Page internet intempestive

tondawa Messages postés 7 Statut Membre -  
lacoxinelle-douzecent Messages postés 830 Statut Membre -
Bonjour,
Bonjour,
Je reçois depuis quelques jours des pages internet qui s'ouvrent seules et je n'arrive pas à en venir à bout. J'ai spy bot, ad aware , kaperski comme antivirus et le firewall de windows XP SP2. J'ai téléchargé AVG anti root kit, a sqared free sans aucun résultat. Voici un exemple parmi tant d'autres de pages : http://www.system-defender.com/freeware/2/?wmid=6010&mid=MjI6Mzc6MjA1&lndid=37&p=01
Merci

Configuration: Windows XP
Firefox 2.0.0.12
Configuration: Windows XP
Firefox 2.0.0.12

13 réponses

  1. lacoxinelle-douzecent Messages postés 830 Statut Membre 46
     
    Bonjour tondawa

    Fais ceci pour commencer

    Télécharge Navilog1
    Clique sur ce lien :
    http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

    http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
    Clique sur navilog1.zip pour télécharger navilog1.exe.

    enregistre-le sur ton bureau.

    Ensuite Double Clique sur navilog1.exe pour Lancer l'Installation.
    Une fois l'installation terminée, le fix s'exécutera automatiquement.
    (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

    Laisse-toi guider. Au menu principal, choisis 1 et valides.
    (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

    Patiente jusqu'au message :
    *** Analyse Termine le ..... ***
    Appuie sur une touche comme demandé, le blocnote va s'ouvrir.

    Copie-colle l'intégralité dans une réponse. Referme le blocnote.
    Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

    poste le rapport ici
    a plus
    0
  2. tondawa Messages postés 7 Statut Membre
     
    bonjour j'avais deja fait un rapport avec sdfix est ce que cela convient ?

    [b][u]SDFix: Version 1.143[/u][/b]

    Run by Administrateur on 19/02/2008 at 18:02

    Microsoft Windows XP [version 5.1.2600]
    Running From: C:\SDFix

    [b][u]Checking Services[/u][/b]:

    Restoring Windows Registry Values
    Restoring Windows Default Hosts File
    Restoring Default HomePage Value
    Restoring Default Desktop Components Value

    Rebooting...

    [b][u]Checking Files[/u][/b]:

    Trojan Files Found:

    C:\WINDOWS\admggxp.dll - Deleted
    C:\WINDOWS\dat.txt - Deleted
    C:\WINDOWS\dmdqdrxqdv.dll - Deleted
    C:\WINDOWS\fsxloqf.exe - Deleted

    Removing Temp Files...

    [b][u]ADS Check[/u][/b]:

    [b][u]Final Check[/u][/b]:

    catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-02-19 18:27:31
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden services & system hive ...

    scanning hidden registry entries ...

    scanning hidden files ...

    scan completed successfully
    hidden processes: 0
    hidden services: 0
    hidden files: 1

    [b][u]Remaining Services[/u][/b]:

    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
    "C:\\Program Files\\eChanblard\\emule.exe"="C:\\Program Files\\eChanblard\\emule.exe:*:Enabled:eChanblard"
    "C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
    "C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer"
    "C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 7.0\\avp.exe"="C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 7.0\\avp.exe:*:Enabled:Kaspersky Anti-Virus"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

    [b][u]Remaining Files[/u][/b]:

    File Backups: - C:\SDFix\backups\backups.zip

    [b][u]Files with Hidden Attributes[/u][/b]:

    Tue 19 Feb 2008 195,568,888 A..H. --- "C:\Downloads\Software\nero-8_nero_8.2.8.0_francais_45172.exe"
    Thu 14 Oct 2004 1,694,208 ..SH. --- "C:\Program Files\Messenger\msmsgs.exe"
    Sun 17 Feb 2008 5 A.SH. --- "C:\WINDOWS\system32\bedcda_g.dll"
    Thu 14 Feb 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1.tmp"
    Sat 16 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT10.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT100.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT101.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT102.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT103.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT104.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT105.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT106.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT107.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT108.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT109.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT10A.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT10B.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT10C.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT10D.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT10E.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT10F.tmp"
    Sat 16 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT11.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT110.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT111.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT112.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT113.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT114.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT115.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT116.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT116D.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT117.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT118.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT119.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT11A.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT11B.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT11C.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT11D.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT11E.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT11F.tmp"
    Sat 16 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT12.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT120.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT121.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT122.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT123.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT124.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT125.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT126.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT127.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT128.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT129.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT12A.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT12B.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT12C.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT12D.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT12E.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT12F.tmp"
    Sat 16 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT13.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT130.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT131.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT132.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT133.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT134.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT135.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT136.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT137.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT138.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT139.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT13A.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT13B.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT13C.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT13D.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT13D9.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT13E.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT13F.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT13FB.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT13FD.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT13FE.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT13FF.tmp"
    Sat 16 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT14.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT140.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1400.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1401.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1402.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1403.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1404.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT141.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT142.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT143.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT144.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT145.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT146.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT147.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT148.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT149.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT14A.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT14B.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT14C.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT14D.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT14E.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT14F.tmp"
    Sat 16 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT15.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT150.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT151.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT152.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT153.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT154.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT155.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT156.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT157.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT158.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT159.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT15A.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT15B.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT15C.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT15D.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT15E.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT15F.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT16.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT160.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT161.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT168.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT16F.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT17.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT170.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT171.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT172.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT173.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT174.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT176.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT177.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT178.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT179.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT17A.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT17B.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT17C.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT17D.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT17E.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT17F.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT18.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT180.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT182.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT183.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT185.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT186.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT187.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT188.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT189.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT18A.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT18B.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT18C.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT18D.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT18E.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT18F.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT19.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT190.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT191.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT192.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT193.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT194.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT195.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT196.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT199.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT19A.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT19B.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT19C.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT19D.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT19E.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT19F.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1A.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1A0.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1A1.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1A2.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1A3.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1A4.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1A5.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1A6.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1A7.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1A8.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1A9.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1AA.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1AB.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1AC.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1AD.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1AE.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1AF.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1B.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1B0.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1B1.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1B2.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1B3.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1B4.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1B5.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1B6.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1B7.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1B8.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1B9.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1BA.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1BB.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1BC.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1BD.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1BE.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1BF.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1C.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1C0.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1C1.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1C2.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1C3.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1C4.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1C5.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1C6.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1C7.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1C8.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1C9.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1CA.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1CB.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1CC.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1CD.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1CE.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1CF.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1D.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1D0.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1D1.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1D2.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1D3.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1D4.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1D5.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1D6.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1D7.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1D8.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1D9.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1DA.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1DB.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1DC.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1DD.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1DE.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1DF.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1E.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1E0.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1E1.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1E2.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1E3.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1E4.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1E5.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1E6.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1E7.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1E8.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1E9.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1EA.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1EB.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1EC.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1ED.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1EE.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1EF.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1F.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1F0.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1F1.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1F2.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1F3.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1F4.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1F5.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1F6.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1F7.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1F8.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1F9.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1FA.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1FB.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1FC.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1FD.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1FE.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT1FF.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT2.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT20.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT200.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT201.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT202.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT203.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT204.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT205.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT206.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT207.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT208.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT209.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT20A.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT20B.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT20C.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT20D.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT20E.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT20F.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT21.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT210.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT211.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT212.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT213.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT214.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT215.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT216.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT217.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT218.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT219.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT21A.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT21B.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT21C.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT21D.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT21E.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT21F.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT22.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT220.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT221.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT222.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT223.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT224.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT225.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT226.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT227.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT228.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT229.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT22A.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT22B.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT22C.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT22D.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT22E.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT22F.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT23.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT230.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT231.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT232.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT233.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT234.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT235.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT236.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT237.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT238.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT239.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT23A.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT23B.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT23C.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT23D.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT23F.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT24.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT241.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT242.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT243.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT244.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT246.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT247.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT248.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT249.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT24A.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT24B.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT24C.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT24D.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT24E.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT24F.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT25.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT250.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT251.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT252.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT253.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT254.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT255.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT256.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT257.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT258.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT259.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT25A.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT25B.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT25C.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT25D.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT25E.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT25F.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT26.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT260.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT261.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT262.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT263.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT264.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT265.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT26D.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT27.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT276.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT279.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT27A.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT27C.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT27E.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT27F.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT28.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT281.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT283.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT284.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT285.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT288.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT289.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT28C.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT28D.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT28E.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT29.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT2A.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT2B.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT2C.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT2D.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT2E.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT2F.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT3.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT30.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT31.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT32.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT33.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT34.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT35.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT36.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT37.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT38.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT39.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT3A.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT3B.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT3C.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT3D.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT3D3.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT3E.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT3F.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT4.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT40.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT41.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT42.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT43.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT44.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT45.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT46.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT47.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT48.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT49.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT4A.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT4B.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT4C.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT4D.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT4E.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT4F.tmp"
    Mon 18 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT5.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT50.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT51.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT52.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT53.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT54.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT55.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT56.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT57.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT58.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT59.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT5A.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT5B.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT5C.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT5D.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT5E.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT5F.tmp"
    Tue 19 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT6.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT60.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT61.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT62.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT63.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT64.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT65.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT66.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT67.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT68.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT69.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT6A.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT6B.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT6C.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT6D.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT6E.tmp"
    Sun 17 Feb 2008 0 A..H. --- "C:\Documents and Settings\Fred et Delph\Local Settings\Temp\BIT6F.tmp"
    Tue 19 Feb 2008
    0
  3. lacoxinelle-douzecent Messages postés 830 Statut Membre 46
     
    c'est bien de l'avoir mis ;-) cependant, effectue le post que je t'ai mis...
    j'attends ton rapport

    a tout a l'heure
    0
  4. tondawa Messages postés 7 Statut Membre
     
    Voila donc le fameux rapports ...

    Search Navipromo version 3.4.5 commencé le 19/02/2008 à 20:22:32,71

    !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
    !!! Postez ce rapport sur le forum pour le faire analyser !!!
    !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

    Outil exécuté depuis C:\Program Files\navilog1
    Mise à jour le 11.02.2008 à 20h00 par IL-MAFIOSO

    Microsoft Windows XP [version 5.1.2600]
    Internet Explorer : 7.0.5730.13
    Système de fichiers : NTFS

    Executé en mode normal

    *** Recherche Programmes installés ***

    *** Recherche dossiers dans C:\WINDOWS ***

    *** Recherche dossiers dans C:\Program Files ***

    *** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***

    *** Recherche dossiers dans "C:\Documents and Settings\Fred et Delph\applic~1" ***

    *** Recherche dossiers dans "C:\Documents and Settings\Fred et Delph\locals~1\applic~1" ***

    *** Recherche dossiers dans "C:\Documents and Settings\Fred et Delph\MENUDM~1\PROGRA~1" ***

    *** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***

    *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
    pour + d'infos : http://www.gmer.net

    Aucun Fichier trouvé

    *** Recherche avec GenericNaviSearch ***
    !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
    !!! A vérifier impérativement avant toute suppression manuelle !!!

    * Recherche dans C:\WINDOWS\system32 *

    * Recherche dans "C:\Documents and Settings\Fred et Delph\locals~1\applic~1" *

    *** Recherche fichiers ***

    *** Recherche clés spécifiques dans le Registre ***

    *** Module de Recherche complémentaire ***
    (Recherche fichiers spécifiques)

    1)Recherche nouveaux fichiers Instant Access :

    2)Recherche Heuristique :

    * Dans C:\WINDOWS\system32 :

    * Dans "C:\Documents and Settings\Fred et Delph\locals~1\applic~1" :

    3)Recherche Certificats :

    Certificat Egroup absent !

    4)Recherche fichiers connus :

    *** Analyse terminée le 19/02/2008 à 20:26:58,46 ***
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. lacoxinelle-douzecent Messages postés 830 Statut Membre 46
     
    ok, tu peux supprimer navilog, , il n'y a rien

    fais ceci

    Télecharge ceci (Merci à S!Ri)
    http://siri.urz.free.fr/Fix/SmitfraudFix.zip
    *Désactive l'Antivirus tu le remettra apres le Telechargement de Smitfraudfix

    Avec SmitfraudFix
    Double-clique sur l'icône de Smitfraudfix
    Appuye sur une touche de ton clavier pour continuer.
    au menu principal de SmitfraudFix : :
    Sélectionne 1 >Recherche et Clic sur Entrée
    Une fois terminé, SmitfraudFix ouvre le rapport qu'il aura généré.
    le rapport sera sauvegardé dans le fichier suivant : "rapport.txt" à la racine de votre disque dur (ex : C:\rapport.txt).

    poste moi le rapport stp
    a plus
    0
  7. tondawa Messages postés 7 Statut Membre
     
    Encore un nouveau rapport

    SmitFraudFix v2.290

    Rapport fait à 20:47:08,87, 19/02/2008
    Executé à partir de C:\Documents and Settings\Fred et Delph\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\Program Files\Calendrier\Cld2000.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\InstantTimeZone\InstantTimeZone.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\PopTray\PopTray.exe
    C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
    C:\Program Files\a-squared Free\a2service.exe
    C:\WINDOWS\ATKKBService.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
    C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv4.exe
    C:\Program Files\Free Download Manager\fdm.exe
    C:\Program Files\Mozilla Thunderbird\thunderbird.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
    C:\WINDOWS\system32\cmd.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    »»»»»»»»»»»»»»»»»»»»»»»» C:\

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Fred et Delph

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Fred et Delph\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\FREDET~1\Favoris

    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Ma page d'accueil"

    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"=""

    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""

    »»»»»»»»»»»»»»»»»»»»»»»» Rustock

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: Linksys Wireless-G USB Network Adapter - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 192.168.1.254

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{0E8B3A70-FA9E-4505-82E9-8EB5EFF8D7B7}: DhcpNameServer=192.168.1.254
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{0E8B3A70-FA9E-4505-82E9-8EB5EFF8D7B7}: DhcpNameServer=192.168.1.254
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{0E8B3A70-FA9E-4505-82E9-8EB5EFF8D7B7}: DhcpNameServer=192.168.1.254
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.254
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.254
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.254

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin
    0
  8. lacoxinelle-douzecent Messages postés 830 Statut Membre 46
     
    faut poursuivre...

    Telecharge ComboFix (ne l'utilise pas maintenant)
    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    puis

    télécharge HijackThis
    http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis
    Dézippe le dans un dossier prévu à cet effet.
    Par exemple C:\hijackthis < Enregistre le bien dans c : !

    Démo : (Merci a Balltrap34 pour cette réalisation)
    http://pageperso.aol.fr/balltrap34/Hijenr.gif
    Lance le puis:
    clique sur "do a system scan and save logfile"

    faire un copier coller du log entier sur le forum
    Démo : (Merci a Balltrap34 pour cette réalisation)
    http://pageperso.aol.fr/balltrap34/demohijack.htm

    https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

    poste moi le rapport hijack
    0
  9. tondawa Messages postés 7 Statut Membre
     
    Voici le rapport

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 21:03:28, on 19/02/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16608)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\Program Files\Calendrier\Cld2000.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\InstantTimeZone\InstantTimeZone.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\PopTray\PopTray.exe
    C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
    C:\Program Files\a-squared Free\a2service.exe
    C:\WINDOWS\ATKKBService.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
    C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv4.exe
    C:\Program Files\Free Download Manager\fdm.exe
    C:\Program Files\Mozilla Thunderbird\thunderbird.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
    C:\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
    O3 - Toolbar: emotrlq - {380F14D3-BD6F-4F5A-984A-70CC23EEA61D} - (no file)
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Cld2000.exe] C:\Program Files\Calendrier\Cld2000.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Startup: PopTray.lnk = C:\Program Files\PopTray\PopTray.exe
    O4 - Global Startup: InstantTimeZone.lnk = C:\Program Files\InstantTimeZone\InstantTimeZone.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
    O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
    O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
    O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
    O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Upload - {FD4E2FF8-973C-4A19-89BD-8E86B3CFCFE1} - C:\Program Files\Free Download Manager\FUM\fumiebtn.dll
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
    O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
    O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
    O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
    O23 - Service: WUSB54Gv4SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
    0
  10. lacoxinelle-douzecent Messages postés 830 Statut Membre 46
     
    re,

    télécharge CCLEANER
    http://www.commentcamarche.net/telecharger/telecharger 168 ccleaner

    Lors de l'installation ccleaner

    Laisse Coché Ajouter un raccourci dans le menu Démarrer

    Décoche Ceci: Ajouter l'option 'Lancer CCleaner' dans le menu contextuel de la poubelle
    . Ajouter l'option 'Ouvrir CCleaner...' dans le menu contextuel de la poubelle
    Contrôler automatiquement les mises à jour de CCleaner
    Ajouter la barre d'Outils Yahoo! CCleaner

    enregistre ce qui va suivre dans un doc texte pour ne rien oublier, prends ton mal en patience :-)
    effectues les étapes une par une

    Demarre en mode sans echec

    Démo-->https://www.malekal.com/demarrer-windows-mode-sans-echec/

    1) lance hijackthis

    coches les lignes suivantes
    O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
    O3 - Toolbar: emotrlq - {380F14D3-BD6F-4F5A-984A-70CC23EEA61D} - (no file)
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    clic sur fix cheked

    2) Affiche Dossiers Cachés et Demasque les Extansions
    Démarrer>poste de travail>outil (en haut)>option dossier>affichage

    Coche> "afficher les dossiers cachés"
    Décoche> "masquer les extansions des fichiers dont le type est connu
    Répondre oui au message de windows
    Décoche> "masquer les fichiers protégés du système (recommandé)
    Répondre oui au message de windows
    Puis> appliquer >ok

    3)recherche et supprimes si tu trouves les fichiers ci dessous

    C:\WINDOWS\admggxp.dll -
    C:\WINDOWS\dat.txt -
    C:\WINDOWS\dmdqdrxqdv.dll -
    C:\WINDOWS\fsxloqf.exe -

    4)Lance combofix

    Double cliquer combofix.exe.
    Appuyer sur la touche Y (Yes) pour démarrer le scan
    Le rapport sera crée dans: C:\Combofix.txt

    5) lance un scan complet avec ton anti virus

    6) lance spybot
    -->verifier tout

    7) lance ccleaner
    Clic sur nettoyeur application puis analyse puis lancer nettoyage (refais la manip plusieurs fois si besoin,)
    Clic sur Nettoyeur puis Windows, Analyse, Lancer le Nettoyage
    Clic sur Registre /Chercher des Erreurs / Reparer les Erreurs ( plusieurs fois aussi, si besoin)
    Acceptes les Sauvegardes

    8) recache remasque extantions (inverse étapes 2)

    9) redemarre normalement

    10) poste rapport combo ,+ nouveau hijackthis

    allez bon courage a toi
    a plus tard
    0
  11. tondawa
     
    Voila combo fix à la fin le deuxième rapport

    ComboFix 08-02-19.2 - Administrateur 2008-02-20 20:42:02.1 - NTFSx86 MINIMAL
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.1290 [GMT 11:00]
    Endroit: C:\Downloads\Software\ComboFix.exe

    [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
    C:\WINDOWS\system32\bedcda_g.dll

    ----- BITS: Possible sites infectés -----

    hxxp://softworldnetwork.com
    hxxp://onsafepro.com
    hxxp://softworldnetwork2.com
    .
    ((((((((((((((((((((((((((((( Fichiers créés 2008-01-20 to 2008-02-20 ))))))))))))))))))))))))))))))))))))
    .

    2008-02-20 20:39 . 2008-02-20 20:39 <REP> d-------- C:\backups
    2008-02-19 21:03 . 2008-02-19 21:03 396,288 --a------ C:\HijackThis.exe
    2008-02-19 20:21 . 2008-02-19 20:27 <REP> d-------- C:\Program Files\Navilog1
    2008-02-19 18:00 . 2008-02-19 18:00 <REP> d-------- C:\WINDOWS\ERUNT
    2008-02-19 17:59 . 2008-02-14 10:38 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau
    2008-02-19 17:59 . 2008-02-14 10:38 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
    2008-02-19 17:59 . 2008-02-19 17:59 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
    2008-02-19 17:59 . 2008-02-14 10:38 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
    2008-02-19 17:59 . 2008-02-14 10:38 <REP> d-------- C:\Documents and Settings\Administrateur\Menu Démarrer
    2008-02-19 17:59 . 2008-02-14 10:38 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
    2008-02-19 17:59 . 2008-02-19 18:01 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
    2008-02-19 17:48 . 2008-02-19 18:29 <REP> d-------- C:\SDFix
    2008-02-19 17:05 . 2008-02-19 17:05 <REP> d-------- C:\Program Files\Panicware
    2008-02-18 23:06 . 2008-02-20 20:12 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
    2008-02-18 23:06 . 2008-02-20 20:32 2,395,936 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
    2008-02-18 23:06 . 2008-02-18 23:35 91,700 --a------ C:\WINDOWS\system32\drivers\klin.dat
    2008-02-18 23:06 . 2008-02-18 23:06 85,860 --a------ C:\WINDOWS\system32\drivers\klick.dat
    2008-02-18 23:06 . 2008-02-20 20:32 34,208 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
    2008-02-18 23:06 . 2008-02-20 20:32 25,888 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
    2008-02-18 23:06 . 2008-02-20 20:32 4,544 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.idx
    2008-02-18 23:05 . 2008-02-18 23:05 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
    2008-02-18 19:50 . 2008-02-18 19:50 <REP> d-------- C:\Program Files\Kaspersky Lab
    2008-02-18 19:45 . 2008-02-18 19:45 <REP> d-------- C:\kav
    2008-02-18 14:45 . 2008-02-18 14:45 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab
    2008-02-18 10:08 . 2008-02-20 20:25 <REP> d-------- C:\Program Files\Mozilla Thunderbird
    2008-02-18 10:08 . 2008-02-18 10:08 <REP> d-------- C:\Documents and Settings\Fred et Delph\Application Data\Thunderbird
    2008-02-18 00:05 . 2008-02-19 20:47 1,458 --a------ C:\WINDOWS\system32\tmp.reg
    2008-02-17 23:44 . 2008-02-17 23:44 <REP> d-------- C:\Program Files\RegSupreme
    2008-02-17 23:44 . 2008-02-17 23:44 5 --a------ C:\WINDOWS\system32\eaaff_g.ocx
    2008-02-17 18:45 . 2008-02-17 18:45 32 --a------ C:\Documents and Settings\All Users\Application Data\ezsid.dat
    2008-02-17 11:58 . 2008-02-18 23:17 117 --a------ C:\WINDOWS\wininit.ini
    2008-02-17 11:16 . 2008-02-17 11:16 <REP> d-------- C:\Program Files\MSXML 4.0
    2008-02-16 20:44 . 2007-01-18 23:00 3,968 --a------ C:\WINDOWS\system32\drivers\AvgArCln.sys
    2008-02-16 20:30 . 2008-02-16 20:30 <REP> d-------- C:\Documents and Settings\All Users\Application Data\AVS4YOU
    2008-02-16 20:28 . 2008-02-16 20:30 <REP> d-------- C:\Program Files\AVS4YOU
    2008-02-16 20:27 . 2003-06-19 01:31 17,920 --a------ C:\WINDOWS\system32\mdimon.dll
    2008-02-16 20:27 . 2008-02-16 20:27 385 --a------ C:\WINDOWS\ODBC.INI
    2008-02-16 20:25 . 2008-02-16 20:26 <REP> d-------- C:\WINDOWS\SHELLNEW
    2008-02-16 20:25 . 2008-02-16 20:25 <REP> d-------- C:\Program Files\Microsoft Works
    2008-02-16 20:24 . 2008-02-16 20:24 <REP> d-------- C:\Program Files\Microsoft.NET
    2008-02-16 20:22 . 2008-02-16 20:22 <REP> dr-h----- C:\MSOCache
    2008-02-16 20:14 . 2008-02-20 19:14 <REP> d-------- C:\Documents and Settings\Fred et Delph\Application Data\skypePM
    2008-02-16 20:13 . 2008-02-20 19:55 <REP> d-------- C:\Documents and Settings\Fred et Delph\Application Data\Skype
    2008-02-16 20:12 . 2008-02-16 20:12 <REP> d-------- C:\Program Files\Skype
    2008-02-16 20:12 . 2008-02-16 20:12 <REP> d-------- C:\Program Files\Fichiers communs\Skype
    2008-02-16 20:12 . 2008-02-16 20:12 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Skype
    2008-02-16 18:57 . 2008-02-16 18:57 <REP> d-------- C:\Documents and Settings\All Users\Application Data\InstallShield
    2008-02-16 18:56 . 2008-02-16 18:56 <REP> d-------- C:\Program Files\Jasc Software Inc
    2008-02-16 18:56 . 2008-02-16 18:57 <REP> d-------- C:\Program Files\Fichiers communs\Jasc Software Inc
    2008-02-16 18:56 . 2008-02-16 18:56 <REP> d-------- C:\Documents and Settings\Fred et Delph\Application Data\Jasc Software Inc
    2008-02-16 18:40 . 2008-02-16 18:40 <REP> d-------- C:\Documents and Settings\Fred et Delph\Application Data\TuneUp Software
    2008-02-16 18:39 . 2008-02-16 19:10 <REP> d-------- C:\Program Files\TuneUp Utilities 2008
    2008-02-16 18:39 . 2008-02-16 18:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software
    2008-02-16 18:39 . 2008-02-16 19:10 306,432 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe
    2008-02-16 18:39 . 2007-12-20 10:41 29,440 --a------ C:\WINDOWS\system32\uxtuneup.dll
    2008-02-15 21:20 . 2008-02-19 17:36 <REP> d-------- C:\Program Files\a-squared Free
    2008-02-15 20:23 . 2008-02-15 20:26 <REP> d-------- C:\Program Files\InstantTimeZone
    2008-02-15 19:40 . 2008-02-15 19:40 <REP> d-------- C:\Program Files\Microsoft Games
    2008-02-15 19:34 . 2001-08-23 17:47 244,224 --a--c--- C:\WINDOWS\system32\dllcache\camext20.ax
    2008-02-15 19:23 . 2004-05-21 05:04 79,622 --a------ C:\WINDOWS\system32\EBPMON24.DLL
    2008-02-15 19:23 . 2003-05-21 02:27 64,000 --a------ C:\WINDOWS\system32\ECBTEG.DLL
    2008-02-15 19:23 . 2000-06-07 01:01 34,304 --a------ C:\WINDOWS\system32\EBPCHP.DLL
    2008-02-15 19:23 . 2003-07-16 13:14 31,744 --a------ C:\WINDOWS\system32\E_DCINST.DLL
    2008-02-15 19:20 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
    2008-02-15 19:20 . 2004-08-03 23:01 25,856 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys
    2008-02-15 19:19 . 2008-02-15 19:23 <REP> d-------- C:\Program Files\EPSON
    2008-02-15 17:11 . 2008-02-15 17:11 <REP> d-------- C:\Program Files\Microsoft Silverlight
    2008-02-15 13:56 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
    2008-02-15 13:56 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
    2008-02-15 09:15 . 2008-02-15 09:15 <REP> d-------- C:\Program Files\Winamp
    2008-02-15 09:15 . 2008-02-15 09:17 <REP> d-------- C:\Documents and Settings\Fred et Delph\Application Data\Winamp
    2008-02-15 03:07 . 2008-02-15 03:07 0 --a------ C:\WINDOWS\ativpsrm.bin
    2008-02-15 03:01 . 2008-02-15 03:01 <REP> d-------- C:\Program Files\MSXML 6.0
    2008-02-14 23:04 . 2008-02-14 23:04 <REP> d-------- C:\Program Files\Eraser
    2008-02-14 23:04 . 2008-02-14 23:04 <REP> d--h----- C:\Documents and Settings\All Users\Application Data\{74D61F17-FFC2-41AF-96E5-1DCB0631B6D1}
    2008-02-14 22:15 . 2008-02-18 00:33 <REP> d-------- C:\Documents and Settings\Fred et Delph\Application Data\Lavasoft
    2008-02-14 22:13 . 2008-02-14 22:13 <REP> d-------- C:\Program Files\Calendrier
    2008-02-14 22:13 . 2008-02-14 22:55 <REP> d-------- C:\Documents and Settings\Fred et Delph\Application Data\Calendrier Xtra
    2008-02-14 22:12 . 2008-02-14 22:12 <REP> d-------- C:\Program Files\Capturino 1.4
    2008-02-14 22:12 . 2008-02-14 22:12 <REP> d-------- C:\Program Files\ATI
    2008-02-14 22:10 . 2008-02-14 22:10 <REP> d-------- C:\Program Files\Photo Story 3 for Windows
    2008-02-14 22:09 . 2008-02-19 15:35 <REP> d--h----- C:\WINDOWS\Fred
    2008-02-14 22:04 . 2008-01-22 14:42 593,920 --------- C:\WINDOWS\system32\ati2sgag.exe
    2008-02-14 22:03 . 2008-02-14 22:03 <REP> d-------- C:\ATI
    2008-02-14 21:57 . 2008-02-14 21:57 360,064 --a------ C:\WINDOWS\system32\drivers\TCPIP.SYS.ORIGINAL
    2008-02-14 21:55 . 2008-02-20 09:16 <REP> d-------- C:\Program Files\eChanblard
    2008-02-14 21:49 . 2008-02-14 21:54 <REP> d-------- C:\Documents and Settings\Fred et Delph\Contacts
    2008-02-14 21:48 . 2008-02-14 21:48 <REP> d----c--- C:\WINDOWS\system32\DRVSTORE
    2008-02-14 21:37 . 2008-02-14 21:40 <REP> d-------- C:\Program Files\PopTray
    2008-02-14 21:07 . 2008-02-14 21:48 <REP> d-------- C:\Program Files\Windows Live
    2008-02-14 21:07 . 2008-02-14 21:48 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
    2008-02-14 21:07 . 2008-02-14 21:07 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
    2008-02-14 14:31 . 2008-02-14 14:31 <REP> d-------- C:\Program Files\MSBuild
    2008-02-14 14:28 . 2008-02-15 10:41 <REP> d-------- C:\WINDOWS\system32\XPSViewer
    2008-02-14 14:27 . 2008-02-14 14:27 <REP> d-------- C:\Program Files\Reference Assemblies
    2008-02-14 14:27 . 2006-06-29 13:07 14,048 --------- C:\WINDOWS\system32\spmsg2.dll
    2008-02-14 14:26 . 2008-02-14 14:26 <REP> d-------- C:\Program Files\Windows Media Connect 2
    2008-02-14 14:25 . 2008-02-16 20:51 <REP> d-------- C:\WINDOWS\system32\LogFiles
    2008-02-14 14:25 . 2008-02-14 14:25 <REP> d-------- C:\WINDOWS\system32\drivers\UMDF
    2008-02-14 14:24 . 2008-02-14 21:02 <REP> d-------- C:\WINDOWS\system32\fr-fr

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-02-16 09:30 --------- d-----w C:\Program Files\Fichiers communs\AVSMedia
    2008-02-16 07:57 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
    2008-02-14 11:12 --------- d-----w C:\Program Files\ATI Technologies
    2008-02-14 11:10 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-02-14 11:06 --------- d-----w C:\Documents and Settings\Fred et Delph\Application Data\ATI
    2008-02-14 10:57 360,064 ----a-w C:\WINDOWS\system32\drivers\TCPIP.SYS
    2008-02-13 23:39 --------- d-----w C:\Documents and Settings\Fred et Delph\Application Data\Talkback
    2008-02-13 23:16 --------- d-----w C:\Program Files\My Company Name
    2008-02-13 23:09 --------- d-----w C:\Documents and Settings\Fred et Delph\Application Data\Logitech
    2008-02-13 23:07 --------- d-----w C:\Program Files\Fichiers communs\Logitech
    2008-02-13 23:06 --------- d-----w C:\Program Files\Logitech
    2008-02-13 23:03 --------- d-----w C:\Program Files\Realtek
    2008-02-13 23:02 4,501 ----a-w C:\WINDOWS\gdrv.sys
    2008-02-13 23:00 --------- d-----w C:\Program Files\Intel
    2008-02-13 22:59 --------- d-----w C:\Program Files\AVSMedia
    2008-02-13 22:55 --------- d-----w C:\Program Files\Alwil Software
    2008-02-13 22:48 --------- d-----w C:\Program Files\microsoft frontpage
    2008-02-13 22:47 --------- d-----w C:\Program Files\Services en ligne
    2008-01-22 21:38 2,845,696 ----a-w C:\WINDOWS\system32\drivers\ati2mtag.sys
    2008-01-22 20:43 272,384 ----a-w C:\WINDOWS\system32\ati2dvag.dll
    2008-01-22 20:39 307,200 ----a-w C:\WINDOWS\system32\atiiiexx.dll
    2008-01-22 20:35 43,520 ----a-w C:\WINDOWS\system32\ati2edxx.dll
    2008-01-22 20:35 26,112 ----a-w C:\WINDOWS\system32\Ati2mdxx.exe
    2008-01-22 20:35 147,456 ----a-w C:\WINDOWS\system32\atipdlxx.dll
    2008-01-22 20:35 122,880 ----a-w C:\WINDOWS\system32\Oemdspif.dll
    2008-01-22 20:35 122,880 ----a-w C:\WINDOWS\system32\ati2evxx.dll
    2008-01-22 20:34 512,000 ----a-w C:\WINDOWS\system32\ati2evxx.exe
    2008-01-22 20:33 53,248 ----a-w C:\WINDOWS\system32\ATIDDC.DLL
    2008-01-22 20:25 3,121,920 ----a-w C:\WINDOWS\system32\ati3duag.dll
    2008-01-22 20:14 1,664,256 ----a-w C:\WINDOWS\system32\ativvaxx.dll
    2008-01-22 20:01 385,024 ----a-w C:\WINDOWS\system32\atikvmag.dll
    2008-01-22 19:59 17,408 ----a-w C:\WINDOWS\system32\atitvo32.dll
    2008-01-22 19:58 5,435,392 ----a-w C:\WINDOWS\system32\atioglxx.dll
    2008-01-22 19:58 49,152 ----a-w C:\WINDOWS\system32\drivers\ati2erec.dll
    2008-01-22 19:53 503,808 ----a-w C:\WINDOWS\system32\ati2cqag.dll
    2007-12-17 13:44 219,664 ----a-w C:\WINDOWS\system32\klogon.dll
    2007-12-14 00:32 12,632 ----a-w C:\WINDOWS\system32\lsdelete.exe
    2007-12-07 02:08 824,832 ----a-w C:\WINDOWS\system32\wininet.dll
    2007-12-04 18:41 550,912 ----a-w C:\WINDOWS\system32\oleaut32.dll
    .

    ------- Sigcheck -------

    "C:\WINDOWS\system32\drivers\tcpip.sys"
    ----a-w 360,832 2007-10-30 16:53:32 C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
    ----a-w 360,064 2008-02-14 10:57:48 C:\WINDOWS\system32\drivers\TCPIP.SYS
    .
    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "RTHDCPL"="RTHDCPL.EXE" [2005-12-09 18:49 15691264 C:\WINDOWS\RTHDCPL.exe]
    "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2005-05-21 00:46 28160 C:\WINDOWS\KHALMNPR.Exe]
    "AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" [2007-12-18 00:43 227856]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 23:00 15360]

    C:\Documents and Settings\Fred et Delph\Menu D‚marrer\Programmes\D‚marrage\
    PopTray.lnk - C:\Program Files\PopTray\PopTray.exe [2006-09-17 00:01:16 1666048]

    C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
    InstantTimeZone.lnk - C:\Program Files\InstantTimeZone\InstantTimeZone.exe [2007-01-14 03:07:23 1498551]
    Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2008-02-14 10:06:59 450560]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICustomerCare]
    --a------ 2007-10-04 18:38 307200 C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eraser]
    --a------ 2007-07-29 08:05 277328 C:\Program Files\Eraser\Eraser.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Free Download Manager]
    --a------ 2007-12-16 20:39 2449455 C:\Program Files\Free Download Manager\fdm.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Free Upload Manager]
    --a------ 2007-07-29 19:13 253952 C:\Program Files\Free Download Manager\fum\fum.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Free Uploader Oe Integration]
    --a------ 2007-06-10 18:02 40960 C:\Program Files\Free Download Manager\FUM\fumoei.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
    --a------ 2006-11-10 12:35 90112 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
    "Raccourci vers la page des propriétés de High Definition Audio"=HDAShCut.exe
    "EPSON Stylus Photo R200 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H2.EXE /P30 "EPSON Stylus Photo R200 Series" /O6 "USB001" /M "Stylus Photo R200"

    S2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2004-08-05 23:00]
    S2 WUSB54Gv4SVC;WUSB54Gv4SVC;"C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe" "WUSB54Gv4.exe" []
    S3 camvid20;Philips ToUcam Camera; Video;C:\WINDOWS\system32\DRIVERS\camdrv21.sys []
    S3 gdrv;gdrv;C:\WINDOWS\gdrv.sys [2008-02-14 10:02]
    S3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys [2007-12-13 13:28]
    S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-02-16 19:10]
    S3 WUSB54GPV4SRV;Linksys Home Wireless-G USB Adaptor Driver;C:\WINDOWS\system32\DRIVERS\rt2500usb.sys [2005-01-08 03:05]

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
    UxTuneUp

    .
    Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
    "2008-02-16 07:40:07 C:\WINDOWS\Tasks\Maintenance en 1 clic.job"
    - C:\Program Files\TuneUp Utilities 2008\OneClick.exe
    .
    **************************************************************************

    catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-02-20 20:43:37
    Windows 5.1.2600 Service Pack 2 NTFS

    Balayage processus cachés ...

    Balayage caché autostart entries ...

    Balayage des fichiers cachés ...

    Scan terminé avec succès
    Les fichiers cachés: 0

    **************************************************************************
    .
    Temps d'accomplissement: 2008-02-20 20:44:17
    ComboFix-quarantined-files.txt 2008-02-20 09:44:15
    .
    2008-02-17 07:51:24 --- E O F ---

    HIJACKTHIS

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 22:47:19, on 20/02/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16608)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\Program Files\Calendrier\Cld2000.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\InstantTimeZone\InstantTimeZone.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\PopTray\PopTray.exe
    C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
    C:\Program Files\a-squared Free\a2service.exe
    C:\WINDOWS\ATKKBService.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
    C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv4.exe
    C:\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - (no file)
    O3 - Toolbar: emotrlq - {380F14D3-BD6F-4F5A-984A-70CC23EEA61D} - (no file)
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Cld2000.exe] C:\Program Files\Calendrier\Cld2000.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Startup: PopTray.lnk = C:\Program Files\PopTray\PopTray.exe
    O4 - Global Startup: InstantTimeZone.lnk = C:\Program Files\InstantTimeZone\InstantTimeZone.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
    O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
    O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
    O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
    O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Upload - {FD4E2FF8-973C-4A19-89BD-8E86B3CFCFE1} - C:\Program Files\Free Download Manager\FUM\fumiebtn.dll
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
    O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
    O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
    O23 - Service: PsExec (PSEXESVC) - Unknown owner - C:\WINDOWS\PSEXESVC.EXE (file missing)
    O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
    O23 - Service: WUSB54Gv4SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
    0
  12. lacoxinelle-douzecent Messages postés 830 Statut Membre 46
     
    Bonsoir tondaw

    as tu fais toutes les étapes,?..je vois que les lignes sont encore la..
    Peux tu me dire quelle est ta version de Kaspersky Anti-Virus 7.0, essais? officielle? non off?

    j'aurais du y penser avant..faut mettre un autre pare feu (celui de windows ne vaut rien)

    1) mettre un pare feu
    Télécharge Kério (en francais et gratuit)

    http://www.commentcamarche.net/telecharger/telecharger 206 kério

    http://www.malekal.com/kerio_firewall.php#mozTocId745600

    ou Zone Alarme

    https://www.malekal.com/tutoriel-zonealarm-firewall/

    Désactives le Pare Feu de Wndows -->Sinon Conflits entre les Deux..

    Demarrer, / Paneau de Config, / Centre de Sécurité / Pare Feu Windows--> Désactives

    2) Désactive la restauration du systeme

    Clique sur Démarrer.
    Clique sur Poste de travail, puis clic droit sur -->Propriétés.
    onglet «Restauration du système».
    Sélectionne «Désactiver la Restauration du système»
    Clique sur Appliquer puis sur OK.

    3) demarre en mode sans echec
    (tapote sur F8 ou F5 au demarrage de windows
    Démo-->https://www.malekal.com/demarrer-windows-mode-sans-echec/

    4) lance hijackthis
    coches ces lignes

    O2 - BHO: (no name) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - (no file)
    O3 - Toolbar: emotrlq - {380F14D3-BD6F-4F5A-984A-70CC23EEA61D} - (no file)
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    -->clic sur fix checked

    5) redemarre

    6) reactive la restauration du système
    Poste de travail /Propriétés. /onglet «Restauration du système
    Décoche la case "désactiver la Restauration du système"
    Clique sur Appliquer puis sur OK.

    7) ce programme te parle t'il ?
    C:\Program Files\Calendrier\Cld2000.exe

    poste le rapport hijackthis + precisions demandées

    a plus tard
    lacox
    0
  13. tondawa
     
    Tout d'abord désolé du retard mais j'étais absent, je m'aperçoit et ce sans avoir rien touché que tout est redevenu dans l'ordre ... lorsque je passe spybot il n'y a plus rien alors qu'avant il voyait des trucs les supprimait mais a chaque fois cela revenait ... aujourd'hui plus rien ... super je te remercie beaucoup pour tes conseils et ta patience ...
    0
  14. lacoxinelle-douzecent Messages postés 830 Statut Membre 46
     
    Bonjour tondawa,

    j'espère tout de meme que tu as fais toutes les étapes demandées #11 ;-/
    sinon faut le faire
    tu peux supprimer les outils utilisés; navilog, sdfix; smitfraudfix, combofix..hijackthis .ainsi que tous les rapports

    Ne jamais Répondre a ce type de messages
    -->Prends le temps de lire

    http://forum.malekal.com/ftopic3412.php
    http://siri.urz.free.fr/Fix/ScreenShot.php

    A lire aussi
    https://www.malekal.com/projet-antimalware-2/

    Bon surf ;-)

    Kénavo
    0