pc qui rame/pub intempestive Fermé

Question

Bonjour,salut à vous,bein en faite j ai un peu ce soucis là aussi,je connaissais le site,j'y venais de temps en temps sans vraiment commencer a poster des questions mais là,ça devient vraiment de pire en pire et donc rien ne s'ameliore malgrés les differents programmes que j ai pu telecherger(spybot,spydoctor,scann avast,c cleaner...tune up...)j ai toujour enormement e fenetre de pub qui n arretent pa de s'afficher!!c est trop chiant!!!et quand j allume mon pc bein j ai le temps d aller prendre une douche tranquil tellement il bloque au debut sur la premiere page ou il y a la marque de l ordi,en l occurence,MAXDATA,donc voila que dois-je faire?ou que puis-je faire??? et donc j ai beaucoup vu aussi que tout le monde mettait souvent un rapport hijackthis donc c est ce que je fais aussi en espérant que ous pourrez m aider !!!!!Logfile of HijackThis v1.99.1
Scan saved at 12:20:58, on 01/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Scansoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files\Browser MOUSE\mouse32a.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Scansoft\PaperPort\SmartUI\SmartUI.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\pat\LOCALS~1\Temp\Rar$EX00.562\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://tele2internet.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\Scansoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\BRMFLPRO\BrDefPrt.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\Scansoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [SetDefPrt2] C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe" -s
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Browser MOUSE\mouse32a.exe
O4 - HKLM\..\Run: [FLMK08KB] C:\Program Files\Muiltmedia keyboard Utility\1.3\KbdAp32A.exe
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [Stupid Data Dart Wave] C:\Documents and Settings\All Users\Application Data\flag ace stupid data\Knob Flap.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [else extra] C:\DOCUME~1\pat\APPLIC~1\INTERD~1\Vc defy book.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: SmartUI.lnk = C:\Program Files\Scansoft\PaperPort\SmartUI\SmartUI.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - D:\dossier alex\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - D:\dossier alex\Titan Poker\casino.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://crazywriters.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: jkklk - C:\WINDOWS\system32\jkklk.dll (file missing)
O20 - Winlogon Notify: opnnkkk - opnnkkk.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe



.merci d'avance2 message(s) posté(s) depuis le dimanche 30 décembre 2007
--------------------------------------------------------------------------------
 ne fais jamais aux autres ce que tu n'aimerais pas que l'on te fasse

green day · Answer

Salut

Télécharge ceci: (by Moe) : 

http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe 

Double clic sur Lopxpsetup.exe pour lancer l'installation 
Au menu, choisir l'option 1 
Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer ! 
Une rapport sera alors crée, à copie/colle en entier sur le forum. 


++

poskalex · Answer

ok ok ,bon d abord merci beaucoup de me répondre,c est cool,
donc j ai fais ce que tu m as demandé et voila le resultat:



Rapport Lopxp fait le 01/02/2008 à 14:52:02
Exécuté dans : C:\Program Files\Lopxp



  Killing 'iexplore.exe'
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" (1024)
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" (2300)
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" (2304)
___________________________________________________________________________

=> Tâches planifiées

C:\WINDOWS	asks\Norton Security Scan.job 
Crée le : 10/08/2007 à 12:07
Fichier exécuté => C:\Program Files\Norton Security Scan\Nss.exe /scan-full /scheduled

C:\WINDOWS	asks\AEE2D9329249501E.job 
Crée le : 16/01/2008 à 07:38
Fichier exécuté => c:\docume~1\pat\applic~1\interd~1\Pure Body Inside.exe 

C:\WINDOWS	asks\Maintenance en 1 clic.job 
Crée le : 19/01/2008 à 17:05
Fichier exécuté => C:\Program Files\TuneUp Utilities 2008\OneClick.exe /schedulestart


___________________________________________________________________________

=> Listing des dossiers Application Data

+- C:\Documents and Settings\All Users\Application Data

30/04/2007 18:14:16 ... MICROS~1 --= Microsoft
13/05/2007 09:27:32 ... MOZILLA ---= Mozilla
14/05/2007 10:59:07 ... GOOGLE ----= Google
18/05/2007 18:04:44 ... AHEAD -----= Ahead
25/05/2007 00:40:45 ... SPYBOT~1 --= Spybot - Search & Destroy
30/05/2007 19:17:04 ... ADOBE -----= Adobe
22/06/2007 10:30:22 ... WINDOW~1 --= Windows Genuine Advantage
29/08/2007 18:06:17 ... SCANSOFT --= ScanSoft
23/10/2007 16:12:07 ... SUIIMAGE --= SUIIMAGE
31/10/2007 17:01:20 ... BROTHER ---= Brother
31/10/2007 17:03:38 ... INSTAL~1 --= InstallShield
08/11/2007 00:40:46 ... MESSEN~1 --= Messenger Plus!
08/11/2007 01:12:53 ... WLINST~1 --= WLInstaller
08/11/2007 02:11:05 ... WINDOW~2 --= Windows Live Toolbar
18/11/2007 16:42:40 ... YAHOO! ----= Yahoo!
22/11/2007 23:47:27 ... TOMTOM ----= TomTom
27/12/2007 12:08:04 ... GRISOFT ---= Grisoft
10/01/2008 02:56:08 ... FLAGAC~1 --= flag ace stupid data
19/01/2008 17:04:57 ... TUNEUP~1 --= TuneUp Software

+- C:\Documents and Settings\pat\Application Data

30/04/2007 18:33:19 ... MICROS~1 --= Microsoft
30/04/2007 18:33:28 ... IDENTI~1 --= Identities
12/05/2007 13:49:17 ... MACROM~1 --= Macromedia
13/05/2007 09:27:54 ... Mozilla ---= Mozilla
13/05/2007 09:29:48 ... Talkback --= Talkback
14/05/2007 08:17:18 ... DivX ------= DivX
14/05/2007 10:59:10 ... Google ----= Google
18/05/2007 03:02:08 ... DATALA~1 --= Datalayer
18/05/2007 03:02:10 ... Nokia -----= Nokia
25/05/2007 01:49:35 ... Sun -------= Sun
30/05/2007 19:17:15 ... Adobe -----= Adobe
30/05/2007 19:19:06 ... AdobeUM ---= AdobeUM
31/05/2007 08:52:29 ... LEADER~1 --= Leadertech
14/06/2007 15:34:49 ... Ahead -----= Ahead
29/06/2007 02:22:18 ... CAMFRO~1 --= CamfrogWEB
29/06/2007 14:56:38 ... MSNINS~1 --= MSNInstaller
10/08/2007 12:11:05 ... PCTOOL~1 --= PC Tools
10/08/2007 13:21:31 ... MEDIAP~1 --= Media Player Classic
22/08/2007 02:16:03 ... WinRAR ----= WinRAR
31/08/2007 18:18:32 ... Brother ---= Brother
05/09/2007 11:48:52 ... Help ------= Help
06/09/2007 23:54:22 ... DIALME~1 --= DialMessenger
31/10/2007 17:33:40 ... BITTOR~1 --= BitTorrent
01/11/2007 16:45:19 ... uTorrent --= uTorrent
08/11/2007 01:25:00 ... WINDOW~1 --= Windows Live Writer
23/11/2007 00:20:35 ... TomTom ----= TomTom
04/12/2007 00:46:28 ... Weflirt ---= Weflirt
23/12/2007 11:17:59 ... MESSEN~1 --= MessengerSkinner
10/01/2008 02:55:52 ... INTERD~1 --= INTERDEAD
14/01/2008 11:14:20 ... ScanSoft --= ScanSoft
14/01/2008 13:33:59 ... PCSUIT~1 --= PC Suite
17/01/2008 15:53:53 ... NOKIAM~1 --= Nokia Multimedia Player
19/01/2008 17:05:36 ... TUNEUP~1 --= TuneUp Software

+- C:\Documents and Settings\pat\Local Settings\Application Data

30/04/2007 18:33:19 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}
30/04/2007 18:33:19 ... MICROS~1 --= Microsoft
13/05/2007 09:27:53 ... Mozilla ---= Mozilla
14/05/2007 10:59:10 ... Google ----= Google
14/05/2007 23:39:44 ... IDENTI~1 --= Identities
17/05/2007 17:26:11 ... IM --------= IM
18/05/2007 21:17:30 ... Ahead -----= Ahead
24/05/2007 23:38:58 ... APPLEC~1 --= Apple Computer
30/05/2007 19:05:32 ... Adobe -----= Adobe
05/09/2007 11:48:52 ... Help ------= Help
08/11/2007 01:22:40 ... APPLIC~1 --= ApplicationHistory
08/11/2007 01:25:00 ... WINDOW~1 --= Windows Live Writer
23/11/2007 00:20:35 ... TomTom ----= TomTom
23/12/2007 03:16:49 ... WMTOOL~1 --= WMTools Downloaded Files

___________________________________________________________________________

=> Listing du dossier ProgramFiles

+- C:\Program Files

30/04/2007 18:14:55 ... FICHIE~1 --= Fichiers communs
30/04/2007 18:20:26 ... WINDOW~1 --= Windows NT
30/04/2007 18:20:53 ... MSNGAM~1 --= MSN Gaming Zone
29/08/2007 17:58:07 ... SCANSOFT --= Scansoft
30/04/2007 18:21:00 ... WINDOW~2 --= Windows Media Player
30/04/2007 18:21:00 ... ONLINE~1 --= Online Services
30/04/2007 18:21:31 ... COMPLU~1 --= ComPlus Applications
30/04/2007 18:21:49 ... INTERN~1 --= Internet Explorer
30/04/2007 18:21:54 ... OUTLOO~1 --= Outlook Express
30/04/2007 18:21:57 ... NETMEE~1 --= NetMeeting
30/04/2007 18:22:06 ... MOVIEM~1 --= Movie Maker
29/08/2007 18:01:32 ... BROTHER ---= Brother
30/04/2007 18:22:58 ... WINDOW~3 --= WindowsUpdate
30/04/2007 18:26:19 ... JAVA ------= Java
30/04/2007 18:26:55 ... MICROS~1 --= microsoft frontpage
30/04/2007 18:26:55 ... xerox -----= xerox
30/04/2007 18:33:26 ... UNINST~1 --= Uninstall Information
30/04/2007 19:00:47 ... INSTAL~1 --= InstallShield Installation Information
30/04/2007 19:00:49 ... REALTE~1 --= Realtek AC97
06/09/2007 23:54:22 ... DIALME~1 --= DialMessenger
30/04/2007 19:13:43 ... ALWILS~1 --= Alwil Software
25/09/2007 01:07:08 ... EMULE -----= eMule
30/04/2007 22:00:27 ... C-MEDIA ---= C-Media
25/09/2007 01:32:51 ... CCLEANER --= CCleaner
18/11/2007 16:36:03 ... YAHOO! ----= Yahoo!
14/05/2007 10:59:06 ... GOOGLE ----= Google
15/05/2007 10:14:39 ... ADSLDR~1 --= ADSL Drivers
01/11/2007 16:45:21 ... UTORRENT --= uTorrent
16/05/2007 13:25:15 ... WINRAR ----= WinRAR
16/05/2007 14:00:04 ... MICROS~2 --= Microsoft Office
08/11/2007 00:31:13 ... WI1F86~1 --= Windows Live
10/12/2007 12:40:19 ... JAPMAS~1 --= JAP masqué ip
06/01/2008 03:18:13 ... POKERS~1 --= PokerStars
18/05/2007 12:11:29 ... ANMSMP ----= AnmSMP
23/11/2007 00:16:33 ... TOMTOM~1 --= TomTom HOME
23/12/2007 14:17:46 ... LECTEU~1 --= lecteur windows media 11
23/11/2007 00:20:17 ... TOMTOM~3 --= TomTom HOME 2
25/05/2007 00:40:41 ... SPYBOT~1 --= Spybot - Search & Destroy
30/05/2007 19:17:04 ... ADOBE -----= Adobe
16/12/2007 21:20:38 ... BROWSE~1 --= Browser MOUSE
07/06/2007 19:12:59 ... WINDOW~4 --= Windows Live Safety Center
22/06/2007 10:17:11 ... WI4DF6~1 --= Windows Media Connect 2
29/06/2007 02:22:15 ... CFWEBA~1 --= CFWebAdvancedU
08/11/2007 00:31:12 ... MESSEN~1 --= Messenger Plus! Live
23/11/2007 00:11:30 ... TOMTOM~2 --= TomTom DesktopSuite
08/11/2007 01:20:45 ... MICROS~3 --= Microsoft SQL Server Compact Edition
23/12/2007 11:17:50 ... MESSEN~2 --= MessengerSkinner
16/12/2007 21:27:56 ... MUILTM~1 --= Muiltmedia keyboard Utility
10/01/2008 02:55:22 ... CIRCLE~1 --= Circle Developement
16/01/2008 07:38:02 ... INTERD~1 --= INTERDEAD
14/01/2008 13:32:41 ... NOKIA -----= Nokia
14/01/2008 22:09:03 ... REDKIN~1 --= Red Kings Poker
15/01/2008 11:53:49 ... BUSINE~1 --= Business Card Printery 3
15/01/2008 12:13:08 ... MOSSBA~1 --= Moss Bay Software
17/01/2008 15:46:18 ... COMMON~1 --= Common Files
10/08/2007 12:07:56 ... NORTON~1 --= Norton Security Scan
10/08/2007 12:11:05 ... SPYWAR~1 --= Spyware Doctor
19/01/2008 17:04:40 ... TUNEUP~1 --= TuneUp Utilities 2008
10/08/2007 13:20:27 ... K-LITE~1 --= K-Lite Codec Pack
21/01/2008 02:56:28 ... EVERES~1 --= Everest Poker
10/08/2007 20:57:18 ... AHEAD -----= Ahead
17/08/2007 03:04:40 ... MSXML4~1.0 -----= MSXML 4.0
01/02/2008 14:34:32 ... LOPXP -----= Lopxp


___________________________________________________________________________

=> Clés registre

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Stupid Data Dart Wave"="C:\Documents and Settings\All Users\Application Data\flag ace stupid data\Knob Flap.exe"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"else extra"="C:\DOCUME~1\pat\APPLIC~1\INTERD~1\Vc defy book.exe"


___________________________________________________________________________

=> Bloqueur popups Internet Explorer

+- Liste des popups autorisés :

www.tele2internet.fr
host-domain-lookup.com
www.host-domain-lookup.com

___________________________________________________________________________

/!\  Suggestion (Nécessite une interprétation.)

+- Dossiers suspects :

C:\Documents and Settings\All Users\Application Data\flag ace stupid data
C:\Documents and Settings\pat\Application Data\INTERDEAD
C:\Program Files\INTERDEAD
C:\Program Files\Circle Developement

+- Tâches planifiées suspectes :

C:\WINDOWS	asks\AEE2D9329249501E.job

+- Registre:

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Stupid Data Dart Wave"=-

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"else extra"=-

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow]
"host-domain-lookup.com"=-
"www.host-domain-lookup.com"=-



- Fin du rapport -
 voila voila
.... alex...

green day · Answer

ok,

suite : 

va dans : Démarrer > Exécuter puis copie/colle la ligne suivante en gras  :

"%programfiles%\Lopxp\Lopxp.bat" /Fixme 

puis valide, accepte toutes les demandes de suppression et poste le rapport stp

@+

poskalex · Answer

ok,
 bon bein voila  j ai suivis et bon bein normalement c est ça :
Rapport Lopxp fait le 01/02/2008 à 15:06:38
Exécuté dans : C:\Program Files\Lopxp



___________________________________________________________________________

=> Fixme :

+- Tâches planifiées :
Supprimé : C:\WINDOWS	asks\AEE2D9329249501E.job

+- Dossiers :
Supprimé : C:\Documents and Settings\All Users\Application Data\flag ace stupid data
Supprimé : C:\Documents and Settings\pat\Application Data\INTERDEAD
Supprimé : C:\Program Files\INTERDEAD
Supprimé : C:\Program Files\Circle Developement

+- Registre :
Nettoyage effectué.

+- Fichiers temporaires :
Nettoyage effectué.

___________________________________________________________________________

=> Tâches planifiées

C:\WINDOWS	asks\Norton Security Scan.job 
Crée le : 10/08/2007 à 12:07
Fichier exécuté => C:\Program Files\Norton Security Scan\Nss.exe /scan-full /scheduled

C:\WINDOWS	asks\Maintenance en 1 clic.job 
Crée le : 19/01/2008 à 17:05
Fichier exécuté => C:\Program Files\TuneUp Utilities 2008\OneClick.exe /schedulestart


___________________________________________________________________________

=> Listing des dossiers Application Data

+- C:\Documents and Settings\All Users\Application Data

30/04/2007 18:14:16 ... MICROS~1 --= Microsoft
13/05/2007 09:27:32 ... MOZILLA ---= Mozilla
14/05/2007 10:59:07 ... GOOGLE ----= Google
18/05/2007 18:04:44 ... AHEAD -----= Ahead
25/05/2007 00:40:45 ... SPYBOT~1 --= Spybot - Search & Destroy
30/05/2007 19:17:04 ... ADOBE -----= Adobe
22/06/2007 10:30:22 ... WINDOW~1 --= Windows Genuine Advantage
29/08/2007 18:06:17 ... SCANSOFT --= ScanSoft
23/10/2007 16:12:07 ... SUIIMAGE --= SUIIMAGE
31/10/2007 17:01:20 ... BROTHER ---= Brother
31/10/2007 17:03:38 ... INSTAL~1 --= InstallShield
08/11/2007 00:40:46 ... MESSEN~1 --= Messenger Plus!
08/11/2007 01:12:53 ... WLINST~1 --= WLInstaller
08/11/2007 02:11:05 ... WINDOW~2 --= Windows Live Toolbar
18/11/2007 16:42:40 ... YAHOO! ----= Yahoo!
22/11/2007 23:47:27 ... TOMTOM ----= TomTom
27/12/2007 12:08:04 ... GRISOFT ---= Grisoft
19/01/2008 17:04:57 ... TUNEUP~1 --= TuneUp Software

+- C:\Documents and Settings\pat\Application Data

30/04/2007 18:33:19 ... MICROS~1 --= Microsoft
30/04/2007 18:33:28 ... IDENTI~1 --= Identities
12/05/2007 13:49:17 ... MACROM~1 --= Macromedia
13/05/2007 09:27:54 ... Mozilla ---= Mozilla
13/05/2007 09:29:48 ... Talkback --= Talkback
14/05/2007 08:17:18 ... DivX ------= DivX
14/05/2007 10:59:10 ... Google ----= Google
18/05/2007 03:02:08 ... DATALA~1 --= Datalayer
18/05/2007 03:02:10 ... Nokia -----= Nokia
25/05/2007 01:49:35 ... Sun -------= Sun
30/05/2007 19:17:15 ... Adobe -----= Adobe
30/05/2007 19:19:06 ... AdobeUM ---= AdobeUM
31/05/2007 08:52:29 ... LEADER~1 --= Leadertech
14/06/2007 15:34:49 ... Ahead -----= Ahead
29/06/2007 02:22:18 ... CAMFRO~1 --= CamfrogWEB
29/06/2007 14:56:38 ... MSNINS~1 --= MSNInstaller
10/08/2007 12:11:05 ... PCTOOL~1 --= PC Tools
10/08/2007 13:21:31 ... MEDIAP~1 --= Media Player Classic
22/08/2007 02:16:03 ... WinRAR ----= WinRAR
31/08/2007 18:18:32 ... Brother ---= Brother
05/09/2007 11:48:52 ... Help ------= Help
06/09/2007 23:54:22 ... DIALME~1 --= DialMessenger
31/10/2007 17:33:40 ... BITTOR~1 --= BitTorrent
01/11/2007 16:45:19 ... uTorrent --= uTorrent
08/11/2007 01:25:00 ... WINDOW~1 --= Windows Live Writer
23/11/2007 00:20:35 ... TomTom ----= TomTom
04/12/2007 00:46:28 ... Weflirt ---= Weflirt
23/12/2007 11:17:59 ... MESSEN~1 --= MessengerSkinner
14/01/2008 11:14:20 ... ScanSoft --= ScanSoft
14/01/2008 13:33:59 ... PCSUIT~1 --= PC Suite
17/01/2008 15:53:53 ... NOKIAM~1 --= Nokia Multimedia Player
19/01/2008 17:05:36 ... TUNEUP~1 --= TuneUp Software

+- C:\Documents and Settings\pat\Local Settings\Application Data

30/04/2007 18:33:19 ... {3248F~1 --= {3248F0A6-6813-11D6-A77B-00B0D0150000}
30/04/2007 18:33:19 ... MICROS~1 --= Microsoft
13/05/2007 09:27:53 ... Mozilla ---= Mozilla
14/05/2007 10:59:10 ... Google ----= Google
14/05/2007 23:39:44 ... IDENTI~1 --= Identities
17/05/2007 17:26:11 ... IM --------= IM
18/05/2007 21:17:30 ... Ahead -----= Ahead
24/05/2007 23:38:58 ... APPLEC~1 --= Apple Computer
30/05/2007 19:05:32 ... Adobe -----= Adobe
05/09/2007 11:48:52 ... Help ------= Help
08/11/2007 01:22:40 ... APPLIC~1 --= ApplicationHistory
08/11/2007 01:25:00 ... WINDOW~1 --= Windows Live Writer
23/11/2007 00:20:35 ... TomTom ----= TomTom
23/12/2007 03:16:49 ... WMTOOL~1 --= WMTools Downloaded Files

___________________________________________________________________________

=> Listing du dossier ProgramFiles

+- C:\Program Files

30/04/2007 18:14:55 ... FICHIE~1 --= Fichiers communs
30/04/2007 18:20:26 ... WINDOW~1 --= Windows NT
30/04/2007 18:20:53 ... MSNGAM~1 --= MSN Gaming Zone
29/08/2007 17:58:07 ... SCANSOFT --= Scansoft
30/04/2007 18:21:00 ... WINDOW~2 --= Windows Media Player
30/04/2007 18:21:00 ... ONLINE~1 --= Online Services
30/04/2007 18:21:31 ... COMPLU~1 --= ComPlus Applications
30/04/2007 18:21:49 ... INTERN~1 --= Internet Explorer
30/04/2007 18:21:54 ... OUTLOO~1 --= Outlook Express
30/04/2007 18:21:57 ... NETMEE~1 --= NetMeeting
30/04/2007 18:22:06 ... MOVIEM~1 --= Movie Maker
29/08/2007 18:01:32 ... BROTHER ---= Brother
30/04/2007 18:22:58 ... WINDOW~3 --= WindowsUpdate
30/04/2007 18:26:19 ... JAVA ------= Java
30/04/2007 18:26:55 ... MICROS~1 --= microsoft frontpage
30/04/2007 18:26:55 ... xerox -----= xerox
30/04/2007 18:33:26 ... UNINST~1 --= Uninstall Information
30/04/2007 19:00:47 ... INSTAL~1 --= InstallShield Installation Information
30/04/2007 19:00:49 ... REALTE~1 --= Realtek AC97
06/09/2007 23:54:22 ... DIALME~1 --= DialMessenger
30/04/2007 19:13:43 ... ALWILS~1 --= Alwil Software
25/09/2007 01:07:08 ... EMULE -----= eMule
30/04/2007 22:00:27 ... C-MEDIA ---= C-Media
25/09/2007 01:32:51 ... CCLEANER --= CCleaner
18/11/2007 16:36:03 ... YAHOO! ----= Yahoo!
14/05/2007 10:59:06 ... GOOGLE ----= Google
15/05/2007 10:14:39 ... ADSLDR~1 --= ADSL Drivers
01/11/2007 16:45:21 ... UTORRENT --= uTorrent
16/05/2007 13:25:15 ... WINRAR ----= WinRAR
16/05/2007 14:00:04 ... MICROS~2 --= Microsoft Office
08/11/2007 00:31:13 ... WI1F86~1 --= Windows Live
10/12/2007 12:40:19 ... JAPMAS~1 --= JAP masqué ip
06/01/2008 03:18:13 ... POKERS~1 --= PokerStars
18/05/2007 12:11:29 ... ANMSMP ----= AnmSMP
23/11/2007 00:16:33 ... TOMTOM~1 --= TomTom HOME
23/12/2007 14:17:46 ... LECTEU~1 --= lecteur windows media 11
23/11/2007 00:20:17 ... TOMTOM~3 --= TomTom HOME 2
25/05/2007 00:40:41 ... SPYBOT~1 --= Spybot - Search & Destroy
30/05/2007 19:17:04 ... ADOBE -----= Adobe
16/12/2007 21:20:38 ... BROWSE~1 --= Browser MOUSE
07/06/2007 19:12:59 ... WINDOW~4 --= Windows Live Safety Center
22/06/2007 10:17:11 ... WI4DF6~1 --= Windows Media Connect 2
29/06/2007 02:22:15 ... CFWEBA~1 --= CFWebAdvancedU
08/11/2007 00:31:12 ... MESSEN~1 --= Messenger Plus! Live
23/11/2007 00:11:30 ... TOMTOM~2 --= TomTom DesktopSuite
08/11/2007 01:20:45 ... MICROS~3 --= Microsoft SQL Server Compact Edition
23/12/2007 11:17:50 ... MESSEN~2 --= MessengerSkinner
16/12/2007 21:27:56 ... MUILTM~1 --= Muiltmedia keyboard Utility
14/01/2008 13:32:41 ... NOKIA -----= Nokia
14/01/2008 22:09:03 ... REDKIN~1 --= Red Kings Poker
15/01/2008 11:53:49 ... BUSINE~1 --= Business Card Printery 3
15/01/2008 12:13:08 ... MOSSBA~1 --= Moss Bay Software
17/01/2008 15:46:18 ... COMMON~1 --= Common Files
10/08/2007 12:07:56 ... NORTON~1 --= Norton Security Scan
10/08/2007 12:11:05 ... SPYWAR~1 --= Spyware Doctor
19/01/2008 17:04:40 ... TUNEUP~1 --= TuneUp Utilities 2008
10/08/2007 13:20:27 ... K-LITE~1 --= K-Lite Codec Pack
21/01/2008 02:56:28 ... EVERES~1 --= Everest Poker
10/08/2007 20:57:18 ... AHEAD -----= Ahead
17/08/2007 03:04:40 ... MSXML4~1.0 -----= MSXML 4.0
01/02/2008 14:34:32 ... LOPXP -----= Lopxp


___________________________________________________________________________

=> Clés registre


___________________________________________________________________________

=> Bloqueur popups Internet Explorer

+- Liste des popups autorisés :

www.tele2internet.fr

___________________________________________________________________________

/!\  Suggestion (Nécessite une interprétation.)



- Fin du rapport -

green day · Answer

ok, fais ce qui est indiqué ici stp :

http://www.commentcamarche.net/faq/sujet 3174 virus methode preliminaire de desinfection version fr

++

poskalex · Answer

ok je fais tout ça ...et au faite tu me conseils quoi toi comme anti virus?
avast est mieu que bit defender ou inversement ,bit defender est mieux qu'avast???
et AVG c est le mieu ça en anti spyware?...
merci

green day · Answer

antivirus en version gratuite tu veux dire ??

 avg est pas mal du tout comme antispy oui !

++

poskalex · Answer

oui oui tout a fait en version gratuite... 
par contre j ai un copain qui m a parlé de PANDA (je pense ) mais en payant et il m a dis qu il etait bien?
enfin moi pour l instant je ne veux qu une version gratuite ...

green day · Answer

ok, dans ce cas : antivir est pas mal du tout en ce moment et ce distingue des autres !

++

poskalex · Answer

bon petites nouvelles: (car depuis tout à l heure je n ai pas bougé lol)
j ai lancé AVG ,le scanne s est terminé je l ai mis de coté
j ai lancé c cleaner,le sanne s est terminé,je l ai mis de coté aussi
j ai telechargé antivir (pour voir),et là je le lance  et quand il est terminé,
bein je t envois tout les rapport et puis  bein...tu me diras si je dois me pendre ou si il y a encore espoire...lol
en attendant la fin de ce scanne qui a mon avis va mettre une plombe aussi,je vais faire une course,merci pour tout....
alex

poskalex · Answer

salut,
bon comme tu me l as demandé,j ai fais un scan AVG,un scan c cleaner,et un dernier scan avec antivir donc je te mets le tout :

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	17:52:54 01/02/2008

 + Résultat de l'analyse:	



C:\Documents and Settings\pat\Cookies\pat@2o7[2].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@hertz.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@3.adbrite[1].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@adbrite[1].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@adrevolver[1].txt -> TrackingCookie.Adrevolver : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@media.adrevolver[1].txt -> TrackingCookie.Adrevolver : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@adtech[1].txt -> TrackingCookie.Adtech : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@advertising[2].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@bluestreak[1].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@casinotropez[2].txt -> TrackingCookie.Casinotropez : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@as1.falkag[1].txt -> TrackingCookie.Falkag : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@findwhat[1].txt -> TrackingCookie.Findwhat : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@ehg-citenumerique.hitbox[2].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@ehg-telecomitalia.hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@hitbox[1].txt -> TrackingCookie.Hitbox : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@hotlog[1].txt -> TrackingCookie.Hotlog : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@mediaplex[2].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@overture[1].txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@www.paypal[2].txt -> TrackingCookie.Paypal : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@questionmarket[2].txt -> TrackingCookie.Questionmarket : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@revsci[2].txt -> TrackingCookie.Revsci : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@smartadserver[2].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@specificclick[2].txt -> TrackingCookie.Specificclick : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@m.webtrends[1].txt -> TrackingCookie.Webtrends : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@yadro[1].txt -> TrackingCookie.Yadro : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
C:\Documents and Settings\pat\Cookies\pat@zedo[2].txt -> TrackingCookie.Zedo : Aucune action entreprise.


Fin du rapport

scan c cleaner:
ANALYSE COMPLETE - (62.754 secs)
------------------------------------------------------------------------------------------
876,9MB ont été supprimés. (Taille approximative)
------------------------------------------------------------------------------------------

Détails des fichiers à supprimer (Note: AUCUN fichier n'a pour l'instant été supprimé)
------------------------------------------------------------------------------------------
Fichiers Temporaires d'Internet Explorer (fichiers 5205) 94,4MB
C:\Documents and Settings\pat\Cookies\pat@lesarcs[1].txt 362 bytes
C:\Documents and Settings\pat\Cookies\pat@bahu[1].txt 512 bytes
C:\Documents and Settings\pat\Cookies\pat@em.gad-network[1].txt 187 bytes
C:\Documents and Settings\pat\Cookies\pat@jetonsdepoker[2].txt 272 bytes
C:\Documents and Settings\pat\Cookies\pat@secured.tele2[2].txt 349 bytes
C:\Documents and Settings\pat\Cookies\pat@www.pixmania[1].txt 111 bytes
C:\Documents and Settings\pat\Cookies\pat@pokerpages[2].txt 286 bytes
C:\Documents and Settings\pat\Cookies\pat@hypevertising[1].txt 91 bytes
C:\Documents and Settings\pat\Cookies\pat@apmebf[1].txt 201 bytes
C:\Documents and Settings\pat\Cookies\pat@musicme[2].txt 269 bytes
C:\Documents and Settings\pat\Cookies\pat@bluegger[2].txt 277 bytes
C:\Documents and Settings\pat\Cookies\pat@ads.gmodules[1].txt 401 bytes
C:\Documents and Settings\pat\Cookies\pat@quoimagueule[1].txt 270 bytes
C:\Documents and Settings\pat\Cookies\pat@vlaze[1].txt 345 bytes
C:\Documents and Settings\pat\Cookies\pat@directivepub[1].txt 94 bytes
C:\Documents and Settings\pat\Cookies\pat@lypn[1].txt 103 bytes
C:\Documents and Settings\pat\Cookies\pat@cyberpokershop[2].txt 311 bytes
C:\Documents and Settings\pat\Cookies\pat@sexystat[1].txt 76 bytes
C:\Documents and Settings\pat\Cookies\pat@messenger.msn[1].txt 96 bytes
C:\Documents and Settings\pat\Cookies\pat@mappy[1].txt 78 bytes
C:\Documents and Settings\pat\Cookies\pat@symantec[1].txt 110 bytes
C:\Documents and Settings\pat\Cookies\pat@tv[1].txt 760 bytes
C:\Documents and Settings\pat\Cookies\pat@www.lepost[1].txt 73 bytes
C:\Documents and Settings\pat\Cookies\pat@banner.cdpoker[2].txt 188 bytes
C:\Documents and Settings\pat\Cookies\pat@hotmail.msn[1].txt 71 bytes
C:\Documents and Settings\pat\Cookies\pat@netgear-forum[1].txt 320 bytes
C:\Documents and Settings\pat\Cookies\pat@foxrestaurant[1].txt 397 bytes
C:\Documents and Settings\pat\Cookies\pat@touslesfilmsx[1].txt 157 bytes
C:\Documents and Settings\pat\Cookies\pat@www.puretna[1].txt 944 bytes
C:\Documents and Settings\pat\Cookies\pat@estat[1].txt 85 bytes
C:\Documents and Settings\pat\Cookies\pat@meilleurmobile[1].txt 642 bytes
C:\Documents and Settings\pat\Cookies\pat@yourmedia[1].txt 99 bytes
C:\Documents and Settings\pat\Cookies\pat@randstad[1].txt 336 bytes
C:\Documents and Settings\pat\Cookies\pat@plugin-x[1].txt 76 bytes
C:\Documents and Settings\pat\Cookies\pat@rad.live[1].txt 735 bytes
C:\Documents and Settings\pat\Cookies\pat@caroline-f.video-pornx[1].txt 98 bytes
C:\Documents and Settings\pat\Cookies\pat@www.esecure-transaction[2].txt 214 bytes
C:\Documents and Settings\pat\Cookies\pat@91.121.74[1].txt 90 bytes
C:\Documents and Settings\pat\Cookies\pat@gemoneybank[1].txt 111 bytes
C:\Documents and Settings\pat\Cookies\pat@messengerskinner[2].txt 322 bytes
C:\Documents and Settings\pat\Cookies\pat@questionmarket[2].txt 182 bytes
C:\Documents and Settings\pat\Cookies\pat@ultralingua[1].txt 399 bytes
C:\Documents and Settings\pat\Cookies\pat@puretna[2].txt 170 bytes
C:\Documents and Settings\pat\Cookies\pat@contextweb[1].txt 228 bytes
C:\Documents and Settings\pat\Cookies\pat@enjoy[1].txt 141 bytes
C:\Documents and Settings\pat\Cookies\pat@caloga[1].txt 75 bytes
C:\Documents and Settings\pat\Cookies\pat@adbrite[1].txt 220 bytes
C:\Documents and Settings\pat\Cookies\pat@embauche[2].txt 287 bytes
C:\Documents and Settings\pat\Cookies\pat@wysistat[1].txt 437 bytes
C:\Documents and Settings\pat\Cookies\pat@www.messengerskinner[2].txt 200 bytes
C:\Documents and Settings\pat\Cookies\pat@funnyfacy[2].txt 328 bytes
C:\Documents and Settings\pat\Cookies\pat@www.messengerskinner[3].txt 294 bytes
C:\Documents and Settings\pat\Cookies\pat@i2as.idregie[1].txt 108 bytes
C:\Documents and Settings\pat\Cookies\pat@google[3].txt 326 bytes
C:\Documents and Settings\pat\Cookies\pat@www.mininova[1].txt 91 bytes
C:\Documents and Settings\pat\Cookies\pat@vrup[1].txt 330 bytes
C:\Documents and Settings\pat\Cookies\pat@vidsatomix[2].txt 346 bytes
C:\Documents and Settings\pat\Cookies\pat@demo.ventivmedia[2].txt 596 bytes
C:\Documents and Settings\pat\Cookies\pat@onlinestores.metaservices.microsoft[1].txt 147 bytes
C:\Documents and Settings\pat\Cookies\pat@smartadserver[2].txt 402 bytes
C:\Documents and Settings\pat\Cookies\pat@clicktorrent[2].txt 4,90KB
C:\Documents and Settings\pat\Cookies\pat@webtrends.besite[1].txt 150 bytes
C:\Documents and Settings\pat\Cookies\pat@promobenef[1].txt 1,17KB
C:\Documents and Settings\pat\Cookies\pat@ikeywords.ibase[2].txt 436 bytes
C:\Documents and Settings\pat\Cookies\pat@tshirtvip[2].txt 345 bytes
C:\Documents and Settings\pat\Cookies\pat@cometik[2].txt 377 bytes
C:\Documents and Settings\pat\Cookies\pat@atraxio[1].txt 134 bytes
C:\Documents and Settings\pat\Cookies\pat@www.revresda[1].txt 107 bytes
C:\Documents and Settings\pat\Cookies\pat@track.effiliation[1].txt 85 bytes
C:\Documents and Settings\pat\Cookies\pat@actuzap-tele[1].txt 432 bytes
C:\Documents and Settings\pat\Cookies\pat@webtrends.besite[2].txt 190 bytes
C:\Documents and Settings\pat\Cookies\pat@pokerstars[3].txt 267 bytes
C:\Documents and Settings\pat\Cookies\pat@blancheporte[1].txt 83 bytes
C:\Documents and Settings\pat\Cookies\pat@abonnement.aliceadsl[1].txt 81 bytes
C:\Documents and Settings\pat\Cookies\pat@www3.tilllate[1].txt 675 bytes
C:\Documents and Settings\pat\Cookies\pat@mry.blogs[1].txt 102 bytes
C:\Documents and Settings\pat\Cookies\pat@vpod[4].txt 97 bytes
C:\Documents and Settings\pat\Cookies\pat@blogs[1].txt 91 bytes
C:\Documents and Settings\pat\Cookies\pat@mybloglog[2].txt 185 bytes
C:\Documents and Settings\pat\Cookies\pat@quantserve[2].txt 199 bytes
C:\Documents and Settings\pat\Cookies\pat@voissa[1].txt 316 bytes
C:\Documents and Settings\pat\Cookies\pat@netavenir[1].txt 112 bytes
C:\Documents and Settings\pat\Cookies\pat@wordreference[1].txt 403 bytes
C:\Documents and Settings\pat\Cookies\pat@advertstream[2].txt 686 bytes
C:\Documents and Settings\pat\Cookies\pat@1001-bijoux[1].txt 346 bytes
C:\Documents and Settings\pat\Cookies\pat@thepiratebay[3].txt 356 bytes
C:\Documents and Settings\pat\Cookies\pat@becquet[2].txt 332 bytes
C:\Documents and Settings\pat\Cookies\pat@redcatsusa[1].txt 118 bytes
C:\Documents and Settings\pat\Cookies\pat@zbox.zanox[1].txt 91 bytes
C:\Documents and Settings\pat\Cookies\pat@wam-poker[1].txt 101 bytes
C:\Documents and Settings\pat\Cookies\pat@abmr[2].txt 272 bytes
C:\Documents and Settings\pat\Cookies\pat@fr.wasalive[1].txt 369 bytes
C:\Documents and Settings\pat\Cookies\pat@wemfbox[1].txt 90 bytes
C:\Documents and Settings\pat\Cookies\pat@romandie-online[2].txt 193 bytes
C:\Documents and Settings\pat\Cookies\pat@www.lematin[1].txt 94 bytes
C:\Documents and Settings\pat\Cookies\pat@unibet[2].txt 176 bytes
C:\Documents and Settings\pat\Cookies\pat@www.volcreole[1].txt 182 bytes
C:\Documents and Settings\pat\Cookies\pat@www.jeu.vente-unique[1].txt 100 bytes
C:\Documents and Settings\pat\Cookies\pat@lematin[2].txt 296 bytes
C:\Documents and Settings\pat\Cookies\pat@nb.myspace[1].txt 273 bytes
C:\Documents and Settings\pat\Cookies\pat@hepro[2].txt 300 bytes
C:\Documents and Settings\pat\Cookies\pat@kiabi[1].txt 423 bytes
C:\Documents and Settings\pat\Cookies\pat@tf1[1].txt 83 bytes
C:\Documents and Settings\pat\Cookies\pat@www.touslesfilmsx[2].txt 215 bytes
C:\Documents and Settings\pat\Cookies\pat@mysecond-life[1].txt 383 bytes
C:\Documents and Settings\pat\Cookies\pat@scratch2cash[2].txt 350 bytes
C:\Documents and Settings\pat\Cookies\pat@ads.vlaze[2].txt 99 bytes
C:\Documents and Settings\pat\Cookies\pat@mediaservices.myspace[1].txt 84 bytes
C:\Documents and Settings\pat\Cookies\pat@nonstoppartner[1].txt 112 bytes
C:\Documents and Settings\pat\Cookies\pat@opt.fimserve[2].txt 254 bytes
C:\Documents and Settings\pat\Cookies\pat@delb.opt.fimserve[1].txt 141 bytes
C:\Documents and Settings\pat\Cookies\pat@allocine[2].txt 352 bytes
C:\Documents and Settings\pat\Cookies\pat@buddha-bar[2].txt 362 bytes
C:\Documents and Settings\pat\Cookies\pat@myspace[1].txt 353 bytes
C:\Documents and Settings\pat\Cookies\pat@sphinx-solutions[1].txt 271 bytes
C:\Documents and Settings\pat\Cookies\pat@legrandtrok[2].txt 346 bytes
C:\Documents and Settings\pat\Cookies\pat@www.extrafilm[2].txt 73 bytes
C:\Documents and Settings\pat\Cookies\pat@pacificpoker[2].txt 75 bytes
C:\Documents and Settings\pat\Cookies\pat@transvente[1].txt 386 bytes
C:\Documents and Settings\pat\Cookies\pat@ruedelafete[2].txt 308 bytes
C:\Documents and Settings\pat\Cookies\pat@tilllate[2].txt 191 bytes
C:\Documents and Settings\pat\Cookies\pat@tracking.3gnet[1].txt 147 bytes
C:\Documents and Settings\pat\Cookies\pat@catf[2].txt 565 bytes
C:\Documents and Settings\pat\Cookies\pat@youtube[1].txt 790 bytes
C:\Documents and Settings\pat\Cookies\pat@book.bestwestern[1].txt 78 bytes
C:\Documents and Settings\pat\Cookies\pat@voyance-web[2].txt 263 bytes
C:\Documents and Settings\pat\Cookies\pat@zedo[2].txt 383 bytes
C:\Documents and Settings\pat\Cookies\pat@91.121.102[1].txt 377 bytes
C:\Documents and Settings\pat\Cookies\pat@bluestreak[1].txt 565 bytes
C:\Documents and Settings\pat\Cookies\pat@www7.extrarenc[1].txt 414 bytes
C:\Documents and Settings\pat\Cookies\pat@overture[1].txt 103 bytes
C:\Documents and Settings\pat\Cookies\pat@rmc[1].txt 315 bytes
C:\Documents and Settings\pat\Cookies\pat@federal-hotel[1].txt 378 bytes
C:\Documents and Settings\pat\Cookies\pat@as1.falkag[1].txt 103 bytes
C:\Documents and Settings\pat\Cookies\pat@supertoinette[1].txt 379 bytes
C:\Documents and Settings\pat\Cookies\pat@fr.youtube[2].txt 265 bytes
C:\Documents and Settings\pat\Cookies\pat@snapfish[2].txt 415 bytes
C:\Documents and Settings\pat\Cookies\pat@adnext[2].txt 702 bytes
C:\Documents and Settings\pat\Cookies\pat@ebay[2].txt 142 bytes
C:\Documents and Settings\pat\Cookies\pat@findwhat[1].txt 155 bytes
C:\Documents and Settings\pat\Cookies\pat@tourte[1].txt 397 bytes
C:\Documents and Settings\pat\Cookies\pat@kiwee[2].txt 106 bytes
C:\Documents and Settings\pat\Cookies\pat@nosamislespeople[1].txt 426 bytes
C:\Documents and Settings\pat\Cookies\pat@rtbf[2].txt 351 bytes
C:\Documents and Settings\pat\Cookies\pat@stats.federal-hotel[1].txt 497 bytes
C:\Documents and Settings\pat\Cookies\pat@media.webstore-internet[2].txt 120 bytes
C:\Documents and Settings\pat\Cookies\pat@www.googleadservices[1].txt 354 bytes
C:\Documents and Settings\pat\Cookies\pat@www.psfights[2].txt 177 bytes
C:\Documents and Settings\pat\Cookies\pat@m.webtrends[1].txt 186 bytes
C:\Documents and Settings\pat\Cookies\pat@login.live[1].txt 178 bytes
C:\Documents and Settings\pat\Cookies\pat@programme[2].txt 301 bytes
C:\Documents and Settings\pat\Cookies\pat@meteo.msn[2].txt 146 bytes
C:\Documents and Settings\pat\Cookies\pat@zone.msn[2].txt 246 bytes
C:\Documents and Settings\pat\Cookies\pat@my.yahoo[2].txt 569 bytes
C:\Documents and Settings\pat\Cookies\pat@google[1].txt 137 bytes
C:\Documents and Settings\pat\Cookies\pat@ebayrtm[1].txt 166 bytes
C:\Documents and Settings\pat\Cookies\pat@surftheinfo[3].txt 294 bytes
C:\Documents and Settings\pat\Cookies\pat@ad.zanox[2].txt 104 bytes
C:\Documents and Settings\pat\Cookies\pat@www.pokerstars[1].txt 641 bytes
C:\Documents and Settings\pat\Cookies\pat@affiliates.nexpartner[2].txt 1,98KB
C:\Documents and Settings\pat\Cookies\pat@crazywriters.spaces.live[2].txt 434 bytes
C:\Documents and Settings\pat\Cookies\pat@nouvelles-frontieres[1].txt 853 bytes
C:\Documents and Settings\pat\Cookies\pat@pagesjaunes[2].txt 169 bytes
C:\Documents and Settings\pat\Cookies\pat@www.adtraxx[1].txt 85 bytes
C:\Documents and Settings\pat\Cookies\pat@allopass[1].txt 101 bytes
C:\Documents and Settings\pat\Cookies\pat@www.maty[1].txt 105 bytes
C:\Documents and Settings\pat\Cookies\pat@fr.tilllate[2].txt 456 bytes
C:\Documents and Settings\pat\Cookies\pat@pokershop[1].txt 258 bytes
C:\Documents and Settings\pat\Cookies\pat@europacasino[1].txt 190 bytes
C:\Documents and Settings\pat\Cookies\pat@zooclub[1].txt 328 bytes
C:\Documents and Settings\pat\Cookies\pat@cdiscount[1].txt 83 bytes
C:\Documents and Settings\pat\Cookies\pat@www.pokerpages[1].txt 130 bytes
C:\Documents and Settings\pat\Cookies\pat@pokchips[2].txt 285 bytes
C:\Documents and Settings\pat\Cookies\pat@www.limpers[1].txt 244 bytes
C:\Documents and Settings\pat\Cookies\pat@www.avnads[1].txt 91 bytes
C:\Documents and Settings\pat\Cookies\pat@maismoinscher[1].txt 354 bytes
C:\Documents and Settings\pat\Cookies\pat@match.fr.msn[2].txt 1,05KB
C:\Documents and Settings\pat\Cookies\pat@trimgel[2].txt 283 bytes
C:\Documents and Settings\pat\Cookies\pat@www.cyberpokershop[2].txt 411 bytes
C:\Documents and Settings\pat\Cookies\pat@creditmutuel[2].txt 269 bytes
C:\Documents and Settings\pat\Cookies\pat@betway[2].txt 258 bytes
C:\Documents and Settings\pat\Cookies\pat@rap2k[2].txt 440 bytes
C:\Documents and Settings\pat\Cookies\pat@shoppingads[1].txt 107 bytes
C:\Documents and Settings\pat\Cookies\pat@ladeux[1].txt 85 bytes
C:\Documents and Settings\pat\Cookies\pat@www.nord.pref.gouv[1].txt 89 bytes
C:\Documents and Settings\pat\Cookies\pat@optimost[2].txt 131 bytes
C:\Documents and Settings\pat\Cookies\pat@lexitron.nectec.or[1].txt 257 bytes
C:\Documents and Settings\pat\Cookies\pat@cid-b727fbeedee41d02.spaces.live[1].txt 657 bytes
C:\Documents and Settings\pat\Cookies\pat@maelli[1].txt 368 bytes
C:\Documents and Settings\pat\Cookies\pat@chauffeurdebuzz[2].txt 381 bytes
C:\Documents and Settings\pat\Cookies\pat@www.baby-walz[1].txt 101 bytes
C:\Documents and Settings\pat\Cookies\pat@spartoo[1].txt 261 bytes
C:\Documents and Settings\pat\Cookies\pat@lezappingduweb[1].txt 359 bytes
C:\Documents and Settings\pat\Cookies\pat@trc1.emv2[1].txt 104 bytes
C:\Documents and Settings\pat\Cookies\pat@s3s[2].txt 170 bytes
C:\Documents and Settings\pat\Cookies\pat@www.easyrencontre[1].txt 79 bytes
C:\Documents and Settings\pat\Cookies\pat@dt.8x1[2].txt 214 bytes
C:\Documents and Settings\pat\Cookies\pat@doubleclick[1].txt 89 bytes
C:\Documents and Settings\pat\Cookies\pat@eurogrand[1].txt 103 bytes
C:\Documents and Settings\pat\Cookies\pat@corsairfly[1].txt 456 bytes
C:\Documents and Settings\pat\Cookies\pat@caledosphere[2].txt 336 bytes
C:\Documents and Settings\pat\Cookies\pat@waterlime[1].txt 337 bytes
C:\Documents and Settings\pat\Cookies\pat@psfights[2].txt 263 bytes
C:\Documents and Settings\pat\Cookies\pat@planet49[2].txt 106 bytes
C:\Documents and Settings\pat\Cookies\pat@www.redkings[1].txt 237 bytes
C:\Documents and Settings\pat\Cookies\pat@fr.pokerlistings[1].txt 138 bytes
C:\Documents and Settings\pat\Cookies\pat@goa[1].txt 250 bytes
C:\Documents and Settings\pat\Cookies\pat@europeanpokertour[2].txt 278 bytes
C:\Documents and Settings\pat\Cookies\pat@gmodules[1].txt 394 bytes
C:\Documents and Settings\pat\Cookies\pat@libstat[1].txt 75 bytes
C:\Documents and Settings\pat\Cookies\pat@terminala[1].txt 107 bytes
C:\Documents and Settings\pat\Cookies\pat@jdn.monster[1].txt 118 bytes
C:\Documents and Settings\pat\Cookies\pat@cybermonitor[1].txt 93 bytes
C:\Documents and Settings\pat\Cookies\pat@snorgtees[1].txt 369 bytes
C:\Documents and Settings\pat\Cookies\pat@club-assureur[1].txt 355 bytes
C:\Documents and Settings\pat\Cookies\pat@buzznews[2].txt 303 bytes
C:\Documents and Settings\pat\Cookies\pat@www.missglad[1].txt 81 bytes
C:\Documents and Settings\pat\Cookies\pat@deco-in[2].txt 295 bytes
C:\Documents and Settings\pat\Cookies\pat@3479.stats.misstrends[2].txt 232 bytes
C:\Documents and Settings\pat\Cookies\pat@ayb.host-domain-lookup[1].txt 83 bytes
C:\Documents and Settings\pat\Cookies\pat@fr.ebayrtm[1].txt 491 bytes
C:\Documents and Settings\pat\Cookies\pat@em.aveno[2].txt 164 bytes
C:\Documents and Settings\pat\Cookies\pat@mininova[1].txt 389 bytes
C:\Documents and Settings\pat\Cookies\pat@cmonjour[1].txt 504 bytes
C:\Documents and Settings\pat\Cookies\pat@forums.voissa[2].txt 328 bytes
C:\Documents and Settings\pat\Cookies\pat@filecabi[2].txt 467 bytes
C:\Documents and Settings\pat\Cookies\pat@orange[2].txt 136 bytes
C:\Documents and Settings\pat\Cookies\pat@live[2].txt 482 bytes
C:\Documents and Settings\pat\Cookies\pat@softmks[1].txt 105 bytes
C:\Documents and Settings\pat\Cookies\pat@quelle[2].txt 254 bytes
C:\Documents and Settings\pat\Cookies\pat@eulerian[1].txt 642 bytes
C:\Documents and Settings\pat\Cookies\pat@effiliation[1].txt 936 bytes
C:\Documents and Settings\pat\Cookies\pat@lastminute[1].txt 70 bytes
C:\Documents and Settings\pat\Cookies\pat@usafis[1].txt 333 bytes
C:\Documents and Settings\pat\Cookies\pat@be2[1].txt 195 bytes
C:\Documents and Settings\pat\Cookies\pat@www.fr.lastminute[2].txt 489 bytes
C:\Documents and Settings\pat\Cookies\pat@tele2internet[1].txt 81 bytes
C:\Documents and Settings\pat\Cookies\pat@www.utarget.co[1].txt 256 bytes
C:\Documents and Settings\pat\Cookies\pat@cotedazurpalace[1].txt 110 bytes
C:\Documents and Settings\pat\Cookies\pat@www.wam-poker[2].txt 190 bytes
C:\Documents and Settings\pat\Cookies\pat@www.usafis[2].txt 509 bytes
C:\Documents and Settings\pat\Cookies\pat@fe.lea.lycos[2].txt 186 bytes
C:\Documents and Settings\pat\Cookies\pat@www.roxypalace[2].txt 154 bytes
C:\Documents and Settings\pat\Cookies\pat@lvs.truehits.in[1].txt 92 bytes
C:\Documents and Settings\pat\Cookies\pat@iapref.orange[1].txt 97 bytes
C:\Documents and Settings\pat\Cookies\pat@www.betway[1].txt 419 bytes
C:\Documents and Settings\pat\Cookies\pat@missglad[1].txt 292 bytes
C:\Documents and Settings\pat\Cookies\pat@allconsuming[2].txt 300 bytes
C:\Documents and Settings\pat\Cookies\pat@offermatica[1].txt 106 bytes
C:\Documents and Settings\pat\Cookies\pat@www.paypal[2].txt 109 bytes
C:\Documents and Settings\pat\Cookies\pat@ebay[1].txt 753 bytes
C:\Documents and Settings\pat\Cookies\pat@doctissimo[2].txt 175 bytes
C:\Documents and Settings\pat\Cookies\pat@sc.intellitxt[1].txt 123 bytes
C:\Documents and Settings\pat\Cookies\pat@pokerstars[1].txt 365 bytes
C:\Documents and Settings\pat\Cookies\pat@tomshardware.fr.intellitxt[1].txt 136 bytes
C:\Documents and Settings\pat\Cookies\pat@91.121.21[2].txt 502 bytes
C:\Documents and Settings\pat\Cookies\pat@sourceforge[2].txt 328 bytes
C:\Documents and Settings\pat\Cookies\pat@meidell[1].txt 297 bytes
C:\Documents and Settings\pat\Cookies\pat@bestoffres[1].txt 372 bytes
C:\Documents and Settings\pat\Cookies\pat@fahrenheit59200.skyrock[1].txt 92 bytes
C:\Documents and Settings\pat\Cookies\pat@www.i-services[1].txt 135 bytes
C:\Documents and Settings\pat\Cookies\pat@3suisses[1].txt 204 bytes
C:\Documents and Settings\pat\Cookies\pat@www.french[1].txt 84 bytes
C:\Documents and Settings\pat\Cookies\pat@64.254.227[3].txt 91 bytes
C:\Documents and Settings\pat\Cookies\pat@www.betclic[1].txt 98 bytes
C:\Documents and Settings\pat\Cookies\pat@dewb.opt.fimserve[1].txt 121 bytes
C:\Documents and Settings\pat\Cookies\pat@deeb.opt.fimserve[1].txt 121 bytes
C:\Documents and Settings\pat\Cookies\pat@tc.sfr[2].txt 179 bytes
C:\Documents and Settings\pat\Cookies\pat@advertising[2].txt 554 bytes
C:\Documents and Settings\pat\Cookies\pat@bestwestern[2].txt 167 bytes
C:\Documents and Settings\pat\Cookies\pat@google[5].txt 129 bytes
C:\Documents and Settings\pat\Cookies\pat@www.be2[1].txt 269 bytes
C:\Documents and Settings\pat\Cookies\pat@ns27027.ovh[1].txt 365 bytes
C:\Documents and Settings\pat\Cookies\pat@mutuelle-mcd[2].txt 265 bytes
C:\Documents and Settings\pat\Cookies\pat@ads.adbrite[2].txt 188 bytes
C:\Documents and Settings\pat\Cookies\pat@trk.adnwin[2].txt 571 bytes
C:\Documents and Settings\pat\Cookies\pat@skyregie[2].txt 418 bytes
C:\Documents and Settings\pat\Cookies\pat@tooshocking[2].txt 348 bytes
C:\Documents and Settings\pat\Cookies\pat@libellules[1].txt 378 bytes
C:\Documents and Settings\pat\Cookies\pat@www.voyance-web[2].txt 156 bytes
C:\Documents and Settings\pat\Cookies\pat@ads.adomos[2].txt 104 bytes
C:\Documents and Settings\pat\Cookies\pat@www.t-a-o[1].txt 108 bytes
C:\Documents and Settings\pat\Cookies\pat@banner.cotedazurpalace[2].txt 202 bytes
C:\Documents and Settings\pat\Cookies\pat@ads-lb.tilllate[2].txt 323 bytes
C:\Documents and Settings\pat\Cookies\pat@www.bosefrance[1].txt 95 bytes
C:\Documents and Settings\pat\Cookies\pat@www.leboncoin[1].txt 69 bytes
C:\Documents and Settings\pat\Cookies\pat@annonces.maville[2].txt 337 bytes
C:\Documents and Settings\pat\Cookies\pat@microsoft[2].txt 268 bytes
C:\Documents and Settings\pat\Cookies\pat@www.lepetitwebmaster[1].txt 617 bytes
C:\Documents and Settings\pat\Cookies\pat@skimium[1].txt 341 bytes
C:\Documents and Settings\pat\Cookies\pat@www.pokergratuit[1].txt 91 bytes
C:\Documents and Settings\pat\Cookies\pat@clickintext[2].txt 279 bytes
C:\Documents and Settings\pat\Cookies\pat@promo.titanpoker[2].txt 211 bytes
C:\Documents and Settings\pat\Cookies\pat@pokerlistings[1].txt 114 bytes
C:\Documents and Settings\pat\Cookies\pat@fr.unibet[1].txt 495 bytes
C:\Documents and Settings\pat\Cookies\pat@adtech[1].txt 102 bytes
C:\Documents and Settings\pat\Cookies\pat@www.cdpoker[1].txt 198 bytes
C:\Documents and Settings\pat\Cookies\pat@fr.foto[2].txt 76 bytes
C:\Documents and Settings\pat\Cookies\pat@yadro[1].txt 80 bytes
C:\Documents and Settings\pat\Cookies\pat@www.adstours[1].txt 86 bytes
C:\Documents and Settings\pat\Cookies\pat@www.partners-finances[1].txt 114 bytes
C:\Documents and Settings\pat\Cookies\pat@aliceadsl[1].txt 250 bytes
C:\Documents and Settings\pat\Cookies\pat@m02.r7g[1].txt 103 bytes
C:\Documents and Settings\pat\Cookies\pat@wc.mit.grandvirtual[1].txt 245 bytes
C:\Documents and Settings\pat\Cookies\pat@mimi40.centerblog[1].txt 114 bytes
C:\Documents and Settings\pat\Cookies\pat@ebayrtm[3].txt 100 bytes
C:\Documents and Settings\pat\Cookies\pat@www.googleadservices[5].txt 526 bytes
C:\Documents and Settings\pat\Cookies\pat@thepiratebay[2].txt 100 bytes
C:\Documents and Settings\pat\Cookies\pat@everestpoker[2].txt 292 bytes
C:\Documents and Settings\pat\Cookies\pat@aramisauto[1].txt 262 bytes
C:\Documents and Settings\pat\Cookies\pat@www.pixmania[3].txt 2,76KB
C:\Documents and Settings\pat\Cookies\pat@www.europacasino[1].txt 103 bytes
C:\Documents and Settings\pat\Cookies\pat@titanpoker[2].txt 802 bytes
C:\Documents and Settings\pat\Cookies\pat@xiti[1].txt 106 bytes
C:\Documents and Settings\pat\Cookies\pat@www.leguide[1].txt 73 bytes
C:\Documents and Settings\pat\Cookies\pat@lexilogos[2].txt 365 bytes
C:\Documents and Settings\pat\Cookies\pat@www.everestpoker[2].txt 487 bytes
C:\Documents and Settings\pat\Cookies\pat@www.vikingdirect[1].txt 84 bytes
C:\Documents and Settings\pat\Cookies\pat@www.vikingdirect[2].txt 108 bytes
C:\Documents and Settings\pat\Cookies\pat@www18.officedepot[1].txt 108 bytes
C:\Documents and Settings\pat\Cookies\pat@www.microsoft[1].txt 106 bytes
C:\Documents and Settings\pat\Cookies\pat@foto[2].txt 355 bytes
C:\Documents and Settings\pat\Cookies\pat@tsw0[2].txt 2,39KB
C:\Documents and Settings\pat\Cookies\pat@meetic[2].txt 251 bytes
C:\Documents and Settings\pat\Cookies\pat@cams[1].txt 761 bytes
C:\Documents and Settings\pat\Cookies\pat@t-a-o[1].txt 331 bytes
C:\Documents and Settings\pat\Cookies\pat@www.creditmutuel[1].txt 105 bytes
C:\Documents and Settings\pat\Cookies\pat@www.wellpack[1].txt 86 bytes
C:\Documents and Settings\pat\Cookies\pat@king-jouet[1].txt 264 bytes
C:\Documents and Settings\pat\Cookies\pat@www.netmastering2[1].txt 113 bytes
C:\Documents and Settings\pat\Cookies\pat@roxypalace[2].txt 346 bytes
C:\Documents and Settings\pat\Cookies\pat@legroom[2].txt 320 bytes
C:\Documents and Settings\pat\Cookies\pat@statse.webtrendslive[2].txt 195 bytes
C:\Documents and Settings\pat\Cookies\pat@paroles-de-chansons.abazada[1].txt 518 bytes
C:\Documents and Settings\pat\Cookies\pat@yahoo[1].txt 931 bytes
C:\Documents and Settings\pat\Cookies\pat@badoo[1].txt 72 bytes
C:\Documents and Settings\pat\Cookies\pat@grattage[1].txt 309 bytes
C:\Documents and Settings\pat\Cookies\pat@www.maismoinscher[1].txt 119 bytes
C:\Documents and Settings\pat\Cookies\pat@www.naxetris[1].txt 101 bytes
C:\Documents and Settings\pat\Cookies\pat@www.googleadservices[6].txt 410 bytes
C:\Documents and Settings\pat\Cookies\pat@efashionsport[1].txt 389 bytes
C:\Documents and Settings\pat\Cookies\pat@3.adbrite[1].txt 183 bytes
C:\Documents and Settings\pat\Cookies\pat@gcm13.gulliver[2].txt 110 bytes
C:\Documents and Settings\pat\Cookies\pat@www.enattendantdemain[1].txt 250 bytes
C:\Documents and Settings\pat\Cookies\pat@criteo[1].txt 106 bytes
C:\Documents and Settings\pat\Cookies\pat@www.meetic[2].txt 235 bytes
C:\Documents and Settings\pat\Cookies\pat@cdpoker[2].txt 103 bytes
C:\Documents and Settings\pat\Cookies\pat@www.googleadservices[2].txt 626 bytes
C:\Documents and Settings\pat\Cookies\pat@commentcamarche[2].txt 118 bytes
C:\Documents and Settings\pat\Cookies\pat@hertz.122.2o7[1].txt 121 bytes
C:\Documents and Settings\pat\Cookies\pat@msn[2].txt 431 bytes
C:\Documents and Settings\pat\Cookies\pat@nrjmobile[1].txt 507 bytes
C:\Documents and Settings\pat\Cookies\pat@3gnet[2].txt 275 bytes
C:\Documents and Settings\pat\Cookies\pat@baby-walz[1].txt 102 bytes
C:\Documents and Settings\pat\Cookies\pat@rueducommerce[1].txt 877 bytes
C:\Documents and Settings\pat\Cookies\pat@tag.moniforce[1].txt 103 bytes
C:\Documents and Settings\pat\Cookies\pat@paroles[2].txt 281 bytes
C:\Documents and Settings\pat\Cookies\pat@blog.voissa[2].txt 295 bytes
C:\Documents and Settings\pat\Cookies\pat@k35fbsed-a.gmodules[1].txt 405 bytes
C:\Documents and Settings\pat\Cookies\pat@assurland.speedera[2].txt 281 bytes
C:\Documents and Settings\pat\Cookies\pat@edt02[2].txt 2,96KB
C:\Documents and Settings\pat\Cookies\pat@myfreesport[1].txt 519 bytes
C:\Documents and Settings\pat\Cookies\pat@tag.regieci[2].txt 82 bytes
C:\Documents and Settings\pat\Cookies\pat@www.google[1].txt 464 bytes
C:\Documents and Settings\pat\Cookies\pat@top-office[1].txt 274 bytes
C:\Documents and Settings\pat\Cookies\pat@k35fbsed-a.gmodules[3].txt 323 bytes
C:\Documents and Settings\pat\Cookies\pat@092599362.eu1.badoo[1].txt 94 bytes
C:\Documents and Settings\pat\Cookies\pat@01055819217.badoo[1].txt 82 bytes
C:\Documents and Settings\pat\Cookies\pat@www.action-web-international[1].txt 115 bytes
C:\Documents and Settings\pat\Cookies\pat@atdmt[2].txt 103 bytes
C:\Documents and Settings\pat\Cookies\pat@adserver.easyad[1].txt 113 bytes
C:\Documents and Settings\pat\Cookies\pat@www.pokeralille[1].txt 178 bytes
C:\Documents and Settings\pat\Cookies\pat@bestdietforme[2].txt 273 bytes
C:\Documents and Settings\pat\Cookies\pat@www.googleadservices[7].txt 347 bytes
C:\Documents and Settings\pat\Cookies\pat@adv.surinter[1].txt 648 bytes
C:\Documents and Settings\pat\Cookies\pat@p.live[1].txt 208 bytes
C:\Documents and Settings\pat\Cookies\pat@ultralingua[2].txt 198 bytes
C:\Documents and Settings\pat\Cookies\pat@whynet[2].txt 291 bytes
C:\Documents and Settings\pat\Cookies\pat@banner.joylandcasino[2].txt 196 bytes
C:\Documents and Settings\pat\Cookies\pat@www.spartoo[2].txt 484 bytes
C:\Documents and Settings\pat\Cookies\pat@www.musicwhenever[1].txt 90 bytes
C:\Documents and Settings\pat\Cookies\pat@www.avira[1].txt 73 bytes
C:\Documents and Settings\pat\Cookies\pat@www.travailinternetchezsoi[2].txt 264 bytes
C:\Documents and Settings\pat\Cookies\pat@media.snuffx[1].txt 74 bytes
C:\Documents and Settings\pat\Cookies\pat@apmebf[3].txt 189 bytes
C:\Documents and Settings\pat\Cookies\pat@affiliation.fotovista[2].txt 235 bytes
C:\Documents and Settings\pat\Cookies\pat@servedby.adxpower[1].txt 314 bytes
C:\Documents and Settings\pat\Cookies\pat@bobtv[1].txt 100 bytes
C:\Documents and Settings\pat\Cookies\pat@outils.yes-messenger[2].txt 374 bytes
C:\Documents and Settings\pat\Cookies\pat@www.hughestracking[2].txt 239 bytes
C:\Documents and Settings\pat\Cookies\pat@7-dates[1].txt 94 bytes
C:\Documents and Settings\pat\Cookies\pat@www.nice-people[2].txt 160 bytes
C:\Documents and Settings\pat\Cookies\pat@free-datings[2].txt 357 bytes
C:\Documents and Settings\pat\Cookies\pat@www.exbyte[1].txt 82 bytes
C:\Documents and Settings\pat\Cookies\pat@bon-plan-du-net-chez-soi[1].txt 119 bytes
C:\Documents and Settings\pat\Cookies\pat@eskuel[2].txt 304 bytes
C:\Documents and Settings\pat\Cookies\pat@lediet[1].txt 79 bytes
C:\Documents and Settings\pat\Cookies\pat@www.legroom[1].txt 236 bytes
C:\Documents and Settings\pat\Cookies\pat@t.msn[2].txt 331 bytes
C:\Documents and Settings\pat\Cookies\pat@www.kontraband[1].txt 440 bytes
C:\Documents and Settings\pat\Cookies\pat@particuliers.grassavoye[1].txt 92 bytes
C:\Documents and Settings\pat\Cookies\pat@adserving.muppetism[2].txt 397 bytes
C:\Documents and Settings\pat\Cookies\pat@automate.toluna[2].txt 197 bytes
C:\Documents and Settings\pat\Cookies\pat@comineswarneton.olx[2].txt 314 bytes
C:\Documents and Settings\pat\Cookies\pat@comjunfr.free-datings[1].txt 379 bytes
C:\Documents and Settings\pat\Cookies\pat@aftergirl.skyrock[1].txt 85 bytes
C:\Documents and Settings\pat\Cookies\pat@spaces.live[2].txt 755 bytes
C:\Documents and Settings\pat\Cookies\pat@www.unibet-tools[1].txt 107 bytes
C:\Documents and Settings\pat\Cookies\pat@www.adserver5[1].txt 158 bytes
C:\Documents and Settings\pat\Cookies\pat@translate.google[1].txt 414 bytes
C:\Documents and Settings\pat\Cookies\pat@forum.telecharger.01net[1].txt 86 bytes
C:\Documents and Settings\pat\Cookies\pat@www2.nice-people[1].txt 574 bytes
C:\Documents and Settings\pat\Cookies\pat@the-max669.skyrock[2].txt 87 bytes
C:\Documents and Settings\pat\Cookies\pat@dailymotion[1].txt 264 bytes
C:\Documents and Settings\pat\Cookies\pat@la-clubbiste6043.skyrock[1].txt 93 bytes
C:\Documents and Settings\pat\Cookies\pat@tune-up[1].txt 299 bytes
C:\Documents and Settings\pat\Cookies\pat@www.radins[1].txt 78 bytes
C:\Documents and Settings\pat\Cookies\pat@fl01.ct2.comclick[1].txt 288 bytes
C:\Documents and Settings\pat\Cookies\pat@www.boutiquepros.bouyguestelecom[1].txt 355 bytes
C:\Documents and Settings\pat\Cookies\pat@filekicker[1].txt 137 bytes
C:\Documents and Settings\pat\Cookies\pat@tuneup[2].txt 797 bytes
C:\Documents and Settings\pat\Cookies\pat@interencheres[1].txt 311 bytes
C:\Documents and Settings\pat\Cookies\pat@www.securitetotale[1].txt 126 bytes
C:\Documents and Settings\pat\Cookies\pat@3livres-dora.editionsatlas[2].txt 292 bytes
C:\Documents and Settings\pat\Cookies\pat@le-bouzin[2].txt 1,21KB
C:\Documents and Settings\pat\Cookies\pat@fr.sitestat[3].txt 106 bytes
C:\Documents and Settings\pat\Cookies\pat@www.nrjmobile[2].txt 229 bytes
C:\Documents and Settings\pat\Cookies\pat@www.tv[2].txt 77 bytes
C:\Documents and Settings\pat\Cookies\pat@tag.e-i[1].txt 88 bytes
C:\Documents and Settings\pat\Cookies\pat@www.look-voyages[1].txt 100 bytes
C:\Documents and Settings\pat\Cookies\pat@le-style-dior.skyrock[2].txt 90 bytes
C:\Documents and Settings\pat\Cookies\pat@fp.pc-on-internet[2].txt 560 bytes
C:\Documents and Settings\pat\Cookies\pat@blog.larrymovies[2].txt 360 bytes
C:\Documents and Settings\pat\Cookies\pat@google[2].txt 333 bytes
C:\Documents and Settings\pat\Cookies\pat@fr.sitestat[1].txt 113 bytes
C:\Documents and Settings\pat\Cookies\pat@dvd-explorer[1].txt 270 bytes
C:\Documents and Settings\pat\Cookies\pat@www.aina-media[2].txt 111 bytes
C:\Documents and Settings\pat\Cookies\pat@idregie[1].txt 568 bytes
C:\Documents and Settings\pat\Cookies\pat@tracking.publicidees[2].txt 410 bytes
C:\Documents and Settings\pat\Cookies\pat@www.shoppinglife[1].txt 74 bytes
C:\Documents and Settings\pat\Cookies\pat@msnportal.112.2o7[1].txt 124 bytes
C:\Documents and Settings\pat\Cookies\pat@affiliatis[1].txt 204 bytes
C:\Documents and Settings\pat\Cookies\pat@www.pagesjaunes[2].txt 356 bytes
C:\Documents and Settings\pat\Cookies\pat@casinotropez[2].txt 474 bytes
C:\Documents and Settings\pat\Cookies\pat@www.programme[1].txt 76 bytes
C:\Documents and Settings\pat\Cookies\pat@fr.msn[2].txt 331 bytes
C:\Documents and Settings\pat\Cookies\pat@direct-fr[2].txt 280 bytes
C:\Documents and Settings\pat\Cookies\pat@olx[2].txt 642 bytes
C:\Documents and Settings\pat\Cookies\pat@la1[2].txt 352 bytes
C:\Documents and Settings\pat\Cookies\pat@regionsjob[2].txt 288 bytes
C:\Documents and Settings\pat\Cookies\pat@www.titanpoker[2].txt 205 bytes
C:\Documents and Settings\pat\Cookies\pat@hiq.fotolog[1].txt 102 bytes
C:\Documents and Settings\pat\Cookies\pat@fond-ecran-photo[1].txt 244 bytes
C:\Documents and Settings\pat\Cookies\pat@www.priceminister[2].txt 404 bytes
C:\Documents and Settings\pat\Cookies\pat@www2.leboncoin[2].txt 88 bytes
C:\Documents and Settings\pat\Cookies\pat@joylandcasino[2].txt 105 bytes
C:\Documents and Settings\pat\Cookies\pat@hoaxbuster[2].txt 292 bytes
C:\Documents and Settings\pat\Cookies\pat@fotolog[2].txt 528 bytes
C:\Documents and Settings\pat\Cookies\pat@www.unibet[1].txt 102 bytes
C:\Documents and Settings\pat\Cookies\pat@surftheinfo[1].txt 340 bytes
C:\Documents and Settings\pat\Cookies\pat@divertissonsnous[2].txt 308 bytes
C:\Documents and Settings\pat\Cookies\pat@virginmobile[1].txt 268 bytes
C:\Documents and Settings\pat\Cookies\pat@x-jiniee-x.skyrock[1].txt 86 bytes
C:\Documents and Settings\pat\Cookies\pat@ehg-telecomitalia.hitbox[1].txt 272 bytes
C:\Documents and Settings\pat\Cookies\pat@ircfast2[2].txt 139 bytes
C:\Documents and Settings\pat\Cookies\pat@programme-television[1].txt 319 bytes
C:\Documents and Settings\pat\Cookies\pat@crwdcntrl[2].txt 363 bytes
C:\Documents and Settings\pat\Cookies\pat@hertz[2].txt 96 bytes
C:\Documents and Settings\pat\Cookies\pat@www.paroles[1].txt 84 bytes
C:\Documents and Settings\pat\Cookies\pat@vivastreet[2].txt 593 bytes
C:\Documents and Settings\pat\Cookies\pat@sdv[2].txt 659 bytes
C:\Documents and Settings\pat\Cookies\pat@win-the-max[2].txt 263 bytes
C:\Documents and Settings\pat\Cookies\pat@rencontre[1].txt 591 bytes
C:\Documents and Settings\pat\Cookies\pat@revsci[2].txt 1,10KB
C:\Documents and Settings\pat\Cookies\pat@amazon[1].txt 264 bytes
C:\Documents and Settings\pat\Cookies\pat@snap[2].txt 215 bytes
C:\Documents and Settings\pat\Cookies\pat@nice-people[2].txt 481 bytes
C:\Documents and Settings\pat\Cookies\pat@streetreporters[2].txt 340 bytes
C:\Documents and Settings\pat\Cookies\pat@chandleyr.typepad[2].txt 205 bytes
C:\Documents and Settings\pat\Cookies\pat@secure.musicme[2].txt 337 bytes
C:\Documents and Settings\pat\Cookies\pat@www.rencontre[2].txt 211 bytes
C:\Documents and Settings\pat\Cookies\pat@specificclick[2].txt 378 bytes
C:\Documents and Settings\pat\Cookies\pat@emjcd[2].txt 213 bytes
C:\Documents and Settings\pat\Cookies\pat@www.mediatis[2].txt 340 bytes
C:\Documents and Settings\pat\Cookies\pat@eas.apm.emediate[1].txt 381 bytes
C:\Documents and Settings\pat\Cookies\pat@iframe.mediaplazza[1].txt 315 bytes
C:\Documents and Settings\pat\Cookies\pat@linternaute[2].txt 168 bytes
C:\Documents and Settings\pat\Cookies\pat@rutube[2].txt 221 bytes
C:\Documents and Settings\pat\Cookies\pat@openhit[1].txt 77 bytes
C:\Documents and Settings\pat\Cookies\pat@www.buycentral[2].txt 841 bytes
C:\Documents and Settings\pat\Cookies\pat@imrworldwide[2].txt 224 bytes
C:\Documents and Settings\pat\Cookies\pat@www.googleadservices[4].txt 346 bytes
C:\Documents and Settings\pat\Cookies\pat@www.musicwhenever[2].txt 87 bytes
C:\Documents and Settings\pat\Cookies\pat@goofull[1].txt 226 bytes
C:\Documents and Settings\pat\Cookies\pat@www.evene[1].txt 177 bytes
C:\Documents and Settings\pat\Cookies\pat@atlasformen[2].txt 263 bytes
C:\Documents and Settings\pat\Cookies\pat@www.dvd-explorer[1].txt 188 bytes
C:\Documents and Settings\pat\Cookies\pat@www.optioncarriere[1].txt 767 bytes
C:\Documents and Settings\pat\Cookies\pat@getthedaily[2].txt 446 bytes
C:\Documents and Settings\pat\Cookies\pat@fr.sitestat[2].txt 99 bytes
C:\Documents and Settings\pat\Cookies\pat@tradedoubler[1].txt 1,35KB
C:\Documents and Settings\pat\Cookies\pat@zanox.promovacances[2].txt 366 bytes
C:\Documents and Settings\pat\Cookies\pat@metaffiliation[2].txt 5,00KB
C:\Documents and Settings\pat\Cookies\pat@clic.reussissonsensemble[1].txt 1,41KB
C:\Documents and Settings\pat\Cookies\pat@www.aramisauto[2].txt 85 bytes
C:\Documents and Settings\pat\Cookies\pat@track.espaceclient[2].txt 236 bytes
C:\Documents and Settings\pat\Cookies\pat@ebookers[1].txt 258 bytes
C:\Documents and Settings\pat\Cookies\pat@shoppinglife[2].txt 266 bytes
C:\Documents and Settings\pat\Cookies\pat@www.aronet[2].txt 211 bytes
C:\Documents and Settings\pat\Cookies\pat@c.live[1].txt 68 bytes
C:\Documents and Settings\pat\Cookies\pat@64.254.227[1].txt 91 bytes
C:\Documents and Settings\pat\Cookies\pat@weborama[1].txt 509 bytes
C:\Documents and Settings\pat\Cookies\pat@pubs.rueducommerce[2].txt 108 bytes
C:\Documents and Settings\pat\Cookies\pat@www.2xmoinscher[1].txt 307 bytes
C:\Documents and Settings\pat\Cookies\pat@2xmoinscher[1].txt 349 bytes
C:\Documents and Settings\pat\Cookies\pat@www.kiaramedia[2].txt 80 bytes
C:\Documents and Settings\pat\Cookies\pat@www.careerjet[1].txt 762 bytes
C:\Documents and Settings\pat\Cookies\pat@live[3].txt 588 bytes
C:\Documents and Settings\pat\Cookies\pat@rad.msn[2].txt 819 bytes
C:\Documents and Settings\pat\Cookies\pat@account.live[2].txt 257 bytes
C:\Documents and Settings\pat\Cookies\pat@www.voyance-web[1].txt 156 bytes
C:\Documents and Settings\pat\Cookies\pat@monster[2].txt 399 bytes
C:\Documents and Settings\pat\Cookies\pat@cookie.monster[1].txt 148 bytes
C:\Documents and Settings\pat\Cookies\pat@cookie.monster[2].txt 190 bytes
C:\Documents and Settings\pat\Cookies\pat@www3.extrarenc[2].txt 327 bytes
C:\Documents and Settings\pat\Cookies\pat@www.randstad[1].txt 84 bytes
C:\Documents and Settings\pat\Cookies\pat@apple[1].txt 417 bytes
C:\Documents and Settings\pat\Cookies\pat@www.monabanq[1].txt 529 bytes
C:\Documents and Settings\pat\Cookies\pat@banner.eurogrand[2].txt 190 bytes
C:\Documents and Settings\pat\Cookies\pat@www.complicio[1].txt 74 bytes
C:\Documents and Settings\pat\Cookies\pat@adpartners.lsfnetwork[2].txt 270 bytes
C:\Documents and Settings\pat\Cookies\pat@www.swisslife-particuliers-lsf[1].txt 272 bytes
C:\Documents and Settings\pat\Cookies\pat@network.adsmarket[2].txt 366 bytes
C:\Documents and Settings\pat\Cookies\pat@www.chaussures-desmazieres[1].txt 134 bytes
C:\Documents and Settings\pat\Cookies\pat@storechat.apple[2].txt 195 bytes
C:\Documents and Settings\pat\Cookies\pat@storechat.apple[3].txt 130 bytes
C:\Documents and Settings\pat\Cookies\pat@ad.yieldmanager[1].txt 554 bytes
C:\Documents and Settings\pat\Cookies\pat@www.oozoo[2].txt 154 bytes
C:\Documents and Settings\pat\Cookies\pat@maximiles[2].txt 359 bytes
C:\Documents and Settings\pat\Cookies\pat@cid-ccb8784eae6e3d6e.spaces.live[1].txt 662 bytes
C:\Documents and Settings\pat\Cookies\pat@www.01net[1].txt 314 bytes
C:\Documents and Settings\pat\Cookies\pat@mlessens.spaces.live[1].txt 604 bytes
C:\Documents and Settings\pat\Cookies\pat@reactivpub[2].txt 2,13KB
C:\Documents and Settings\pat\Cookies\pat@jessfilousseeva1978.spaces.live[1].txt 191 bytes
C:\Documents and Settings\pat\Cookies\pat@jessfilousseeva1978.spaces.live[2].txt 191 bytes
C:\Documents and Settings\pat\Cookies\pat@livefilestore[2].txt 269 bytes
C:\Documents and Settings\pat\Cookies\pat@jessfilousseeva1978.spaces.live[3].txt 192 bytes
C:\Documents and Settings\pat\Cookies\pat@jessfilousseeva1978.spaces.live[4].txt 191 bytes
C:\Documents and Settings\pat\Cookies\pat@jessfilousseeva1978.spaces.live[5].txt 582 bytes
C:\Documents and Settings\pat\Cookies\pat@spreadshirt[2].txt 167 bytes
C:\Documents and Settings\pat\Cookies\pat@cid-e045a08e42a356e5.spaces.live[1].txt 658 bytes
C:\Documents and Settings\pat\Cookies\pat@jessfilousseeva1978.spaces.live[7].txt 192 bytes
C:\Documents and Settings\pat\Cookies\pat@cylinoux.home.services.spaces.live[2].txt 504 bytes
C:\Documents and Settings\pat\Cookies\pat@sexetamours.spaces.live[1].txt 613 bytes
C:\Documents and Settings\pat\Cookies\pat@hitbox[1].txt 165 bytes
C:\Documents and Settings\pat\Cookies\pat@coeurensang1982.spaces.live[2].txt 660 bytes
C:\Documents and Settings\pat\Cookies\pat@cylinoux.spaces.live[2].txt 418 bytes
C:\Documents and Settings\pat\Cookies\pat@toluna[1].txt 370 bytes
C:\Documents and Settings\pat\Cookies\pat@alicebox[1].txt 265 bytes
C:\Documents and Settings\pat\Cookies\pat@webmail.tele2internet[2].txt 442 bytes
C:\Documents and Settings\pat\Cookies\pat@adrevolver[1].txt 89 bytes
C:\Documents and Settings\pat\Cookies\pat@hotlog[1].txt 77 bytes
C:\Documents and Settings\pat\Cookies\pat@www.scratch2cash[1].txt 263 bytes
C:\Documents and Settings\pat\Cookies\pat@720430a3-e5e5-49c0-80e7-7b1062ad69b2.statcamp[1].txt 715 bytes
C:\Documents and Settings\pat\Cookies\pat@extrafilm[2].txt 283 bytes
C:\Documents and Settings\pat\Cookies\pat@mediaplex[2].txt 164 bytes
C:\Documents and Settings\pat\Cookies\pat@eveiletjeux[1].txt 93 bytes
C:\Documents and Settings\pat\Cookies\pat@ccleaner[2].txt 340 bytes
C:\Documents and Settings\pat\Cookies\pat@2o7[2].txt 128 bytes
C:\Documents and Settings\pat\Cookies\pat@media.adrevolver[1].txt 116 bytes
C:\Documents and Settings\pat\Cookies\pat@ehg-citenumerique.hitbox[2].txt 611 bytes
C:\Documents and Settings\pat\Cookies\pat@em.pc-on-internet[1].txt 552 bytes
C:\Documents and Settings\pat\Cookies\pat@espace.netavenir[1].txt 217 bytes
C:\Documents and Settings\pat\Cookies\pat@partners-finances[2].txt 577 bytes
C:\Documents and Settings\pat\Cookies\pat@indextools[2].txt 408 bytes
C:\Documents and Settings\pat\Cookies\pat@www.googleadservices[3].txt 376 bytes
C:\Documents and Settings\pat\Cookies\pat@telecharger[2].txt 74 bytes
C:\Documents and Settings\pat\Cookies\pat@tribalfusion[2].txt 188 bytes
C:\Documents and Settings\pat\Cookies\pat@notifier.antivir-pe[2].txt 365 bytes
C:\Documents and Settings\pat\Cookies\pat@ccleaner.goofull[2].txt 414 bytes
Marqué pour l'effacement: C:\Documents and Settings\pat\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Marqué pour l'effacement: C:\Documents and Settings\pat\Cookies\index.dat
Poubelle vidée (16 fichiers) 775,8MB
C:\WINDOWS\TEMP\DFC5A2B2.TMP 113 bytes
C:\WINDOWS\TEMP\Perflib_Perfdata_49c.dat 16,00KB
C:\WINDOWS\TEMP\NSIS_install_msgskinner.exe 0,92MB
C:\WINDOWS\TEMP\Perflib_Perfdata_544.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_4b8.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_564.dat 16,00KB
C:\WINDOWS\TEMP\MSIfea99.LOG 474 bytes
C:\WINDOWS\TEMP\MSIfea9a.LOG 474 bytes
C:\WINDOWS\TEMP\Perflib_Perfdata_53c.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_54c.dat 16,00KB
C:\WINDOWS\TEMP\_av_proI.tm~a04880 8,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_4a0.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_554.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_530.dat 16,00KB
C:\WINDOWS\TEMP\MSI4ce0a.LOG 474 bytes
C:\WINDOWS\TEMP\MSI4ce0b.LOG 474 bytes
C:\WINDOWS\TEMP\Perflib_Perfdata_528.dat 16,00KB
C:\WINDOWS\TEMP\MSIc7246.LOG 474 bytes
C:\WINDOWS\TEMP\MSIc7247.LOG 474 bytes
C:\WINDOWS\TEMP\Perflib_Perfdata_480.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_4c0.dat 16,00KB
C:\WINDOWS\TEMP\_ISTMP0.DIR\e25e41.DLL 101,00KB
C:\WINDOWS\TEMP\_ISTMP0.DIR\e25e80.DLL 0,13MB
C:\WINDOWS\TEMP\_ISTMP1.DIR\2b322e8.DLL 101,00KB
C:\WINDOWS\TEMP\_ISTMP1.DIR\2b322f8.DLL 0,13MB
C:\WINDOWS\TEMP\_ISTMP2.DIR\2ba2af5.DLL 101,00KB
C:\WINDOWS\TEMP\_ISTMP2.DIR\2ba2b04.DLL 0,13MB
C:\WINDOWS\TEMP\Perflib_Perfdata_548.dat 16,00KB
C:\WINDOWS\TEMP\MSI56460.LOG 474 bytes
C:\WINDOWS\TEMP\MSIc2907.LOG 474 bytes
C:\WINDOWS\TEMP\MSIc2908.LOG 474 bytes
C:\WINDOWS\TEMP\Perflib_Perfdata_4b4.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_4f4.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_540.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_4cc.dat 16,00KB
C:\WINDOWS\TEMP\MSIcba00.LOG 474 bytes
C:\WINDOWS\TEMP\MSIcba01.LOG 474 bytes
C:\WINDOWS\TEMP\Perflib_Perfdata_4c4.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_4dc.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_4e0.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_4d4.dat 16,00KB
C:\WINDOWS\TEMP\MSI5645f.LOG 474 bytes
C:\WINDOWS\TEMP\Perflib_Perfdata_4ec.dat 16,00KB
C:\WINDOWS\TEMP\Perflib_Perfdata_4e8.dat 16,00KB
 3,15KB
 3,15KB
 3,15KB
 3,14KB
 3,15KB
 3,15KB
 3,15KB
 3,14KB
 3,15KB
 3,14KB
 3,14KB
 3,15KB
 3,15KB
 3,14KB
 3,14KB
 3,15KB
 3,15KB
 3,15KB
 3,14KB
 3,15KB
 3,14KB
 3,15KB
 3,15KB
 3,14KB
 3,14KB
 3,15KB
 3,15KB
 3,14KB
 3,14KB
 3,15KB
 3,15KB
 3,14KB
 3,14KB
 3,14KB
 3,15KB
 3,15KB
 3,15KB
 3,14KB
 3,15KB
 3,15KB
 3,14KB
 3,15KB
 3,15KB
 3,14KB
 3,14KB
 3,14KB
 3,14KB
 3,14KB
 3,14KB
 3,14KB
 3,15KB
 3,14KB
 3,15KB
 3,14KB
 3,15KB
 3,15KB
 3,15KB
 3,14KB
 3,15KB
 3,15KB
 3,15KB
 3,15KB
 3,14KB
 3,15KB
 3,15KB
 3,15KB
 3,14KB
 3,14KB
 3,15KB
 3,14KB
 3,15KB
 3,15KB
 3,15KB
 3,15KB
 3,14KB
 3,15KB
 3,15KB
 761 bytes
 3,15KB
 3,14KB
 3,14KB
 3,14KB
 3,14KB
 3,15KB
 3,15KB
 3,15KB
 3,15KB
 3,15KB
 3,15KB
 3,14KB
 3,14KB
 3,15KB
 3,14KB
 3,15KB
 3,15KB
 3,14KB
 3,14KB
 3,14KB
 3,15KB
C:\WINDOWS\system32\wbem\Logs\wbemprox.log 5,50KB
C:\WINDOWS\system32\wbem\Logs\wmiprov.log 9,09KB
C:\WINDOWS\system32\wbem\Logs\FrameWork.log 14,24KB
C:\WINDOWS\system32\wbem\Logs\wbemess.log 11,60KB
C:\WINDOWS\system32\wbem\Logs\wbemess.lo_ 64,08KB
C:\WINDOWS\setupapi.log 40,32KB
C:\WINDOWS\0.log 0 bytes
C:\WINDOWS\wmsetup.log 8,95KB
C:\WINDOWS\setupact.log 120 bytes
C:\WINDOWS\setuperr.log 0 bytes
C:\WINDOWS\KB943485.log 10,75KB
C:\WINDOWS\KB941644.log 12,19KB
C:\WINDOWS\ocgen.log 5,70KB
C:\WINDOWS\wmsetup10.log 273 bytes
C:\WINDOWS\iis6.log 12,81KB
C:\WINDOWS\comsetup.log 3,94KB
C:\WINDOWS\WgaNotify.log 8,06KB
C:\WINDOWS\FaxSetup.log 12,07KB
C:\WINDOWS	soc.log 5,51KB
C:\WINDOWS\msmqinst.log 3,63KB
C:\WINDOWS\msgsocm.log 606 bytes
C:\WINDOWS	abletoc.log 622 bytes
C:\WINDOWS
etfxocm.log 2,12KB
C:\WINDOWS
tdtcsetup.log 2,39KB
C:\WINDOWS\MedCtrOC.log 850 bytes
C:\WINDOWS\ocmsn.log 684 bytes
C:\WINDOWS\imsins.log 1,34KB
C:\WINDOWS\imsins.BAK 1,34KB
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\drwtsn32.log 2,03MB
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp 6,82KB
C:\WINDOWS\Debug\mrt.log 1,11KB
C:\WINDOWS\Debug\mrteng.log 584 bytes
C:\WINDOWS\Debug\UserMode\userenv.log 0,20MB
Cookie supprimé: tune-up.com
C:\Documents and Settings\pat\Application Data\Google\Local Search History\google%2Eweb.w 7,10KB
C:\Documents and Settings\pat\Application Data\Google\Local Search History\google%2Eimages.w 670 bytes
C:\Documents and Settings\pat\Application Data\Google\Local Search History\google%2Emaps.w 148 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\host\5d91fa26-7c4a83be.hst 12 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\host\5de95b97-17b9e721.hst 14 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\0\4aca4f40-1979e35b.idx 520 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\0\4aca4f40-1979e35b 0,77MB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\2\295300c2-326b56f9.idx 330 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\2\295300c2-326b56f9 4,37KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\2\5189a402-3017bb48.idx 329 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\2\5189a402-3017bb48 724 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\5\56289505-1b901446.idx 328 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\5\56289505-1b901446 2,59KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\15\3f21074f-2ff2d61a.idx 319 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\15\3f21074f-2ff2d61a 724 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\15\61742c0f-4cd87428.idx 325 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\15\61742c0f-4cd87428 9,11KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\17\17759e51-31b99bc0.idx 320 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\17\17759e51-31b99bc0 4,37KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\22\7ef7d516-4571bd2c.idx 7,90KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\22\7ef7d516-4571bd2c 20,53KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\28\14d21c1c-3396cf86.idx 321 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\28\14d21c1c-3396cf86 1,14KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\30\246ddf1e-759b6d76.idx 326 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\30\246ddf1e-759b6d76 1,44KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\31\6b99105f-71dcd7d7.idx 325 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\31\6b99105f-71dcd7d7 465 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\34\76157fe2-675be0ed.idx 324 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\34\76157fe2-675be0ed 1,28KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\35\20c1e4e3-44fe129f.idx 314 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\35\20c1e4e3-44fe129f 1,28KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\36\23c80424-7aa0041f.idx 318 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\36\23c80424-7aa0041f 2,59KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\36\4cf69564-43911a35.idx 324 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\36\4cf69564-43911a35 577 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\39\37ac4a27-2c0a3a98.idx 328 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\39\37ac4a27-2c0a3a98 14,81KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\43\1c23e1ab-2b7df6df.idx 326 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\43\1c23e1ab-2b7df6df 2,38KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\48\65439db0-52ac4c6a.idx 334 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\48\65439db0-52ac4c6a 910 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\50\493458b2-2193f7ac.idx 331 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\50\493458b2-2193f7ac 1,14KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\55\514b69f7-754196fb.idx 316 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\55\514b69f7-754196fb 2,38KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\56\6b637738-2435b806.idx 314 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\56\6b637738-2435b806 577 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\58\20d202fa-2d60c7d4.idx 315 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\58\20d202fa-2d60c7d4 465 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\58\2b81323a-648c8b37.idx 530 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\58\2b81323a-648c8b37 0,77MB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\58\3335e4fa-153f6f8c.idx 7,91KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\58\3335e4fa-153f6f8c 20,53KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\59\2982a5bb-117c1e75.idx 318 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\59\2982a5bb-117c1e75 14,81KB
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\62\450a1c7e-76528dc0.idx 324 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\62\450a1c7e-76528dc0 910 bytes
C:\Documents and Settings\pat\Application Data\Sun\Java\Deployment\cache\6.0\lastAccessed 1 bytes
C:\Program Files\eMule\config\AC_SearchStrings.dat 922 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\www.youtube.com\soundData.sol 58 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\www.youtube.com	imeDisplayConfig.sol 81 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\www.youtube.com\videostats.sol 199 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\fr.youtube.com\soundData.sol 58 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\fr.youtube.com\videostats.sol 199 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\wat.tv\images\v2.5\flash\player.swf\watPlayer.sol 70 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\wat.tv\images\v2.5\flash\player.swf\watPlayerOAS.sol 65 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\pagead2.googlesyndication.com\pagead\googleadplayer.swf\mediaPlayerUserSettings.sol 94 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\www.humour.com\com.jeroenwijering.players.sol 66 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\www.dailymotion.com\flash\flvplayer.swf\userPreferences.sol 66 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\pan.fotovista.com\pixmania\grafx\multipays\flashAS\Bann_580_100.swf\TestMovie_Config_Info.sol 341 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\actu.choc.fr\soundLvl.sol 52 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\images.badoo.com\512\-\-\flash\baloon.swf\ConnectType2.sol 64 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\images.badoo.com\512\-\-\flash\communicator.swf\ConnectType2.sol 64 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\images.badoo.com\522\-\-\flash\baloon.swf\ConnectType2.sol 64 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\images.badoo.com\522\-\-\flash\communicator.swf\ConnectType2.sol 64 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\filecabi.net\VideoPlayer.sol 55 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\www.filecabi.net\VideoPlayer.sol 55 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\media.scanscout.com\ss_data.sol 136 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\www.myfreesport.fr\video_home.swf\kookieSound.sol 48 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\forums.voissa.com\com.jeroenwijering.players.sol 66 bytes
C:\Documents and Settings\pat\Application Data\Macromedia\Flash Player\#SharedObjects\FN6JY4W2\iayes.pagesjaunes.fr\Contener.swf\pj_cookie7.sol 70 bytes
C:\Documents and Settings\pat\Application Data\

green day · Answer

salut

ok,

Télécharger ComboFix (par sUBs) sur le Bureau : http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

* Démarrer en mode sans echec 
* Double cliquer combofix.exe. 
* Appuyer sur la touche Y (Yes) pour démarrer le scan 
* Le rapport sera crée dans: C:\Combofix.txt, poste le stp 


++

poskalex · Answer

salut,je suis venus voir sur le site si tu ne m avais pas repondu car je trouvais ça bizzare,en faite j etais sur à 200 pour cent de t avoir envoyer le rapport combofix en mode sans echec mais une fois sur le site bein je vois que non !!!:-) je ne dois plus avoir beaucoup de matiére gris moi en faite,lool,bon je te le joint il doit datter de samedi si tu veux que j en refasse un n hesite pas à me le dire,encore merci.... alex ComboFix 08-02.02.5 - pat 2008-02-02 12:31:53.1 - [color=red][b]FAT32[/b][/color]x86 MINIMAL Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.226 [GMT 1:00] Endroit: C:\Documents and Settings\pat\Bureau\ComboFix.exe [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\pat\Application Data\MessengerSkinner C:\Documents and Settings\pat\Application Data\MessengerSkinner\Userdata\languages_v2.xml C:\Documents and Settings\pat\Application Data\MessengerSkinner\Userdata\pack1.cab c:\Documents and Settings\pat\Local Settings\Application Data\dhttel.dat c:\documents and settings\pat\local settings\application data\dhttel.exe c:\Documents and Settings\pat\Local Settings\Application Data\dhttel_nav.dat c:\Documents and Settings\pat\Local Settings\Application Data\dhttel_navps.dat C:\Documents and Settings\pat\Menu Démarrer\Programmes\MessengerSkinner C:\Documents and Settings\pat\Menu Démarrer\Programmes\MessengerSkinner\Conditions générales.lnk C:\Documents and Settings\pat\Menu Démarrer\Programmes\MessengerSkinner\Confidentialité.lnk C:\Documents and Settings\pat\Menu Démarrer\Programmes\MessengerSkinner\Website.lnk C:\Program Files\messengerskinner C:\Program Files\messengerskinner\Conditions générales.url C:\Program Files\messengerskinner\Confidentialité.url C:\Program Files\messengerskinner\download\defaultPack.cab C:\Program Files\messengerskinner\MessengerSkinnerDll.dll C:\Program Files\messengerskinner esources\appconfig.xml C:\Program Files\messengerskinner esources\btn.rgn C:\Program Files\messengerskinner esources\btnBnr.rgn C:\Program Files\messengerskinner esources\btnIn.rgn C:\Program Files\messengerskinner esources\btnInNormal.bmp C:\Program Files\messengerskinner esources\btnInOver.bmp C:\Program Files\messengerskinner esources\btnNormal.bmp C:\Program Files\messengerskinner esources\btnNormal.gif C:\Program Files\messengerskinner esources\btnNormalBnr.bmp C:\Program Files\messengerskinner esources\btnNormalBnr.gif C:\Program Files\messengerskinner esources\btnOver.bmp C:\Program Files\messengerskinner esources\btnOver.gif C:\Program Files\messengerskinner esources\btnOverBnr.bmp C:\Program Files\messengerskinner esources\btnOverBnr.gif C:\Program Files\messengerskinner esources\languages_v2.xml C:\Program Files\messengerskinner\uninst.exe C:\Program Files\messengerskinner\Website.url C:\WINDOWS\system32\jnsrmsm.dat C:\WINDOWS\system32\jnsrmsm_nav.dat C:\WINDOWS\system32\jnsrmsm_navps.dat C:\WINDOWS\system32\mcrh.tmp C:\WINDOWS\system32 vs2.inf . ((((((((((((((((((((((((((((( Fichiers créés 2008-01-02 to 2008-02-02 )))))))))))))))))))))))))))))))))))) . 2008-02-01 16:56 . 2008-02-01 16:56 d-------- C:\Program Files\Avira 2008-02-01 16:56 . 2008-02-01 16:56 d-------- C:\Documents and Settings\All Users\Application Data\Avira 2008-02-01 16:00 . 2008-02-01 16:00 d-------- C:\Documents and Settings\pat\Application Data\Grisoft 2008-02-01 15:58 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-02-01 14:34 . 2008-02-01 14:34 d-------- C:\Program Files\Lopxp 2008-01-25 20:27 . 2008-01-25 20:27 21,757 --a------ C:\WINDOWS\system32\TuneUpDefragService_20080125-192733.dmp 2008-01-25 12:55 . 2008-01-25 12:55 d--hs---- C:\FOUND.001 2008-01-21 02:56 . 2008-01-21 02:56 d-------- C:\Program Files\Everest Poker 2008-01-19 17:05 . 2008-01-19 17:05 d-------- C:\Documents and Settings\pat\Application Data\TuneUp Software 2008-01-19 17:05 . 2008-01-19 17:05 306,432 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-01-19 17:05 . 2007-12-20 10:41 29,440 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-01-19 17:04 . 2008-01-19 17:04 d-------- C:\Program Files\TuneUp Utilities 2008 2008-01-19 17:04 . 2008-01-19 17:04 d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-01-19 17:01 . 2008-01-19 17:01 d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-01-17 15:53 . 2008-01-17 15:53 d-------- C:\Documents and Settings\pat\Application Data\Nokia Multimedia Player 2008-01-17 15:46 . 2008-01-17 15:46 d-------- C:\Program Files\Fichiers communs\Teleca Shared 2008-01-17 15:46 . 2008-01-17 15:46 d-------- C:\Program Files\Common Files 2008-01-15 12:13 . 2008-01-15 12:13 d-------- C:\Program Files\Moss Bay Software 2008-01-15 11:53 . 2008-01-15 11:53 d-------- C:\Program Files\Business Card Printery 3 2008-01-15 11:53 . 2008-01-15 11:53 72,704 --a------ C:\WINDOWS\cadkasdeinst01e.exe 2008-01-14 22:09 . 2008-01-14 22:09 d-------- C:\Program Files\Red Kings Poker 2008-01-14 13:33 . 2008-01-14 13:34 d-------- C:\Documents and Settings\pat\Application Data\PC Suite 2008-01-14 13:32 . 2008-01-14 13:32 d-------- C:\Program Files\Nokia 2008-01-14 13:32 . 2008-01-14 13:32 d-------- C:\Program Files\Fichiers communs\PCSuite 2008-01-14 13:32 . 2008-01-14 13:32 d-------- C:\Program Files\Fichiers communs\Nokia 2008-01-14 11:14 . 2008-01-14 11:14 d-------- C:\Documents and Settings\pat\Application Data\ScanSoft 2008-01-10 18:23 . 1996-02-08 09:54 284,160 --a------ C:\WINDOWS\unin040c.exe 2008-01-10 18:17 . 2008-01-10 18:18 40 --a------ C:\WINDOWS\INTER.INI 2008-01-10 18:09 . 2008-01-10 18:09 d-------- C:\Documents and Settings\pat\WINDOWS 2008-01-09 00:00 . 2008-01-09 00:09 38,305 --a------ C:\PokerStars.log.0 2008-01-06 06:36 . 2008-01-06 06:36 7,168 --ahs---- C:\WINDOWS\Thumbs.db 2008-01-06 06:36 . 2008-01-06 06:36 6,144 --ahs---- C:\WINDOWS\system32\Thumbs.db 2008-01-06 03:18 . 2008-01-06 03:18 d-------- C:\Program Files\PokerStars . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-27 11:08 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft 2007-12-23 13:17 --------- d-----w C:\Program Files\lecteur windows media 11 2007-12-16 20:27 --------- d-----w C:\Program Files\Muiltmedia keyboard Utility 2007-12-16 20:20 --------- d-----w C:\Program Files\Browser MOUSE 2007-12-10 11:40 --------- d-----w C:\Program Files\JAP masqué ip 2007-12-03 23:46 --------- d-----w C:\Documents and Settings\pat\Application Data\Weflirt 2007-11-13 16:46 2,402,832 ----a-w C:\Program Files\WLinstaller.exe 2007-11-08 01:10 17,712,424 ----a-w C:\Program Files\Setup mise a jour internet explorer.exe 2007-11-08 00:12 2,402,832 ----a-w C:\Program Files\WLinstallermsn mise a jour.exe 2007-11-07 23:52 7,999 ----a-w C:\Program Files\ACDegrades msn plus.plsc 2007-11-07 23:30 3,404,638 ----a-w C:\Program Files\MsgPlusLive-423.zip 2007-11-07 09:28 728,576 ----a-w C:\WINDOWS\system32\lsasrv.dll 2007-11-07 09:28 728,576 ----a-w C:\WINDOWS\system32\dllcache\lsasrv.dll 2007-10-27 14:24 18,224 ----a-w C:\Documents and Settings\pat\Application Data\GDIPFONTCACHEV1.DAT 2007-10-18 12:47 13,411,824 ----a-w C:\Program Files\Google_Earth_instal.exe 2007-09-25 00:06 3,858,985 ----a-w C:\Program Files\eMule0.48a-Installer.exe 2001-11-23 10:08 712,704 ----a-r C:\WINDOWS\inf\OTHER\AUDIO3D.DLL 2007-08-01 00:21 631,728 --sh--w C:\WINDOWS\system32\klkkj.bak2 2007-07-13 02:07 1,018,054 --sh--w C:\WINDOWS\system32\klkkj.bak1 . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-30 15:59 68856] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 20:09 15360] "PcSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2005-04-20 09:57 847872] "Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [2007-08-30 17:43 4670704] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496] "SoundMan"="SOUNDMAN.EXE" [2006-11-17 05:42 577536 C:\WINDOWS\SOUNDMAN.EXE] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648] "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-07-19 17:32 221184] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51 39792] "PaperPort PTD"="C:\Program Files\Scansoft\PaperPort\pptd40nt.exe" [2005-03-17 19:17 57393] "SetDefPrt"="C:\Program Files\Brother\BRMFLPRO\BrDefPrt.exe" [2002-12-18 14:31 40960] "SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 10:22 155648] "IndexSearch"="C:\Program Files\Scansoft\PaperPort\IndexSearch.exe" [2005-03-17 19:30 40960] "BrMfcWnd"="C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe" [2006-03-28 15:48 622592] "SetDefPrt2"="C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe" [2005-01-26 18:02 49152] "ControlCenter3"="C:\Program Files\Brother\ControlCenter3\brctrcen.exe" [2006-04-10 14:58 61440] "TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\HOMERunner.exe" [2007-10-31 10:19 378784] "FLMOFFICE4DMOUSE"="C:\Program Files\Browser MOUSE\mouse32a.exe" [2007-12-16 21:20 360448] "FLMK08KB"="C:\Program Files\Muiltmedia keyboard Utility\1.3\KbdAp32A.exe" [2007-12-16 21:27 381440] "SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-08-14 17:02 1063752] "PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2005-03-22 09:39 167936] "DataLayer"="C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe" [2005-03-31 09:30 1106944] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-01 18:07 249896] "MSConfig"="C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe" [2004-08-19 22:10 160768] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-19 20:09 15360] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 09:01:04 83360] SmartUI.lnk - C:\Program Files\Scansoft\PaperPort\SmartUI\SmartUI.exe [2007-10-31 17:03:45 1650688] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegedit"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\jkklk] C:\WINDOWS\system32\jkklk.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\opnnkkk] opnnkkk.dll S2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2004-08-19 20:10] S3 brfilt;Pilote de filtre Brother MFC;C:\WINDOWS\system32\Drivers\Brfilt.sys [2001-08-17 21:12] S3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys [2004-10-15 12:50] S3 BrSerWDM;Pilote série Brother;C:\WINDOWS\system32\Drivers\BrSerWdm.sys [2001-08-17 21:12] S3 BrUsbMdm;Brother MFC USB modem télécopieur uniquement;C:\WINDOWS\system32\Drivers\BrUsbMdm.sys [2001-08-17 21:12] S3 BrUsbScn;Pilote de scanneur Brother MFC USB;C:\WINDOWS\system32\Drivers\BrUsbScn.sys [2001-08-17 21:12] S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-01-19 17:05] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2008-02-01 14:03:16 C:\WINDOWS\Tasks\Norton Security Scan.job" - C:\Program Files\Norton Security Scan\Nss.exe "2008-02-01 16:16:50 C:\WINDOWS\Tasks\Maintenance en 1 clic.job" - C:\Program Files\TuneUp Utilities 2008\OneClick.exe . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-02-02 12:33:24 Windows 5.1.2600 Service Pack 2 FAT NTAPI Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... Scan terminé avec succès Les fichiers cachés: 0 ************************************************************************** . Temps d'accomplissement: 2008-02-02 12:33:49 ComboFix-quarantined-files.txt 2008-02-02 11:33:48 . 2008-02-01 09:50:29 --- E O F ---

green day · Answer

Salut

 ah ! :p

on va faire un autre combo, mais on va passé par navilog avant !

    * Faire un clic droit sur ce lien : http://perso.orange.fr/il.mafioso/Navifix/Navilog1.zip
    * Enregistrez la cible (du lien) sous... et enregistrez-le sur le bureau.
    * Faire un clic droit sur navilog1.zip et choisir "tout extraire"
    * Double-cliquez sur navilog1.exe
    * Arriver au menu principal, choisir l'option 1 et valider.
    * Patientez jusqu'au message : Analyse Termine le ...
    * Le rapport sera en outre sauvegardé à la racine du disque (fixnavi.txt) 


==> poste le stp

@+

poskalex · Answer

salut !!!
bon bein j ai fais ce que tu m as demandé en espérant que se soit bien fait,je te le poste ci dessous:
Search Navipromo version 3.4.2 commencé le 06/02/2008 à 14:01:44,06

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Mise à jour le 27.01.2008 à 17h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.13 
Système de fichiers : FAT32

Executé en mode normal

*** Recherche Programmes installés ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***




*** Recherche dossiers dans "C:\Documents and Settings\pat\application data" *** 



*** Recherche dossiers dans "C:\Documents and Settings\pat\local settings\application data" *** 



*** Recherche dossiers dans "C:\Documents and Settings\pat\MENUD?~1\PROGRA~1" *** 


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUD?~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\WINDOWS\system32 *

* Recherche dans "C:\Documents and Settings\pat\local settings\application data" * 



*** Recherche fichiers *** 




*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans C:\WINDOWS\system32 :


* Dans "C:\Documents and Settings\pat\local settings\application data" : 


3)Recherche Certificats :

Certificat Egroup absent !

4)Recherche fichiers connus :

C:\WINDOWS\system32\klkkj.bak1 trouvé ! infection Vundo possible non traitée par cet outil !
C:\WINDOWS\system32\klkkj.bak2 trouvé ! infection Vundo possible non traitée par cet outil !


*** Analyse terminée le 06/02/2008 à 14:03:16,53 ***

green day · Answer

Salut

ok,

# Télécharger Vundofix.exe (par Atribune) sur votre Bureau : http://www.atribune.org/ccount/click.php?id=4 

* Double-cliquer sur VundoFix.exe afin de le lancer. 
* Cliquer sur le bouton Scan for Vundo. 
* Lorsque le scan est complété, cliquer sur le bouton Remove Vundo. 
* Une invite de commande demandera si l’on souhaite supprimer les fichiers, cliquer sur YES 
* Après avoir cliqué "YES", le Bureau disparaîtra un moment lors de la suppression des fichiers. * Une nouvelle invite de commande annoncera que le PC devra s'éteindre ("shutdown"). Cliquer sur OK , puis laisser le redémarrer. 
* Le contenu du rapport est situé dans C:\vundofix.txt, poste le stp 


++

poskalex · Answer

salut,
bon j ai installé et j ai scanné,mais à la fin du scan il ne m a pas mis tout de suite :"remove vundo"
en premier juste apres  j ai eu une petite fenete carrée avec écrit: "done searching for files " avec seulement 'ok' donc j ai fais 'ok' 
ensuite il ma remis une fenetre ou il etait marqué" done searching for files.no infected files were found" et là je ne pouvais que toujours cliker sur 'ok' ce que j ai fais...et là seulement je pouvais cliker sur "remove vundo" ce que j ai fais aussi...
et là il m a écrit : "no files were found,vundo fix v.6.7.8 will now close" et tout c est fermé...
je suis donc allé dans le disque dur 'c' pour trouver quand meme le rapport ,que j ai trouvé et que je te joints ci desous...

Checking Java version...

Scan started at 03:18:46 07/02/2008

Listing files found while scanning....


VundoFix V6.7.8

Checking Java version...

Scan started at 10:38:50 07/02/2008

Listing files found while scanning....

No infected files were found.


Beginning removal...

VundoFix V6.7.8

Checking Java version...

Scan started at 11:01:03 07/02/2008

Listing files found while scanning....

No infected files were found.


Beginning removal...


voila merci...alex

green day · Answer

Salut

ok, poste un nouveau combo stp

++

poskalex · Answer

salut,j ai refais un scan combo comme tu me l as demandé,le voici: ComboFix 08-02.02.5 - pat 2008-02-08 11:54:02.2 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.182 [GMT 1:00] Endroit: C:\Documents and Settings\pat\Bureau\ComboFix.exe [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . ((((((((((((((((((((((((((((( Fichiers créés 2008-01-08 to 2008-02-08 )))))))))))))))))))))))))))))))))))) . 2008-02-07 03:18 . 2008-02-07 03:18 d-------- C:\VundoFix Backups 2008-02-06 17:41 . 2008-02-06 17:41 d--hs---- C:\FOUND.002 2008-02-06 14:00 . 2008-02-06 14:00 d-------- C:\Program Files\Navilog1 2008-02-01 16:56 . 2008-02-01 16:56 d-------- C:\Program Files\Avira 2008-02-01 16:56 . 2008-02-01 16:56 d-------- C:\Documents and Settings\All Users\Application Data\Avira 2008-02-01 16:00 . 2008-02-01 16:00 d-------- C:\Documents and Settings\pat\Application Data\Grisoft 2008-02-01 15:58 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-02-01 14:34 . 2008-02-01 14:34 d-------- C:\Program Files\Lopxp 2008-01-25 20:27 . 2008-01-25 20:27 21,757 --a------ C:\WINDOWS\system32\TuneUpDefragService_20080125-192733.dmp 2008-01-25 12:55 . 2008-01-25 12:55 d--hs---- C:\FOUND.001 2008-01-21 02:56 . 2008-01-21 02:56 d-------- C:\Program Files\Everest Poker 2008-01-19 17:05 . 2008-01-19 17:05 d-------- C:\Documents and Settings\pat\Application Data\TuneUp Software 2008-01-19 17:05 . 2008-01-19 17:05 306,432 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-01-19 17:05 . 2007-12-20 10:41 29,440 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-01-19 17:04 . 2008-01-19 17:04 d-------- C:\Program Files\TuneUp Utilities 2008 2008-01-19 17:04 . 2008-01-19 17:04 d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-01-19 17:01 . 2008-01-19 17:01 d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-01-17 15:53 . 2008-01-17 15:53 d-------- C:\Documents and Settings\pat\Application Data\Nokia Multimedia Player 2008-01-17 15:46 . 2008-01-17 15:46 d-------- C:\Program Files\Fichiers communs\Teleca Shared 2008-01-17 15:46 . 2008-01-17 15:46 d-------- C:\Program Files\Common Files 2008-01-15 12:13 . 2008-01-15 12:13 d-------- C:\Program Files\Moss Bay Software 2008-01-15 11:53 . 2008-01-15 11:53 d-------- C:\Program Files\Business Card Printery 3 2008-01-15 11:53 . 2008-01-15 11:53 72,704 --a------ C:\WINDOWS\cadkasdeinst01e.exe 2008-01-14 22:09 . 2008-01-14 22:09 d-------- C:\Program Files\Red Kings Poker 2008-01-14 13:33 . 2008-01-14 13:34 d-------- C:\Documents and Settings\pat\Application Data\PC Suite 2008-01-14 13:32 . 2008-01-14 13:32 d-------- C:\Program Files\Nokia 2008-01-14 13:32 . 2008-01-14 13:32 d-------- C:\Program Files\Fichiers communs\PCSuite 2008-01-14 13:32 . 2008-01-14 13:32 d-------- C:\Program Files\Fichiers communs\Nokia 2008-01-14 11:14 . 2008-01-14 11:14 d-------- C:\Documents and Settings\pat\Application Data\ScanSoft 2008-01-10 18:23 . 1996-02-08 09:54 284,160 --a------ C:\WINDOWS\unin040c.exe 2008-01-10 18:17 . 2008-01-10 18:18 40 --a------ C:\WINDOWS\INTER.INI 2008-01-10 18:09 . 2008-01-10 18:09 d-------- C:\Documents and Settings\pat\WINDOWS 2008-01-09 00:00 . 2008-01-09 00:09 38,305 --a------ C:\PokerStars.log.0 . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-06 02:18 --------- d-----w C:\Program Files\PokerStars 2007-12-27 11:08 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft 2007-12-23 13:17 --------- d-----w C:\Program Files\lecteur windows media 11 2007-12-16 20:27 --------- d-----w C:\Program Files\Muiltmedia keyboard Utility 2007-12-16 20:20 --------- d-----w C:\Program Files\Browser MOUSE 2007-12-10 11:40 --------- d-----w C:\Program Files\JAP masqué ip 2007-11-13 16:46 2,402,832 ----a-w C:\Program Files\WLinstaller.exe 2007-11-08 01:10 17,712,424 ----a-w C:\Program Files\Setup mise a jour internet explorer.exe 2007-11-08 00:12 2,402,832 ----a-w C:\Program Files\WLinstallermsn mise a jour.exe 2007-11-07 23:52 7,999 ----a-w C:\Program Files\ACDegrades msn plus.plsc 2007-11-07 23:30 3,404,638 ----a-w C:\Program Files\MsgPlusLive-423.zip 2007-10-27 14:24 18,224 ----a-w C:\Documents and Settings\pat\Application Data\GDIPFONTCACHEV1.DAT 2007-10-18 12:47 13,411,824 ----a-w C:\Program Files\Google_Earth_instal.exe 2007-09-25 00:06 3,858,985 ----a-w C:\Program Files\eMule0.48a-Installer.exe 2001-11-23 10:08 712,704 ----a-r C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-30 15:59 68856] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 20:09 15360] "PcSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2005-04-20 09:57 847872] "Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [2007-08-30 17:43 4670704] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496] "SoundMan"="SOUNDMAN.EXE" [2006-11-17 05:42 577536 C:\WINDOWS\SOUNDMAN.EXE] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648] "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-07-19 17:32 221184] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51 39792] "PaperPort PTD"="C:\Program Files\Scansoft\PaperPort\pptd40nt.exe" [2005-03-17 19:17 57393] "SetDefPrt"="C:\Program Files\Brother\BRMFLPRO\BrDefPrt.exe" [2002-12-18 14:31 40960] "SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 10:22 155648] "IndexSearch"="C:\Program Files\Scansoft\PaperPort\IndexSearch.exe" [2005-03-17 19:30 40960] "BrMfcWnd"="C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe" [2006-03-28 15:48 622592] "SetDefPrt2"="C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe" [2005-01-26 18:02 49152] "ControlCenter3"="C:\Program Files\Brother\ControlCenter3\brctrcen.exe" [2006-04-10 14:58 61440] "TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\HOMERunner.exe" [2007-10-31 10:19 378784] "FLMOFFICE4DMOUSE"="C:\Program Files\Browser MOUSE\mouse32a.exe" [2007-12-16 21:20 360448] "FLMK08KB"="C:\Program Files\Muiltmedia keyboard Utility\1.3\KbdAp32A.exe" [2007-12-16 21:27 381440] "SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-08-14 17:02 1063752] "PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2005-03-22 09:39 167936] "DataLayer"="C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe" [2005-03-31 09:30 1106944] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-01 18:07 249896] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-19 20:09 15360] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 09:01:04 83360] SmartUI.lnk - C:\Program Files\Scansoft\PaperPort\SmartUI\SmartUI.exe [2007-10-31 17:03:45 1650688] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegedit"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\jkklk] C:\WINDOWS\system32\jkklk.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\opnnkkk] opnnkkk.dll R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2004-08-19 20:10] R3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys [2004-10-15 12:50] S3 brfilt;Pilote de filtre Brother MFC;C:\WINDOWS\system32\Drivers\Brfilt.sys [2001-08-17 21:12] S3 BrSerWDM;Pilote série Brother;C:\WINDOWS\system32\Drivers\BrSerWdm.sys [2001-08-17 21:12] S3 BrUsbMdm;Brother MFC USB modem télécopieur uniquement;C:\WINDOWS\system32\Drivers\BrUsbMdm.sys [2001-08-17 21:12] S3 BrUsbScn;Pilote de scanneur Brother MFC USB;C:\WINDOWS\system32\Drivers\BrUsbScn.sys [2001-08-17 21:12] S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-01-19 17:05] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2008-02-01 14:03:16 C:\WINDOWS\Tasks\Norton Security Scan.job" - C:\Program Files\Norton Security Scan\Nss.exe "2008-02-01 16:16:50 C:\WINDOWS\Tasks\Maintenance en 1 clic.job" - C:\Program Files\TuneUp Utilities 2008\OneClick.exe . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-02-08 11:55:28 Windows 5.1.2600 Service Pack 2 FAT NTAPI Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... Scan terminé avec succès Les fichiers cachés: 0 ************************************************************************** . Temps d'accomplissement: 2008-02-08 11:55:55 ComboFix-quarantined-files.txt 2008-02-08 10:55:54 ComboFix2.txt 2008-02-02 11:33:52 . 2008-02-08 10:25:20 --- E O F ---

green day · Answer

ok,

Crée un nouveau document texte et nomme le CFScript.txt ( attention très important ! ) : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes en gras : 


file::

C:\FOUND.001
C:\WINDOWS\unin040c.exe 
C:\WINDOWS\system32\jkklk.dll
C:\WINDOWS\system32\opnnkkk.dll 

registry::

[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\jkklk]


[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\opnnkkk]

Dans la fenêtre qui suit, choisie l'option 1 puis valide 
Patiente un peu, si le bureau disparait parfois durant le scan : c'est normal ! 
A la fin du scan, un rapport va s'afficher : poste le stp ( sinon il se situe dans ici : C:\ComboFix.txt ) 


++

poskalex · Answer

j ai fais ce que tu m as demandé mais le seul petit truc que j ai pas trop pigé en faite c est une foi le document text fait ecrit en gras et bien recopié,je n ai pas trop saisi le moment ou il fallait taper 1 dans l ecran suivna t donc j ai refais un combo normalement et pusi j ai eu se qui suit : ComboFix 08-02.02.5 - pat 2008-02-08 13:44:43.3 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.88 [GMT 1:00] Endroit: C:\Documents and Settings\pat\Bureau\ComboFix.exe [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . ((((((((((((((((((((((((((((( Fichiers créés 2008-01-08 to 2008-02-08 )))))))))))))))))))))))))))))))))))) . 2008-02-07 03:18 . 2008-02-07 03:18 d-------- C:\VundoFix Backups 2008-02-06 17:41 . 2008-02-06 17:41 d--hs---- C:\FOUND.002 2008-02-06 14:00 . 2008-02-06 14:00 d-------- C:\Program Files\Navilog1 2008-02-01 16:56 . 2008-02-01 16:56 d-------- C:\Program Files\Avira 2008-02-01 16:56 . 2008-02-01 16:56 d-------- C:\Documents and Settings\All Users\Application Data\Avira 2008-02-01 16:00 . 2008-02-01 16:00 d-------- C:\Documents and Settings\pat\Application Data\Grisoft 2008-02-01 15:58 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-02-01 14:34 . 2008-02-01 14:34 d-------- C:\Program Files\Lopxp 2008-01-25 20:27 . 2008-01-25 20:27 21,757 --a------ C:\WINDOWS\system32\TuneUpDefragService_20080125-192733.dmp 2008-01-25 12:55 . 2008-01-25 12:55 d--hs---- C:\FOUND.001 2008-01-21 02:56 . 2008-01-21 02:56 d-------- C:\Program Files\Everest Poker 2008-01-19 17:05 . 2008-01-19 17:05 d-------- C:\Documents and Settings\pat\Application Data\TuneUp Software 2008-01-19 17:05 . 2008-01-19 17:05 306,432 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-01-19 17:05 . 2007-12-20 10:41 29,440 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-01-19 17:04 . 2008-01-19 17:04 d-------- C:\Program Files\TuneUp Utilities 2008 2008-01-19 17:04 . 2008-01-19 17:04 d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-01-19 17:01 . 2008-01-19 17:01 d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-01-17 15:53 . 2008-01-17 15:53 d-------- C:\Documents and Settings\pat\Application Data\Nokia Multimedia Player 2008-01-17 15:46 . 2008-01-17 15:46 d-------- C:\Program Files\Fichiers communs\Teleca Shared 2008-01-17 15:46 . 2008-01-17 15:46 d-------- C:\Program Files\Common Files 2008-01-15 12:13 . 2008-01-15 12:13 d-------- C:\Program Files\Moss Bay Software 2008-01-15 11:53 . 2008-01-15 11:53 d-------- C:\Program Files\Business Card Printery 3 2008-01-15 11:53 . 2008-01-15 11:53 72,704 --a------ C:\WINDOWS\cadkasdeinst01e.exe 2008-01-14 22:09 . 2008-01-14 22:09 d-------- C:\Program Files\Red Kings Poker 2008-01-14 13:33 . 2008-01-14 13:34 d-------- C:\Documents and Settings\pat\Application Data\PC Suite 2008-01-14 13:32 . 2008-01-14 13:32 d-------- C:\Program Files\Nokia 2008-01-14 13:32 . 2008-01-14 13:32 d-------- C:\Program Files\Fichiers communs\PCSuite 2008-01-14 13:32 . 2008-01-14 13:32 d-------- C:\Program Files\Fichiers communs\Nokia 2008-01-14 11:14 . 2008-01-14 11:14 d-------- C:\Documents and Settings\pat\Application Data\ScanSoft 2008-01-10 18:23 . 1996-02-08 09:54 284,160 --a------ C:\WINDOWS\unin040c.exe 2008-01-10 18:17 . 2008-01-10 18:18 40 --a------ C:\WINDOWS\INTER.INI 2008-01-10 18:09 . 2008-01-10 18:09 d-------- C:\Documents and Settings\pat\WINDOWS 2008-01-09 00:00 . 2008-01-09 00:09 38,305 --a------ C:\PokerStars.log.0 . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-06 02:18 --------- d-----w C:\Program Files\PokerStars 2007-12-27 11:08 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft 2007-12-23 13:17 --------- d-----w C:\Program Files\lecteur windows media 11 2007-12-16 20:27 --------- d-----w C:\Program Files\Muiltmedia keyboard Utility 2007-12-16 20:20 --------- d-----w C:\Program Files\Browser MOUSE 2007-12-10 11:40 --------- d-----w C:\Program Files\JAP masqué ip 2007-11-13 16:46 2,402,832 ----a-w C:\Program Files\WLinstaller.exe 2007-11-08 01:10 17,712,424 ----a-w C:\Program Files\Setup mise a jour internet explorer.exe 2007-11-08 00:12 2,402,832 ----a-w C:\Program Files\WLinstallermsn mise a jour.exe 2007-11-07 23:52 7,999 ----a-w C:\Program Files\ACDegrades msn plus.plsc 2007-11-07 23:30 3,404,638 ----a-w C:\Program Files\MsgPlusLive-423.zip 2007-10-27 14:24 18,224 ----a-w C:\Documents and Settings\pat\Application Data\GDIPFONTCACHEV1.DAT 2007-10-18 12:47 13,411,824 ----a-w C:\Program Files\Google_Earth_instal.exe 2007-09-25 00:06 3,858,985 ----a-w C:\Program Files\eMule0.48a-Installer.exe 2001-11-23 10:08 712,704 ----a-r C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-30 15:59 68856] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 20:09 15360] "PcSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2005-04-20 09:57 847872] "Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [2007-08-30 17:43 4670704] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496] "SoundMan"="SOUNDMAN.EXE" [2006-11-17 05:42 577536 C:\WINDOWS\SOUNDMAN.EXE] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648] "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-07-19 17:32 221184] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51 39792] "PaperPort PTD"="C:\Program Files\Scansoft\PaperPort\pptd40nt.exe" [2005-03-17 19:17 57393] "SetDefPrt"="C:\Program Files\Brother\BRMFLPRO\BrDefPrt.exe" [2002-12-18 14:31 40960] "SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 10:22 155648] "IndexSearch"="C:\Program Files\Scansoft\PaperPort\IndexSearch.exe" [2005-03-17 19:30 40960] "BrMfcWnd"="C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe" [2006-03-28 15:48 622592] "SetDefPrt2"="C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe" [2005-01-26 18:02 49152] "ControlCenter3"="C:\Program Files\Brother\ControlCenter3\brctrcen.exe" [2006-04-10 14:58 61440] "TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\HOMERunner.exe" [2007-10-31 10:19 378784] "FLMOFFICE4DMOUSE"="C:\Program Files\Browser MOUSE\mouse32a.exe" [2007-12-16 21:20 360448] "FLMK08KB"="C:\Program Files\Muiltmedia keyboard Utility\1.3\KbdAp32A.exe" [2007-12-16 21:27 381440] "SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-08-14 17:02 1063752] "PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2005-03-22 09:39 167936] "DataLayer"="C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe" [2005-03-31 09:30 1106944] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-01 18:07 249896] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-19 20:09 15360] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 09:01:04 83360] SmartUI.lnk - C:\Program Files\Scansoft\PaperPort\SmartUI\SmartUI.exe [2007-10-31 17:03:45 1650688] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegedit"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\jkklk] C:\WINDOWS\system32\jkklk.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\opnnkkk] opnnkkk.dll R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2004-08-19 20:10] R3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys [2004-10-15 12:50] S3 brfilt;Pilote de filtre Brother MFC;C:\WINDOWS\system32\Drivers\Brfilt.sys [2001-08-17 21:12] S3 BrSerWDM;Pilote série Brother;C:\WINDOWS\system32\Drivers\BrSerWdm.sys [2001-08-17 21:12] S3 BrUsbMdm;Brother MFC USB modem télécopieur uniquement;C:\WINDOWS\system32\Drivers\BrUsbMdm.sys [2001-08-17 21:12] S3 BrUsbScn;Pilote de scanneur Brother MFC USB;C:\WINDOWS\system32\Drivers\BrUsbScn.sys [2001-08-17 21:12] S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-01-19 17:05] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2008-02-01 14:03:16 C:\WINDOWS\Tasks\Norton Security Scan.job" - C:\Program Files\Norton Security Scan\Nss.exe "2008-02-01 16:16:50 C:\WINDOWS\Tasks\Maintenance en 1 clic.job" - C:\Program Files\TuneUp Utilities 2008\OneClick.exe . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-02-08 13:46:06 Windows 5.1.2600 Service Pack 2 FAT NTAPI Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... Scan terminé avec succès Les fichiers cachés: 0 ************************************************************************** . Temps d'accomplissement: 2008-02-08 13:46:37 ComboFix-quarantined-files.txt 2008-02-08 12:46:36 ComboFix3.txt 2008-02-02 11:33:52 ComboFix2.txt 2008-02-08 10:55:58 . 2008-02-08 10:25:20 --- E O F ---

green day · Answer

oups ! c'est normal ! j'en ai oublié un ptit bout ! :)

Crée un nouveau document texte et nomme le CFScript.txt ( attention très important ! ) : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes en gras :


file::

C:\FOUND.001
C:\WINDOWS\unin040c.exe
C:\WINDOWS\system32\jkklk.dll
C:\WINDOWS\system32\opnnkkk.dll

registry::

[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\jkklk]


[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\opnnkkk]

ensuite fais glisser le fichier texte sur combo.exe comme sur l'animation : 
http://img.bleepingcomputer.com/combofix/usage/rc.gif


Dans la fenêtre qui suit, choisie l'option 1 puis valide
Patiente un peu, si le bureau disparait parfois durant le scan : c'est normal !
A la fin du scan, un rapport va s'afficher : poste le stp ( sinon il se situe dans ici : C:\ComboFix.txt )


++

poskalex · Answer

ok ok ,donc j ai fais ce que tu m as demandé, mais il y a un truc que je ne comprends pas,du coup je l ai fais 2 fois pour etre sur que je le faisais correctement et en faite,les deux fois de suite et bien je n'ai toujours pas de proposition à cliquer sur 'choix 1'. quand j ai fais le document text que j ai bien renomé comme tu m as dis, j ai bien renoté dans le doc text en gras tout ce que tu m as donné avec les espaces etc etc... ,ensuite je le glisse comme sur l aplication vers combofix, et là en faite bein le combo demarre tout de suite,il me dit d accepter les conditions d utilisation,ce que je fais, ensuite il y a 2 barres de telechargement (une rouge et une bleu,ou l inverse,)qui se chargent trés vite et là le scanne débute je n ai aucun choix a faire! ce qu il me dit aussi entre temps c est de n 'ouvrir aucun programme pendant le création du rapport,donc je ne sais pas si j ai mal fais quelque chose (ce qui est possible) ou si c est normal... et puis bizzarement j ai un nouveau icone 'internet explorer' sur mon bureau,mais ça je me suis dit que c etait peut etre du a la restauration,aussi une autre chose à chaque fois (donc 2 fois)que j ai fais ça ,bein plus moyen de me reconnecter à internet,il faut que je l eteigne et que je le rallume!tu comprendra mieu le temps que j ai mis là à te repondre,vu qu il mets 15 min a chaque fois pour s'allumer et ensuite je sais me reconnecter...bon pour l instant je te mets le rapport : ComboFix 08-02.02.5 - pat 2008-02-08 18:58:39.6 - [color=red][b]FAT32/b/colorx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.82 [GMT 1:00] Endroit: C:\Documents and Settings\pat\Bureau\ComboFix.exe Command switches used :: C:\Documents and Settings\pat\Bureau\CFScript.txt.txt * Création d'un nouveau point de restauration [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!/b/color FILE C:\FOUND.001 C:\WINDOWS\system32\jkklk.dll C:\WINDOWS\system32\opnnkkk.dll C:\WINDOWS\unin040c.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\unin040c.exe . ((((((((((((((((((((((((((((( Fichiers créés 2008-01-08 to 2008-02-08 )))))))))))))))))))))))))))))))))))) . 2008-02-07 03:18 . 2008-02-07 03:18 d-------- C:\VundoFix Backups 2008-02-06 17:41 . 2008-02-06 17:41 d--hs---- C:\FOUND.002 2008-02-06 14:00 . 2008-02-06 14:00 d-------- C:\Program Files\Navilog1 2008-02-01 16:56 . 2008-02-01 16:56 d-------- C:\Program Files\Avira 2008-02-01 16:56 . 2008-02-01 16:56 d-------- C:\Documents and Settings\All Users\Application Data\Avira 2008-02-01 16:00 . 2008-02-01 16:00 d-------- C:\Documents and Settings\pat\Application Data\Grisoft 2008-02-01 15:58 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-02-01 14:34 . 2008-02-01 14:34 d-------- C:\Program Files\Lopxp 2008-01-25 20:27 . 2008-01-25 20:27 21,757 --a------ C:\WINDOWS\system32\TuneUpDefragService_20080125-192733.dmp 2008-01-25 12:55 . 2008-01-25 12:55 d--hs---- C:\FOUND.001 2008-01-21 02:56 . 2008-01-21 02:56 d-------- C:\Program Files\Everest Poker 2008-01-19 17:05 . 2008-01-19 17:05 d-------- C:\Documents and Settings\pat\Application Data\TuneUp Software 2008-01-19 17:05 . 2008-01-19 17:05 306,432 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-01-19 17:05 . 2007-12-20 10:41 29,440 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-01-19 17:04 . 2008-01-19 17:04 d-------- C:\Program Files\TuneUp Utilities 2008 2008-01-19 17:04 . 2008-01-19 17:04 d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-01-19 17:01 . 2008-01-19 17:01 d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-01-17 15:53 . 2008-01-17 15:53 d-------- C:\Documents and Settings\pat\Application Data\Nokia Multimedia Player 2008-01-17 15:46 . 2008-01-17 15:46 d-------- C:\Program Files\Fichiers communs\Teleca Shared 2008-01-17 15:46 . 2008-01-17 15:46 d-------- C:\Program Files\Common Files 2008-01-15 12:13 . 2008-01-15 12:13 d-------- C:\Program Files\Moss Bay Software 2008-01-15 11:53 . 2008-01-15 11:53 d-------- C:\Program Files\Business Card Printery 3 2008-01-15 11:53 . 2008-01-15 11:53 72,704 --a------ C:\WINDOWS\cadkasdeinst01e.exe 2008-01-14 22:09 . 2008-01-14 22:09 d-------- C:\Program Files\Red Kings Poker 2008-01-14 13:33 . 2008-01-14 13:34 d-------- C:\Documents and Settings\pat\Application Data\PC Suite 2008-01-14 13:32 . 2008-01-14 13:32 d-------- C:\Program Files\Nokia 2008-01-14 13:32 . 2008-01-14 13:32 d-------- C:\Program Files\Fichiers communs\PCSuite 2008-01-14 13:32 . 2008-01-14 13:32 d-------- C:\Program Files\Fichiers communs\Nokia 2008-01-14 11:14 . 2008-01-14 11:14 d-------- C:\Documents and Settings\pat\Application Data\ScanSoft 2008-01-10 18:17 . 2008-01-10 18:18 40 --a------ C:\WINDOWS\INTER.INI 2008-01-10 18:09 . 2008-01-10 18:09 d-------- C:\Documents and Settings\pat\WINDOWS 2008-01-09 00:00 . 2008-01-09 00:09 38,305 --a------ C:\PokerStars.log.0 . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-06 02:18 --------- d-----w C:\Program Files\PokerStars 2007-12-27 11:08 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft 2007-12-23 13:17 --------- d-----w C:\Program Files\lecteur windows media 11 2007-12-16 20:27 --------- d-----w C:\Program Files\Muiltmedia keyboard Utility 2007-12-16 20:20 --------- d-----w C:\Program Files\Browser MOUSE 2007-12-10 11:40 --------- d-----w C:\Program Files\JAP masqué ip 2007-11-13 16:46 2,402,832 ----a-w C:\Program Files\WLinstaller.exe 2007-11-08 01:10 17,712,424 ----a-w C:\Program Files\Setup mise a jour internet explorer.exe 2007-11-08 00:12 2,402,832 ----a-w C:\Program Files\WLinstallermsn mise a jour.exe 2007-11-07 23:52 7,999 ----a-w C:\Program Files\ACDegrades msn plus.plsc 2007-11-07 23:30 3,404,638 ----a-w C:\Program Files\MsgPlusLive-423.zip 2007-10-27 14:24 18,224 ----a-w C:\Documents and Settings\pat\Application Data\GDIPFONTCACHEV1.DAT 2007-10-18 12:47 13,411,824 ----a-w C:\Program Files\Google_Earth_instal.exe 2007-09-25 00:06 3,858,985 ----a-w C:\Program Files\eMule0.48a-Installer.exe 2001-11-23 10:08 712,704 ----a-r C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-30 15:59 68856] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 20:09 15360] "PcSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2005-04-20 09:57 847872] "Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [2007-08-30 17:43 4670704] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496] "SoundMan"="SOUNDMAN.EXE" [2006-11-17 05:42 577536 C:\WINDOWS\SOUNDMAN.EXE] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648] "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-07-19 17:32 221184] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51 39792] "PaperPort PTD"="C:\Program Files\Scansoft\PaperPort\pptd40nt.exe" [2005-03-17 19:17 57393] "SetDefPrt"="C:\Program Files\Brother\BRMFLPRO\BrDefPrt.exe" [2002-12-18 14:31 40960] "SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 10:22 155648] "IndexSearch"="C:\Program Files\Scansoft\PaperPort\IndexSearch.exe" [2005-03-17 19:30 40960] "BrMfcWnd"="C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe" [2006-03-28 15:48 622592] "SetDefPrt2"="C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe" [2005-01-26 18:02 49152] "ControlCenter3"="C:\Program Files\Brother\ControlCenter3\brctrcen.exe" [2006-04-10 14:58 61440] "TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\HOMERunner.exe" [2007-10-31 10:19 378784] "FLMOFFICE4DMOUSE"="C:\Program Files\Browser MOUSE\mouse32a.exe" [2007-12-16 21:20 360448] "FLMK08KB"="C:\Program Files\Muiltmedia keyboard Utility\1.3\KbdAp32A.exe" [2007-12-16 21:27 381440] "SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-08-14 17:02 1063752] "PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2005-03-22 09:39 167936] "DataLayer"="C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe" [2005-03-31 09:30 1106944] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-01 18:07 249896] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-19 20:09 15360] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 09:01:04 83360] SmartUI.lnk - C:\Program Files\Scansoft\PaperPort\SmartUI\SmartUI.exe [2007-10-31 17:03:45 1650688] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegedit"= 0 (0x0) R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2004-08-19 20:10] R3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys [2004-10-15 12:50] S3 brfilt;Pilote de filtre Brother MFC;C:\WINDOWS\system32\Drivers\Brfilt.sys [2001-08-17 21:12] S3 BrSerWDM;Pilote série Brother;C:\WINDOWS\system32\Drivers\BrSerWdm.sys [2001-08-17 21:12] S3 BrUsbMdm;Brother MFC USB modem télécopieur uniquement;C:\WINDOWS\system32\Drivers\BrUsbMdm.sys [2001-08-17 21:12] S3 BrUsbScn;Pilote de scanneur Brother MFC USB;C:\WINDOWS\system32\Drivers\BrUsbScn.sys [2001-08-17 21:12] S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-01-19 17:05] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2008-02-08 17:19:26 C:\WINDOWS\Tasks\Norton Security Scan.job" - C:\Program Files\Norton Security Scan\Nss.exe "2008-02-08 17:33:20 C:\WINDOWS\Tasks\Maintenance en 1 clic.job" - C:\Program Files\TuneUp Utilities 2008\OneClick.exe . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-02-08 19:00:09 Windows 5.1.2600 Service Pack 2 FAT NTAPI Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... Scan terminé avec succès Les fichiers cachés: 0 ************************************************************************** . Temps d'accomplissement: 2008-02-08 19:00:30 ComboFix-quarantined-files.txt 2008-02-08 18:00:30 ComboFix5.txt 2008-02-08 10:55:58 ComboFix4.txt 2008-02-08 12:46:40 ComboFix3.txt 2008-02-08 17:27:18 ComboFix2.txt 2008-02-08 17:45:32 . 2008-02-08 10:25:20 --- E O F --- voila m'sieur :)

green day · Answer

Euh ! c'est mademoiselle ! :)

ok, où en sont tes soucis ??

++

poskalex · Answer

c est mademoiselle? ptdr...désolé mademoiselle...
tu veux dire que je parle a une fille depuis bientot une semaine?lool...
(malgrés que je n ai rien contre les filles bien au contraire...si dieu à bien crée une chose de bien sur terre,c est la femme!!!....)
bein ou en sont mes soucis?
toujours au meme point en faite....pas trop de changement ....à part que j ai l impression que ça rame un peu moin,mais juste pour les fenetre de pub et le reste,genre mes pages qui s ouvrent plus vite,c est tout...mais autrement bein po trop de changement.... 
il met toujours 2 heures à s allumer , c'est plus une douche que je peux prendre en attendant qu il s allume,c est carrement mon chien que je peux aller promener pendant une heure,mais autrement à part ça,ça va ...je vis....lol,
et j'peux matter mes photos de l année derniere ;-) (tant qu il n y a pas mort d homme,ni de disque dur bein ça va heiiin....
pourquoi,j aurais du voir un changement?

poskalex · Answer

bon bein plus de nouvelles?! 
que dois je faire alors maintenant?...merci 
alex...

missdu66 · Answer

Bonjour à tous
moi aussi j'ai mon pc qui rame un peu ou qui ce bloke a cause des pub
j'ai télécharger spyboat-search&DESTROY au debut sa marchait mais maintenant sa ne marche plus
j'ai toujours ses pub et ses alerte virus...
j'aurait vraiment besoin d'aide parceque je sait plus quoi faire

merci d'avance

Pc qui rame/pub intempestive

27 réponses