
SmitFraudFix v2.131
Report made at 16:58:40.75, 19/12/2006
Executed from C:\Documents and Settings\Luc\Desktop\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
The file system type is NTFS
Fix executed in normal mode
»»»»»»»»»»»»»»»»»»»»»»»» Before SmitFraudFix
!!!Warning, the following keys are not necessarily infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» Stopping processes
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files
»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temporary Files
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Warning, the following keys are not necessarily infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» Cleaning the registry
»»»»»»»»»»»»»»»»»»»»»»»» Cleaning the registry
Cleaning completed.
»»»»»»»»»»»»»»»»»»»»»»»» After SmitFraudFix
!!!Warning, the following keys are not necessarily infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» End
and finally the Hijackthis report done after these two steps:
Logfile of HijackThis v1.99.1
Scan saved at 17:05:30, on 19/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Apps\ActivBoard\nhksrv.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Apps\ActivBoard\MMKeybd.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\LogProtect\LogProtect.exe
C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Documents and Settings\Anne\My Documents\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Documents and Settings\Anne\My Documents\iPod\bin\iPodService.exe
C:\Apps\ActivBoard\TrayMon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Apps\ActivBoard\OSD.exe
C:\WINDOWS\system32\YSTEM3~1\attrib.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\LogProtect\lpwchdg.exe
C:\Documents and Settings\Luc\Application Data\W?nSxS\n?pdb.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Microsoft Office\Office\WINWORD.EXE
C:\Program Files\Microsoft Money\System\urlmap.exe
C:\Documents and Settings\Luc\Desktop\pop-up windows\HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings, ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar, LinksFolderName = Links
R3 - URLSearchHook: (no name) - {85BE3304-A5CA-F23E-98FE-82FA3BA93B97} - C:\WINDOWS\system32\fzgmsup.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Desktop\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {85BE3304-A5CA-F23E-98FE-82FA3BA93B97} - C:\WINDOWS\system32\fzgmsup.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [ActivSurf] C:\apps\ActivSurf\4448364\Program\backweb-4448364.exe
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [LogProtect] "C:\Program Files\LogProtect\LogProtect.exe"
O4 - HKLM\..\Run: [Camera Detector] C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE -autorun
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Documents and Settings\Anne\My Documents\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [loaddvdlistbows] C:\Documents and Settings\All Users\Application Data\Date Debug Load Dvd\ping meta.exe
O4 - HKCU\..\Run: [Update Service] "C:\Program Files\Common Files\Teknum Systems\update.exe" /startup
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Sra] "C:\WINDOWS\system32\YSTEM3~1\attrib.exe" -vt yazb
O4 - HKCU\..\Run: [Zyn] C:\Documents and Settings\Luc\Application Data\W?nSxS\n?pdb.exe
O4 - Global Startup: Ulead Calendar Controller.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: HP Image Zone software quick launch.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Quick launch of Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menu item: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.libertysurf.fr
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potg_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spyspotter.com/spyspotter/sp3.02r/spyspottercabinstall.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A09E6E97-F54C-40EA-949D-826497F00F81}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\Fichiers
I allow myself to write to you under my new nickname as I have become a member of CCM.
I have followed your steps closely, here is the report for step no. 1:
SmitFraudFix v2.131
Report made at 16:33:10.79, 19/12/2006
Executed from C:\Documents and Settings\Luc\Desktop\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
The file system type is NTFS
Fix executed in normal mode
»»»»»»»»»»»»»»»»»»»»»»»» C:\
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Luc
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Luc\Application Data
»»»»»»»»»»»»»»»»»»»»»»»» Start Menu
»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Luc\Favorites
»»»»»»»»»»»»»»»»»»»»»»»» Desktop
»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files
»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys
»»»»»»»»»»»»»»»»»»»»»»»» Desktop items
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My homepage"
»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Warning, the following keys are not necessarily infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Warning, the following keys are not necessarily infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Warning, the following keys are not necessarily infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32
»»»»»»»»»»»»»»»»»»»»»»»» Searching for wininet.dll infection
»»»»»»»»»»»»»»»»»»»»»»»» End
then the report for step no. 2:
SmitFraudFix v2.131
Report made at 16:58:40.75, 19/12/2006
Executed from C:\Documents and Settings\Luc\Desktop\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
The file system type is NTFS
Fix executed in normal mode
»»»»»»»»»»»»»»»»»»»»»»»» Before SmitFraudFix
!!!Warning, the following keys are not necessarily infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» Stopping processes
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files
»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temporary Files
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Warning, the following keys are not necessarily infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» Cleaning the registry
»»»»»»»»»»»»»»»»»»»»»»»» Cleaning the registry
Cleaning completed.
»»»»»»»»»»»»»»»»»»»»»»»» After SmitFraudFix
!!!Warning, the following keys are not necessarily infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» End
and finally the Hijackthis report done after these two steps:
Logfile of HijackThis v1.99.1
Scan saved at 17:05:30, on 19/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Apps\ActivBoard\nhksrv.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Apps\ActivBoard\MMKeybd.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\LogProtect\LogProtect.exe
C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Documents and Settings\Anne\My Documents\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Documents and Settings\Anne\My Documents\iPod\bin\iPodService.exe
C:\Apps\ActivBoard\TrayMon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Apps\ActivBoard\OSD.exe
C:\WINDOWS\system32\YSTEM3~1\attrib.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\LogProtect\lpwchdg.exe
C:\Documents and Settings\Luc\Application Data\W?nSxS\n?pdb.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Microsoft Office\Office\WINWORD.EXE
C:\Program Files\Microsoft Money\System\urlmap.exe
C:\Documents and Settings\Luc\Desktop\pop-up windows\HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings, ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar, LinksFolderName = Links
R3 - URLSearchHook: (no name) - {85BE3304-A5CA-F23E-98FE-82FA3BA93B97} - C:\WINDOWS\system32\fzgmsup.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Desktop\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {85BE3304-A5CA-F23E-98FE-82FA3BA93B97} - C:\WINDOWS\system32\fzgmsup.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [ActivSurf] C:\apps\ActivSurf\4448364\Program\backweb-4448364.exe
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [LogProtect] "C:\Program Files\LogProtect\LogProtect.exe"
O4 - HKLM\..\Run: [Camera Detector] C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE -autorun
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Documents and Settings\Anne\My Documents\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [loaddvdlistbows] C:\Documents and Settings\All Users\Application Data\Date Debug Load Dvd\ping meta.exe
O4 - HKCU\..\Run: [Update Service] "C:\Program Files\Common Files\Teknum Systems\update.exe" /startup
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Sra] "C:\WINDOWS\system32\YSTEM3~1\attrib.exe" -vt yazb
O4 - HKCU\..\Run: [Zyn] C:\Documents and Settings\Luc\Application Data\W?nSxS\n?pdb.exe
O4 - Global Startup: Ulead Calendar Controller.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: HP Image Zone software quick launch.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Quick launch of Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menu item: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.libertysurf.fr
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potg_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spyspotter.com/spyspotter/sp3.02r/spyspottercabinstall.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A09E6E97-F54C-40EA-949D-826497F00F81}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\Fichiers
Hello
The second Smitfraud report should have been in safe mode
Restart the PC in safe mode: tap the F8 key on your keyboard (or F5) and choose safe mode)
- Open the "SmitfraudFix" folder and double click on "Smitfraudfix.cmd", select option 2 and respond yes to all.
======================================
Hello,
Method to follow in order...
----------------------------------------------------------------------------
Download these programs (unless you already have them)
To be used later
A - ad-aware version 1.06
(here) http://www.florensac-chasse-trap.com/ virus/security software section
see demo
http://pageperso.aol.fr/balltrap34/adwseflash.zip
B - spybot version 1.4
(here) http://www.florensac-chasse-trap.com/ virus/security software section
see usage demo
http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm
C - Ccleaner: (registry cleaner, cookies+temp+prefetch+history+etc..)
Download here:
https://www.ccleaner.com/ccleaner/download
Tutorial here:
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php
D - Ewido
https://www.malekal.com/tutorial-et-guide-ewido-v4/
----------------------------------------------------------------------------
¤Show all files and folders:
Click on start/control panel/tools/folder options/view
Check "show hidden files and folders"
Uncheck "Hide protected operating system files (recommended)"
Uncheck "hide extensions for known file types"
Then click "Ok" to validate the changes.
And apply!
=================================
Restart HijackThis, choose "do a scan only," check the box next to the lines below and click "fix checked" at the bottom
O4 - HKLM\..\Run: [ActivSurf] C:\apps\ActivSurf\4448364\Program\backweb-4448364.exe
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [LogProtect] "C:\Program Files\LogProtect\LogProtect.exe"
O4 - HKLM\..\Run: [Camera Detector] C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE –autorun
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Documents and Settings\Anne\Mes documents\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" –atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 –k
O4 - HKLM\..\Run: [loaddvdlistbows] C:\Documents and Settings\All Users\Application Data\Date Debug Load Dvd\ping meta.exe
O4 - HKCU\..\Run: [Update Service] "C:\Program Files\Fichiers communs\Teknum Systems\update.exe" /startup
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Sra] "C:\WINDOWS\system32\YSTEM3~1\attrib.exe" -vt yazb
O4 - HKCU\..\Run: [Zyn] C:\Documents and Settings\Luc\Application Data\W?nSxS\n?pdb.exe
O4 - Global Startup: Ulead Calendar Controller.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: HP Image Zone Quick Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Adobe Reader Quick Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potg_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spyspotter.com/spyspotter/sp3.02r/spyspottercabinstall.cab
O18 - Protocol: bw+0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
BOONTY
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
for the latter (23) remove it by going to Start >> run >> services.msc
Stop it and disable it.
Or
uninstall manually through "control panel –Add/remove programs and remove this software
Check these programs, if you don't recognize them, delete
[ActivSurf
CleanEasyImg
[LogProtect
NavExcel
Date Debug Load Dvd
[Sra
[Zyn
============ ============================
¤Start in safe mode:
To do this, tap the F8 key as soon as you turn on the PC without stopping
A window will open, use the keyboard arrows to move to start in safe mode and press enter.
Once on the desktop, if there are no colors and other things, it's normal!
(If F8 doesn’t work use the F5 key).
----------------------------------------------------------------------------
¤Empty your temp files and temporary internet files:
Now launch
A/ Ad-Aware delete quarantine
B/ Spybot Delete quarantine
C/ Ccleaner Ewido Copy/paste the report
D/
----------------------------------------------------------------------------
¤ Empty your Recycle Bin.
----------------------------------------------------------------------------
¤ Restart in normal mode, launch Hijackthis again and copy/paste a new report on the forum.
Keep us updated
See you
By the way, did you buy Norton ???? ==> sieve
You should change it...
And your firewall???--
The wise man does not play "leapfrog" with a unicorn... ...
The second Smitfraud report should have been in safe mode
Restart the PC in safe mode: tap the F8 key on your keyboard (or F5) and choose safe mode)
- Open the "SmitfraudFix" folder and double click on "Smitfraudfix.cmd", select option 2 and respond yes to all.
======================================
Hello,
Method to follow in order...
----------------------------------------------------------------------------
Download these programs (unless you already have them)
To be used later
A - ad-aware version 1.06
(here) http://www.florensac-chasse-trap.com/ virus/security software section
see demo
http://pageperso.aol.fr/balltrap34/adwseflash.zip
B - spybot version 1.4
(here) http://www.florensac-chasse-trap.com/ virus/security software section
see usage demo
http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm
C - Ccleaner: (registry cleaner, cookies+temp+prefetch+history+etc..)
Download here:
https://www.ccleaner.com/ccleaner/download
Tutorial here:
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php
D - Ewido
https://www.malekal.com/tutorial-et-guide-ewido-v4/
----------------------------------------------------------------------------
¤Show all files and folders:
Click on start/control panel/tools/folder options/view
Check "show hidden files and folders"
Uncheck "Hide protected operating system files (recommended)"
Uncheck "hide extensions for known file types"
Then click "Ok" to validate the changes.
And apply!
=================================
Restart HijackThis, choose "do a scan only," check the box next to the lines below and click "fix checked" at the bottom
O4 - HKLM\..\Run: [ActivSurf] C:\apps\ActivSurf\4448364\Program\backweb-4448364.exe
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [LogProtect] "C:\Program Files\LogProtect\LogProtect.exe"
O4 - HKLM\..\Run: [Camera Detector] C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE –autorun
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [navapp] C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Documents and Settings\Anne\Mes documents\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" –atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 –k
O4 - HKLM\..\Run: [loaddvdlistbows] C:\Documents and Settings\All Users\Application Data\Date Debug Load Dvd\ping meta.exe
O4 - HKCU\..\Run: [Update Service] "C:\Program Files\Fichiers communs\Teknum Systems\update.exe" /startup
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Sra] "C:\WINDOWS\system32\YSTEM3~1\attrib.exe" -vt yazb
O4 - HKCU\..\Run: [Zyn] C:\Documents and Settings\Luc\Application Data\W?nSxS\n?pdb.exe
O4 - Global Startup: Ulead Calendar Controller.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: HP Image Zone Quick Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Adobe Reader Quick Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potg_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spyspotter.com/spyspotter/sp3.02r/spyspottercabinstall.cab
O18 - Protocol: bw+0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {7A9ECE04-4CE9-414F-AE3A-BA3FBE2BFBB2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
BOONTY
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
for the latter (23) remove it by going to Start >> run >> services.msc
Stop it and disable it.
Or
uninstall manually through "control panel –Add/remove programs and remove this software
Check these programs, if you don't recognize them, delete
[ActivSurf
CleanEasyImg
[LogProtect
NavExcel
Date Debug Load Dvd
[Sra
[Zyn
============ ============================
¤Start in safe mode:
To do this, tap the F8 key as soon as you turn on the PC without stopping
A window will open, use the keyboard arrows to move to start in safe mode and press enter.
Once on the desktop, if there are no colors and other things, it's normal!
(If F8 doesn’t work use the F5 key).
----------------------------------------------------------------------------
¤Empty your temp files and temporary internet files:
Now launch
A/ Ad-Aware delete quarantine
B/ Spybot Delete quarantine
C/ Ccleaner Ewido Copy/paste the report
D/
----------------------------------------------------------------------------
¤ Empty your Recycle Bin.
----------------------------------------------------------------------------
¤ Restart in normal mode, launch Hijackthis again and copy/paste a new report on the forum.
Keep us updated
See you
By the way, did you buy Norton ???? ==> sieve
You should change it...
And your firewall???--
The wise man does not play "leapfrog" with a unicorn... ...
Hello,
Here is the report for step No. 2 of SmitFraudFix v2 performed in safe mode:
SmitFraudFix v2.131
Report created at 13:20:22.21, 20/12/2006
Executed from C:\Documents and Settings\Luc\Desktop\pop-up windows\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
The file system type is NTFS
Fix executed in safe mode
»»»»»»»»»»»»»»»»»»»»»»»» Before SmitFraudFix
!!!Warning, the following keys are not necessarily infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» Stopping processes
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files
»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temporary Files
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Warning, the following keys are not necessarily infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» Cleaning the registry
Cleaning completed.
»»»»»»»»»»»»»»»»»»»»»»»» After SmitFraudFix
!!!Warning, the following keys are not necessarily infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» End
Next is the report from Ccleaner Ewido (in safe mode):
COMPLETE ANALYSIS - (60.575 secs)
------------------------------------------------------------------------------------------
508.9MB have been deleted. (Approximate size)
------------------------------------------------------------------------------------------
Details of files to delete (Note: NO files have been deleted yet)
------------------------------------------------------------------------------------------
Temporary Internet Files (files 5298) 123.6MB
C:\Documents and Settings\Luc\Cookies\luc@1072556060[1].txt 557 bytes
C:\Documents and Settings\Luc\Cookies\luc@123-fr[1].txt 405 bytes
C:\Documents and Settings\Luc\Cookies\luc@123-go.freeonlinegames[1].txt 82 bytes
C:\Documents and Settings\Luc\Cookies\luc@15425[1].txt 118 bytes
C:\Documents and Settings\Luc\Cookies\luc@16[1].txt 98 bytes
C:\Documents and Settings\Luc\Cookies\luc@18578[1].txt 197 bytes
C:\Documents and Settings\Luc\Cookies\luc@200628[1].txt 114 bytes
C:\Documents and Settings\Luc\Cookies\luc@205.236.34[2].txt 957 bytes
C:\Documents and Settings\Luc\Cookies\luc@207[1].txt 105 bytes
C:\Documents and Settings\Luc\Cookies\luc@21[1].txt 305 bytes
C:\Documents and Settings\Luc\Cookies\luc@3suisses[2].txt 174 bytes
C:\Documents and Settings\Luc\Cookies\luc@55997340[1].txt 118 bytes
C:\Documents and Settings\Luc\Cookies\luc@67354874[2].txt 119 bytes
C:\Documents and Settings\Luc\Cookies\luc@805.unevideogratuite[2].txt 282 bytes
C:\Documents and Settings\Luc\Cookies\luc@81.25.195[1].txt 219 bytes
C:\Documents and Settings\Luc\Cookies\luc@81.255.103[2].txt 143 bytes
C:\Documents and Settings\Luc\Cookies\luc@81.255.72[2].txt 363 bytes
C:\Documents and Settings\Luc\Cookies\luc@888[2].txt 97 bytes
C:\Documents and Settings\Luc\Cookies\luc@8[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@9tel[1].txt 103 bytes
C:\Documents and Settings\Luc\Cookies\luc@abdel-inn[1].txt 375 bytes
C:\Documents and Settings\Luc\Cookies\luc@abebooks[1].txt 68 bytes
C:\Documents and Settings\Luc\Cookies\luc@absoluflash.adwitserver[2].txt 103 bytes
C:\Documents and Settings\Luc\Cookies\luc@abum[1].txt 341 bytes
C:\Documents and Settings\Luc\Cookies\luc@acces.direction-x[2].txt 185 bytes
C:\Documents and Settings\Luc\Cookies\luc@accuweather[2].txt 315 bytes
C:\Documents and Settings\Luc\Cookies\luc@action.metaffiliation[2].txt 157 bytes
C:\Documents and Settings\Luc\Cookies\luc@actustar[1].txt 356 bytes
C:\Documents and Settings\Luc\Cookies\luc@ad.adnet[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@ad.cibleclick[1].txt 106 bytes
C:\Documents and Settings\Luc\Cookies\luc@ad.dumpalink[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@ad.ifrance[2].txt 847 bytes
C:\Documents and Settings\Luc\Cookies\luc@ad.zanox[1].txt 101 bytes
C:\Documents and Settings\Luc\Cookies\luc@ad2flash[2].txt 76 bytes
C:\Documents and Settings\Luc\Cookies\luc@adbrite[1].txt 240 bytes
C:\Documents and Settings\Luc\Cookies\luc@adidas[1].txt 103 bytes
C:\Documents and Settings\Luc\Cookies\luc@admajorem[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@admBloger[1].txt 226 bytes
C:\Documents and Settings\Luc\Cookies\luc@adopt.euroclick[1].txt 289 bytes
C:\Documents and Settings\Luc\Cookies\luc@adopt.hbmediapro[1].txt 460 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.addclic[1].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.adomos[1].txt 101 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.aliceadsl[1].txt 100 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.allotraffic[2].txt 109 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.freeonlinegames[1].txt 135 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.ftpk[1].txt 112 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.guardian.co[2].txt 197 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.ims[1].txt 1.53KB
C:\Documents and Settings\Luc\Cookies\luc@ads.monster[1].txt 100 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.planetactive[2].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.tiscali[1].txt 98 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.us.e-planning[1].txt 106 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.wanadooregie[1].txt 104 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads2.drivelinemedia[1].txt 106 bytes
C:\Documents and Settings\Luc\Cookies\luc@adultadworld[2].txt 442 bytes
C:\Documents and Settings\Luc\Cookies\luc@adultfriendfinder[2].txt 262 bytes
C:\Documents and Settings\Luc\Cookies\luc@adv.surinter[1].txt 707 bytes
C:\Documents and Settings\Luc\Cookies\luc@advertstream[2].txt 828 bytes
C:\Documents and Settings\Luc\Cookies\luc@ad[2].txt 244 bytes
C:\Documents and Settings\Luc\Cookies\luc@agame[1].txt 70 bytes
C:\Documents and Settings\Luc\Cookies\luc@alapage[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@aliceadsl[2].txt 177 bytes
C:\Documents and Settings\Luc\Cookies\luc@aller3e3ts.skyblog[1].txt 87 bytes
C:\Documents and Settings\Luc\Cookies\luc@allocine[2].txt 237 bytes
C:\Documents and Settings\Luc\Cookies\luc@als.umusic[1].txt 145 bytes
C:\Documents and Settings\Luc\Cookies\luc@alsacienne6802.skyblog[1].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@amazon[2].txt 88 bytes
C:\Documents and Settings\Luc\Cookies\luc@amazon[3].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@amoramore.skyblog[1].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@amoureux[2].txt 76 bytes
C:\Documents and Settings\Luc\Cookies\luc@amylena[2].txt 366 bytes
C:\Documents and Settings\Luc\Cookies\luc@analyse[1].txt 132 bytes
C:\Documents and Settings\Luc\Cookies\luc@angelsandairwaves[2].txt 410 bytes
C:\Documents and Settings\Luc\Cookies\luc@anna-lena-matz1990.spaces.msn[1].txt 358 bytes
C:\Documents and Settings\Luc\Cookies\luc@ants-colonies.freeonlinegames[1].txt 88 bytes
C:\Documents and Settings\Luc\Cookies\luc@aol[1].txt 196 bytes
C:\Documents and Settings\Luc\Cookies\luc@apple[1].txt 107 bytes
C:\Documents and Settings\Luc\Cookies\luc@apu0800.audientia[1].txt 331 bytes
C:\Documents and Settings\Luc\Cookies\luc@arbre-celtique[1].txt 369 bytes
C:\Documents and Settings\Luc\Cookies\luc@archibal03.skyblog[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@arno68.spaces.msn[1].txt 326 bytes
C:\Documents and Settings\Luc\Cookies\luc@artistdirect[1].txt 164 bytes
C:\Documents and Settings\Luc\Cookies\luc@artistes[2].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@askmen[2].txt 456 bytes
C:\Documents and Settings\Luc\Cookies\luc@assopeche[1].txt 108 bytes
C:\Documents and Settings\Luc\Cookies\luc@astwinds[2].txt 729 bytes
C:\Documents and Settings\Luc\Cookies\luc@atraxio[1].txt 127 bytes
C:\Documents and Settings\Luc\Cookies\luc@atwola[2].txt 95 bytes
C:\Documents and Settings\Luc\Cookies\luc@audiofanzine[2].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@aufeminin[1].txt 79 bytes
C:\Documents and Settings\Luc\Cookies\luc@aupaysdusexe[2].txt 378 bytes
C:\Documents and Settings\Luc\Cookies\luc@a[1].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@b985[1].txt 95 bytes
C:\Documents and Settings\Luc\Cookies\luc@bangbros1[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@banner.32vegas[2].txt 283 bytes
C:\Documents and Settings\Luc\Cookies\luc@banner.cotedazurpalace[2].txt 271 bytes
C:\Documents and Settings\Luc\Cookies\luc@banner.eurogrand[2].txt 290 bytes
C:\Documents and Settings\Luc\Cookies\luc@banner.prestigecasino[2].txt 309 bytes
C:\Documents and Settings\Luc\Cookies\luc@batard68.skyblog[2].txt 212 bytes
C:\Documents and Settings\Luc\Cookies\luc@battleon[2].txt 127 bytes
C:\Documents and Settings\Luc\Cookies\luc@bbc.co[1].txt 285 bytes
C:\Documents and Settings\Luc\Cookies\luc@bbkiki68.skyblog[1].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@bearshare[2].txt 385 bytes
C:\Documents and Settings\Luc\Cookies\luc@belnk[1].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@benchmark[1].txt 236 bytes
C:\Documents and Settings\Luc\Cookies\luc@betanews.us.smarttargetting[2].txt 135 bytes
C:\Documents and Settings\Luc\Cookies\luc@bigboss68901.skyblog[1].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@bike-mania-on-ice.freeonlinegames[1].txt 93 bytes
C:\Documents and Settings\Luc\Cookies\luc@billing.acces-membres[1].txt 93 bytes
C:\Documents and Settings\Luc\Cookies\luc@bimonline.insites[2].txt 174 bytes
C:\Documents and Settings\Luc\Cookies\luc@blagues[1].txt 98 bytes
C:\Documents and Settings\Luc\Cookies\luc@blagues[2].txt 350 bytes
C:\Documents and Settings\Luc\Cookies\luc@blink182[1].txt 518 bytes
C:\Documents and Settings\Luc\Cookies\luc@blogdestar[1].txt 79 bytes
C:\Documents and Settings\Luc\Cookies\luc@blogg[1].txt 363 bytes
C:\Documents and Settings\Luc\Cookies\luc@blonde[1].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@bloodhound_gang[1].txt 117 bytes
C:\Documents and Settings\Luc\Cookies\luc@bob-marleytte-68.skyblog[2].txt 93 bytes
C:\Documents and Settings\Luc\Cookies\luc@boonty.nrj[1].txt 119 bytes
C:\Documents and Settings\Luc\Cookies\luc@boxcarracer[1].txt 385 bytes
C:\Documents and Settings\Luc\Cookies\luc@box[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@branchez-vous[1].txt 91 bytes
C:\Documents and Settings\Luc\Cookies\luc@burstnet[2].txt 147 bytes
C:\Documents and Settings\Luc\Cookies\luc@c.fsx[1].txt 122 bytes
C:\Documents and Settings\Luc\Cookies\luc@c00lman.free[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@c1.x-traceur[1].txt 231 bytes
C:\Documents and Settings\Luc\Cookies\luc@caloga[2].txt 148 bytes
C:\Documents and Settings\Luc\Cookies\luc@campaign.iitech[1].txt 160 bytes
C:\Documents and Settings\Luc\Cookies\luc@cana-sucre01.skyblog[1].txt 88 bytes
C:\Documents and Settings\Luc\Cookies\luc@canardplus[1].txt 394 bytes
C:\Documents and Settings\Luc\Cookies\luc@captain-usa.freeonlinegames[1].txt 87 bytes
C:\Documents and Settings\Luc\Cookies\luc@carasexe[2].txt 326 bytes
C:\Documents and Settings\Luc\Cookies\luc@carpe21.jeun[2].txt 246 bytes
C:\Documents and Settings\Luc\Cookies\luc@carrefourinternet[1].txt 82 bytes
C:\Documents and Settings\Luc\Cookies\luc@casino[1].txt 330 bytes
C:\Documents and Settings\Luc\Cookies\luc@cassava[1].txt 93 bytes
C:\Documents and Settings\Luc\Cookies\luc@categories[1].txt 101 bytes
C:\Documents and Settings\Luc\Cookies\luc@ccbill[1].txt 158 bytes
C:\Documents and Settings\Luc\Cookies\luc@ccscan[1].txt 82 bytes
C:\Documents and Settings\Luc\Cookies\luc@cdiscount[1].txt 490 bytes
C:\Documents and Settings\Luc\Cookies\luc@celebrite-nues.skyblog[1].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@chansons[1].txt 82 bytes
C:\Documents and Settings\Luc\Cookies\luc@chansons[2].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@charm-forever.skyblog[2].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@chordie[1].txt 383 bytes
C:\Documents and Settings\Luc\Cookies\luc@chtitefifi22.skyblog[2].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@cibleclick.azuria[1].txt 79 bytes
C:\Documents and Settings\Luc\Cookies\luc@claudecarpefishing.oxatis[1].txt 108 bytes
C:\Documents and Settings\Luc\Cookies\luc@click-fr[1].txt 333 bytes
C:\Documents and Settings\Luc\Cookies\luc@clicktorrent[1].txt 97 bytes
C:\Documents and Settings\Luc\Cookies\luc@club-internet[1].txt 116 bytes
C:\Documents and Settings\Luc\Cookies\luc@cms.gffn[1].txt 142 bytes
C:\Documents and Settings\Luc\Cookies\luc@combines-msn.skyblog[1].txt 176 bytes
C:\Documents and Settings\Luc\Cookies\luc@common[1].txt 111 bytes
C:\Documents and Settings\Luc\Cookies\luc@compiles-foot.skyblog[1].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@com[1].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@connextra[2].txt 283 bytes
C:\Documents and Settings\Luc\Cookies\luc@content.ipro[1].txt 100 bytes
C:\Documents and Settings\Luc\Cookies\luc@cookie.monster[2].txt 236 bytes
C:\Documents and Settings\Luc\Cookies\luc@cool-smiley[1].txt 377 bytes
C:\Documents and Settings\Luc\Cookies\luc@core.mochibot[1].txt 108 bytes
C:\Documents and Settings\Luc\Cookies\luc@cpt[1].txt 87 bytes
C:\Documents and Settings\Luc\Cookies\luc@crdp.ac-creteil[1].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@creativeby1.unicast[1].txt 140 bytes
C:\Documents and Settings\Luc\Cookies\luc@crocsex[1].txt 79 bytes
C:\Documents and Settings\Luc\Cookies\luc@cs.shopperreports[2].txt 117 bytes
C:\Documents and Settings\Luc\Cookies\luc@cursormania[1].txt 349 bytes
C:\Documents and Settings\Luc\Cookies\luc@cybermonitor[1].txt 88 bytes
C:\Documents and Settings\Luc\Cookies\luc@cybermusicalinstruments[1].txt 127 bytes
C:\Documents and Settings\Luc\Cookies\luc@cz4.clickzs[1].txt 379 bytes
C:\Documents and Settings\Luc\Cookies\luc@cz5.clickzs[2].txt 187 bytes
C:\Documents and Settings\Luc\Cookies\luc@cz6.clickzs[2].txt 182 bytes
C:\Documents and Settings\Luc\Cookies\luc@cz8.clickzs[1].txt 415 bytes
C:\Documents and Settings\Luc\Cookies\luc@d2.advertserve[1].txt 107 bytes
C:\Documents and Settings\Luc\Cookies\luc@danger-wheels.freeonlinegames[1].txt 88 bytes
C:\Documents and Settings\Luc\Cookies\luc@data.abebooks[1].txt 97 bytes
C:\Documents and Settings\Luc\Cookies\luc@data.gffn[1].txt 144 bytes
C:\Documents and Settings\Luc\Cookies\luc@dcs.xfire[1].txt 144 bytes
C:\Documents and Settings\Luc\Cookies\luc@DCSo1xwj2B4S3eDMs3lPV83F5_6E3J[1].txt 175 bytes
C:\Documents and Settings\Luc\Cookies\luc@ddnlejeu[2].txt 423 bytes
C:\Documents and Settings\Luc\Cookies\luc@de.videogames.games.yahoo[1].txt 102 bytes
C:\Documents and Settings\Luc\Cookies\luc@debza[1].txt 364 bytes
C:\Documents and Settings\Luc\Cookies\luc@deco4you.skyblog[1].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@decosblog.skyblog[2].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@diffusion[2].txt 507 bytes
C:\Documents and Settings\Luc\Cookies\luc@diffusion[3].txt 192 bytes
C:\Documents and Settings\Luc\Cookies\luc@directivepub[1].txt 87 bytes
C:\Documents and Settings\Luc\Cookies\luc@dirt-bike-2.freeonlinegames[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@dist.belnk[2].txt 537 bytes
C:\Documents and Settings\Luc\Cookies\luc@dmpi[1].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@doctissimo[2].txt 315 bytes
C:\Documents and Settings\Luc\Cookies\luc@dooyoo[1].txt 659 bytes
C:\Documents and Settings\Luc\Cookies\luc@downloads.vnunet[1].txt 147 bytes
C:\Documents and Settings\Luc\Cookies\luc@download[1].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@dreampoker[1].txt 340 bytes
C:\Documents and Settings\Luc\Cookies\luc@drivecleaner[2].txt 472 bytes
C:\Documents and Settings\Luc\Cookies\luc@du-gehoerst-zu-meinen-freunden[2].txt 402 bytes
C:\Documents and Settings\Luc\Cookies\luc@dumpalink[1].txt 709 bytes
C:\Documents and Settings\Luc\Cookies\luc@dvdrama[1].txt 372 bytes
C:\Documents and Settings\Luc\Cookies\luc@easy-forex[1].txt 695 bytes
C:\Documents and Settings\Luc\Cookies\luc@easyrencontre[2].txt 341 bytes
C:\Documents and Settings\Luc\Cookies\luc@easysexe[1].txt 67 bytes
C:\Documents and Settings\Luc\Cookies\luc@ebayobjects[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@ebay[2].txt 547 bytes
C:\Documents and Settings\Luc\Cookies\luc@ebookers[1].txt 93 bytes
C:\Documents and Settings\Luc\Cookies\luc@edt02[1].txt 2.21KB
C:\Documents and Settings\Luc\Cookies\luc@eeht.spaces.live[2].txt 400 bytes
C:\Documents and Settings\Luc\Cookies\luc@efixonline[1].txt 248 bytes
C:\Documents and Settings\Luc\Cookies\luc@el-ritalo.skyblog[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@element5[1].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@em.aveno[1].txt 77 bytes
C:\Documents and Settings\Luc\Cookies\luc@em.gad-network[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@encyclobd[1].txt 70 bytes
C:\Documents and Settings\Luc\Cookies\luc@entercasino[1].txt 112 bytes
C:\Documents and Settings\Luc\Cookies\luc@eresmas[2].txt 179 bytes
C:\Documents and Settings\Luc\Cookies\luc@eroticlick[2].txt 392 bytes
C:\Documents and Settings\Luc\Cookies\luc@esearchvision[2].txt 317 bytes
C:\Documents and Settings\Luc\Cookies\luc@eshop[1].txt 272 bytes
C:\Documents and Settings\Luc\Cookies\luc@etude-de-la-logique-du-corps[1].txt 146 bytes
C:\Documents and Settings\Luc\Cookies\luc@europe2[2].txt 630 bytes
C:\Documents and Settings\Luc\Cookies\luc@eurosport[1].txt 165 bytes
C:\Documents and Settings\Luc\Cookies\luc@ewido[2].txt 115 bytes
C:\Documents and Settings\Luc\Cookies\luc@ext.infos-du-net[1].txt 102 bytes
C:\Documents and Settings\Luc\Cookies\luc@f5.videos2stars[1].txt 188 bytes
C:\Documents and Settings\Luc\Cookies\luc@fandestars[1].txt 369 bytes
C:\Documents and Settings\Luc\Cookies\luc@fandestars[3].txt 124 bytes
C:\Documents and Settings\Luc\Cookies\luc@fantasysports.yahoo[1].txt 191 bytes
C:\Documents and Settings\Luc\Cookies\luc@fat-ninja.freeonlinegames[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@fe.lea.lycos[1].txt 101 bytes
C:\Documents and Settings\Luc\Cookies\luc@femmesmuresx.yi[1].txt 76 bytes
C:\Documents and Settings\Luc\Cookies\luc@fifaworldcup.yahoo[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@filecow[2].txt 336 bytes
C:\Documents and Settings\Luc\Cookies\luc@fileforums[2].txt 164 bytes
C:\Documents and Settings\Luc\Cookies\luc@film-x[1].txt 76 bytes
C:\Documents and Settings\Luc\Cookies\luc@films2cul[2].txt 365 bytes
C:\Documents and Settings\Luc\Cookies\luc@financetv[1].txt 103 bytes
C:\Documents and Settings\Luc\Cookies\luc@finaref[1].txt 105 bytes
C:\Documents and Settings\Luc\Cookies\luc@finder-x[1].txt 279 bytes
C:\Documents and Settings\Luc\Cookies\luc@fixionmedia[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@flashouarez[1].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@flyordie[1].txt 341 bytes
C:\Documents and Settings\Luc\Cookies\luc@fnac[1].txt 1.29KB
C:\Documents and Settings\Luc\Cookies\luc@fond-ecran-photo[2].txt 234 bytes
C:\Documents and Settings\Luc\Cookies\luc@fonie68.skyblog[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@football.guardian.co[1].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@footlive.sporever[1].txt 135 bytes
C:\Documents and Settings\Luc\Cookies\luc@forum.likid[1].txt 174 bytes
C:\Documents and Settings\Luc\Cookies\luc@forum2q.free[2].txt 168 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr-fr[2].txt 68 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr-fr[3].txt 69 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr.cityporn[1].txt 91 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr.drivecleaner[1].txt 236 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr.msn[2].txt 147 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr.sandralatina[2].txt 512 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr.yahoo[2].txt 287 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr.zigiz[1].txt 352 bytes
C:\Documents and Settings\Luc\Cookies\luc@france[2].txt 174 bytes
C:\Documents and Settings\Luc\Cookies\luc@francodirect[2].txt 552 bytes
C:\Documents and Settings\Luc\Cookies\luc@fra[1].txt 97 bytes
C:\Documents and Settings\Luc\Cookies\luc@free-x-movies[1].txt 390 bytes
C:\Documents and Settings\Luc\Cookies\luc@free.wegcash[2].txt 268 bytes
C:\Documents and Settings\Luc\Cookies\luc@freeonlinegames[2].txt 82 bytes
C:\Documents and Settings\Luc\Cookies\luc@freesexbay[1].txt 343 bytes
C:\Documents and Settings\Luc\Cookies\luc@free[2].txt 135 bytes
C:\Documents and Settings\Luc\Cookies\luc@freyus.carrefourinternet[2].txt 417 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr[1].txt 124 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr[2].txt 173 bytes
C:\Documents and Settings\Luc\Cookies\luc@funsessions.fanta[1].txt 114 bytes
C:\Documents and Settings\Luc\Cookies\luc@galleries.bourrees[2].txt 88 bytes
C:\Documents and Settings\Luc\Cookies\luc@galleries.fetichepink[1].txt 92 bytes
C:\Documents and Settings\Luc\Cookies\luc@galleries.premieresbaiseslesbos[2].txt 102 bytes
C:\Documents and Settings\Luc\Cookies\luc@gamecopyworld[2].txt 629 bytes
C:\Documents and Settings\Luc\Cookies\luc@gamekult[2].txt 231 bytes
C:\Documents and Settings\Luc\Cookies\luc@gamesload[2].txt 421 bytes
C:\Documents and Settings\Luc\Cookies\luc@genevieve[1].txt 148 bytes
C:\Documents and Settings\Luc\Cookies\luc@georgiapacificsoccer[1].txt 119 bytes
C:\Documents and Settings\Luc\Cookies\luc@germanboyforevertim.spaces.msn[2].txt 484 bytes
C:\Documents and Settings\Luc\Cookies\luc@gestionpub.adwitserver[2].txt 101 bytes
C:\Documents and Settings\Luc\Cookies\luc@gestion[1].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@gestion[3].txt 283 bytes
C:\Documents and Settings\Luc\Cookies\luc@globo[1].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@good_charlotte[1].txt 116 bytes
C:\Documents and Settings\Luc\Cookies\luc@google[2].txt 130 bytes
C:\Documents and Settings\Luc\Cookies\luc@google[3].txt 136 bytes
C:\Documents and Settings\Luc\Cookies\luc@google[4].txt 142 bytes
C:\Documents and Settings\Luc\Cookies\luc@go[1].txt 97 bytes
C:\Documents and Settings\Luc\Cookies\luc@gpads.geniproj[1].txt 109 bytes
C:\Documents and Settings\Luc\Cookies\luc@grand-lol[2].txt 360 bytes
C:\Documents and Settings\Luc\Cookies\luc@guardian.co[2].txt 480 bytes
C:\Documents and Settings\Luc\Cookies\luc@guitariff[2].txt 370 bytes
C:\Documents and Settings\Luc\Cookies\luc@guitartabs[1].txt 369 bytes
C:\Documents and Settings\Luc\Cookies\luc@guts[1].txt 141 bytes
C:\Documents and Settings\Luc\Cookies\luc@gyp.skyblog[2].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@herfirstlesbiansex[2].txt 551 bytes
C:\Documents and Settings\Luc\Cookies\luc@hits.gureport.co[2].txt 1.07KB
C:\Documents and Settings\Luc\Cookies\luc@hmt.connexpromotions[2].txt 1.04KB
C:\Documents and Settings\Luc\Cookies\luc@hot-boy13.skyblog[1].txt 168 bytes
C:\Documents and Settings\Luc\Cookies\luc@hot.mylinea[1].txt 384 bytes
C:\Documents and Settings\Luc\Cookies\luc@hotmail.msn[1].txt 69 bytes
C:\Documents and Settings\Luc\Cookies\luc@http.edge.vru4[1].txt 254 bytes
C:\Documents and Settings\Luc\Cookies\luc@humour.nechercheplus[1].txt 92 bytes
C:\Documents and Settings\Luc\Cookies\luc@hyper-hard[1].txt 374 bytes
C:\Documents and Settings\Luc\Cookies\luc@i.screensavers[1].txt 996 bytes
C:\Documents and Settings\Luc\Cookies\luc@i2as.idregie[1].txt 100 bytes
C:\Documents and Settings\Luc\Cookies\luc@iapref.orange[1].txt 99 bytes
C:\Documents and Settings\Luc\Cookies\luc@idregie[2].txt 927 bytes
C:\Documents and Settings\Luc\Cookies\luc@iforex[1].txt 237 bytes
C:\Documents and Settings\Luc\Cookies\luc@imageshack[2].txt 103 bytes
C:\Documents and Settings\Luc\Cookies\luc@imagine-msn[2].txt 232 bytes
C:\Documents and Settings\Luc\Cookies\luc@incredimailltd.112.2o7[1].txt 124 bytes
C:\Documents and Settings\Luc\Cookies\luc@independent.co[1].txt 79 bytes
C:\Documents and Settings\Luc\Cookies\luc@indexstats[2].txt 449 bytes
C:\Documents and Settings\Luc\Cookies\luc@inseparables26.skyblog[1].txt 178 bytes
C:\Documents and Settings\Luc\Cookies\luc@instruments[1].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@interclick[1].txt 309 bytes
C:\Documents and Settings\Luc\Cookies\luc@interex[1].txt 332 bytes
C:\Documents and Settings\Luc\Cookies\luc@isabella[1].txt 378 bytes
C:\Documents and Settings\Luc\Cookies\luc@itsmedaniel.spaces.live[2].txt 425 bytes
C:\Documents and Settings\Luc\Cookies\luc@ivwbox[2].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@i[1].txt 151 bytes
C:\Documents and Settings\Luc\Cookies\luc@i[2].txt 188 bytes
C:\Documents and Settings\Luc\Cookies\luc@jacquetmaster1.skyblog[1].txt 180 bytes
C:\Documents and Settings\Luc\Cookies\luc@jamming68.skyblog[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@janakan95.skyblog[1].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@jc.meier.free[2].txt 157 bytes
C:\Documents and Settings\Luc\Cookies\luc@jetelecharge[1].txt 396 bytes
C:\Documents and Settings\Luc\Cookies\luc@jeux-video-pc[1].txt 105 bytes
C:\Documents and Settings\Luc\Cookies\luc@jeux.01net[1].txt 97 bytes
C:\Documents and Settings\Luc\Cookies\luc@jeuxjeuxjeux[2].txt 370 bytes
C:\Documents and Settings\Luc\Cookies\luc@jeux[1].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@jeux_flash[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@jojo1693.skyblog[2].txt 168 bytes
C:\Documents and Settings\Luc\Cookies\luc@jspdelogala.skyblog[2].txt 174 bytes
C:\Documents and Settings\Luc\Cookies\luc@juju68250.skyblog[2].txt 86 bytes
C:\Documents
Here is the report for step No. 2 of SmitFraudFix v2 performed in safe mode:
SmitFraudFix v2.131
Report created at 13:20:22.21, 20/12/2006
Executed from C:\Documents and Settings\Luc\Desktop\pop-up windows\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
The file system type is NTFS
Fix executed in safe mode
»»»»»»»»»»»»»»»»»»»»»»»» Before SmitFraudFix
!!!Warning, the following keys are not necessarily infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» Stopping processes
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files
»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temporary Files
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Warning, the following keys are not necessarily infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» Cleaning the registry
Cleaning completed.
»»»»»»»»»»»»»»»»»»»»»»»» After SmitFraudFix
!!!Warning, the following keys are not necessarily infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» End
Next is the report from Ccleaner Ewido (in safe mode):
COMPLETE ANALYSIS - (60.575 secs)
------------------------------------------------------------------------------------------
508.9MB have been deleted. (Approximate size)
------------------------------------------------------------------------------------------
Details of files to delete (Note: NO files have been deleted yet)
------------------------------------------------------------------------------------------
Temporary Internet Files (files 5298) 123.6MB
C:\Documents and Settings\Luc\Cookies\luc@1072556060[1].txt 557 bytes
C:\Documents and Settings\Luc\Cookies\luc@123-fr[1].txt 405 bytes
C:\Documents and Settings\Luc\Cookies\luc@123-go.freeonlinegames[1].txt 82 bytes
C:\Documents and Settings\Luc\Cookies\luc@15425[1].txt 118 bytes
C:\Documents and Settings\Luc\Cookies\luc@16[1].txt 98 bytes
C:\Documents and Settings\Luc\Cookies\luc@18578[1].txt 197 bytes
C:\Documents and Settings\Luc\Cookies\luc@200628[1].txt 114 bytes
C:\Documents and Settings\Luc\Cookies\luc@205.236.34[2].txt 957 bytes
C:\Documents and Settings\Luc\Cookies\luc@207[1].txt 105 bytes
C:\Documents and Settings\Luc\Cookies\luc@21[1].txt 305 bytes
C:\Documents and Settings\Luc\Cookies\luc@3suisses[2].txt 174 bytes
C:\Documents and Settings\Luc\Cookies\luc@55997340[1].txt 118 bytes
C:\Documents and Settings\Luc\Cookies\luc@67354874[2].txt 119 bytes
C:\Documents and Settings\Luc\Cookies\luc@805.unevideogratuite[2].txt 282 bytes
C:\Documents and Settings\Luc\Cookies\luc@81.25.195[1].txt 219 bytes
C:\Documents and Settings\Luc\Cookies\luc@81.255.103[2].txt 143 bytes
C:\Documents and Settings\Luc\Cookies\luc@81.255.72[2].txt 363 bytes
C:\Documents and Settings\Luc\Cookies\luc@888[2].txt 97 bytes
C:\Documents and Settings\Luc\Cookies\luc@8[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@9tel[1].txt 103 bytes
C:\Documents and Settings\Luc\Cookies\luc@abdel-inn[1].txt 375 bytes
C:\Documents and Settings\Luc\Cookies\luc@abebooks[1].txt 68 bytes
C:\Documents and Settings\Luc\Cookies\luc@absoluflash.adwitserver[2].txt 103 bytes
C:\Documents and Settings\Luc\Cookies\luc@abum[1].txt 341 bytes
C:\Documents and Settings\Luc\Cookies\luc@acces.direction-x[2].txt 185 bytes
C:\Documents and Settings\Luc\Cookies\luc@accuweather[2].txt 315 bytes
C:\Documents and Settings\Luc\Cookies\luc@action.metaffiliation[2].txt 157 bytes
C:\Documents and Settings\Luc\Cookies\luc@actustar[1].txt 356 bytes
C:\Documents and Settings\Luc\Cookies\luc@ad.adnet[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@ad.cibleclick[1].txt 106 bytes
C:\Documents and Settings\Luc\Cookies\luc@ad.dumpalink[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@ad.ifrance[2].txt 847 bytes
C:\Documents and Settings\Luc\Cookies\luc@ad.zanox[1].txt 101 bytes
C:\Documents and Settings\Luc\Cookies\luc@ad2flash[2].txt 76 bytes
C:\Documents and Settings\Luc\Cookies\luc@adbrite[1].txt 240 bytes
C:\Documents and Settings\Luc\Cookies\luc@adidas[1].txt 103 bytes
C:\Documents and Settings\Luc\Cookies\luc@admajorem[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@admBloger[1].txt 226 bytes
C:\Documents and Settings\Luc\Cookies\luc@adopt.euroclick[1].txt 289 bytes
C:\Documents and Settings\Luc\Cookies\luc@adopt.hbmediapro[1].txt 460 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.addclic[1].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.adomos[1].txt 101 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.aliceadsl[1].txt 100 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.allotraffic[2].txt 109 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.freeonlinegames[1].txt 135 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.ftpk[1].txt 112 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.guardian.co[2].txt 197 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.ims[1].txt 1.53KB
C:\Documents and Settings\Luc\Cookies\luc@ads.monster[1].txt 100 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.planetactive[2].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.tiscali[1].txt 98 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.us.e-planning[1].txt 106 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads.wanadooregie[1].txt 104 bytes
C:\Documents and Settings\Luc\Cookies\luc@ads2.drivelinemedia[1].txt 106 bytes
C:\Documents and Settings\Luc\Cookies\luc@adultadworld[2].txt 442 bytes
C:\Documents and Settings\Luc\Cookies\luc@adultfriendfinder[2].txt 262 bytes
C:\Documents and Settings\Luc\Cookies\luc@adv.surinter[1].txt 707 bytes
C:\Documents and Settings\Luc\Cookies\luc@advertstream[2].txt 828 bytes
C:\Documents and Settings\Luc\Cookies\luc@ad[2].txt 244 bytes
C:\Documents and Settings\Luc\Cookies\luc@agame[1].txt 70 bytes
C:\Documents and Settings\Luc\Cookies\luc@alapage[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@aliceadsl[2].txt 177 bytes
C:\Documents and Settings\Luc\Cookies\luc@aller3e3ts.skyblog[1].txt 87 bytes
C:\Documents and Settings\Luc\Cookies\luc@allocine[2].txt 237 bytes
C:\Documents and Settings\Luc\Cookies\luc@als.umusic[1].txt 145 bytes
C:\Documents and Settings\Luc\Cookies\luc@alsacienne6802.skyblog[1].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@amazon[2].txt 88 bytes
C:\Documents and Settings\Luc\Cookies\luc@amazon[3].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@amoramore.skyblog[1].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@amoureux[2].txt 76 bytes
C:\Documents and Settings\Luc\Cookies\luc@amylena[2].txt 366 bytes
C:\Documents and Settings\Luc\Cookies\luc@analyse[1].txt 132 bytes
C:\Documents and Settings\Luc\Cookies\luc@angelsandairwaves[2].txt 410 bytes
C:\Documents and Settings\Luc\Cookies\luc@anna-lena-matz1990.spaces.msn[1].txt 358 bytes
C:\Documents and Settings\Luc\Cookies\luc@ants-colonies.freeonlinegames[1].txt 88 bytes
C:\Documents and Settings\Luc\Cookies\luc@aol[1].txt 196 bytes
C:\Documents and Settings\Luc\Cookies\luc@apple[1].txt 107 bytes
C:\Documents and Settings\Luc\Cookies\luc@apu0800.audientia[1].txt 331 bytes
C:\Documents and Settings\Luc\Cookies\luc@arbre-celtique[1].txt 369 bytes
C:\Documents and Settings\Luc\Cookies\luc@archibal03.skyblog[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@arno68.spaces.msn[1].txt 326 bytes
C:\Documents and Settings\Luc\Cookies\luc@artistdirect[1].txt 164 bytes
C:\Documents and Settings\Luc\Cookies\luc@artistes[2].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@askmen[2].txt 456 bytes
C:\Documents and Settings\Luc\Cookies\luc@assopeche[1].txt 108 bytes
C:\Documents and Settings\Luc\Cookies\luc@astwinds[2].txt 729 bytes
C:\Documents and Settings\Luc\Cookies\luc@atraxio[1].txt 127 bytes
C:\Documents and Settings\Luc\Cookies\luc@atwola[2].txt 95 bytes
C:\Documents and Settings\Luc\Cookies\luc@audiofanzine[2].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@aufeminin[1].txt 79 bytes
C:\Documents and Settings\Luc\Cookies\luc@aupaysdusexe[2].txt 378 bytes
C:\Documents and Settings\Luc\Cookies\luc@a[1].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@b985[1].txt 95 bytes
C:\Documents and Settings\Luc\Cookies\luc@bangbros1[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@banner.32vegas[2].txt 283 bytes
C:\Documents and Settings\Luc\Cookies\luc@banner.cotedazurpalace[2].txt 271 bytes
C:\Documents and Settings\Luc\Cookies\luc@banner.eurogrand[2].txt 290 bytes
C:\Documents and Settings\Luc\Cookies\luc@banner.prestigecasino[2].txt 309 bytes
C:\Documents and Settings\Luc\Cookies\luc@batard68.skyblog[2].txt 212 bytes
C:\Documents and Settings\Luc\Cookies\luc@battleon[2].txt 127 bytes
C:\Documents and Settings\Luc\Cookies\luc@bbc.co[1].txt 285 bytes
C:\Documents and Settings\Luc\Cookies\luc@bbkiki68.skyblog[1].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@bearshare[2].txt 385 bytes
C:\Documents and Settings\Luc\Cookies\luc@belnk[1].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@benchmark[1].txt 236 bytes
C:\Documents and Settings\Luc\Cookies\luc@betanews.us.smarttargetting[2].txt 135 bytes
C:\Documents and Settings\Luc\Cookies\luc@bigboss68901.skyblog[1].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@bike-mania-on-ice.freeonlinegames[1].txt 93 bytes
C:\Documents and Settings\Luc\Cookies\luc@billing.acces-membres[1].txt 93 bytes
C:\Documents and Settings\Luc\Cookies\luc@bimonline.insites[2].txt 174 bytes
C:\Documents and Settings\Luc\Cookies\luc@blagues[1].txt 98 bytes
C:\Documents and Settings\Luc\Cookies\luc@blagues[2].txt 350 bytes
C:\Documents and Settings\Luc\Cookies\luc@blink182[1].txt 518 bytes
C:\Documents and Settings\Luc\Cookies\luc@blogdestar[1].txt 79 bytes
C:\Documents and Settings\Luc\Cookies\luc@blogg[1].txt 363 bytes
C:\Documents and Settings\Luc\Cookies\luc@blonde[1].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@bloodhound_gang[1].txt 117 bytes
C:\Documents and Settings\Luc\Cookies\luc@bob-marleytte-68.skyblog[2].txt 93 bytes
C:\Documents and Settings\Luc\Cookies\luc@boonty.nrj[1].txt 119 bytes
C:\Documents and Settings\Luc\Cookies\luc@boxcarracer[1].txt 385 bytes
C:\Documents and Settings\Luc\Cookies\luc@box[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@branchez-vous[1].txt 91 bytes
C:\Documents and Settings\Luc\Cookies\luc@burstnet[2].txt 147 bytes
C:\Documents and Settings\Luc\Cookies\luc@c.fsx[1].txt 122 bytes
C:\Documents and Settings\Luc\Cookies\luc@c00lman.free[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@c1.x-traceur[1].txt 231 bytes
C:\Documents and Settings\Luc\Cookies\luc@caloga[2].txt 148 bytes
C:\Documents and Settings\Luc\Cookies\luc@campaign.iitech[1].txt 160 bytes
C:\Documents and Settings\Luc\Cookies\luc@cana-sucre01.skyblog[1].txt 88 bytes
C:\Documents and Settings\Luc\Cookies\luc@canardplus[1].txt 394 bytes
C:\Documents and Settings\Luc\Cookies\luc@captain-usa.freeonlinegames[1].txt 87 bytes
C:\Documents and Settings\Luc\Cookies\luc@carasexe[2].txt 326 bytes
C:\Documents and Settings\Luc\Cookies\luc@carpe21.jeun[2].txt 246 bytes
C:\Documents and Settings\Luc\Cookies\luc@carrefourinternet[1].txt 82 bytes
C:\Documents and Settings\Luc\Cookies\luc@casino[1].txt 330 bytes
C:\Documents and Settings\Luc\Cookies\luc@cassava[1].txt 93 bytes
C:\Documents and Settings\Luc\Cookies\luc@categories[1].txt 101 bytes
C:\Documents and Settings\Luc\Cookies\luc@ccbill[1].txt 158 bytes
C:\Documents and Settings\Luc\Cookies\luc@ccscan[1].txt 82 bytes
C:\Documents and Settings\Luc\Cookies\luc@cdiscount[1].txt 490 bytes
C:\Documents and Settings\Luc\Cookies\luc@celebrite-nues.skyblog[1].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@chansons[1].txt 82 bytes
C:\Documents and Settings\Luc\Cookies\luc@chansons[2].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@charm-forever.skyblog[2].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@chordie[1].txt 383 bytes
C:\Documents and Settings\Luc\Cookies\luc@chtitefifi22.skyblog[2].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@cibleclick.azuria[1].txt 79 bytes
C:\Documents and Settings\Luc\Cookies\luc@claudecarpefishing.oxatis[1].txt 108 bytes
C:\Documents and Settings\Luc\Cookies\luc@click-fr[1].txt 333 bytes
C:\Documents and Settings\Luc\Cookies\luc@clicktorrent[1].txt 97 bytes
C:\Documents and Settings\Luc\Cookies\luc@club-internet[1].txt 116 bytes
C:\Documents and Settings\Luc\Cookies\luc@cms.gffn[1].txt 142 bytes
C:\Documents and Settings\Luc\Cookies\luc@combines-msn.skyblog[1].txt 176 bytes
C:\Documents and Settings\Luc\Cookies\luc@common[1].txt 111 bytes
C:\Documents and Settings\Luc\Cookies\luc@compiles-foot.skyblog[1].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@com[1].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@connextra[2].txt 283 bytes
C:\Documents and Settings\Luc\Cookies\luc@content.ipro[1].txt 100 bytes
C:\Documents and Settings\Luc\Cookies\luc@cookie.monster[2].txt 236 bytes
C:\Documents and Settings\Luc\Cookies\luc@cool-smiley[1].txt 377 bytes
C:\Documents and Settings\Luc\Cookies\luc@core.mochibot[1].txt 108 bytes
C:\Documents and Settings\Luc\Cookies\luc@cpt[1].txt 87 bytes
C:\Documents and Settings\Luc\Cookies\luc@crdp.ac-creteil[1].txt 89 bytes
C:\Documents and Settings\Luc\Cookies\luc@creativeby1.unicast[1].txt 140 bytes
C:\Documents and Settings\Luc\Cookies\luc@crocsex[1].txt 79 bytes
C:\Documents and Settings\Luc\Cookies\luc@cs.shopperreports[2].txt 117 bytes
C:\Documents and Settings\Luc\Cookies\luc@cursormania[1].txt 349 bytes
C:\Documents and Settings\Luc\Cookies\luc@cybermonitor[1].txt 88 bytes
C:\Documents and Settings\Luc\Cookies\luc@cybermusicalinstruments[1].txt 127 bytes
C:\Documents and Settings\Luc\Cookies\luc@cz4.clickzs[1].txt 379 bytes
C:\Documents and Settings\Luc\Cookies\luc@cz5.clickzs[2].txt 187 bytes
C:\Documents and Settings\Luc\Cookies\luc@cz6.clickzs[2].txt 182 bytes
C:\Documents and Settings\Luc\Cookies\luc@cz8.clickzs[1].txt 415 bytes
C:\Documents and Settings\Luc\Cookies\luc@d2.advertserve[1].txt 107 bytes
C:\Documents and Settings\Luc\Cookies\luc@danger-wheels.freeonlinegames[1].txt 88 bytes
C:\Documents and Settings\Luc\Cookies\luc@data.abebooks[1].txt 97 bytes
C:\Documents and Settings\Luc\Cookies\luc@data.gffn[1].txt 144 bytes
C:\Documents and Settings\Luc\Cookies\luc@dcs.xfire[1].txt 144 bytes
C:\Documents and Settings\Luc\Cookies\luc@DCSo1xwj2B4S3eDMs3lPV83F5_6E3J[1].txt 175 bytes
C:\Documents and Settings\Luc\Cookies\luc@ddnlejeu[2].txt 423 bytes
C:\Documents and Settings\Luc\Cookies\luc@de.videogames.games.yahoo[1].txt 102 bytes
C:\Documents and Settings\Luc\Cookies\luc@debza[1].txt 364 bytes
C:\Documents and Settings\Luc\Cookies\luc@deco4you.skyblog[1].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@decosblog.skyblog[2].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@diffusion[2].txt 507 bytes
C:\Documents and Settings\Luc\Cookies\luc@diffusion[3].txt 192 bytes
C:\Documents and Settings\Luc\Cookies\luc@directivepub[1].txt 87 bytes
C:\Documents and Settings\Luc\Cookies\luc@dirt-bike-2.freeonlinegames[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@dist.belnk[2].txt 537 bytes
C:\Documents and Settings\Luc\Cookies\luc@dmpi[1].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@doctissimo[2].txt 315 bytes
C:\Documents and Settings\Luc\Cookies\luc@dooyoo[1].txt 659 bytes
C:\Documents and Settings\Luc\Cookies\luc@downloads.vnunet[1].txt 147 bytes
C:\Documents and Settings\Luc\Cookies\luc@download[1].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@dreampoker[1].txt 340 bytes
C:\Documents and Settings\Luc\Cookies\luc@drivecleaner[2].txt 472 bytes
C:\Documents and Settings\Luc\Cookies\luc@du-gehoerst-zu-meinen-freunden[2].txt 402 bytes
C:\Documents and Settings\Luc\Cookies\luc@dumpalink[1].txt 709 bytes
C:\Documents and Settings\Luc\Cookies\luc@dvdrama[1].txt 372 bytes
C:\Documents and Settings\Luc\Cookies\luc@easy-forex[1].txt 695 bytes
C:\Documents and Settings\Luc\Cookies\luc@easyrencontre[2].txt 341 bytes
C:\Documents and Settings\Luc\Cookies\luc@easysexe[1].txt 67 bytes
C:\Documents and Settings\Luc\Cookies\luc@ebayobjects[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@ebay[2].txt 547 bytes
C:\Documents and Settings\Luc\Cookies\luc@ebookers[1].txt 93 bytes
C:\Documents and Settings\Luc\Cookies\luc@edt02[1].txt 2.21KB
C:\Documents and Settings\Luc\Cookies\luc@eeht.spaces.live[2].txt 400 bytes
C:\Documents and Settings\Luc\Cookies\luc@efixonline[1].txt 248 bytes
C:\Documents and Settings\Luc\Cookies\luc@el-ritalo.skyblog[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@element5[1].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@em.aveno[1].txt 77 bytes
C:\Documents and Settings\Luc\Cookies\luc@em.gad-network[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@encyclobd[1].txt 70 bytes
C:\Documents and Settings\Luc\Cookies\luc@entercasino[1].txt 112 bytes
C:\Documents and Settings\Luc\Cookies\luc@eresmas[2].txt 179 bytes
C:\Documents and Settings\Luc\Cookies\luc@eroticlick[2].txt 392 bytes
C:\Documents and Settings\Luc\Cookies\luc@esearchvision[2].txt 317 bytes
C:\Documents and Settings\Luc\Cookies\luc@eshop[1].txt 272 bytes
C:\Documents and Settings\Luc\Cookies\luc@etude-de-la-logique-du-corps[1].txt 146 bytes
C:\Documents and Settings\Luc\Cookies\luc@europe2[2].txt 630 bytes
C:\Documents and Settings\Luc\Cookies\luc@eurosport[1].txt 165 bytes
C:\Documents and Settings\Luc\Cookies\luc@ewido[2].txt 115 bytes
C:\Documents and Settings\Luc\Cookies\luc@ext.infos-du-net[1].txt 102 bytes
C:\Documents and Settings\Luc\Cookies\luc@f5.videos2stars[1].txt 188 bytes
C:\Documents and Settings\Luc\Cookies\luc@fandestars[1].txt 369 bytes
C:\Documents and Settings\Luc\Cookies\luc@fandestars[3].txt 124 bytes
C:\Documents and Settings\Luc\Cookies\luc@fantasysports.yahoo[1].txt 191 bytes
C:\Documents and Settings\Luc\Cookies\luc@fat-ninja.freeonlinegames[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@fe.lea.lycos[1].txt 101 bytes
C:\Documents and Settings\Luc\Cookies\luc@femmesmuresx.yi[1].txt 76 bytes
C:\Documents and Settings\Luc\Cookies\luc@fifaworldcup.yahoo[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@filecow[2].txt 336 bytes
C:\Documents and Settings\Luc\Cookies\luc@fileforums[2].txt 164 bytes
C:\Documents and Settings\Luc\Cookies\luc@film-x[1].txt 76 bytes
C:\Documents and Settings\Luc\Cookies\luc@films2cul[2].txt 365 bytes
C:\Documents and Settings\Luc\Cookies\luc@financetv[1].txt 103 bytes
C:\Documents and Settings\Luc\Cookies\luc@finaref[1].txt 105 bytes
C:\Documents and Settings\Luc\Cookies\luc@finder-x[1].txt 279 bytes
C:\Documents and Settings\Luc\Cookies\luc@fixionmedia[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@flashouarez[1].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@flyordie[1].txt 341 bytes
C:\Documents and Settings\Luc\Cookies\luc@fnac[1].txt 1.29KB
C:\Documents and Settings\Luc\Cookies\luc@fond-ecran-photo[2].txt 234 bytes
C:\Documents and Settings\Luc\Cookies\luc@fonie68.skyblog[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@football.guardian.co[1].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@footlive.sporever[1].txt 135 bytes
C:\Documents and Settings\Luc\Cookies\luc@forum.likid[1].txt 174 bytes
C:\Documents and Settings\Luc\Cookies\luc@forum2q.free[2].txt 168 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr-fr[2].txt 68 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr-fr[3].txt 69 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr.cityporn[1].txt 91 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr.drivecleaner[1].txt 236 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr.msn[2].txt 147 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr.sandralatina[2].txt 512 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr.yahoo[2].txt 287 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr.zigiz[1].txt 352 bytes
C:\Documents and Settings\Luc\Cookies\luc@france[2].txt 174 bytes
C:\Documents and Settings\Luc\Cookies\luc@francodirect[2].txt 552 bytes
C:\Documents and Settings\Luc\Cookies\luc@fra[1].txt 97 bytes
C:\Documents and Settings\Luc\Cookies\luc@free-x-movies[1].txt 390 bytes
C:\Documents and Settings\Luc\Cookies\luc@free.wegcash[2].txt 268 bytes
C:\Documents and Settings\Luc\Cookies\luc@freeonlinegames[2].txt 82 bytes
C:\Documents and Settings\Luc\Cookies\luc@freesexbay[1].txt 343 bytes
C:\Documents and Settings\Luc\Cookies\luc@free[2].txt 135 bytes
C:\Documents and Settings\Luc\Cookies\luc@freyus.carrefourinternet[2].txt 417 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr[1].txt 124 bytes
C:\Documents and Settings\Luc\Cookies\luc@fr[2].txt 173 bytes
C:\Documents and Settings\Luc\Cookies\luc@funsessions.fanta[1].txt 114 bytes
C:\Documents and Settings\Luc\Cookies\luc@galleries.bourrees[2].txt 88 bytes
C:\Documents and Settings\Luc\Cookies\luc@galleries.fetichepink[1].txt 92 bytes
C:\Documents and Settings\Luc\Cookies\luc@galleries.premieresbaiseslesbos[2].txt 102 bytes
C:\Documents and Settings\Luc\Cookies\luc@gamecopyworld[2].txt 629 bytes
C:\Documents and Settings\Luc\Cookies\luc@gamekult[2].txt 231 bytes
C:\Documents and Settings\Luc\Cookies\luc@gamesload[2].txt 421 bytes
C:\Documents and Settings\Luc\Cookies\luc@genevieve[1].txt 148 bytes
C:\Documents and Settings\Luc\Cookies\luc@georgiapacificsoccer[1].txt 119 bytes
C:\Documents and Settings\Luc\Cookies\luc@germanboyforevertim.spaces.msn[2].txt 484 bytes
C:\Documents and Settings\Luc\Cookies\luc@gestionpub.adwitserver[2].txt 101 bytes
C:\Documents and Settings\Luc\Cookies\luc@gestion[1].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@gestion[3].txt 283 bytes
C:\Documents and Settings\Luc\Cookies\luc@globo[1].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@good_charlotte[1].txt 116 bytes
C:\Documents and Settings\Luc\Cookies\luc@google[2].txt 130 bytes
C:\Documents and Settings\Luc\Cookies\luc@google[3].txt 136 bytes
C:\Documents and Settings\Luc\Cookies\luc@google[4].txt 142 bytes
C:\Documents and Settings\Luc\Cookies\luc@go[1].txt 97 bytes
C:\Documents and Settings\Luc\Cookies\luc@gpads.geniproj[1].txt 109 bytes
C:\Documents and Settings\Luc\Cookies\luc@grand-lol[2].txt 360 bytes
C:\Documents and Settings\Luc\Cookies\luc@guardian.co[2].txt 480 bytes
C:\Documents and Settings\Luc\Cookies\luc@guitariff[2].txt 370 bytes
C:\Documents and Settings\Luc\Cookies\luc@guitartabs[1].txt 369 bytes
C:\Documents and Settings\Luc\Cookies\luc@guts[1].txt 141 bytes
C:\Documents and Settings\Luc\Cookies\luc@gyp.skyblog[2].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@herfirstlesbiansex[2].txt 551 bytes
C:\Documents and Settings\Luc\Cookies\luc@hits.gureport.co[2].txt 1.07KB
C:\Documents and Settings\Luc\Cookies\luc@hmt.connexpromotions[2].txt 1.04KB
C:\Documents and Settings\Luc\Cookies\luc@hot-boy13.skyblog[1].txt 168 bytes
C:\Documents and Settings\Luc\Cookies\luc@hot.mylinea[1].txt 384 bytes
C:\Documents and Settings\Luc\Cookies\luc@hotmail.msn[1].txt 69 bytes
C:\Documents and Settings\Luc\Cookies\luc@http.edge.vru4[1].txt 254 bytes
C:\Documents and Settings\Luc\Cookies\luc@humour.nechercheplus[1].txt 92 bytes
C:\Documents and Settings\Luc\Cookies\luc@hyper-hard[1].txt 374 bytes
C:\Documents and Settings\Luc\Cookies\luc@i.screensavers[1].txt 996 bytes
C:\Documents and Settings\Luc\Cookies\luc@i2as.idregie[1].txt 100 bytes
C:\Documents and Settings\Luc\Cookies\luc@iapref.orange[1].txt 99 bytes
C:\Documents and Settings\Luc\Cookies\luc@idregie[2].txt 927 bytes
C:\Documents and Settings\Luc\Cookies\luc@iforex[1].txt 237 bytes
C:\Documents and Settings\Luc\Cookies\luc@imageshack[2].txt 103 bytes
C:\Documents and Settings\Luc\Cookies\luc@imagine-msn[2].txt 232 bytes
C:\Documents and Settings\Luc\Cookies\luc@incredimailltd.112.2o7[1].txt 124 bytes
C:\Documents and Settings\Luc\Cookies\luc@independent.co[1].txt 79 bytes
C:\Documents and Settings\Luc\Cookies\luc@indexstats[2].txt 449 bytes
C:\Documents and Settings\Luc\Cookies\luc@inseparables26.skyblog[1].txt 178 bytes
C:\Documents and Settings\Luc\Cookies\luc@instruments[1].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@interclick[1].txt 309 bytes
C:\Documents and Settings\Luc\Cookies\luc@interex[1].txt 332 bytes
C:\Documents and Settings\Luc\Cookies\luc@isabella[1].txt 378 bytes
C:\Documents and Settings\Luc\Cookies\luc@itsmedaniel.spaces.live[2].txt 425 bytes
C:\Documents and Settings\Luc\Cookies\luc@ivwbox[2].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@i[1].txt 151 bytes
C:\Documents and Settings\Luc\Cookies\luc@i[2].txt 188 bytes
C:\Documents and Settings\Luc\Cookies\luc@jacquetmaster1.skyblog[1].txt 180 bytes
C:\Documents and Settings\Luc\Cookies\luc@jamming68.skyblog[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@janakan95.skyblog[1].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@jc.meier.free[2].txt 157 bytes
C:\Documents and Settings\Luc\Cookies\luc@jetelecharge[1].txt 396 bytes
C:\Documents and Settings\Luc\Cookies\luc@jeux-video-pc[1].txt 105 bytes
C:\Documents and Settings\Luc\Cookies\luc@jeux.01net[1].txt 97 bytes
C:\Documents and Settings\Luc\Cookies\luc@jeuxjeuxjeux[2].txt 370 bytes
C:\Documents and Settings\Luc\Cookies\luc@jeux[1].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@jeux_flash[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@jojo1693.skyblog[2].txt 168 bytes
C:\Documents and Settings\Luc\Cookies\luc@jspdelogala.skyblog[2].txt 174 bytes
C:\Documents and Settings\Luc\Cookies\luc@juju68250.skyblog[2].txt 86 bytes
C:\Documents
C:\Documents and Settings\Luc\Cookies\luc@www.meteofrance[2].txt 74 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.miniclip[1].txt 166 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.mondepoitrines[2].txt 399 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.movies-3x[2].txt 165 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.mp3dollars[2].txt 104 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.msn[1].txt 373 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.msn[3].txt 74 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.musicme[1].txt 509 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.musique-franco[1].txt 113 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.myspace[1].txt 73 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.mystats[1].txt 76 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.naheulbeukauquebec[1].txt 185 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.nathaliedumas.book[1].txt 121 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.netpass[2].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.nofrag[2].txt 114 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.noogle[1].txt 105 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.oselie[2].txt 457 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.paradixxx[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.paradixxx[3].txt 144 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.paroles[2].txt 266 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.paseilimitado[1].txt 402 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.passdux[1].txt 638 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.paypal[1].txt 103 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.pbplustour[2].txt 337 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.pc-telecharger[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.pcbfinances[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.pecheur[2].txt 70 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.petites-salopes-chaudes[1].txt 124 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.photosasiatiques[2].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.pixmania[2].txt 1.28KB
C:\Documents and Settings\Luc\Cookies\luc@www.plaisiroriental[2].txt 368 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.play22[1].txt 249 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.plugin-x[2].txt 667 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.plusfortyfour[1].txt 106 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.pmumobile[2].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.pornattitude[1].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.porno-sympa[1].txt 100 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.premium-sexe[1].txt 272 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.priceminister[2].txt 132 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.promobenef[1].txt 722 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.rabbitfinder[1].txt 92 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.reactivpub[1].txt 72 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.realarcade[2].txt 517 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.rencontre[1].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.rhapsodycentral.8m[1].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.rhapsodyinenglish.8m[1].txt 92 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.ringo[2].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.roxypalace[1].txt 154 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.rueducommerce[1].txt 148 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sandralatina[2].txt 405 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sapho-mag[1].txt 248 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.screensavers[2].txt 777 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sechoisir[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.securitetotale[2].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.serencontrer[2].txt 212 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.servergamers[1].txt 100 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sexe-gratuit-lesbiennes[1].txt 102 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sexeasiatique[2].txt 78 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sexecam[1].txt 91 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sexyavenue[2].txt 276 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.shermix[2].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sonnerie[1].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.speedbomba[1].txt 92 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.speederich[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.splem[1].txt 78 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.splem[3].txt 545 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.star-nue[2].txt 180 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.stars-a-poil[1].txt 267 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.superloterie[2].txt 183 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sur-la-toile[2].txt 180 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sweetim[2].txt 492 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.swisstools[1].txt 78 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.t45ol[1].txt 67 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.tabalorium[1].txt 304 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.tabfind[1].txt 74 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.tagged[1].txt 76 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.thetransplants[1].txt 111 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.topagogo[1].txt 73 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.topglad[1].txt 74 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.topgratuit[2].txt 419 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.topliste[2].txt 70 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.touteslespartitions[2].txt 171 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.toutgratuit[1].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.truite[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.tv8[2].txt 149 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.ulgaard.homeip[1].txt 117 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.ulimit[1].txt 87 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.ulla[1].txt 77 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.ultimate-guitar[2].txt 391 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.unibet-tools[1].txt 106 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.vetofish[1].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.viamichelin[1].txt 445 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.video-2-lesbienne[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.video-sexy-fun[1].txt 264 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.videocodezone[2].txt 342 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.videoschoquantes[1].txt 165 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.videoscomiques[2].txt 410 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.videosdebaise[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.vrally[1].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.warezfield[2].txt 165 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.webcool69[1].txt 340 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.webfric[2].txt 73 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.xasiatique[1].txt 92 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.xbarre[2].txt 421 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.xdujour[1].txt 75 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.xvideoclub[1].txt 341 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.yahoo[1].txt 223 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.zidane[1].txt 141 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.zoomin[2].txt 629 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.zvab[1].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@www1.radioblogclub[1].txt 77 bytes
C:\Documents and Settings\Luc\Cookies\luc@www2.cbox[2].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@www2.mystats[2].txt 75 bytes
C:\Documents and Settings\Luc\Cookies\luc@www6.incredimail[1].txt 112 bytes
C:\Documents and Settings\Luc\Cookies\luc@www[1].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@xfire[1].txt 159 bytes
C:\Documents and Settings\Luc\Cookies\luc@xf[1].txt 77 bytes
C:\Documents and Settings\Luc\Cookies\luc@xf[2].txt 76 bytes
C:\Documents and Settings\Luc\Cookies\luc@xiti[1].txt 100 bytes
C:\Documents and Settings\Luc\Cookies\luc@xxx-foto.skyblog[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@xxx-kakou-xxx-26.skyblog[1].txt 93 bytes
C:\Documents and Settings\Luc\Cookies\luc@xxx-linzi-xxx.skyblog[1].txt 88 bytes
C:\Documents and Settings\Luc\Cookies\luc@xxx-marie-xxx.skyblog[1].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@xxx-sexegogo-xxx.skyblog[1].txt 92 bytes
C:\Documents and Settings\Luc\Cookies\luc@xxxsatyrielxxx.skyblog[1].txt 91 bytes
C:\Documents and Settings\Luc\Cookies\luc@xxx[1].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@yacast[1].txt 111 bytes
C:\Documents and Settings\Luc\Cookies\luc@yahoo[1].txt 818 bytes
C:\Documents and Settings\Luc\Cookies\luc@yahoo[2].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@yieldmanager[2].txt 131 bytes
C:\Documents and Settings\Luc\Cookies\luc@yourmedia[1].txt 93 bytes
C:\Documents and Settings\Luc\Cookies\luc@youtube[2].txt 220 bytes
C:\Documents and Settings\Luc\Cookies\luc@zdnet[1].txt 71 bytes
C:\Documents and Settings\Luc\Cookies\luc@zigiz[1].txt 670 bytes
C:\Documents and Settings\Luc\Cookies\luc@zylom[2].txt 309 bytes
Marked for deletion: C:\Documents and Settings\Luc\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Marked for deletion: C:\Documents and Settings\Luc\Cookies\index.dat
Trash emptied (1 files) 771 bytes
C:\WINDOWS\TEMP\1D1213E.dmp 0 bytes
C:\WINDOWS\TEMP\2A67B6.dmp 0 bytes
C:\WINDOWS\TEMP\46726C.dmp 0 bytes
C:\WINDOWS\TEMP\567E07.dmp 0 bytes
C:\WINDOWS\TEMP\AAX94.tmp 28.07KB
C:\WINDOWS\TEMP\AAX9B.tmp 27.62KB
C:\WINDOWS\TEMP\AAX9D.tmp 26.07KB
C:\WINDOWS\TEMP\ABF5D9.dmp 0 bytes
C:\WINDOWS\TEMP\CamServr.log 762 bytes
C:\WINDOWS\TEMP\CamWizrd.log 45.05KB
C:\WINDOWS\TEMP\deadlycircuit 15.37KB
C:\WINDOWS\TEMP\deadlycircuit2 44.49KB
C:\WINDOWS\TEMP\DWH2168.tmp 236 bytes
C:\WINDOWS\TEMP\DWH2214.tmp 236 bytes
C:\WINDOWS\TEMP\DWH24E3.tmp 82.75KB
C:\WINDOWS\TEMP\DWH27F0.tmp 82.74KB
C:\WINDOWS\TEMP\DWH288C.tmp 82.74KB
C:\WINDOWS\TEMP\DWH2967.tmp 0.20MB
C:\WINDOWS\TEMP\DWH2BE7.tmp 0.25MB
C:\WINDOWS\TEMP\DWH2FFE.tmp 0.24MB
C:\WINDOWS\TEMP\DWH3415.tmp 0.13MB
C:\WINDOWS\TEMP\DWH35CB.tmp 0.17MB
C:\WINDOWS\TEMP\DWH381C.tmp 236 bytes
C:\WINDOWS\TEMP\DWHE152.tmp 236 bytes
C:\WINDOWS\TEMP\HP000000.IDX 0.29MB
C:\WINDOWS\TEMP\HP001000.IDX 42.2MB
C:\WINDOWS\TEMP\HP002000.IDX 0.14MB
C:\WINDOWS\TEMP\HP003000.IDX 30.31KB
C:\WINDOWS\TEMP\HP003001.PDL 36.76KB
C:\WINDOWS\TEMP\HP003002.PDL 53.27KB
C:\WINDOWS\TEMP\HP003003.PDL 0.15MB
C:\WINDOWS\TEMP\HP003004.PDL 53.95KB
C:\WINDOWS\TEMP\HP003005.PDL 47.52KB
C:\WINDOWS\TEMP\HP003006.PDL 16.03KB
C:\WINDOWS\TEMP\HP004000.IDX 57.0MB
C:\WINDOWS\TEMP\HP004001.PDL 20.5MB
C:\WINDOWS\TEMP\HP004002.PDL 43.2MB
C:\WINDOWS\TEMP\HP005000.IDX 42.5MB
C:\WINDOWS\TEMP\HP005001.PDL 20.5MB
C:\WINDOWS\TEMP\HP005002.PDL 43.2MB
C:\WINDOWS\TEMP\HP006000.IDX 0.93MB
C:\WINDOWS\TEMP\hpzcoi00.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi01.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi02.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi03.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi04.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi05.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi06.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi07.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi08.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi09.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi10.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi11.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi12.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi13.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi14.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi15.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi16.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi17.log 596 bytes
C:\WINDOWS\TEMP\Instmed.log 359 bytes
C:\WINDOWS\TEMP\InstVid.log 444 bytes
C:\WINDOWS\TEMP\MSIaa8d4.LOG 656 bytes
C:\WINDOWS\TEMP\netfxsl.log 21.39KB
C:\WINDOWS\TEMP\netfxupdate.log 7.05KB
C:\WINDOWS\TEMP\NLUB2.tmp\catalog.dat 3.30KB
C:\WINDOWS\TEMP\NLUB2.tmp\CCERASER.DLL 2.23MB
C:\WINDOWS\TEMP\NLUB2.tmp\ECBOOTIL.VXD 6.74KB
C:\WINDOWS\TEMP\NLUB2.tmp\ECMSVR32.DLL 0.26MB
C:\WINDOWS\TEMP\NLUB2.tmp\EECTRL.SYS 0.37MB
C:\WINDOWS\TEMP\NLUB2.tmp\ERASER.GRD 232 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\ERASER.SIG 2.22KB
C:\WINDOWS\TEMP\NLUB2.tmp\ERASER.SPM 1.73KB
C:\WINDOWS\TEMP\NLUB2.tmp\ERASER.SYS 96.85KB
C:\WINDOWS\TEMP\NLUB2.tmp\ESRDEF.BIN 2.88MB
C:\WINDOWS\TEMP\NLUB2.tmp\HH 4.04KB
C:\WINDOWS\TEMP\NLUB2.tmp\naveng.exp 99.86KB
C:\WINDOWS\TEMP\NLUB2.tmp\naveng.sys 77.38KB
C:\WINDOWS\TEMP\NLUB2.tmp\naveng.vxd 87.57KB
C:\WINDOWS\TEMP\NLUB2.tmp\naveng32.dll 0.12MB
C:\WINDOWS\TEMP\NLUB2.tmp\navex15.exp 0.82MB
C:\WINDOWS\TEMP\NLUB2.tmp\navex15.sys 0.79MB
C:\WINDOWS\TEMP\NLUB2.tmp\navex15.vxd 0.94MB
C:\WINDOWS\TEMP\NLUB2.tmp\navex32a.dll 0.84MB
C:\WINDOWS\TEMP\NLUB2.tmp\ncsacert.txt 6.38KB
C:\WINDOWS\TEMP\NLUB2.tmp\scrauth.dat 95.27KB
C:\WINDOWS\TEMP\NLUB2.tmp\symaveng.cat 14 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\symaveng.inf 901 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\SYMERASE.CAT 6.62KB
C:\WINDOWS\TEMP\NLUB2.tmp\SYMERASE.INF 618 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\TCDEFS.DAT 47.50KB
C:\WINDOWS\TEMP\NLUB2.tmp\TCSCAN7.DAT 0.92MB
C:\WINDOWS\TEMP\NLUB2.tmp\TCSCAN8.DAT 0.30MB
C:\WINDOWS\TEMP\NLUB2.tmp\TCSCAN9.DAT 0.62MB
C:\WINDOWS\TEMP\NLUB2.tmp\technote.txt 875 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\tinf.dat 453 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\tinfidx.dat 148 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\tinfl.dat 1.91KB
C:\WINDOWS\TEMP\NLUB2.tmp\tscan1.dat 56.77KB
C:\WINDOWS\TEMP\NLUB2.tmp\tscan1hd.dat 2.96KB
C:\WINDOWS\TEMP\NLUB2.tmp\V.GRD 4.93KB
C:\WINDOWS\TEMP\NLUB2.tmp\V.SIG 2.21KB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan.inf 0.10MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan1.dat 0.92MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan2.dat 0.54MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan3.dat 0.14MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan4.dat 0.31MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan5.dat 2.54MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan6.dat 0.37MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan7.dat 4.22MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan8.dat 1.51MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan9.dat 3.42MB
C:\WINDOWS\TEMP\NLUB2.tmp\VIRSCANT.DAT 32 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\whatsnew.txt 27.77KB
C:\WINDOWS\TEMP\NLUB2.tmp\zdone.dat 224 bytes
C:\WINDOWS\TEMP\NLUE6.tmp 31.97KB
C:\WINDOWS\TEMP\Sof.ico 766 bytes
C:\WINDOWS\TEMP\TMP000000012537113F7254A5E7 0.50MB
C:\WINDOWS\TEMP\WER1F.tmp 0 bytes
C:\WINDOWS\TEMP\WER1F.tmp.dir00\appcompat.txt 4.12KB
C:\WINDOWS\TEMP\WER3.tmp 0 bytes
C:\WINDOWS\TEMP\WER3.tmp.dir00\appcompat.txt 4.12KB
C:\WINDOWS\TEMP\WER4.tmp 0 bytes
C:\WINDOWS\TEMP\WER4.tmp.dir00\appcompat.txt 4.12KB
C:\WINDOWS\TEMP\WER47.tmp 0 bytes
C:\WINDOWS\TEMP\WER47.tmp.dir00\appcompat.txt 4.12KB
C:\WINDOWS\TEMP\WER48.tmp 0 bytes
C:\WINDOWS\TEMP\WER48.tmp.dir00\appcompat.txt 4.12KB
C:\WINDOWS\TEMP\WGAErrLog.txt 255 bytes
C:\WINDOWS\TEMP\WGANotify.settings 409 bytes
C:\WINDOWS\TEMP\~DFDCC7.tmp 16.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\index.dat 2.75KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T10.tmp 13.54KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T11.tmp 25.79KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T12.tmp 27.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T13.tmp 31.12KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T14.tmp 27.67KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T15.tmp 26.83KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T16.tmp 26.88KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T17.tmp 23.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T18.tmp 23.39KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T19.tmp 26.17KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T1A.tmp 35.44KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T1B.tmp 34.83KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T1C.tmp 29.44KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T1D.tmp 23.78KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T1E.tmp 31.45KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T1F.tmp 28.07KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T20.tmp 23.66KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T21.tmp 23.29KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T22.tmp 25.13KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T23.tmp 25.22KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T24.tmp 25.82KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T25.tmp 31.09KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T26.tmp 28.88KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T9.tmp 224 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\TB.tmp 1.07KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\TC.tmp 20.68KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\TD.tmp 26.42KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\TE.tmp 24.58KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\TF.tmp 28.37KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\CalendarMpvFile-0.pvm 13.88KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\CalendarMpvFile-1.pvm 2.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\CalendarMpvFile-2.pvm 2.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\CalendarMpvFile-3.pvm 2.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\CalendarMpvFile-4.pvm 2.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\CalendarMpvFile-5.pvm 2.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\CalendarMpvFile-6.pvm 2.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\pageLayout-0.xml 0.21MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\pageLayout-1.xml 0.21MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\pageLayout-2.xml 0.21MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\pageLayout-3.xml 0.21MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\pageLayout-4.xml 0.21MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\pageLayout-5.xml 0.21MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\pageLayout-6.xml 0.21MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc27.tmp\bouingue.ccn 0.42MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc27.tmp\menus.exe 1.59MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc27.tmp\pifpaf.ccn 1.36MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc27.tmp\splat.ccn 0.80MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc27.tmp\uninst32.exe 0.18MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc27.tmp\_Del.log 774 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc40.tmp\bouingue.ccn 0.42MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc40.tmp\menus.exe 1.59MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc40.tmp\pifpaf.ccn 1.36MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc40.tmp\splat.ccn 0.80MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc40.tmp\uninst32.exe 0.18MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc40.tmp\_Del.log 774 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\Excel8.0\ShockwaveFlashObjects.exd 14.44KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\GLB1A2B.EXE 0.16MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\hpodvd09.log 1.92KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\HPQKYGRP_00000A48\Numériser002.tif 0.91MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\IadHide5.dll 24.04KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img43.htm 291 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img5.htm 291 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img8.htm 291 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img88.htm 285 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img8B.htm 291 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img8F.htm 291 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img93.htm 285 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img95.htm 285 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv1.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv2.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv3.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv3.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv4.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv4.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv42.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv42.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv5B.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv5B.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv7.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv7.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv8.htm 4.49KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv87.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv87.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv8D.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv8D.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv91.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv91.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\RSR8E.tmp 15.88KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\RSR92.tmp 15.88KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\ins1.tmp\LDMClient.exe 5.52MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\ins1.tmp\LiteInstRC_EN.dll 44.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\InstHelp.dll 56.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\isp1.tmp\Setup.dll 0.27MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\isp1B0.tmp\setup.dll 0.30MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\isp1B4.tmp\_Setup.dll 0.35MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\isp23.tmp\_Setup.dll 0.15MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\isp32.tmp\_Setup.dll 0.15MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\isp5.tmp\_Setup.dll 0.33MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\LVCOMSX.LOG 788 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\+0gIc46I6E4AseikEIXXvk4BeYM= 31.56KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\+2FZh2F4m1jlWG7Ycc9oOcrWtqo3U= 1.45KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\+8eYSYuvrai2FYZnXGsJtCEy6hE= 25.43KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\+a5aF8WpM4j6cIpRHwHY2FCBe9ZA= 29.40KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\+gjseJvRl9Hd2FY0iZ549GTONAkk= 16.83KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\+hKgZ7hIQE0UoF6ATQ2vQu92FNjY= 19.74KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\+qr8kzUsRcMapVN+AypekJlyVGg= 10.80KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\0+37px3tqNxpljIwZ0ty3QvbuB8= 7.13KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\0+hWsCiPlTzI2Fm8XsroW1RnN+J4= 16.10KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\001JBbIpxvtz1jthIUtVHcLm2n8= 16.89KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\02o3V2FpQ2FUiEYRQbIpHXaMm05Kg= 15.05KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\05uDcYlN53OODxDtIe1CRR8D1xg= 5.90KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\0Oimbss3BLNfPgLOEXHLxB22KFo= 1.74KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\0V46df3Wwa02Rp72FVY691C7iDnQ= 5.86KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\0WYxFGYUtSJd89pQ5SSCoHGA6lU= 245 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\0XiVrcV9MUmLRQVRzxnvdmUSwwA= 52.66KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\0Z5FfZerCbFd4mtKpmSbKuXZs0g= 21.55KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\17ViA9M06K75Ei6otpRDNMVdpo8= 20.72KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1cj9OwmuC8bseqSq6+WfvCXufhI= 9.22KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1dPOYLIg1aO+2nAzTrbTDbiGSnQ= 20.45KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1e6url1o3Lej2FOakKfwDqOkcYCE= 17.05KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1MKJQGhIodAx372msYJb1J+wgrw= 557 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1nnmepwEOwt9c+KKsMiAjIi+5E0= 7.96KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1pIq7Rs6L3Qszpgob3OYLyTdmi4= 18.61KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1xrRMv1ZgT4kT+fdnBPthCaV4+k= 95.28KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1ZXF9CJ2F0aTNqivR41pRKjuRy8= 17.90KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\22FKjyZQ+CY80nASoo5CZ2eKQcHA= 7.85KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\22IY9GGRb1SuvTa2F92FhHfytkXh4= 1.23KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2B9vzcQTpN9MzEUcv8Ama3fBbX0= 2.22KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2eOZ8225eHA9y3RI0wc1YC2FOOp4= 373 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2FaKxVnxAY+pRjOt6e2FUzBKNnJ9o= 17.33KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2FLJT0Fg8hdTa9MVL+vuR+Gw8twk= 2.03KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2Floj1f6vQL5HKnA2F4T8o1aYjNZc= 3.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2FrL6MY3UFUzx5cOZTymq67sZ0bw= 4.76KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2FTtU7EYsGNh35ib2FkI51C0fdfUM= 19.14KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2jid2LNW1XG0o+7tpjsbZoE2Ff0s= 19.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2LmpAgmMEOzfoaXLMovCs4NtC4A= 2.65KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2s7B7MfGaEuBSjHH5x4iHBoO5QA= 15.66KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2tjsOYKOMm7yXa5bgW01oKyGPxk= 3.59KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2VdOiRn8R6vgyAo1OuWk82FGrO9g= 26.48KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\321S68ez9rd9cQMzuOXZ8rALpLM= 23.25KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\32FgtMV1PNJBPH98BrPsB3iXT6t0= 16.89KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-107936953422 2F3E 4.04KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-126062585622 2F3E 3.23KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-159373199022 2F3E 5.01KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-162139628822 2F3E 5.01KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-178050049422 2F3E 3.13KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-180647285122 2F3E 4.48KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-183631722422 2F3E 10.13KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-202215145822 2F3E 2.94KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-26127458122 2F3E 3.54KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-52598623922 2F3E 4.43KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-62581128422 2F3E 4.12KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-90300637122 2F3E 3.03KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22140107598722 2F3E 9.47KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22151142265322 2F3E 4.93KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22174747504522 2F3E 8.69KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22194329395922 2F3E 8.50KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22197712161922 2F3E 4.36KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22209158685722 2F3E 3.81KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=2237939050722 2F3E 4.25KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3earutZO4vWRpTw2QC0RevBXJIk= 544 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3EspNBEIbheuWIzK6fgrZb9jEvg= 28.44KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3fpzJ2WGUSS8QCx8solQjHR+ZFQ= 11.16KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3KuE3viD7OQAyVkM0+DB+cl6cOg= 10.46KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3xd9CMQG9cEvZXaiq7TuHGzAwXI= 22.51KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\4bVMitZq2Fx5hIwuWJEfG45cOyWE= 14.04KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\4UYao9V24uHCy29DgFnHqUEvttM= 405 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\4vL6flAQll6SwkzEMHnzL7uIZCY= 34.31KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\4y8nu35ghxaKYWbbx+IjbpAjqME= 11.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\52Ft90K1rAOMOcW4f4vJhUygLVk4= 18.55KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\56IGOMZI2FLWjCkaz9FuIZwoK3kk= 16.29KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\58QxqDaiFGhR5FS1Y8vsFNVfQl4= 1.12KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\5LX9wyfFbF4tZnNosYcJz+OhYag= 872 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\5Rdwl+SYP4oiZcyjXcigkhU4xWU= 13.15KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\5ujJvVxovD294hFwGKahG0YK420= 27.49KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\5wyN2FRaZdmKe7nJa02FJzw4o4Wp8= 1.48KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\62FkwjgMf5cwuGMzZqVM0hIGuW+8= 13.39KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\62yD4dToOUfAaS4yWcmS7720xIs= 16.93KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\65ESIXO+Fy02FEGyaqIr4pJmrJeA= 19.53KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\682H37Uy8N2FJp2FPsc1+Z7oOAYwI= 21.34KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\6flvrzB9KsLKOPoX59buS0AF8g0= 25.13KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\6HQr4i8I31RGapFcjrTEazBsIck= 17.48KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\6IdfL1h91bTTNOQsibi3jplyL2s= 16.15KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\6PVeJAdtG1381W2FjH6KuaWBFKXs= 22.63KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\6u4N2FIYxNP+ozTdOo2B49Xsl0yk= 8.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\6ubLzoKDHi2ryxebLfqp0svs5OE= 765 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\6Y2aLF2unMs5lcJtE1R+pjZTzUM= 26.23KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\7ejIKhWVo+XpdV+gf3SF0sQ6lxU= 21.26KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\7Eqr3I2FKbQEGkh5SVEr3eHA4TXA= 21.15KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\7NZsKYwbnuTtwVxvkNF5zTy3txQ= 11.19KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\7y0JzoEZ+xmPGzc2FE2uhtcU2F8Cw= 30.04KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\7Y1TidE1+nHKP+2FT6nQ5+l+XkuU= 23.44KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\7ZZQ+Win9AEX9pSreKoC0lKdQHg= 16.62KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\83bTMGzupVqPAtnlI+rUJjJo8uw= 14.86KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\88tuCHDgJkrRPFCkD6+3F75+oUE= 25.25KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\8CYzrUtErRogIUqPokbLGeZYFo4= 29.75KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\8Gn2Fjl6PmSvu1wFB2Fddyl71LaJg= 21.24KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\8laIj9g2jXJjmWdoucyPJJnTlT4= 888 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\8pTVNoiWDd2FxeuJMAD+LQCHQj+s= 26.56KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\90SPiav7+9jYQi2FkBkslY8IXFyI= 457 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9b5Nm6vq2FR40Gp6DRsKlPOPjwQo= 9.76KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9bk2FgXQW3miWQE5VAdd8768HbNI= 5.85KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9BWNu692FjlJRBICN9MxRxQ8Sr60= 1.04KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9F6oIJMDaLJrYKmvFPKoGRucvUc= 21.16KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9hj7P8NdSxqx8zF79jNmIeKsieM= 267 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9nWEFa624r0iEznOIKDz4a4XPfc= 19.56KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9tGfi77BGiKllYi80pdT+Uzi0h4= 14.86KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9X2i2kob301FO+aFnbtb55W7ytk= 628 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\A2cP74w699siddla5oxI3LYdiGs= 7.44KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\a3fyNASVJ+ceRJePA8xBNo9m2B4= 19.37KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\A4CPMQERSqnQPNP02FuTQrMeC4mA= 20.31KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\A59UMntjeWZZZjJ11KMYc2Q2FQ9I= 20.84KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\AaFQNUwfUZW2FPZPjnt1b1NOfnfo= 23.33KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\aCidXzMVja3CqKmmb+lBdvInC9A= 722 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Af7NcXCGcpTWV5H9GUJ5h5TjIrg= 23.74KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\AgKi+sgVII6wJOFHA67ocPhckG8= 21.23KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\AiWtjDshngkjc4RvCxMM33zVGwk= 18.53KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\aoT+BZ9LTNXMbFsYuBkSAeyh7ZA= 26.85KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Ap63gQJ0pQIlbdXokjFk5x5vu2E= 1.01KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\aPf2H6D7GoKdOmmEn+7PCPhTSPU= 20.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\aPfdFqJsPi9uR53cUm64dpBc0vE= 2.55KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Ar4QaeEvS6fpVt2P5ZWVKcmQLJo= 29.86KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ard9iwZlS7GXmRahml2FujM2Feafo= 18.89KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\aSA23nfGWdZyky0cS36wY03jPB4= 28.19KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\atgPK6InYzWgqcCPwRxDn+vz79E= 20.21KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\AUVaY2FoGReyloJMP3qUijL9eb3s= 11.42KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\av0cqs9PAuBbD+p48AzzLnTvV6M= 29.09KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\aYU6K5m1DHfZjrP3Ws5KP491jkA= 16.11KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\aZ9eAvhEp2ZZA2FRvL3FnmRzkOIo= 13.99KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\azGHNaHAEC0+EFtvywyO6uOrf0U= 1.06KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\AZZtywBhdDl2FS7GUOe2chTaDkMo= 24.44KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\b0eigCw7SINDbfdlzVGInoX8RRs= 422 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\b3CjoZ4+xt9+hC0ngWU1UZIRp7Y= 38.53KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\B4hs36uS4gqL4R0jChqWx1K93JU= 22.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\b5JVyYlrJDVyGcj1js618BBawHs= 94.86KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\B9tSkFsavyj2FTws2FRxsCLorj0eQ= 1.58KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bBUHYVYb2wxci3KtkQ4p8WX6RL4= 780 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bcosOdm8ttk7Fdljpwu4HOIFPH8= 18.65KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bfDHt52FMzp9ndJMNk1PJFy+V2FC0= 18.60KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\BgVcJqRo2MUZOG1wIFwHEnO9OF4= 21.99KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bjDLKloipBWmgSRPilO2FvSFZ8c= 22.61KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bMAicR9bg2+RJDX4gDGbM5pjY58= 25.96KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bmncrTQVbzPhT4eT6BaaHOe112c= 20.09KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bO7V+kvlNW1GenHl2hjyk5VTeWk= 18.08KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bOve2wyBpmGiMarSJyRIpd2cpxI= 977 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bpEFGoTEAWYuz8799OjKg2FwV4so= 3.47KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Brtn2F8JCwJ7grQB1zHQH6dt2FOeE= 16.20KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\BS1MtAGWq2F28rQcO4gORZCSbU1s= 6.61KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\BUWqfLX+IY399BesmiEUnpDibuo= 21.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\BW4yK4Y85tWNe6DkfLYfqvJIGmw= 18.23KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\BWaNrJWCkpGU03KHzqmtpsNSl2M= 977 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bwP+mnAhWkfXPyXLN6qg2Ft2FSHUk= 19.34KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bzAljXfTZ3DtOIYiv8Rz9FLKrrI= 1.20KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\BzUhzUjXcWZyFoxnPwvoTNJRfrs= 675 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\c18Wg7SrVYdzhPglVB2FZZNhfrQM= 8.58KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\C4FnHWtdl5qISi2rwpt+4oD3Rw8= 83.14KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\c8RGDxxUZUySU17idT5RyCBgsbI= 23.89KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\cAO4mJViWn8m4azT4M58sPIdRdo= 24.37KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\CbyV6cmMbH8FSsvxQ72Fa6zLMuMY= 16.88KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ck+uUDVqiv2FHrKAwB7hBc2+FXps= 30.84KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\cMfvCdtlDKpsp
C:\Documents and Settings\Luc\Cookies\luc@www.miniclip[1].txt 166 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.mondepoitrines[2].txt 399 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.movies-3x[2].txt 165 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.mp3dollars[2].txt 104 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.msn[1].txt 373 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.msn[3].txt 74 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.musicme[1].txt 509 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.musique-franco[1].txt 113 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.myspace[1].txt 73 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.mystats[1].txt 76 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.naheulbeukauquebec[1].txt 185 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.nathaliedumas.book[1].txt 121 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.netpass[2].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.nofrag[2].txt 114 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.noogle[1].txt 105 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.oselie[2].txt 457 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.paradixxx[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.paradixxx[3].txt 144 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.paroles[2].txt 266 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.paseilimitado[1].txt 402 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.passdux[1].txt 638 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.paypal[1].txt 103 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.pbplustour[2].txt 337 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.pc-telecharger[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.pcbfinances[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.pecheur[2].txt 70 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.petites-salopes-chaudes[1].txt 124 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.photosasiatiques[2].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.pixmania[2].txt 1.28KB
C:\Documents and Settings\Luc\Cookies\luc@www.plaisiroriental[2].txt 368 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.play22[1].txt 249 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.plugin-x[2].txt 667 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.plusfortyfour[1].txt 106 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.pmumobile[2].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.pornattitude[1].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.porno-sympa[1].txt 100 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.premium-sexe[1].txt 272 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.priceminister[2].txt 132 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.promobenef[1].txt 722 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.rabbitfinder[1].txt 92 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.reactivpub[1].txt 72 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.realarcade[2].txt 517 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.rencontre[1].txt 85 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.rhapsodycentral.8m[1].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.rhapsodyinenglish.8m[1].txt 92 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.ringo[2].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.roxypalace[1].txt 154 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.rueducommerce[1].txt 148 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sandralatina[2].txt 405 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sapho-mag[1].txt 248 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.screensavers[2].txt 777 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sechoisir[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.securitetotale[2].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.serencontrer[2].txt 212 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.servergamers[1].txt 100 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sexe-gratuit-lesbiennes[1].txt 102 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sexeasiatique[2].txt 78 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sexecam[1].txt 91 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sexyavenue[2].txt 276 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.shermix[2].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sonnerie[1].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.speedbomba[1].txt 92 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.speederich[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.splem[1].txt 78 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.splem[3].txt 545 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.star-nue[2].txt 180 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.stars-a-poil[1].txt 267 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.superloterie[2].txt 183 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sur-la-toile[2].txt 180 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.sweetim[2].txt 492 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.swisstools[1].txt 78 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.t45ol[1].txt 67 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.tabalorium[1].txt 304 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.tabfind[1].txt 74 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.tagged[1].txt 76 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.thetransplants[1].txt 111 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.topagogo[1].txt 73 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.topglad[1].txt 74 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.topgratuit[2].txt 419 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.topliste[2].txt 70 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.touteslespartitions[2].txt 171 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.toutgratuit[1].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.truite[1].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.tv8[2].txt 149 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.ulgaard.homeip[1].txt 117 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.ulimit[1].txt 87 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.ulla[1].txt 77 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.ultimate-guitar[2].txt 391 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.unibet-tools[1].txt 106 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.vetofish[1].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.viamichelin[1].txt 445 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.video-2-lesbienne[1].txt 86 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.video-sexy-fun[1].txt 264 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.videocodezone[2].txt 342 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.videoschoquantes[1].txt 165 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.videoscomiques[2].txt 410 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.videosdebaise[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.vrally[1].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.warezfield[2].txt 165 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.webcool69[1].txt 340 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.webfric[2].txt 73 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.xasiatique[1].txt 92 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.xbarre[2].txt 421 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.xdujour[1].txt 75 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.xvideoclub[1].txt 341 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.yahoo[1].txt 223 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.zidane[1].txt 141 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.zoomin[2].txt 629 bytes
C:\Documents and Settings\Luc\Cookies\luc@www.zvab[1].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@www1.radioblogclub[1].txt 77 bytes
C:\Documents and Settings\Luc\Cookies\luc@www2.cbox[2].txt 80 bytes
C:\Documents and Settings\Luc\Cookies\luc@www2.mystats[2].txt 75 bytes
C:\Documents and Settings\Luc\Cookies\luc@www6.incredimail[1].txt 112 bytes
C:\Documents and Settings\Luc\Cookies\luc@www[1].txt 81 bytes
C:\Documents and Settings\Luc\Cookies\luc@xfire[1].txt 159 bytes
C:\Documents and Settings\Luc\Cookies\luc@xf[1].txt 77 bytes
C:\Documents and Settings\Luc\Cookies\luc@xf[2].txt 76 bytes
C:\Documents and Settings\Luc\Cookies\luc@xiti[1].txt 100 bytes
C:\Documents and Settings\Luc\Cookies\luc@xxx-foto.skyblog[1].txt 84 bytes
C:\Documents and Settings\Luc\Cookies\luc@xxx-kakou-xxx-26.skyblog[1].txt 93 bytes
C:\Documents and Settings\Luc\Cookies\luc@xxx-linzi-xxx.skyblog[1].txt 88 bytes
C:\Documents and Settings\Luc\Cookies\luc@xxx-marie-xxx.skyblog[1].txt 90 bytes
C:\Documents and Settings\Luc\Cookies\luc@xxx-sexegogo-xxx.skyblog[1].txt 92 bytes
C:\Documents and Settings\Luc\Cookies\luc@xxxsatyrielxxx.skyblog[1].txt 91 bytes
C:\Documents and Settings\Luc\Cookies\luc@xxx[1].txt 94 bytes
C:\Documents and Settings\Luc\Cookies\luc@yacast[1].txt 111 bytes
C:\Documents and Settings\Luc\Cookies\luc@yahoo[1].txt 818 bytes
C:\Documents and Settings\Luc\Cookies\luc@yahoo[2].txt 83 bytes
C:\Documents and Settings\Luc\Cookies\luc@yieldmanager[2].txt 131 bytes
C:\Documents and Settings\Luc\Cookies\luc@yourmedia[1].txt 93 bytes
C:\Documents and Settings\Luc\Cookies\luc@youtube[2].txt 220 bytes
C:\Documents and Settings\Luc\Cookies\luc@zdnet[1].txt 71 bytes
C:\Documents and Settings\Luc\Cookies\luc@zigiz[1].txt 670 bytes
C:\Documents and Settings\Luc\Cookies\luc@zylom[2].txt 309 bytes
Marked for deletion: C:\Documents and Settings\Luc\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Marked for deletion: C:\Documents and Settings\Luc\Cookies\index.dat
Trash emptied (1 files) 771 bytes
C:\WINDOWS\TEMP\1D1213E.dmp 0 bytes
C:\WINDOWS\TEMP\2A67B6.dmp 0 bytes
C:\WINDOWS\TEMP\46726C.dmp 0 bytes
C:\WINDOWS\TEMP\567E07.dmp 0 bytes
C:\WINDOWS\TEMP\AAX94.tmp 28.07KB
C:\WINDOWS\TEMP\AAX9B.tmp 27.62KB
C:\WINDOWS\TEMP\AAX9D.tmp 26.07KB
C:\WINDOWS\TEMP\ABF5D9.dmp 0 bytes
C:\WINDOWS\TEMP\CamServr.log 762 bytes
C:\WINDOWS\TEMP\CamWizrd.log 45.05KB
C:\WINDOWS\TEMP\deadlycircuit 15.37KB
C:\WINDOWS\TEMP\deadlycircuit2 44.49KB
C:\WINDOWS\TEMP\DWH2168.tmp 236 bytes
C:\WINDOWS\TEMP\DWH2214.tmp 236 bytes
C:\WINDOWS\TEMP\DWH24E3.tmp 82.75KB
C:\WINDOWS\TEMP\DWH27F0.tmp 82.74KB
C:\WINDOWS\TEMP\DWH288C.tmp 82.74KB
C:\WINDOWS\TEMP\DWH2967.tmp 0.20MB
C:\WINDOWS\TEMP\DWH2BE7.tmp 0.25MB
C:\WINDOWS\TEMP\DWH2FFE.tmp 0.24MB
C:\WINDOWS\TEMP\DWH3415.tmp 0.13MB
C:\WINDOWS\TEMP\DWH35CB.tmp 0.17MB
C:\WINDOWS\TEMP\DWH381C.tmp 236 bytes
C:\WINDOWS\TEMP\DWHE152.tmp 236 bytes
C:\WINDOWS\TEMP\HP000000.IDX 0.29MB
C:\WINDOWS\TEMP\HP001000.IDX 42.2MB
C:\WINDOWS\TEMP\HP002000.IDX 0.14MB
C:\WINDOWS\TEMP\HP003000.IDX 30.31KB
C:\WINDOWS\TEMP\HP003001.PDL 36.76KB
C:\WINDOWS\TEMP\HP003002.PDL 53.27KB
C:\WINDOWS\TEMP\HP003003.PDL 0.15MB
C:\WINDOWS\TEMP\HP003004.PDL 53.95KB
C:\WINDOWS\TEMP\HP003005.PDL 47.52KB
C:\WINDOWS\TEMP\HP003006.PDL 16.03KB
C:\WINDOWS\TEMP\HP004000.IDX 57.0MB
C:\WINDOWS\TEMP\HP004001.PDL 20.5MB
C:\WINDOWS\TEMP\HP004002.PDL 43.2MB
C:\WINDOWS\TEMP\HP005000.IDX 42.5MB
C:\WINDOWS\TEMP\HP005001.PDL 20.5MB
C:\WINDOWS\TEMP\HP005002.PDL 43.2MB
C:\WINDOWS\TEMP\HP006000.IDX 0.93MB
C:\WINDOWS\TEMP\hpzcoi00.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi01.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi02.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi03.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi04.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi05.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi06.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi07.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi08.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi09.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi10.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi11.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi12.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi13.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi14.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi15.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi16.log 596 bytes
C:\WINDOWS\TEMP\hpzcoi17.log 596 bytes
C:\WINDOWS\TEMP\Instmed.log 359 bytes
C:\WINDOWS\TEMP\InstVid.log 444 bytes
C:\WINDOWS\TEMP\MSIaa8d4.LOG 656 bytes
C:\WINDOWS\TEMP\netfxsl.log 21.39KB
C:\WINDOWS\TEMP\netfxupdate.log 7.05KB
C:\WINDOWS\TEMP\NLUB2.tmp\catalog.dat 3.30KB
C:\WINDOWS\TEMP\NLUB2.tmp\CCERASER.DLL 2.23MB
C:\WINDOWS\TEMP\NLUB2.tmp\ECBOOTIL.VXD 6.74KB
C:\WINDOWS\TEMP\NLUB2.tmp\ECMSVR32.DLL 0.26MB
C:\WINDOWS\TEMP\NLUB2.tmp\EECTRL.SYS 0.37MB
C:\WINDOWS\TEMP\NLUB2.tmp\ERASER.GRD 232 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\ERASER.SIG 2.22KB
C:\WINDOWS\TEMP\NLUB2.tmp\ERASER.SPM 1.73KB
C:\WINDOWS\TEMP\NLUB2.tmp\ERASER.SYS 96.85KB
C:\WINDOWS\TEMP\NLUB2.tmp\ESRDEF.BIN 2.88MB
C:\WINDOWS\TEMP\NLUB2.tmp\HH 4.04KB
C:\WINDOWS\TEMP\NLUB2.tmp\naveng.exp 99.86KB
C:\WINDOWS\TEMP\NLUB2.tmp\naveng.sys 77.38KB
C:\WINDOWS\TEMP\NLUB2.tmp\naveng.vxd 87.57KB
C:\WINDOWS\TEMP\NLUB2.tmp\naveng32.dll 0.12MB
C:\WINDOWS\TEMP\NLUB2.tmp\navex15.exp 0.82MB
C:\WINDOWS\TEMP\NLUB2.tmp\navex15.sys 0.79MB
C:\WINDOWS\TEMP\NLUB2.tmp\navex15.vxd 0.94MB
C:\WINDOWS\TEMP\NLUB2.tmp\navex32a.dll 0.84MB
C:\WINDOWS\TEMP\NLUB2.tmp\ncsacert.txt 6.38KB
C:\WINDOWS\TEMP\NLUB2.tmp\scrauth.dat 95.27KB
C:\WINDOWS\TEMP\NLUB2.tmp\symaveng.cat 14 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\symaveng.inf 901 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\SYMERASE.CAT 6.62KB
C:\WINDOWS\TEMP\NLUB2.tmp\SYMERASE.INF 618 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\TCDEFS.DAT 47.50KB
C:\WINDOWS\TEMP\NLUB2.tmp\TCSCAN7.DAT 0.92MB
C:\WINDOWS\TEMP\NLUB2.tmp\TCSCAN8.DAT 0.30MB
C:\WINDOWS\TEMP\NLUB2.tmp\TCSCAN9.DAT 0.62MB
C:\WINDOWS\TEMP\NLUB2.tmp\technote.txt 875 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\tinf.dat 453 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\tinfidx.dat 148 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\tinfl.dat 1.91KB
C:\WINDOWS\TEMP\NLUB2.tmp\tscan1.dat 56.77KB
C:\WINDOWS\TEMP\NLUB2.tmp\tscan1hd.dat 2.96KB
C:\WINDOWS\TEMP\NLUB2.tmp\V.GRD 4.93KB
C:\WINDOWS\TEMP\NLUB2.tmp\V.SIG 2.21KB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan.inf 0.10MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan1.dat 0.92MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan2.dat 0.54MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan3.dat 0.14MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan4.dat 0.31MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan5.dat 2.54MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan6.dat 0.37MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan7.dat 4.22MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan8.dat 1.51MB
C:\WINDOWS\TEMP\NLUB2.tmp\virscan9.dat 3.42MB
C:\WINDOWS\TEMP\NLUB2.tmp\VIRSCANT.DAT 32 bytes
C:\WINDOWS\TEMP\NLUB2.tmp\whatsnew.txt 27.77KB
C:\WINDOWS\TEMP\NLUB2.tmp\zdone.dat 224 bytes
C:\WINDOWS\TEMP\NLUE6.tmp 31.97KB
C:\WINDOWS\TEMP\Sof.ico 766 bytes
C:\WINDOWS\TEMP\TMP000000012537113F7254A5E7 0.50MB
C:\WINDOWS\TEMP\WER1F.tmp 0 bytes
C:\WINDOWS\TEMP\WER1F.tmp.dir00\appcompat.txt 4.12KB
C:\WINDOWS\TEMP\WER3.tmp 0 bytes
C:\WINDOWS\TEMP\WER3.tmp.dir00\appcompat.txt 4.12KB
C:\WINDOWS\TEMP\WER4.tmp 0 bytes
C:\WINDOWS\TEMP\WER4.tmp.dir00\appcompat.txt 4.12KB
C:\WINDOWS\TEMP\WER47.tmp 0 bytes
C:\WINDOWS\TEMP\WER47.tmp.dir00\appcompat.txt 4.12KB
C:\WINDOWS\TEMP\WER48.tmp 0 bytes
C:\WINDOWS\TEMP\WER48.tmp.dir00\appcompat.txt 4.12KB
C:\WINDOWS\TEMP\WGAErrLog.txt 255 bytes
C:\WINDOWS\TEMP\WGANotify.settings 409 bytes
C:\WINDOWS\TEMP\~DFDCC7.tmp 16.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\index.dat 2.75KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T10.tmp 13.54KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T11.tmp 25.79KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T12.tmp 27.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T13.tmp 31.12KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T14.tmp 27.67KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T15.tmp 26.83KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T16.tmp 26.88KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T17.tmp 23.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T18.tmp 23.39KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T19.tmp 26.17KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T1A.tmp 35.44KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T1B.tmp 34.83KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T1C.tmp 29.44KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T1D.tmp 23.78KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T1E.tmp 31.45KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T1F.tmp 28.07KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T20.tmp 23.66KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T21.tmp 23.29KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T22.tmp 25.13KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T23.tmp 25.22KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T24.tmp 25.82KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T25.tmp 31.09KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T26.tmp 28.88KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\T9.tmp 224 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\TB.tmp 1.07KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\TC.tmp 20.68KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\TD.tmp 26.42KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\TE.tmp 24.58KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Ahoc\TF.tmp 28.37KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\CalendarMpvFile-0.pvm 13.88KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\CalendarMpvFile-1.pvm 2.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\CalendarMpvFile-2.pvm 2.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\CalendarMpvFile-3.pvm 2.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\CalendarMpvFile-4.pvm 2.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\CalendarMpvFile-5.pvm 2.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\CalendarMpvFile-6.pvm 2.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\pageLayout-0.xml 0.21MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\pageLayout-1.xml 0.21MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\pageLayout-2.xml 0.21MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\pageLayout-3.xml 0.21MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\pageLayout-4.xml 0.21MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\pageLayout-5.xml 0.21MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Calendar\pageLayout-6.xml 0.21MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc27.tmp\bouingue.ccn 0.42MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc27.tmp\menus.exe 1.59MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc27.tmp\pifpaf.ccn 1.36MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc27.tmp\splat.ccn 0.80MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc27.tmp\uninst32.exe 0.18MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc27.tmp\_Del.log 774 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc40.tmp\bouingue.ccn 0.42MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc40.tmp\menus.exe 1.59MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc40.tmp\pifpaf.ccn 1.36MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc40.tmp\splat.ccn 0.80MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc40.tmp\uninst32.exe 0.18MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\cc40.tmp\_Del.log 774 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\Excel8.0\ShockwaveFlashObjects.exd 14.44KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\GLB1A2B.EXE 0.16MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\hpodvd09.log 1.92KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\HPQKYGRP_00000A48\Numériser002.tif 0.91MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\IadHide5.dll 24.04KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img43.htm 291 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img5.htm 291 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img8.htm 291 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img88.htm 285 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img8B.htm 291 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img8F.htm 291 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img93.htm 285 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\img95.htm 285 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv1.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv2.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv3.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv3.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv4.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv4.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv42.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv42.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv5B.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv5B.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv7.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv7.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv8.htm 4.49KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv87.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv87.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv8D.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv8D.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv91.htm 445 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\imv91.tmp 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\RSR8E.tmp 15.88KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\IncrediMail\RSR92.tmp 15.88KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\ins1.tmp\LDMClient.exe 5.52MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\ins1.tmp\LiteInstRC_EN.dll 44.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\InstHelp.dll 56.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\isp1.tmp\Setup.dll 0.27MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\isp1B0.tmp\setup.dll 0.30MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\isp1B4.tmp\_Setup.dll 0.35MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\isp23.tmp\_Setup.dll 0.15MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\isp32.tmp\_Setup.dll 0.15MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\isp5.tmp\_Setup.dll 0.33MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\LVCOMSX.LOG 788 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\+0gIc46I6E4AseikEIXXvk4BeYM= 31.56KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\+2FZh2F4m1jlWG7Ycc9oOcrWtqo3U= 1.45KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\+8eYSYuvrai2FYZnXGsJtCEy6hE= 25.43KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\+a5aF8WpM4j6cIpRHwHY2FCBe9ZA= 29.40KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\+gjseJvRl9Hd2FY0iZ549GTONAkk= 16.83KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\+hKgZ7hIQE0UoF6ATQ2vQu92FNjY= 19.74KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\+qr8kzUsRcMapVN+AypekJlyVGg= 10.80KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\0+37px3tqNxpljIwZ0ty3QvbuB8= 7.13KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\0+hWsCiPlTzI2Fm8XsroW1RnN+J4= 16.10KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\001JBbIpxvtz1jthIUtVHcLm2n8= 16.89KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\02o3V2FpQ2FUiEYRQbIpHXaMm05Kg= 15.05KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\05uDcYlN53OODxDtIe1CRR8D1xg= 5.90KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\0Oimbss3BLNfPgLOEXHLxB22KFo= 1.74KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\0V46df3Wwa02Rp72FVY691C7iDnQ= 5.86KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\0WYxFGYUtSJd89pQ5SSCoHGA6lU= 245 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\0XiVrcV9MUmLRQVRzxnvdmUSwwA= 52.66KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\0Z5FfZerCbFd4mtKpmSbKuXZs0g= 21.55KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\17ViA9M06K75Ei6otpRDNMVdpo8= 20.72KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1cj9OwmuC8bseqSq6+WfvCXufhI= 9.22KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1dPOYLIg1aO+2nAzTrbTDbiGSnQ= 20.45KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1e6url1o3Lej2FOakKfwDqOkcYCE= 17.05KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1MKJQGhIodAx372msYJb1J+wgrw= 557 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1nnmepwEOwt9c+KKsMiAjIi+5E0= 7.96KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1pIq7Rs6L3Qszpgob3OYLyTdmi4= 18.61KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1xrRMv1ZgT4kT+fdnBPthCaV4+k= 95.28KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\1ZXF9CJ2F0aTNqivR41pRKjuRy8= 17.90KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\22FKjyZQ+CY80nASoo5CZ2eKQcHA= 7.85KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\22IY9GGRb1SuvTa2F92FhHfytkXh4= 1.23KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2B9vzcQTpN9MzEUcv8Ama3fBbX0= 2.22KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2eOZ8225eHA9y3RI0wc1YC2FOOp4= 373 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2FaKxVnxAY+pRjOt6e2FUzBKNnJ9o= 17.33KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2FLJT0Fg8hdTa9MVL+vuR+Gw8twk= 2.03KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2Floj1f6vQL5HKnA2F4T8o1aYjNZc= 3.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2FrL6MY3UFUzx5cOZTymq67sZ0bw= 4.76KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2FTtU7EYsGNh35ib2FkI51C0fdfUM= 19.14KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2jid2LNW1XG0o+7tpjsbZoE2Ff0s= 19.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2LmpAgmMEOzfoaXLMovCs4NtC4A= 2.65KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2s7B7MfGaEuBSjHH5x4iHBoO5QA= 15.66KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2tjsOYKOMm7yXa5bgW01oKyGPxk= 3.59KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\2VdOiRn8R6vgyAo1OuWk82FGrO9g= 26.48KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\321S68ez9rd9cQMzuOXZ8rALpLM= 23.25KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\32FgtMV1PNJBPH98BrPsB3iXT6t0= 16.89KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-107936953422 2F3E 4.04KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-126062585622 2F3E 3.23KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-159373199022 2F3E 5.01KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-162139628822 2F3E 5.01KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-178050049422 2F3E 3.13KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-180647285122 2F3E 4.48KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-183631722422 2F3E 10.13KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-202215145822 2F3E 2.94KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-26127458122 2F3E 3.54KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-52598623922 2F3E 4.43KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-62581128422 2F3E 4.12KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22-90300637122 2F3E 3.03KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22140107598722 2F3E 9.47KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22151142265322 2F3E 4.93KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22174747504522 2F3E 8.69KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22194329395922 2F3E 8.50KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22197712161922 2F3E 4.36KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=22209158685722 2F3E 3.81KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3Ccachedsoap id=2237939050722 2F3E 4.25KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3earutZO4vWRpTw2QC0RevBXJIk= 544 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3EspNBEIbheuWIzK6fgrZb9jEvg= 28.44KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3fpzJ2WGUSS8QCx8solQjHR+ZFQ= 11.16KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3KuE3viD7OQAyVkM0+DB+cl6cOg= 10.46KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\3xd9CMQG9cEvZXaiq7TuHGzAwXI= 22.51KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\4bVMitZq2Fx5hIwuWJEfG45cOyWE= 14.04KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\4UYao9V24uHCy29DgFnHqUEvttM= 405 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\4vL6flAQll6SwkzEMHnzL7uIZCY= 34.31KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\4y8nu35ghxaKYWbbx+IjbpAjqME= 11.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\52Ft90K1rAOMOcW4f4vJhUygLVk4= 18.55KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\56IGOMZI2FLWjCkaz9FuIZwoK3kk= 16.29KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\58QxqDaiFGhR5FS1Y8vsFNVfQl4= 1.12KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\5LX9wyfFbF4tZnNosYcJz+OhYag= 872 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\5Rdwl+SYP4oiZcyjXcigkhU4xWU= 13.15KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\5ujJvVxovD294hFwGKahG0YK420= 27.49KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\5wyN2FRaZdmKe7nJa02FJzw4o4Wp8= 1.48KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\62FkwjgMf5cwuGMzZqVM0hIGuW+8= 13.39KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\62yD4dToOUfAaS4yWcmS7720xIs= 16.93KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\65ESIXO+Fy02FEGyaqIr4pJmrJeA= 19.53KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\682H37Uy8N2FJp2FPsc1+Z7oOAYwI= 21.34KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\6flvrzB9KsLKOPoX59buS0AF8g0= 25.13KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\6HQr4i8I31RGapFcjrTEazBsIck= 17.48KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\6IdfL1h91bTTNOQsibi3jplyL2s= 16.15KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\6PVeJAdtG1381W2FjH6KuaWBFKXs= 22.63KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\6u4N2FIYxNP+ozTdOo2B49Xsl0yk= 8.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\6ubLzoKDHi2ryxebLfqp0svs5OE= 765 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\6Y2aLF2unMs5lcJtE1R+pjZTzUM= 26.23KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\7ejIKhWVo+XpdV+gf3SF0sQ6lxU= 21.26KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\7Eqr3I2FKbQEGkh5SVEr3eHA4TXA= 21.15KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\7NZsKYwbnuTtwVxvkNF5zTy3txQ= 11.19KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\7y0JzoEZ+xmPGzc2FE2uhtcU2F8Cw= 30.04KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\7Y1TidE1+nHKP+2FT6nQ5+l+XkuU= 23.44KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\7ZZQ+Win9AEX9pSreKoC0lKdQHg= 16.62KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\83bTMGzupVqPAtnlI+rUJjJo8uw= 14.86KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\88tuCHDgJkrRPFCkD6+3F75+oUE= 25.25KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\8CYzrUtErRogIUqPokbLGeZYFo4= 29.75KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\8Gn2Fjl6PmSvu1wFB2Fddyl71LaJg= 21.24KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\8laIj9g2jXJjmWdoucyPJJnTlT4= 888 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\8pTVNoiWDd2FxeuJMAD+LQCHQj+s= 26.56KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\90SPiav7+9jYQi2FkBkslY8IXFyI= 457 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9b5Nm6vq2FR40Gp6DRsKlPOPjwQo= 9.76KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9bk2FgXQW3miWQE5VAdd8768HbNI= 5.85KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9BWNu692FjlJRBICN9MxRxQ8Sr60= 1.04KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9F6oIJMDaLJrYKmvFPKoGRucvUc= 21.16KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9hj7P8NdSxqx8zF79jNmIeKsieM= 267 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9nWEFa624r0iEznOIKDz4a4XPfc= 19.56KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9tGfi77BGiKllYi80pdT+Uzi0h4= 14.86KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\9X2i2kob301FO+aFnbtb55W7ytk= 628 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\A2cP74w699siddla5oxI3LYdiGs= 7.44KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\a3fyNASVJ+ceRJePA8xBNo9m2B4= 19.37KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\A4CPMQERSqnQPNP02FuTQrMeC4mA= 20.31KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\A59UMntjeWZZZjJ11KMYc2Q2FQ9I= 20.84KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\AaFQNUwfUZW2FPZPjnt1b1NOfnfo= 23.33KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\aCidXzMVja3CqKmmb+lBdvInC9A= 722 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Af7NcXCGcpTWV5H9GUJ5h5TjIrg= 23.74KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\AgKi+sgVII6wJOFHA67ocPhckG8= 21.23KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\AiWtjDshngkjc4RvCxMM33zVGwk= 18.53KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\aoT+BZ9LTNXMbFsYuBkSAeyh7ZA= 26.85KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Ap63gQJ0pQIlbdXokjFk5x5vu2E= 1.01KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\aPf2H6D7GoKdOmmEn+7PCPhTSPU= 20.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\aPfdFqJsPi9uR53cUm64dpBc0vE= 2.55KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Ar4QaeEvS6fpVt2P5ZWVKcmQLJo= 29.86KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ard9iwZlS7GXmRahml2FujM2Feafo= 18.89KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\aSA23nfGWdZyky0cS36wY03jPB4= 28.19KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\atgPK6InYzWgqcCPwRxDn+vz79E= 20.21KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\AUVaY2FoGReyloJMP3qUijL9eb3s= 11.42KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\av0cqs9PAuBbD+p48AzzLnTvV6M= 29.09KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\aYU6K5m1DHfZjrP3Ws5KP491jkA= 16.11KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\aZ9eAvhEp2ZZA2FRvL3FnmRzkOIo= 13.99KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\azGHNaHAEC0+EFtvywyO6uOrf0U= 1.06KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\AZZtywBhdDl2FS7GUOe2chTaDkMo= 24.44KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\b0eigCw7SINDbfdlzVGInoX8RRs= 422 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\b3CjoZ4+xt9+hC0ngWU1UZIRp7Y= 38.53KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\B4hs36uS4gqL4R0jChqWx1K93JU= 22.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\b5JVyYlrJDVyGcj1js618BBawHs= 94.86KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\B9tSkFsavyj2FTws2FRxsCLorj0eQ= 1.58KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bBUHYVYb2wxci3KtkQ4p8WX6RL4= 780 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bcosOdm8ttk7Fdljpwu4HOIFPH8= 18.65KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bfDHt52FMzp9ndJMNk1PJFy+V2FC0= 18.60KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\BgVcJqRo2MUZOG1wIFwHEnO9OF4= 21.99KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bjDLKloipBWmgSRPilO2FvSFZ8c= 22.61KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bMAicR9bg2+RJDX4gDGbM5pjY58= 25.96KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bmncrTQVbzPhT4eT6BaaHOe112c= 20.09KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bO7V+kvlNW1GenHl2hjyk5VTeWk= 18.08KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bOve2wyBpmGiMarSJyRIpd2cpxI= 977 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bpEFGoTEAWYuz8799OjKg2FwV4so= 3.47KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Brtn2F8JCwJ7grQB1zHQH6dt2FOeE= 16.20KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\BS1MtAGWq2F28rQcO4gORZCSbU1s= 6.61KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\BUWqfLX+IY399BesmiEUnpDibuo= 21.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\BW4yK4Y85tWNe6DkfLYfqvJIGmw= 18.23KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\BWaNrJWCkpGU03KHzqmtpsNSl2M= 977 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bwP+mnAhWkfXPyXLN6qg2Ft2FSHUk= 19.34KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\bzAljXfTZ3DtOIYiv8Rz9FLKrrI= 1.20KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\BzUhzUjXcWZyFoxnPwvoTNJRfrs= 675 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\c18Wg7SrVYdzhPglVB2FZZNhfrQM= 8.58KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\C4FnHWtdl5qISi2rwpt+4oD3Rw8= 83.14KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\c8RGDxxUZUySU17idT5RyCBgsbI= 23.89KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\cAO4mJViWn8m4azT4M58sPIdRdo= 24.37KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\CbyV6cmMbH8FSsvxQ72Fa6zLMuMY= 16.88KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ck+uUDVqiv2FHrKAwB7hBc2+FXps= 30.84KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\cMfvCdtlDKpsp
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\uKahqa7frQQ1XlZ1JAEkS+85Jxw= 15.46KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\uLhjKL823TGa2VcoGX5NiXueb0A= 831 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ulVXbKDsxuCfssRKZL0QUWosR54= 9.04KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Up0phJSWrmy+8fuQ2pNItjIwCwo= 6.67KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\uqCYg58TvXcTUZOR9fvem6QynNU= 1.22KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\uto6w2FPmk0t2F0l7Z6h5Czy5m01c= 14.39KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\uUXZVD6D79KojGvDmxUdiI20BOg= 362 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\UvPSsTBZu33ctEg2MKPP2FDV7gGE= 20.10KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\uz9onvQZdgjFowFmv6XevIkdq4k= 24.86KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\v12hSWciWW1zGba4vApJuLwBt2w= 6.19KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\V2FwzjttPE3YnOgAN4c7hgzmhmVI= 16.67KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\V6DusHL2FzoOmW6F9w48sZVv1dbk= 1.07KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\v87thb6v9JG+aAXWXzBHQz3yUVI= 22.99KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\V94RXmQPvwPUoUDN+rnO9Zreshk= 14.93KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\vdhK2M2VspAyjjWgcNDCvhUXQlk= 15.75KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\vFKB0PI45c4isEs0PI+CI5jtEvA= 2.84KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Vg+nqii7SuX7LsH7onNf2FRMBwK4= 5.50KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ViChm73JzVwfOjx8jfoTa6Ajg5Q= 24.75KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\vJik3yHG3OMSE94pMM1kzObpHF4= 12.82KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\VjNM7HVhQdItBdRI4U5xxQbUOr4= 2.43KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\vlag8nsEvPH752mm7uKTKiXSLos= 18.58KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Vmtq4V5rvOHPRDVk5oMnulwIgJ4= 22.14KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\vpekZew86Oz2Fh4L3gciZTvVSWJM= 525 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\VSRhHSUm1DJvoxmR8rabABEZNvY= 0.16MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\vvxIuSkMhzPjZYQQcr2CEmzCjag= 14.04KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\vZS6BxM5iCGNn+t2Fo2FawEMBWCzA= 19.81KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\W8SzziyzzD3dEhVGb1uCF52mTMM= 21.64KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wabrdh+BruiQ2g7CgJrri9dZnyk= 14.41KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wEjpLQ0wLEE7f8Es4QcLXlmaMso= 12.77KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Wfcyv4jJDtidaNhPmlwQWVcVfrE= 19.70KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wfevKzXmbmR0z5Ri4iBwAkMVrEw= 24.60KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\WFgs075a+J4BoWohxzPUzVGwbk8= 18.71KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wHnAPzcUqyoPRNw46hJ9w292tUk= 6.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Wic+yXzzbzac39fd8BJWWk0dQbE= 20.83KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\WLzcDuEQQqXTzQBbSeCPP043qcc= 17.83KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wnGeNHdF2F4mipXr2QuX5DR4uHsM= 14.11KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wnjnnC6YqQRNcIV6pXyhqKQ2F9c0= 10.78KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wOIr06k+FUDsvO4OjSBCn2Xkkuc= 1.17KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\WPr5X9wC8v2FZrsrd4ka+qOfdcmE= 897 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Wrsb3qUMb+3M1qYIqJX2F1sCLLHs= 20.01KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wsCuBhxh2UpETSOLCRErqqU53Nc= 21.20KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wtiwA9x8yVk4VwXtFZls5VoAHCc= 19.99KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\WzArBDc2F2F2FCxZr2FsQx7E2Fe4z1lk= 29.84KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\x06ALY6N3aTDo44vuVZkDRPO9Pk= 20.94KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\x58G+tpm0iqBAE9vGExNsrDIOPg= 16.87KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\XEIORcfiRwImnq2F9GgtSri0hQIE= 14.62KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\XgCri0RjXo6XxkqFiEbbgJLaujI= 19.25KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\xh+d4Aa0ds6wZxvg1wBu5JaIDxw= 7.13KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\xIMbiywjZzRSD8KQyBrP6gnZOhI= 25.34KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\XLq3AhCuW8UiuzAoNLnU1wnFz0g= 7.14KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\XLTnnGAQavT3TOcQR4UFySIO+qQ= 3.53KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\XOKyxzxtzm4rxFCpQCBn6UdghkQ= 14.99KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\xp9emxgBkP9uhebtUJAuI4Wpffc= 16.20KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\xQrvFt2kVf2FrOnIu5Z02LLt9kDo= 5.93KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Xs9ifs63rX4WNFs9SBX1UXX6whw= 17.75KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\xSikZuqpVeuiKFZpHoIjeoFzYKo= 49.67KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Xvn2F7qZiYP8PPPfc24cb+yCs2nw= 17.40KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\xZ9sO+kEsEC2FlgUbNnFEArUvSLI= 3.29KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Y4l6TEIHKapCqpqGycc19U2FKZIo= 21.82KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Yfu8OFXKa0OqWgbpVfPO2YmvBUY= 21.83KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ygEli+a2FH3kZW2OICwxyTQmOjRw= 47.41KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\YIqy+YHyKW3aUFjqZfBLulPui4A= 23.29KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\YkXzvA7hO3UK2w52IveOfMij3vA= 18.93KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\YL8guPZTeUN0GfjZ4aYfd0rGUeE= 2.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ynBb0LACv6hDWtLdC9X2FSMQ3YaY= 19.50KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\yPk5IBPl7ocJdYkBDPqrlyQXnuw= 14.41KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\yPL4aagczJG0TTsJKMKhWJU2evs= 28.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\yPRcB+cBS3MKxCGrABWctfxWwzM= 13.93KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\yR0jF2FUqJujYOfbhYPEmgh+gTRY= 1.27KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ysaPZ7WXkf2bQBoFLGJeph4TZfI= 7.06KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Yv7gRftQfcikjNcOcPq2FylidZHo= 21.90KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\yVe34CEHmcn+j6FJxh5XmQGWMAY= 273 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\yvJvYYmUCBvANCbrLtz6fZB2uC4= 19.49KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\yYfNJzEbFUrOQxJMRPzCW4rTN7s= 28.25KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Z+XnxKwPIItBKd55RwLkucArmoE= 13.32KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Z2FYBmqT2FoP6rCSL5T72FlPyz7ZyM= 17.21KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Z3XCV0R8yh6PslzzMBiUY2FzfDrc= 8.06KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\z5eu4SsQJnQ2Lauhn2F+LwGIS8Js= 800 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Zc7HNS0CWtm1LCC30Pi2mY9R9No= 33.96KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ZI1ZY4LrulgtILUCuB9CxpJV95g= 3.11KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Zl6yJRt7Sc+tuZZnT4GG7yZEEIo= 19.54KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\zLCZpKaspiBSVYszf6YacTwq2CQ= 22.67KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\zmAou2F2FYU8jiWOvdEJyd9vQgFA0= 12.82KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\zscUVDTZUcgycv5sdzI22FZYMxPE= 845 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ZtXTYL51oG9IBHGxpKdZTcJEzIc= 16.80KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\zTYKaEIOxt3iXZhJd23gsNmEzkw= 12.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ZZPV1QIxXuPc4P4xGFj87SpQrqM= 26.91KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MMBPlayer\RR.exe 81.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MMBPlayer\Tweak.dll 80.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsaE9.tmp\NSIS_Picasa.dll 49.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsf1B7.tmp\InstallOptions.dll 12.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsf1B7.tmp\ioSpecial.ini 556 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsf1B7.tmp\modern-header.bmp 9.52KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsf1B7.tmp\modern-wizard.bmp 25.87KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsiA.tmp\NSIS_Picasa.dll 49.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsv15.tmp\NSIS_Picasa.dll 49.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsy1B4.tmp\InstallOptions.dll 12.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsy1B4.tmp\ioSpecial.ini 793 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsy1B4.tmp\modern-header.bmp 9.52KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsy1B4.tmp\modern-wizard.bmp 25.87KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsy1B4.tmp\StartMenu.dll 6.50KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsy1B4.tmp\System.dll 9.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\PPT11.0\ShockwaveFlashObjects.exd 14.29KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aab\dirapi.dll 0.92MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aab\iml32.dll 0.38MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aab\msvcrt.dll 0.27MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aac\dirapi.dll 0.92MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aac\dirapi.mch 76.20KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aac\iml32.dll 0.38MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aac\msvcrt.dll 0.27MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aad\dirapi.dll 0.92MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aad\iml32.dll 0.38MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aad\msvcrt.dll 0.27MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aae\dirapi.dll 0.92MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aae\iml32.dll 0.38MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aae\msvcrt.dll 0.27MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER1.tmp.dir00\sysdata.xml 3.97KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER10.tmp.dir00\appcompat.txt 262 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER11.tmp.dir00\appcompat.txt 258 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER2.tmp.dir00\sysdata.xml 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER3.tmp.dir00\appcompat.txt 0.28MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER4.tmp.dir00\appcompat.txt 17.65KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER449f.dir00\iexplore.exe.hdmp 89.34KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER449f.dir00\iexplore.exe.mdmp 95.25KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER4da7.dir00\iexplore.exe.hdmp 0.22MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER4da7.dir00\iexplore.exe.mdmp 95.25KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER5.tmp.dir00\appcompat.txt 15.96KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WERB2.tmp.dir00\appcompat.txt 14.51KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Word8.0\MSForms.exd 0.16MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\_ZCTmp.Dir\_ZC000.TMP 75 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\corecomp.ini 63.97KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\{7142A4D0-3C3A-4425-A1D0-4E7BC0D3E903}\Bbrd1.bmp 0.54MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\{7142A4D0-3C3A-4425-A1D0-4E7BC0D3E903}\default.pal 1.14KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\{7142A4D0-3C3A-4425-A1D0-4E7BC0D3E903}\isrt.dll 0.36MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\{7142A4D0-3C3A-4425-A1D0-4E7BC0D3E903}\setup.inx 0.19MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\{7142A4D0-3C3A-4425-A1D0-4E7BC0D3E903}\StringTable-040c-French (Standard).ips 282 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\{7142A4D0-3C3A-4425-A1D0-4E7BC0D3E903}\_IsRes.dll 0.27MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\{7142A4D0-3C3A-4425-A1D0-4E7BC0D3E903}\_isuser.dll 0.16MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\~DEST\Numériser002.tif 0.91MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\~DF3BF8.tmp 16.00KB
C:\WINDOWS\MiniDump\Mini010905-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini012304-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini020605-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini020606-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini022305-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini022406-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini030106-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini030106-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini030906-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini031104-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini031106-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini031303-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini031806-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini031906-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini031906-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini031906-03.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini032106-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini032206-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini032303-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini032506-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini032706-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini032906-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini033006-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini033006-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini040305-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini040506-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini040906-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini041305-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini042704-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini050506-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini050506-02.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini050906-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini051203-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini051206-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini051804-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini052206-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini052206-02.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini052506-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini053005-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini060605-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini060705-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini060705-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini060905-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini061003-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini061405-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini062006-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini062205-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini062206-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini070106-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini070404-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini070506-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini070606-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini070606-02.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini070803-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini070903-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini070903-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini070906-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini071006-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini071006-02.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini071006-03.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini071103-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini071103-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini071203-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini071503-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini071603-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini071603-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini072003-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini072106-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini072106-02.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini072203-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini072203-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini072203-03.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini072203-04.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini072206-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini073106-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini073106-02.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini080306-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini082305-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini082405-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini090204-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini091205-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini091306-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini091504-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini091504-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini091505-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini091705-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini091904-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini092105-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini111305-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini112105-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini112305-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini112705-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini112803-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini113005-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120402-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120402-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120402-03.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120402-04.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120402-05.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120402-06.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120402-07.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120405-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini122005-01.dmp 64.00KB
C:\WINDOWS\system32\wbem\Logs\FrameWork.log 0.48MB
C:\WINDOWS\system32\wbem\Logs\mofcomp.log 26.97KB
C:\WINDOWS\system32\wbem\Logs\NTEVT.log 2 bytes
C:\WINDOWS\system32\wbem\Logs\replog.log 401 bytes
C:\WINDOWS\system32\wbem\Logs\setup.log 5.09KB
C:\WINDOWS\system32\wbem\Logs\wbemcore.log 1.06MB
C:\WINDOWS\system32\wbem\Logs\wbemess.log 34.91KB
C:\WINDOWS\system32\wbem\Logs\wbemprox.log 4.79KB
C:\WINDOWS\system32\wbem\Logs\WBEMSNMP.log 2 bytes
C:\WINDOWS\system32\wbem\Logs\WinMgmt.log 60.12KB
C:\WINDOWS\system32\wbem\Logs\wmiadap.log 11.41KB
C:\WINDOWS\system32\wbem\Logs\wmiprov.log 16.80KB
C:\WINDOWS\system32\wbem\Logs\wbemess.lo_ 64.02KB
C:\WINDOWS\system32\wbem\Logs\WinMgmt.lo_ 64.02KB
C:\WINDOWS\system32\wbem\Logs\wmiadap.lo_ 64.05KB
C:\WINDOWS\system32\wbem\Logs\wmiprov.lo_ 64.04KB
C:\WINDOWS\0.log 0 bytes
C:\WINDOWS\cmsetacl.log 200 bytes
C:\WINDOWS\COM+.log 3.00KB
C:\WINDOWS\comsetup.log 0.25MB
C:\WINDOWS\dasetup.log 58.32KB
C:\WINDOWS\DHCPUPG.LOG 178 bytes
C:\WINDOWS\Directx.log 0.26MB
C:\WINDOWS\DtcInstall.log 731 bytes
C:\WINDOWS\EventSystem.log 7.92KB
C:\WINDOWS\FaxSetup.log 0.73MB
C:\WINDOWS\GEARInstall.log 657 bytes
C:\WINDOWS\ie7_main.log 15.30KB
C:\WINDOWS\iis6.log 0.11MB
C:\WINDOWS\imsins.log 1.36KB
C:\WINDOWS\KB823559.log 25.69KB
C:\WINDOWS\KB828741.log 22.33KB
C:\WINDOWS\KB834707-IE6-20040929.115007.log 25.04KB
C:\WINDOWS\KB835732.log 37.26KB
C:\WINDOWS\KB842252.log 161 bytes
C:\WINDOWS\KB842773.log 6.12KB
C:\WINDOWS\KB873339.log 27.26KB
C:\WINDOWS\KB885250.log 29.48KB
C:\WINDOWS\KB885835.log 29.66KB
C:\WINDOWS\KB885836.log 28.69KB
C:\WINDOWS\KB885884.log 9.90KB
C:\WINDOWS\KB886185.log 12.41KB
C:\WINDOWS\KB887472.log 27.28KB
C:\WINDOWS\KB887742.log 27.86KB
C:\WINDOWS\KB888113.log 27.32KB
C:\WINDOWS\KB888302.log 19.64KB
C:\WINDOWS\KB890046.log 21.98KB
C:\WINDOWS\KB890859.log 18.57KB
C:\WINDOWS\KB891781.log 24.82KB
C:\WINDOWS\KB893756.log 29.46KB
C:\WINDOWS\KB893803v2.log 9.51KB
C:\WINDOWS\KB894391.log 18.39KB
C:\WINDOWS\KB896358.log 28.33KB
C:\WINDOWS\KB896422.log 29.85KB
C:\WINDOWS\KB896423.log 26.92KB
C:\WINDOWS\KB896424.log 29.54KB
C:\WINDOWS\KB896428.log 17.82KB
C:\WINDOWS\KB898458.log 17.21KB
C:\WINDOWS\KB898461.log 6.75KB
C:\WINDOWS\KB899587.log 30.70KB
C:\WINDOWS\KB899591.log 29.35KB
C:\WINDOWS\KB900485.log 11.83KB
C:\WINDOWS\KB900725.log 21.35KB
C:\WINDOWS\KB901017.log 29.04KB
C:\WINDOWS\KB901214.log 20.97KB
C:\WINDOWS\KB902400.log 29.91KB
C:\WINDOWS\KB904706.log 21.00KB
C:\WINDOWS\KB904942.log 10.45KB
C:\WINDOWS\KB905414.log 21.72KB
C:\WINDOWS\KB905749.log 19.02KB
C:\WINDOWS\KB905915.log 30.65KB
C:\WINDOWS\KB908519.log 16.18KB
C:\WINDOWS\KB908531.log 17.52KB
C:\WINDOWS\KB910437.log 21.69KB
C:\WINDOWS\KB911280.log 16.44KB
C:\WINDOWS\KB911562.log 16.76KB
C:\WINDOWS\KB911564.log 21.92KB
C:\WINDOWS\KB911565.log 26.10KB
C:\WINDOWS\KB911567.log 13.13KB
C:\WINDOWS\KB911927.log 29.50KB
C:\WINDOWS\KB912812.log 19.24KB
C:\WINDOWS\KB912919.log 19.01KB
C:\WINDOWS\KB913446.log 11.36KB
C:\WINDOWS\KB913580.log 12.20KB
C:\WINDOWS\KB914388.log 12.11KB
C:\WINDOWS\KB914389.log 12.53KB
C:\WINDOWS\KB914440.log 4.75KB
C:\WINDOWS\KB915865.log 8.26KB
C:\WINDOWS\KB916281.log 19.51KB
C:\WINDOWS\KB916595.log 10.33KB
C:\WINDOWS\KB917159.log 11.57KB
C:\WINDOWS\KB917344.log 17.50KB
C:\WINDOWS\KB917422.log 11.89KB
C:\WINDOWS\KB917734.log 14.84KB
C:\WINDOWS\KB917953.log 16.47KB
C:\WINDOWS\KB918439.log 16.82KB
C:\WINDOWS\KB918899.log 21.45KB
C:\WINDOWS\KB919007.log 14.13KB
C:\WINDOWS\KB920213.log 20.45KB
C:\WINDOWS\KB920214.log 19.16KB
C:\WINDOWS\KB920670.log 11.74KB
C:\WINDOWS\KB920683.log 12.28KB
C:\WINDOWS\KB920685.log 13.77KB
C:\WINDOWS\KB920872.log 16.44KB
C:\WINDOWS\KB921398.log 18.83KB
C:\WINDOWS\KB921883.log 11.99KB
C:\WINDOWS\KB922582.log 7.70KB
C:\WINDOWS\KB922616.log 18.36KB
C:\WINDOWS\KB922760.log 17.05KB
C:\WINDOWS\KB922819.log 11.93KB
C:\WINDOWS\KB923191.log 8.70KB
C:\WINDOWS\KB923414.log 11.30KB
C:\WINDOWS\KB923689.log 13.08KB
C:\WINDOWS\KB923694.log 11.94KB
C:\WINDOWS\KB923980.log 17.78KB
C:\WINDOWS\KB924191.log 12.17KB
C:\WINDOWS\KB924270.log 15.22KB
C:\WINDOWS\KB924496.log 11.23KB
C:\WINDOWS\KB925398.log 11.36KB
C:\WINDOWS\KB925454.log 19.23KB
C:\WINDOWS\KB925486.log 10.88KB
C:\WINDOWS\KB926255.log 11.20KB
C:\WINDOWS\msgsocm.log 37.68KB
C:\WINDOWS\msxmlcab.log 101 bytes
C:\WINDOWS\nsw.log 465 bytes
C:\WINDOWS\ntdtcsetup.log 0.15MB
C:\WINDOWS\ocgen.log 0.36MB
C:\WINDOWS\ocmsn.log 38.29KB
C:\WINDOWS\Q307274.log 574 bytes
C:\WINDOWS\Q308387.log 396 bytes
C:\WINDOWS\Q308402.log 622 bytes
C:\WINDOWS\Q308677.log 979 bytes
C:\WINDOWS\Q308678.log 1.35KB
C:\WINDOWS\Q315000.log 2.65KB
C:\WINDOWS\Q315403.log 2.86KB
C:\WINDOWS\Q316134.log 2.98KB
C:\WINDOWS\Q317277.log 839 bytes
C:\WINDOWS\Q321178.log 706 bytes
C:\WINDOWS\Q321178Uninst.log 0 bytes
C:\WINDOWS\Q323255.log 963 bytes
C:\WINDOWS\Q329048.log 654 bytes
C:\WINDOWS\Q329115.log 1.54KB
C:\WINDOWS\Q329170.log 14.90KB
C:\WINDOWS\Q329390.log 1.19KB
C:\WINDOWS\Q329441.log 24.80KB
C:\WINDOWS\Q329834.log 12.75KB
C:\WINDOWS\Q810577.log 21.55KB
C:\WINDOWS\Q810833.log 39.62KB
C:\WINDOWS\Q811630.log 18.40KB
C:\WINDOWS\Q817606.log 25.26KB
C:\WINDOWS\regopt.log 5.04KB
C:\WINDOWS\sessmgr.setup.log 2.30KB
C:\WINDOWS\setupact.log 0.20MB
C:\WINDOWS\setupapi.log 0.95MB
C:\WINDOWS\setuperr.log 0 bytes
C:\WINDOWS\spupdsvc.log 33.47KB
C:\WINDOWS\Sti_Trace.log 0 bytes
C:\WINDOWS\svcpack.log 0.42MB
C:\WINDOWS\tsoc.log 0.29MB
C:\WINDOWS\updspapi.log 41.37KB
C:\WINDOWS\VCDSDKInstall.log 216 bytes
C:\WINDOWS\vminst.log 2.00KB
C:\WINDOWS\WgaNotify.log 8.96KB
C:\WINDOWS\wiadebug.log 566 bytes
C:\WINDOWS\wiaservc.log 50 bytes
C:\WINDOWS\Windows Update.log 3.55KB
C:\WINDOWS\WindowsUpdate.log 1.17MB
C:\WINDOWS\wmsetup.log 97.22KB
C:\WINDOWS\wmsetup10.log 376 bytes
C:\WINDOWS\xpsp1hfm.log 27.77KB
C:\WINDOWS\Active Setup Log.BAK 5.42KB
C:\WINDOWS\imsins.BAK 1.36KB
C:\WINDOWS\Active Setup Log.txt 5.27KB
C:\WINDOWS\ntbtlog.txt 0.54MB
C:\WINDOWS\OEWABLog.txt 3.16KB
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\drwtsn32.log 31.2MB
C:\WINDOWS\Debug\blastcln.log 286 bytes
C:\WINDOWS\Debug\mrt.log 8.93KB
C:\WINDOWS\Debug\NetSetup.LOG 13.33KB
C:\WINDOWS\SchedLgU.Txt 31.81KB
C:\WINDOWS\security\logs\backup.log 3.59KB
C:\WINDOWS\security\logs\convert.log 3.89KB
C:\WINDOWS\security\logs\SceRoot.log 232 bytes
C:\WINDOWS\security\logs\scesetup.log 0.12MB
C:\WINDOWS\security\logs\scesrv.log 602 bytes
C:\WINDOWS\security\logs\update.log 8.13KB
C:\WINDOWS\security\logs\scecomp.old 2.42KB
C:\Documents and Settings\Luc\Local Settings\Application Data\Adobe\Acrobat\7.0\Cache\Search70\28a30a80632475260d5a17cdc2b42a0d.idx 21.33KB
C:\Documents and Settings\Luc\Local Settings\Application Data\Adobe\Acrobat\7.0\Cache\Search70\4e13169a4a1e4366f5dc35fe556d58f3.idx 45.38KB
C:\Documents and Settings\Luc\Application Data\Google\Local Search History\google%2Eweb.w 632 bytes
C:\Documents and Settings\Luc\Application Data\Apple Computer\QuickTime\QTPlayerSession.xml 1.57KB
C:\Documents and Settings\Luc\Local Settings\Application Data\Apple Computer\QuickTime\downloads\02\13\2d75acd5-278651a0-1e15c908-96a2e6f2.qtch 737 bytes
C:\Documents and Settings\Luc\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05\05\55b63271-0d748a2f-1ac63407-66422baa.qtch 737 bytes
C:\Documents and Settings\Luc\Local Settings\Application Data\Apple Computer\QuickTime\downloads\11\08\b8173400-e990980e-819877e4-fd180b5f.qtch 737 bytes
C:\Documents and Settings\Luc\Local Settings\Application Data\Apple Computer\QuickTime\downloads\13\15\dff4cbdc-883ebe1e-e86962a9-a004e0df.qtch 737 bytes
C:\Documents and Settings\Luc\Application Data\Microsoft\Office\Recent\Templates.lnk 761 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\a1.yimg.com\java.europe.yahoo.com\eu\any\last\inline5.swf\AGF241006last.sol 59 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\a1.yimg.com\java.europe.yahoo.com\eu\any\sonyvaio\300x250.swf\SKY.sol 38 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\absolujeux.com\13-battle-drift.swf\dbtest.sol 45 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\agame.com\mirror\flash\n\nobuyukiforces3.swf\ng3rd.sol 210 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\atdmt.com\ft525-1.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\atdmt.com\ft525-19.sol 61 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\atdmt.com\ft525-2.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\atdmt.com\ft525-3.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\clubpenguin.com\miniclip.swf\SaveGame.sol 76 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\cosmos.bcst.yahoo.com\vidPlayer.sol 1001 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\directtrack.com\abeneathintl10102006.sol 61 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\efixonline.com\Emerp\Events\flash_object.swf\user_data.sol 100 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\ev1.neodelight.com\turbospiritxt\turbospiritxt.swf\race2_league_0.sol 2.12KB
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\files.agame.com\games\flash\j\jumping_bananas.swf\JumpBananas.en.sol 373 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\files.agame.com\games\flash\r\rescue_mission.swf\scoremap.sol 641 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\files.agame.com\mirror\flash\h\heavymetalrider.swf\HMR_0.sol 352 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\files.agame.com\mirror\flash\s\stealth-hunter.swf\wonpwnSH2DP.sol 67 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\files.freeonlinegames.com\1158494488\games\subattack\subattack.swf\rescufo2.sol 354 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\firstadsolution.com\flow260506.sol 51 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\gamenextfr.oberon-media.com\oberon.mplay.webhost-0.sol 57 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\games.armorgames.com\games0015\territorywar.swf\TWAR.sol 897 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\iforex.com\Emerp\Events\flash_object.swf\user_data.sol 145 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\minicliprally\minicliprally.swf\MiniclipLoaderAd.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\minicliprally\minicliprally.swf\MiniclipRally.sol 312 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\nordicchill\nordicchill.swf\MiniclipLoaderAd.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\spaceescape\spaceescape.swf\MiniclipLoaderAd.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\spaceescape\spaceescape.swf\spaceescape.sol 234 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\sudokuoriginal\sudoku-original.swf\defaultPack.sol 15.71KB
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\sudokuoriginal\sudoku-original.swf\sudokuPacks.sol 93 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\wheelsofsalvation\drcarter.swf\MiniclipLoaderAd.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\miniclip.com\swfcontent\banners\fillerad.swf\location.sol 41 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\miniclip.com\swfcontent\banners\fillerad.swf\MiniclipFeaturedGameGlobal.sol 70 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\miniclip.com\swfcontent\push\gamepages.swf\MiniclipFeaturedGame.sol 64 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\miniclip.com\swfcontent\topgame.swf\MiniclipHomepageRotator.sol 84 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mochibot.com\com.mochibot.sol 100 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\msn.fr\MSN_MESSENGER.sol 66 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\nikefootball.nike.com\nikefootball\wc06shell\nf_shell.swf\www.nikefootball.com.sol 413 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\nikefootball.nike.com\skipintro5.sol 49 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\pagead2.googlesyndication.com\pagead\googleadplayer.swf\mediaPlayerUserSettings.sol 94 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\pixmania.com\pixsettings.sol 96 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\pixmania.com\pixsettings_fr.sol 99 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\prosieben.de\games_handy\onlinegames\yetisports\games\popup_game_part3\yetisports3t.jpg\yp3.sol 42 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\prosieben.de\games_handy\onlinegames\yetisports\games\popup_game_part4\yetisports4t.swf\yp3.sol 41 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\rangetachambre.com\swf\game_365.swf\defaultPack.sol 15.71KB
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\rangetachambre.com\swf\game_365.swf\sudokuPacks.sol 93 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\stat.radioblogclub.com\radio.blog\skins\default\player.swf\radioblogclub.sol 53 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\stat.radioblogclub.com\RbRestoSave.sol 138 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\us.i1.yimg.com\vidPlayer.sol 782 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\video.flashtalking.com\ft537-1.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\web.de\PF_LSOConnector.sol 56 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\web.de\v\mail\0\html_mail\sound\player.swf\PF_LSOConnector.sol 56 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.2.livejasmin.com\flash\freechat044.swf\jasminmember01.sol 84 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.cartoonnetwork.com\CN_users.sol 94 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.freeonlinegames.com\exgames\thelegendofrobinhood\thelegendofrobinhood.swf\RobinHood.sol 171 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.mesjeuxgratuits.com\hostileskies\hostileskies.swf\MiniclipLoaderAd.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.pixmania.com\dev\gui_web\shopping\flashAS\Bann_580_100.swf\TestMovie_Config_Info.sol 341 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.prosieben.at\games_handy\onlinegames\yetisports\games\popup_game_part6\yetisports6t.swf\yp6.sol 46 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.prosieben.de\games_handy\onlinegames\yetisports\games\popup_game_part5\yetisports5t.swf\yp5.sol 44 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.prosieben.de\games_handy\onlinegames\yetisports\games\popup_game_part7\yetisports7pro7.swf\yp7.sol 52 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.prosieben.de\music_cd\popstars_jetzt_oder_nie\popup_game\stagedive_t.swf\ypstage.sol 51 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.youtube.com\soundData.sol 58 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.zigiz.com\BonusTipRealLog.sol 120 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.zigiz.com\languageLog.sol 53 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.zigiz.com\promotorLog.sol 58 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.zigiz.com\tipPaymentLog.sol 46 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\zedo.com\dedu4002intl3082006.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#a1.yimg.com\settings.sol 81 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#absolujeux.com\settings.sol 84 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#agame.com\settings.sol 79 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#atdmt.com\settings.sol 79 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#clubpenguin.com\settings.sol 85 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cosmos.bcst.yahoo.com\settings.sol 91 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#directtrack.com\settings.sol 85 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#efixonline.com\settings.sol 84 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ev1.neodelight.com\settings.sol 88 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#files.agame.com\settings.sol 85 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#files.freeonlinegames.com\settings.sol 95 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#firstadsolution.com\settings.sol 89 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#gamenextfr.oberon-media.com\settings.sol 97 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#games.armorgames.com\settings.sol 90 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#iforex.com\settings.sol 80 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#local\settings.sol 75 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mesjeuxgratuits.com\settings.sol 89 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#miniclip.com\settings.sol 82 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mochibot.com\settings.sol 82 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#msn.fr\settings.sol 76 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#nikefootball.nike.com\settings.sol 91 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pagead2.googlesyndication.com\settings.sol 99 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pixmania.com\settings.sol 82 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#prosieben.de\settings.sol 82 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#rangetachambre.com\settings.sol 88 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#stat.radioblogclub.com\settings.sol 92 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#us.i1.yimg.com\settings.sol 84 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.flashtalking.com\settings.sol 92 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\uLhjKL823TGa2VcoGX5NiXueb0A= 831 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ulVXbKDsxuCfssRKZL0QUWosR54= 9.04KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Up0phJSWrmy+8fuQ2pNItjIwCwo= 6.67KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\uqCYg58TvXcTUZOR9fvem6QynNU= 1.22KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\uto6w2FPmk0t2F0l7Z6h5Czy5m01c= 14.39KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\uUXZVD6D79KojGvDmxUdiI20BOg= 362 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\UvPSsTBZu33ctEg2MKPP2FDV7gGE= 20.10KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\uz9onvQZdgjFowFmv6XevIkdq4k= 24.86KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\v12hSWciWW1zGba4vApJuLwBt2w= 6.19KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\V2FwzjttPE3YnOgAN4c7hgzmhmVI= 16.67KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\V6DusHL2FzoOmW6F9w48sZVv1dbk= 1.07KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\v87thb6v9JG+aAXWXzBHQz3yUVI= 22.99KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\V94RXmQPvwPUoUDN+rnO9Zreshk= 14.93KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\vdhK2M2VspAyjjWgcNDCvhUXQlk= 15.75KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\vFKB0PI45c4isEs0PI+CI5jtEvA= 2.84KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Vg+nqii7SuX7LsH7onNf2FRMBwK4= 5.50KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ViChm73JzVwfOjx8jfoTa6Ajg5Q= 24.75KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\vJik3yHG3OMSE94pMM1kzObpHF4= 12.82KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\VjNM7HVhQdItBdRI4U5xxQbUOr4= 2.43KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\vlag8nsEvPH752mm7uKTKiXSLos= 18.58KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Vmtq4V5rvOHPRDVk5oMnulwIgJ4= 22.14KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\vpekZew86Oz2Fh4L3gciZTvVSWJM= 525 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\VSRhHSUm1DJvoxmR8rabABEZNvY= 0.16MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\vvxIuSkMhzPjZYQQcr2CEmzCjag= 14.04KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\vZS6BxM5iCGNn+t2Fo2FawEMBWCzA= 19.81KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\W8SzziyzzD3dEhVGb1uCF52mTMM= 21.64KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wabrdh+BruiQ2g7CgJrri9dZnyk= 14.41KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wEjpLQ0wLEE7f8Es4QcLXlmaMso= 12.77KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Wfcyv4jJDtidaNhPmlwQWVcVfrE= 19.70KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wfevKzXmbmR0z5Ri4iBwAkMVrEw= 24.60KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\WFgs075a+J4BoWohxzPUzVGwbk8= 18.71KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wHnAPzcUqyoPRNw46hJ9w292tUk= 6.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Wic+yXzzbzac39fd8BJWWk0dQbE= 20.83KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\WLzcDuEQQqXTzQBbSeCPP043qcc= 17.83KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wnGeNHdF2F4mipXr2QuX5DR4uHsM= 14.11KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wnjnnC6YqQRNcIV6pXyhqKQ2F9c0= 10.78KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wOIr06k+FUDsvO4OjSBCn2Xkkuc= 1.17KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\WPr5X9wC8v2FZrsrd4ka+qOfdcmE= 897 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Wrsb3qUMb+3M1qYIqJX2F1sCLLHs= 20.01KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wsCuBhxh2UpETSOLCRErqqU53Nc= 21.20KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\wtiwA9x8yVk4VwXtFZls5VoAHCc= 19.99KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\WzArBDc2F2F2FCxZr2FsQx7E2Fe4z1lk= 29.84KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\x06ALY6N3aTDo44vuVZkDRPO9Pk= 20.94KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\x58G+tpm0iqBAE9vGExNsrDIOPg= 16.87KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\XEIORcfiRwImnq2F9GgtSri0hQIE= 14.62KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\XgCri0RjXo6XxkqFiEbbgJLaujI= 19.25KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\xh+d4Aa0ds6wZxvg1wBu5JaIDxw= 7.13KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\xIMbiywjZzRSD8KQyBrP6gnZOhI= 25.34KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\XLq3AhCuW8UiuzAoNLnU1wnFz0g= 7.14KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\XLTnnGAQavT3TOcQR4UFySIO+qQ= 3.53KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\XOKyxzxtzm4rxFCpQCBn6UdghkQ= 14.99KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\xp9emxgBkP9uhebtUJAuI4Wpffc= 16.20KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\xQrvFt2kVf2FrOnIu5Z02LLt9kDo= 5.93KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Xs9ifs63rX4WNFs9SBX1UXX6whw= 17.75KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\xSikZuqpVeuiKFZpHoIjeoFzYKo= 49.67KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Xvn2F7qZiYP8PPPfc24cb+yCs2nw= 17.40KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\xZ9sO+kEsEC2FlgUbNnFEArUvSLI= 3.29KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Y4l6TEIHKapCqpqGycc19U2FKZIo= 21.82KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Yfu8OFXKa0OqWgbpVfPO2YmvBUY= 21.83KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ygEli+a2FH3kZW2OICwxyTQmOjRw= 47.41KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\YIqy+YHyKW3aUFjqZfBLulPui4A= 23.29KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\YkXzvA7hO3UK2w52IveOfMij3vA= 18.93KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\YL8guPZTeUN0GfjZ4aYfd0rGUeE= 2.18KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ynBb0LACv6hDWtLdC9X2FSMQ3YaY= 19.50KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\yPk5IBPl7ocJdYkBDPqrlyQXnuw= 14.41KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\yPL4aagczJG0TTsJKMKhWJU2evs= 28.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\yPRcB+cBS3MKxCGrABWctfxWwzM= 13.93KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\yR0jF2FUqJujYOfbhYPEmgh+gTRY= 1.27KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ysaPZ7WXkf2bQBoFLGJeph4TZfI= 7.06KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Yv7gRftQfcikjNcOcPq2FylidZHo= 21.90KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\yVe34CEHmcn+j6FJxh5XmQGWMAY= 273 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\yvJvYYmUCBvANCbrLtz6fZB2uC4= 19.49KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\yYfNJzEbFUrOQxJMRPzCW4rTN7s= 28.25KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Z+XnxKwPIItBKd55RwLkucArmoE= 13.32KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Z2FYBmqT2FoP6rCSL5T72FlPyz7ZyM= 17.21KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Z3XCV0R8yh6PslzzMBiUY2FzfDrc= 8.06KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\z5eu4SsQJnQ2Lauhn2F+LwGIS8Js= 800 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Zc7HNS0CWtm1LCC30Pi2mY9R9No= 33.96KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ZI1ZY4LrulgtILUCuB9CxpJV95g= 3.11KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\Zl6yJRt7Sc+tuZZnT4GG7yZEEIo= 19.54KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\zLCZpKaspiBSVYszf6YacTwq2CQ= 22.67KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\zmAou2F2FYU8jiWOvdEJyd9vQgFA0= 12.82KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\zscUVDTZUcgycv5sdzI22FZYMxPE= 845 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ZtXTYL51oG9IBHGxpKdZTcJEzIc= 16.80KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\zTYKaEIOxt3iXZhJd23gsNmEzkw= 12.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MessengerCache\ZZPV1QIxXuPc4P4xGFj87SpQrqM= 26.91KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MMBPlayer\RR.exe 81.38KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\MMBPlayer\Tweak.dll 80.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsaE9.tmp\NSIS_Picasa.dll 49.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsf1B7.tmp\InstallOptions.dll 12.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsf1B7.tmp\ioSpecial.ini 556 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsf1B7.tmp\modern-header.bmp 9.52KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsf1B7.tmp\modern-wizard.bmp 25.87KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsiA.tmp\NSIS_Picasa.dll 49.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsv15.tmp\NSIS_Picasa.dll 49.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsy1B4.tmp\InstallOptions.dll 12.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsy1B4.tmp\ioSpecial.ini 793 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsy1B4.tmp\modern-header.bmp 9.52KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsy1B4.tmp\modern-wizard.bmp 25.87KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsy1B4.tmp\StartMenu.dll 6.50KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\nsy1B4.tmp\System.dll 9.00KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\PPT11.0\ShockwaveFlashObjects.exd 14.29KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aab\dirapi.dll 0.92MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aab\iml32.dll 0.38MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aab\msvcrt.dll 0.27MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aac\dirapi.dll 0.92MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aac\dirapi.mch 76.20KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aac\iml32.dll 0.38MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aac\msvcrt.dll 0.27MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aad\dirapi.dll 0.92MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aad\iml32.dll 0.38MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aad\msvcrt.dll 0.27MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aae\dirapi.dll 0.92MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aae\iml32.dll 0.38MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\TempFolder.aae\msvcrt.dll 0.27MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER1.tmp.dir00\sysdata.xml 3.97KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER10.tmp.dir00\appcompat.txt 262 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER11.tmp.dir00\appcompat.txt 258 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER2.tmp.dir00\sysdata.xml 0 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER3.tmp.dir00\appcompat.txt 0.28MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER4.tmp.dir00\appcompat.txt 17.65KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER449f.dir00\iexplore.exe.hdmp 89.34KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER449f.dir00\iexplore.exe.mdmp 95.25KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER4da7.dir00\iexplore.exe.hdmp 0.22MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER4da7.dir00\iexplore.exe.mdmp 95.25KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WER5.tmp.dir00\appcompat.txt 15.96KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\WERB2.tmp.dir00\appcompat.txt 14.51KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\Word8.0\MSForms.exd 0.16MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\_ZCTmp.Dir\_ZC000.TMP 75 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\corecomp.ini 63.97KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\{7142A4D0-3C3A-4425-A1D0-4E7BC0D3E903}\Bbrd1.bmp 0.54MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\{7142A4D0-3C3A-4425-A1D0-4E7BC0D3E903}\default.pal 1.14KB
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\{7142A4D0-3C3A-4425-A1D0-4E7BC0D3E903}\isrt.dll 0.36MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\{7142A4D0-3C3A-4425-A1D0-4E7BC0D3E903}\setup.inx 0.19MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\{7142A4D0-3C3A-4425-A1D0-4E7BC0D3E903}\StringTable-040c-French (Standard).ips 282 bytes
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\{7142A4D0-3C3A-4425-A1D0-4E7BC0D3E903}\_IsRes.dll 0.27MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\{FD4CD790-F07B-478E-ABF1-B958046B1C45}\{7142A4D0-3C3A-4425-A1D0-4E7BC0D3E903}\_isuser.dll 0.16MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\~DEST\Numériser002.tif 0.91MB
C:\DOCUME~1\Luc\LOCALS~1\Temp\~DF3BF8.tmp 16.00KB
C:\WINDOWS\MiniDump\Mini010905-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini012304-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini020605-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini020606-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini022305-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini022406-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini030106-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini030106-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini030906-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini031104-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini031106-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini031303-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini031806-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini031906-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini031906-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini031906-03.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini032106-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini032206-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini032303-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini032506-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini032706-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini032906-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini033006-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini033006-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini040305-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini040506-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini040906-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini041305-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini042704-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini050506-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini050506-02.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini050906-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini051203-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini051206-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini051804-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini052206-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini052206-02.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini052506-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini053005-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini060605-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini060705-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini060705-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini060905-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini061003-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini061405-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini062006-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini062205-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini062206-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini070106-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini070404-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini070506-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini070606-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini070606-02.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini070803-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini070903-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini070903-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini070906-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini071006-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini071006-02.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini071006-03.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini071103-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini071103-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini071203-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini071503-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini071603-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini071603-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini072003-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini072106-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini072106-02.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini072203-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini072203-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini072203-03.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini072203-04.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini072206-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini073106-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini073106-02.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini080306-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini082305-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini082405-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini090204-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini091205-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini091306-01.dmp 88.00KB
C:\WINDOWS\MiniDump\Mini091504-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini091504-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini091505-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini091705-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini091904-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini092105-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini111305-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini112105-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini112305-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini112705-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini112803-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini113005-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120402-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120402-02.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120402-03.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120402-04.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120402-05.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120402-06.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120402-07.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini120405-01.dmp 64.00KB
C:\WINDOWS\MiniDump\Mini122005-01.dmp 64.00KB
C:\WINDOWS\system32\wbem\Logs\FrameWork.log 0.48MB
C:\WINDOWS\system32\wbem\Logs\mofcomp.log 26.97KB
C:\WINDOWS\system32\wbem\Logs\NTEVT.log 2 bytes
C:\WINDOWS\system32\wbem\Logs\replog.log 401 bytes
C:\WINDOWS\system32\wbem\Logs\setup.log 5.09KB
C:\WINDOWS\system32\wbem\Logs\wbemcore.log 1.06MB
C:\WINDOWS\system32\wbem\Logs\wbemess.log 34.91KB
C:\WINDOWS\system32\wbem\Logs\wbemprox.log 4.79KB
C:\WINDOWS\system32\wbem\Logs\WBEMSNMP.log 2 bytes
C:\WINDOWS\system32\wbem\Logs\WinMgmt.log 60.12KB
C:\WINDOWS\system32\wbem\Logs\wmiadap.log 11.41KB
C:\WINDOWS\system32\wbem\Logs\wmiprov.log 16.80KB
C:\WINDOWS\system32\wbem\Logs\wbemess.lo_ 64.02KB
C:\WINDOWS\system32\wbem\Logs\WinMgmt.lo_ 64.02KB
C:\WINDOWS\system32\wbem\Logs\wmiadap.lo_ 64.05KB
C:\WINDOWS\system32\wbem\Logs\wmiprov.lo_ 64.04KB
C:\WINDOWS\0.log 0 bytes
C:\WINDOWS\cmsetacl.log 200 bytes
C:\WINDOWS\COM+.log 3.00KB
C:\WINDOWS\comsetup.log 0.25MB
C:\WINDOWS\dasetup.log 58.32KB
C:\WINDOWS\DHCPUPG.LOG 178 bytes
C:\WINDOWS\Directx.log 0.26MB
C:\WINDOWS\DtcInstall.log 731 bytes
C:\WINDOWS\EventSystem.log 7.92KB
C:\WINDOWS\FaxSetup.log 0.73MB
C:\WINDOWS\GEARInstall.log 657 bytes
C:\WINDOWS\ie7_main.log 15.30KB
C:\WINDOWS\iis6.log 0.11MB
C:\WINDOWS\imsins.log 1.36KB
C:\WINDOWS\KB823559.log 25.69KB
C:\WINDOWS\KB828741.log 22.33KB
C:\WINDOWS\KB834707-IE6-20040929.115007.log 25.04KB
C:\WINDOWS\KB835732.log 37.26KB
C:\WINDOWS\KB842252.log 161 bytes
C:\WINDOWS\KB842773.log 6.12KB
C:\WINDOWS\KB873339.log 27.26KB
C:\WINDOWS\KB885250.log 29.48KB
C:\WINDOWS\KB885835.log 29.66KB
C:\WINDOWS\KB885836.log 28.69KB
C:\WINDOWS\KB885884.log 9.90KB
C:\WINDOWS\KB886185.log 12.41KB
C:\WINDOWS\KB887472.log 27.28KB
C:\WINDOWS\KB887742.log 27.86KB
C:\WINDOWS\KB888113.log 27.32KB
C:\WINDOWS\KB888302.log 19.64KB
C:\WINDOWS\KB890046.log 21.98KB
C:\WINDOWS\KB890859.log 18.57KB
C:\WINDOWS\KB891781.log 24.82KB
C:\WINDOWS\KB893756.log 29.46KB
C:\WINDOWS\KB893803v2.log 9.51KB
C:\WINDOWS\KB894391.log 18.39KB
C:\WINDOWS\KB896358.log 28.33KB
C:\WINDOWS\KB896422.log 29.85KB
C:\WINDOWS\KB896423.log 26.92KB
C:\WINDOWS\KB896424.log 29.54KB
C:\WINDOWS\KB896428.log 17.82KB
C:\WINDOWS\KB898458.log 17.21KB
C:\WINDOWS\KB898461.log 6.75KB
C:\WINDOWS\KB899587.log 30.70KB
C:\WINDOWS\KB899591.log 29.35KB
C:\WINDOWS\KB900485.log 11.83KB
C:\WINDOWS\KB900725.log 21.35KB
C:\WINDOWS\KB901017.log 29.04KB
C:\WINDOWS\KB901214.log 20.97KB
C:\WINDOWS\KB902400.log 29.91KB
C:\WINDOWS\KB904706.log 21.00KB
C:\WINDOWS\KB904942.log 10.45KB
C:\WINDOWS\KB905414.log 21.72KB
C:\WINDOWS\KB905749.log 19.02KB
C:\WINDOWS\KB905915.log 30.65KB
C:\WINDOWS\KB908519.log 16.18KB
C:\WINDOWS\KB908531.log 17.52KB
C:\WINDOWS\KB910437.log 21.69KB
C:\WINDOWS\KB911280.log 16.44KB
C:\WINDOWS\KB911562.log 16.76KB
C:\WINDOWS\KB911564.log 21.92KB
C:\WINDOWS\KB911565.log 26.10KB
C:\WINDOWS\KB911567.log 13.13KB
C:\WINDOWS\KB911927.log 29.50KB
C:\WINDOWS\KB912812.log 19.24KB
C:\WINDOWS\KB912919.log 19.01KB
C:\WINDOWS\KB913446.log 11.36KB
C:\WINDOWS\KB913580.log 12.20KB
C:\WINDOWS\KB914388.log 12.11KB
C:\WINDOWS\KB914389.log 12.53KB
C:\WINDOWS\KB914440.log 4.75KB
C:\WINDOWS\KB915865.log 8.26KB
C:\WINDOWS\KB916281.log 19.51KB
C:\WINDOWS\KB916595.log 10.33KB
C:\WINDOWS\KB917159.log 11.57KB
C:\WINDOWS\KB917344.log 17.50KB
C:\WINDOWS\KB917422.log 11.89KB
C:\WINDOWS\KB917734.log 14.84KB
C:\WINDOWS\KB917953.log 16.47KB
C:\WINDOWS\KB918439.log 16.82KB
C:\WINDOWS\KB918899.log 21.45KB
C:\WINDOWS\KB919007.log 14.13KB
C:\WINDOWS\KB920213.log 20.45KB
C:\WINDOWS\KB920214.log 19.16KB
C:\WINDOWS\KB920670.log 11.74KB
C:\WINDOWS\KB920683.log 12.28KB
C:\WINDOWS\KB920685.log 13.77KB
C:\WINDOWS\KB920872.log 16.44KB
C:\WINDOWS\KB921398.log 18.83KB
C:\WINDOWS\KB921883.log 11.99KB
C:\WINDOWS\KB922582.log 7.70KB
C:\WINDOWS\KB922616.log 18.36KB
C:\WINDOWS\KB922760.log 17.05KB
C:\WINDOWS\KB922819.log 11.93KB
C:\WINDOWS\KB923191.log 8.70KB
C:\WINDOWS\KB923414.log 11.30KB
C:\WINDOWS\KB923689.log 13.08KB
C:\WINDOWS\KB923694.log 11.94KB
C:\WINDOWS\KB923980.log 17.78KB
C:\WINDOWS\KB924191.log 12.17KB
C:\WINDOWS\KB924270.log 15.22KB
C:\WINDOWS\KB924496.log 11.23KB
C:\WINDOWS\KB925398.log 11.36KB
C:\WINDOWS\KB925454.log 19.23KB
C:\WINDOWS\KB925486.log 10.88KB
C:\WINDOWS\KB926255.log 11.20KB
C:\WINDOWS\msgsocm.log 37.68KB
C:\WINDOWS\msxmlcab.log 101 bytes
C:\WINDOWS\nsw.log 465 bytes
C:\WINDOWS\ntdtcsetup.log 0.15MB
C:\WINDOWS\ocgen.log 0.36MB
C:\WINDOWS\ocmsn.log 38.29KB
C:\WINDOWS\Q307274.log 574 bytes
C:\WINDOWS\Q308387.log 396 bytes
C:\WINDOWS\Q308402.log 622 bytes
C:\WINDOWS\Q308677.log 979 bytes
C:\WINDOWS\Q308678.log 1.35KB
C:\WINDOWS\Q315000.log 2.65KB
C:\WINDOWS\Q315403.log 2.86KB
C:\WINDOWS\Q316134.log 2.98KB
C:\WINDOWS\Q317277.log 839 bytes
C:\WINDOWS\Q321178.log 706 bytes
C:\WINDOWS\Q321178Uninst.log 0 bytes
C:\WINDOWS\Q323255.log 963 bytes
C:\WINDOWS\Q329048.log 654 bytes
C:\WINDOWS\Q329115.log 1.54KB
C:\WINDOWS\Q329170.log 14.90KB
C:\WINDOWS\Q329390.log 1.19KB
C:\WINDOWS\Q329441.log 24.80KB
C:\WINDOWS\Q329834.log 12.75KB
C:\WINDOWS\Q810577.log 21.55KB
C:\WINDOWS\Q810833.log 39.62KB
C:\WINDOWS\Q811630.log 18.40KB
C:\WINDOWS\Q817606.log 25.26KB
C:\WINDOWS\regopt.log 5.04KB
C:\WINDOWS\sessmgr.setup.log 2.30KB
C:\WINDOWS\setupact.log 0.20MB
C:\WINDOWS\setupapi.log 0.95MB
C:\WINDOWS\setuperr.log 0 bytes
C:\WINDOWS\spupdsvc.log 33.47KB
C:\WINDOWS\Sti_Trace.log 0 bytes
C:\WINDOWS\svcpack.log 0.42MB
C:\WINDOWS\tsoc.log 0.29MB
C:\WINDOWS\updspapi.log 41.37KB
C:\WINDOWS\VCDSDKInstall.log 216 bytes
C:\WINDOWS\vminst.log 2.00KB
C:\WINDOWS\WgaNotify.log 8.96KB
C:\WINDOWS\wiadebug.log 566 bytes
C:\WINDOWS\wiaservc.log 50 bytes
C:\WINDOWS\Windows Update.log 3.55KB
C:\WINDOWS\WindowsUpdate.log 1.17MB
C:\WINDOWS\wmsetup.log 97.22KB
C:\WINDOWS\wmsetup10.log 376 bytes
C:\WINDOWS\xpsp1hfm.log 27.77KB
C:\WINDOWS\Active Setup Log.BAK 5.42KB
C:\WINDOWS\imsins.BAK 1.36KB
C:\WINDOWS\Active Setup Log.txt 5.27KB
C:\WINDOWS\ntbtlog.txt 0.54MB
C:\WINDOWS\OEWABLog.txt 3.16KB
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\drwtsn32.log 31.2MB
C:\WINDOWS\Debug\blastcln.log 286 bytes
C:\WINDOWS\Debug\mrt.log 8.93KB
C:\WINDOWS\Debug\NetSetup.LOG 13.33KB
C:\WINDOWS\SchedLgU.Txt 31.81KB
C:\WINDOWS\security\logs\backup.log 3.59KB
C:\WINDOWS\security\logs\convert.log 3.89KB
C:\WINDOWS\security\logs\SceRoot.log 232 bytes
C:\WINDOWS\security\logs\scesetup.log 0.12MB
C:\WINDOWS\security\logs\scesrv.log 602 bytes
C:\WINDOWS\security\logs\update.log 8.13KB
C:\WINDOWS\security\logs\scecomp.old 2.42KB
C:\Documents and Settings\Luc\Local Settings\Application Data\Adobe\Acrobat\7.0\Cache\Search70\28a30a80632475260d5a17cdc2b42a0d.idx 21.33KB
C:\Documents and Settings\Luc\Local Settings\Application Data\Adobe\Acrobat\7.0\Cache\Search70\4e13169a4a1e4366f5dc35fe556d58f3.idx 45.38KB
C:\Documents and Settings\Luc\Application Data\Google\Local Search History\google%2Eweb.w 632 bytes
C:\Documents and Settings\Luc\Application Data\Apple Computer\QuickTime\QTPlayerSession.xml 1.57KB
C:\Documents and Settings\Luc\Local Settings\Application Data\Apple Computer\QuickTime\downloads\02\13\2d75acd5-278651a0-1e15c908-96a2e6f2.qtch 737 bytes
C:\Documents and Settings\Luc\Local Settings\Application Data\Apple Computer\QuickTime\downloads\05\05\55b63271-0d748a2f-1ac63407-66422baa.qtch 737 bytes
C:\Documents and Settings\Luc\Local Settings\Application Data\Apple Computer\QuickTime\downloads\11\08\b8173400-e990980e-819877e4-fd180b5f.qtch 737 bytes
C:\Documents and Settings\Luc\Local Settings\Application Data\Apple Computer\QuickTime\downloads\13\15\dff4cbdc-883ebe1e-e86962a9-a004e0df.qtch 737 bytes
C:\Documents and Settings\Luc\Application Data\Microsoft\Office\Recent\Templates.lnk 761 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\a1.yimg.com\java.europe.yahoo.com\eu\any\last\inline5.swf\AGF241006last.sol 59 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\a1.yimg.com\java.europe.yahoo.com\eu\any\sonyvaio\300x250.swf\SKY.sol 38 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\absolujeux.com\13-battle-drift.swf\dbtest.sol 45 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\agame.com\mirror\flash\n\nobuyukiforces3.swf\ng3rd.sol 210 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\atdmt.com\ft525-1.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\atdmt.com\ft525-19.sol 61 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\atdmt.com\ft525-2.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\atdmt.com\ft525-3.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\clubpenguin.com\miniclip.swf\SaveGame.sol 76 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\cosmos.bcst.yahoo.com\vidPlayer.sol 1001 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\directtrack.com\abeneathintl10102006.sol 61 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\efixonline.com\Emerp\Events\flash_object.swf\user_data.sol 100 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\ev1.neodelight.com\turbospiritxt\turbospiritxt.swf\race2_league_0.sol 2.12KB
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\files.agame.com\games\flash\j\jumping_bananas.swf\JumpBananas.en.sol 373 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\files.agame.com\games\flash\r\rescue_mission.swf\scoremap.sol 641 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\files.agame.com\mirror\flash\h\heavymetalrider.swf\HMR_0.sol 352 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\files.agame.com\mirror\flash\s\stealth-hunter.swf\wonpwnSH2DP.sol 67 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\files.freeonlinegames.com\1158494488\games\subattack\subattack.swf\rescufo2.sol 354 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\firstadsolution.com\flow260506.sol 51 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\gamenextfr.oberon-media.com\oberon.mplay.webhost-0.sol 57 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\games.armorgames.com\games0015\territorywar.swf\TWAR.sol 897 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\iforex.com\Emerp\Events\flash_object.swf\user_data.sol 145 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\minicliprally\minicliprally.swf\MiniclipLoaderAd.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\minicliprally\minicliprally.swf\MiniclipRally.sol 312 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\nordicchill\nordicchill.swf\MiniclipLoaderAd.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\spaceescape\spaceescape.swf\MiniclipLoaderAd.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\spaceescape\spaceescape.swf\spaceescape.sol 234 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\sudokuoriginal\sudoku-original.swf\defaultPack.sol 15.71KB
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\sudokuoriginal\sudoku-original.swf\sudokuPacks.sol 93 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mesjeuxgratuits.com\wheelsofsalvation\drcarter.swf\MiniclipLoaderAd.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\miniclip.com\swfcontent\banners\fillerad.swf\location.sol 41 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\miniclip.com\swfcontent\banners\fillerad.swf\MiniclipFeaturedGameGlobal.sol 70 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\miniclip.com\swfcontent\push\gamepages.swf\MiniclipFeaturedGame.sol 64 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\miniclip.com\swfcontent\topgame.swf\MiniclipHomepageRotator.sol 84 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\mochibot.com\com.mochibot.sol 100 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\msn.fr\MSN_MESSENGER.sol 66 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\nikefootball.nike.com\nikefootball\wc06shell\nf_shell.swf\www.nikefootball.com.sol 413 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\nikefootball.nike.com\skipintro5.sol 49 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\pagead2.googlesyndication.com\pagead\googleadplayer.swf\mediaPlayerUserSettings.sol 94 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\pixmania.com\pixsettings.sol 96 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\pixmania.com\pixsettings_fr.sol 99 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\prosieben.de\games_handy\onlinegames\yetisports\games\popup_game_part3\yetisports3t.jpg\yp3.sol 42 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\prosieben.de\games_handy\onlinegames\yetisports\games\popup_game_part4\yetisports4t.swf\yp3.sol 41 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\rangetachambre.com\swf\game_365.swf\defaultPack.sol 15.71KB
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\rangetachambre.com\swf\game_365.swf\sudokuPacks.sol 93 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\stat.radioblogclub.com\radio.blog\skins\default\player.swf\radioblogclub.sol 53 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\stat.radioblogclub.com\RbRestoSave.sol 138 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\us.i1.yimg.com\vidPlayer.sol 782 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\video.flashtalking.com\ft537-1.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\web.de\PF_LSOConnector.sol 56 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\web.de\v\mail\0\html_mail\sound\player.swf\PF_LSOConnector.sol 56 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.2.livejasmin.com\flash\freechat044.swf\jasminmember01.sol 84 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.cartoonnetwork.com\CN_users.sol 94 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.freeonlinegames.com\exgames\thelegendofrobinhood\thelegendofrobinhood.swf\RobinHood.sol 171 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.mesjeuxgratuits.com\hostileskies\hostileskies.swf\MiniclipLoaderAd.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.pixmania.com\dev\gui_web\shopping\flashAS\Bann_580_100.swf\TestMovie_Config_Info.sol 341 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.prosieben.at\games_handy\onlinegames\yetisports\games\popup_game_part6\yetisports6t.swf\yp6.sol 46 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.prosieben.de\games_handy\onlinegames\yetisports\games\popup_game_part5\yetisports5t.swf\yp5.sol 44 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.prosieben.de\games_handy\onlinegames\yetisports\games\popup_game_part7\yetisports7pro7.swf\yp7.sol 52 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.prosieben.de\music_cd\popstars_jetzt_oder_nie\popup_game\stagedive_t.swf\ypstage.sol 51 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.youtube.com\soundData.sol 58 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.zigiz.com\BonusTipRealLog.sol 120 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.zigiz.com\languageLog.sol 53 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.zigiz.com\promotorLog.sol 58 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\www.zigiz.com\tipPaymentLog.sol 46 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\#SharedObjects\LVKWMWHH\zedo.com\dedu4002intl3082006.sol 60 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#a1.yimg.com\settings.sol 81 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#absolujeux.com\settings.sol 84 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#agame.com\settings.sol 79 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#atdmt.com\settings.sol 79 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#clubpenguin.com\settings.sol 85 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cosmos.bcst.yahoo.com\settings.sol 91 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#directtrack.com\settings.sol 85 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#efixonline.com\settings.sol 84 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ev1.neodelight.com\settings.sol 88 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#files.agame.com\settings.sol 85 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#files.freeonlinegames.com\settings.sol 95 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#firstadsolution.com\settings.sol 89 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#gamenextfr.oberon-media.com\settings.sol 97 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#games.armorgames.com\settings.sol 90 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#iforex.com\settings.sol 80 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#local\settings.sol 75 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mesjeuxgratuits.com\settings.sol 89 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#miniclip.com\settings.sol 82 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mochibot.com\settings.sol 82 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#msn.fr\settings.sol 76 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#nikefootball.nike.com\settings.sol 91 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pagead2.googlesyndication.com\settings.sol 99 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pixmania.com\settings.sol 82 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#prosieben.de\settings.sol 82 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#rangetachambre.com\settings.sol 88 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#stat.radioblogclub.com\settings.sol 92 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#us.i1.yimg.com\settings.sol 84 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.flashtalking.com\settings.sol 92 bytes
C:\Documents and Settings\Luc\Application Data\Macromedia\Flash Player\
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Desktop\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {85BE3304-A5CA-F23E-98FE-82FA3BA93B97} - C:\WINDOWS\system32\fzgmsup.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKCU\..\Run: [Sra] "C:\WINDOWS\system32\YSTEM3~1\attrib.exe" -vt tzt
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.libertysurf.fr
O17 - HKLM\System\CCS\Services\Tcpip\..\{A09E6E97-F54C-40EA-949D-826497F00F81}: NameServer = 192.168.0.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Documents and Settings\Anne\My Documents\iPod\bin\iPodService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
Apparently the advertising windows have disappeared but I'm not sure about anything since I didn't have time to stay online for long.
Thank you for everything.
Best regards
Luc
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Desktop\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {85BE3304-A5CA-F23E-98FE-82FA3BA93B97} - C:\WINDOWS\system32\fzgmsup.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKCU\..\Run: [Sra] "C:\WINDOWS\system32\YSTEM3~1\attrib.exe" -vt tzt
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.libertysurf.fr
O17 - HKLM\System\CCS\Services\Tcpip\..\{A09E6E97-F54C-40EA-949D-826497F00F81}: NameServer = 192.168.0.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Documents and Settings\Anne\My Documents\iPod\bin\iPodService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
Apparently the advertising windows have disappeared but I'm not sure about anything since I didn't have time to stay online for long.
Thank you for everything.
Best regards
Luc
There's still some stuff, but with your log cut in half
I'll come back
See you later
--
The wise man doesn't play "leapfrog" with a unicorn... ...
I'll come back
See you later
--
The wise man doesn't play "leapfrog" with a unicorn... ...
I would have liked you to respond to this
By the way, did you buy Norton ???? ==> sieve
You should change it...
And your firewall???--
Redo the log correctly
thanks
See you later
--
The wise man does not play "jumping over sheep" with a unicorn... ...
By the way, did you buy Norton ???? ==> sieve
You should change it...
And your firewall???--
Redo the log correctly
thanks
See you later
--
The wise man does not play "jumping over sheep" with a unicorn... ...
Hello
I have a Windows firewall, maybe not the most effective...
I didn’t buy Norton for that precise reason!
Thank you very much, by the way, because I just noticed today that an error message that popped up when I started my session has also disappeared, probably thanks to all the steps you asked me to follow...
As for the log, I would like more details because I didn’t quite understand which program to start it with (I've never had so many antivirus programs and the like on my computer and I'm a bit lost!)...
Best regards
Luc
I have a Windows firewall, maybe not the most effective...
I didn’t buy Norton for that precise reason!
Thank you very much, by the way, because I just noticed today that an error message that popped up when I started my session has also disappeared, probably thanks to all the steps you asked me to follow...
As for the log, I would like more details because I didn’t quite understand which program to start it with (I've never had so many antivirus programs and the like on my computer and I'm a bit lost!)...
Best regards
Luc
Hello
First
Golden Rule
1 antivirus and 1 firewall (otherwise conflict)
In my opinion, you should get rid of Norton and install Avast
free antivirus
download the free version of Avast
You can download Avast from the following site
https://www.avast.com/free-antivirus-download
Tutorial ->
http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/questions-avast-sujet_176199_1.htm
For the firewall, Windows is crap, so install Kerio
download the free version of Kerio (with Avast => less conflicts)
https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
Tutorial =>
https://www.vulgarisation-informatique.com/kerio.php
Kerio site
https://kerio.probb.fr/
and redo a log
F - Hijackthis - Diagnostic and repair tool
read demo
http://pageperso.aol.fr/balltrap34/Hijenr.gif
http://pageperso.aol.fr/balltrap34/demohijack.htm
Download the French version here
http://telechargement.zebulon.fr/160-patch-francais-pour-hijackthis-1991.html
Copy/paste the report
Good luck
See you soon
--
The wise man does not play "jump over the moon" with a unicorn... ...
First
Golden Rule
1 antivirus and 1 firewall (otherwise conflict)
In my opinion, you should get rid of Norton and install Avast
free antivirus
download the free version of Avast
You can download Avast from the following site
https://www.avast.com/free-antivirus-download
Tutorial ->
http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/questions-avast-sujet_176199_1.htm
For the firewall, Windows is crap, so install Kerio
download the free version of Kerio (with Avast => less conflicts)
https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
Tutorial =>
https://www.vulgarisation-informatique.com/kerio.php
Kerio site
https://kerio.probb.fr/
and redo a log
F - Hijackthis - Diagnostic and repair tool
read demo
http://pageperso.aol.fr/balltrap34/Hijenr.gif
http://pageperso.aol.fr/balltrap34/demohijack.htm
Download the French version here
http://telechargement.zebulon.fr/160-patch-francais-pour-hijackthis-1991.html
Copy/paste the report
Good luck
See you soon
--
The wise man does not play "jump over the moon" with a unicorn... ...
Hello
Thank you for the addresses, I downloaded the firewall and the antivirus
I re-downloaded HijackThis French version and saved the log which is as follows:
Logfile of HijackThis v1.99.1
Scan saved at 17:34:10, on 22/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Apps\ActivBoard\nhksrv.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Apps\ActivBoard\MMKeybd.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\WINDOWS\system32\YSTEM3~1\attrib.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Apps\ActivBoard\TrayMon.exe
C:\Apps\ActivBoard\OSD.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Luc\Application Data\W?nSxS\n?pdb.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Money\System\urlmap.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Links
R3 - URLSearchHook: (no name) - {85BE3304-A5CA-F23E-98FE-82FA3BA93B97} - C:\WINDOWS\system32\fzgmsup.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Desktop\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {85BE3304-A5CA-F23E-98FE-82FA3BA93B97} - C:\WINDOWS\system32\fzgmsup.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKCU\..\Run: [Sra] "C:\WINDOWS\system32\YSTEM3~1\attrib.exe" -vt tzt
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.libertysurf.fr
O17 - HKLM\System\CCS\Services\Tcpip\..\{A09E6E97-F54C-40EA-949D-826497F00F81}: NameServer = 192.168.0.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Documents and Settings\Anne\My Documents\iPod\bin\iPodService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
Best regards
Luc
Thank you for the addresses, I downloaded the firewall and the antivirus
I re-downloaded HijackThis French version and saved the log which is as follows:
Logfile of HijackThis v1.99.1
Scan saved at 17:34:10, on 22/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Apps\ActivBoard\nhksrv.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Apps\ActivBoard\MMKeybd.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\WINDOWS\system32\YSTEM3~1\attrib.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Apps\ActivBoard\TrayMon.exe
C:\Apps\ActivBoard\OSD.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Luc\Application Data\W?nSxS\n?pdb.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Money\System\urlmap.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Links
R3 - URLSearchHook: (no name) - {85BE3304-A5CA-F23E-98FE-82FA3BA93B97} - C:\WINDOWS\system32\fzgmsup.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Desktop\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {85BE3304-A5CA-F23E-98FE-82FA3BA93B97} - C:\WINDOWS\system32\fzgmsup.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKCU\..\Run: [Sra] "C:\WINDOWS\system32\YSTEM3~1\attrib.exe" -vt tzt
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.libertysurf.fr
O17 - HKLM\System\CCS\Services\Tcpip\..\{A09E6E97-F54C-40EA-949D-826497F00F81}: NameServer = 192.168.0.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Documents and Settings\Anne\My Documents\iPod\bin\iPodService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
Best regards
Luc
Hi
After installing Avast, I realized that it was a trial version and that it lasts for 59 days from today
Is there another free antivirus that can stay for an indefinite period?
Best regards
Luc
After installing Avast, I realized that it was a trial version and that it lasts for 59 days from today
Is there another free antivirus that can stay for an indefinite period?
Best regards
Luc
Re,
thank you for the addresses I downloaded the firewall and the antivirus
I don’t see them,
AVAST is FREE.........
On the other hand, before installing Avast, you must uninstall Norton...
--
The wise man does not play "leapfrog" with a unicorn... ...
thank you for the addresses I downloaded the firewall and the antivirus
I don’t see them,
AVAST is FREE.........
On the other hand, before installing Avast, you must uninstall Norton...
--
The wise man does not play "leapfrog" with a unicorn... ...
Hello
While looking at the Ccleaner scan, I realized that a certain annoying site appeared in the middle of all this text (almost incomprehensible to me) that opens when I launch the Internet.
Shouldn't I run the Ccleaner cleanup to permanently remove all these sites from my computer?
Best regards
Luc
While looking at the Ccleaner scan, I realized that a certain annoying site appeared in the middle of all this text (almost incomprehensible to me) that opens when I launch the Internet.
Shouldn't I run the Ccleaner cleanup to permanently remove all these sites from my computer?
Best regards
Luc
Yes
C - Ccleaner: (registry cleaner, cookies + temp files + prefetch + history + etc..)
Download here:
https://www.ccleaner.com/ccleaner/download
Tutorial here:
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php
and
http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm
--
The wise man does not play "jumping sheep" with a unicorn... ...
C - Ccleaner: (registry cleaner, cookies + temp files + prefetch + history + etc..)
Download here:
https://www.ccleaner.com/ccleaner/download
Tutorial here:
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php
and
http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm
--
The wise man does not play "jumping sheep" with a unicorn... ...
- 1
- 2
Suivant