Bonjour, depuis quelque temps g d probleme avec mon ordinateur.j'ai des fenetres qui s'ouvre toute seul qui me dise que g un virus et des trojans et qui me suggere de télécharger un anti virus ou un autre.aussi recement quand je veux faire une analyse anti spyware mon ordinateur se redemarre toute seule.mon anti spyware est GIANT antispyware et mon anti virus est nod32. si quelqu'un pourais maider parce que moi g aucune idée quoi faire :(

ya juste une chose je ne comprend pas ce que tu veu dire par installer a la racine comme tu peu voir je suis vraiment debutant la dedans :P

Probleme de trojan et autre

Réponse 21 / 46

mathsrv Messages postés 26 Date d'inscription samedi 22 mars 2008 Statut Membre Dernière intervention 10 janvier 2012 1
23 mars 2008 à 15:14

salut

je n'est pas encore utiliser le toolscleaner car je me suis apreéu que je recevais encore d avertissement de virus :S.
mais deja je ne reçois plus de fenetre qui s'ouvre toute seule et je crois que mon ordinateur ne se redemare plus tout seul :)

ya t'il quel que chose que je peu t'envoyer encore pour trouver pourquoi je reçois toujours ces avertissement.

et en passant merci je ne sais pas se que j'aurais fait sinon je commençais a me decourager :)

sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
23 mars 2008 à 15:21

Salut,
Refait un rapport Hijackthis et post le ...

Réponse 22 / 46

mathsrv Messages postés 26 Date d'inscription samedi 22 mars 2008 Statut Membre Dernière intervention 10 janvier 2012 1
23 mars 2008 à 15:39

voila c fait

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:36:39, on 2008-03-23
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\vVX3000.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasDtServ.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: e404mgr Class - {DF47DD37-AC11-4A93-8E16-2B2364AF0897} - C:\Program Files\Helper\1206158459.dll
O2 - BHO: (no name) - {E2F8F7C7-954D-4336-BA99-27BFBEB73DAF} - C:\WINDOWS\system32\awtrroo.dll
O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - Winlogon Notify: awtrroo - C:\WINDOWS\SYSTEM32\awtrroo.dll
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O24 - Desktop Component 0: Privacy Protection - file:///C:\WINDOWS\privacy_danger\index.htm

Réponse 23 / 46

sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
23 mars 2008 à 16:06

essaye ce-ci :

faire un scan antivirus en ligne avec Internet explorer et accepter l'ActiveX
poster le rapport ici ensuite ( cocher la case correspondant dans "plus de détailles" )
https://www.bitdefender.fr/

En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
Dans la nouvelle fenêtre, clique sur j’accepte
La fenêtre change encore, clique sur scanner
Les signatures se chargent, etc.

Réponse 24 / 46

mathsrv Messages postés 26 Date d'inscription samedi 22 mars 2008 Statut Membre Dernière intervention 10 janvier 2012 1
23 mars 2008 à 16:40

c bon je suis en train de faire comme tu m'a dis mais en atendant pourais tu m'aider pour une derniere chose silteplait.
je sais je t'en demande beaucoup :P
g un probleme avec javascript. quand je gveux ouvrir certaine page a partir de msn comme pour allez voir mes message je n'est qu'une page blanche qui aparait.apres sa et mes dernier petit probleme de trojan je ne te derange plus :P

Réponse 25 / 46

sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
23 mars 2008 à 18:53

Pour ce qui de ton prb Java , la seule chose que je peut te conseiller est de le désinstaler correctement et de le réinstaler ...
Pour le reste je ne voit pas ... qu'est-ce tu entends par " mes dernier petit probleme de trojan " ?

Réponse 26 / 46

mathsrv Messages postés 26 Date d'inscription samedi 22 mars 2008 Statut Membre Dernière intervention 10 janvier 2012 1
24 mars 2008 à 03:42

ah n'est pas peur je ne voulais pas dire que j'avais d'autre probleme de trojan mais seulement que quand g dis mes dernier petit probleme de trojan cetais pour dire ce qui reste a netoyer :)

Réponse 27 / 46

sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
24 mars 2008 à 09:29

Bonjour,
alors, dit ce qu'à donné le scan en ligne Bitdefender .

Réponse 28 / 46

mathsrv Messages postés 26 Date d'inscription samedi 22 mars 2008 Statut Membre Dernière intervention 10 janvier 2012 1
25 mars 2008 à 02:11

tient je ne sais pas si je t'envoie ce qu'il faut mais je l'espere

BitDefender Online Scanner

Rapport d'analyse généré à: Mon, Mar 24, 2008 - 20:32:24

Voie d'analyse: C:\;D:\;E:\;

Statistiques

Temps

00:20:59

Fichiers

38206

Directoires

4823

Secteurs de boot

4

Archives

636

Paquets programmes

3261

Résultats

Virus identifiés

1

Fichiers infectés

1

Fichiers suspects

0

Avertissements

0

Désinfectés

0

Fichiers effacés

0

Info sur les moteurs

Définition virus

1022364

Version des moteurs

AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Analyse des plugins

16

Archive des plugins

41

Unpack des plugins

7

E-mail plugins

6

Système plugins

5

Paramètres d'analyse

Première action

Désinfecté

Seconde Action

Supprimé

Heuristique

Oui

Acceptez les avertissements

Oui

Extensions analysées

exe;com;dll;ocx;scr;bin;dat;386;vxd;sys;wdm;cla;class;ovl;ole;hlp;doc;dot;xls;ppt;wbk;wiz;pot;ppa;xla;xlt;vbs;vbe;mdb;rtf;htm;hta;html;xml;xtp;php;asp;js;shs;chm;lnk;pif;prc;url;smm;pfd;msi;ini;csc;cmd;bas;

Excludez les extensions

Analyse d'emails

Oui

Analyse des Archives

Oui

Analyser paquets programmes

Oui

Analyse des fichiers

Oui

Analyse de boot

Oui

Fichier analysé

Statut

C:\Program Files\Helper\1206158459.dll

Infecté par: Trojan.Downloader.Zlob.ABMP

C:\Program Files\Helper\1206158459.dll

Echec de la désinfection

C:\Program Files\Helper\1206158459.dll

Echec de la suppression

Réponse 29 / 46

sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
25 mars 2008 à 18:55

Salut,
Il reste apparement encore une saltée ...

fait ce qui suit :

Télécharge
SDFix sur ton bureau
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe.

* Redémarre en mode sans échec.
Comment aller en Mode sans échec
1) Redémarre ton ordi
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip"
3) Tu verras un écran avec options de démarrage apparaître
4) Choisis la première option : Sans Échec, et valide avec "Entrée"
5) Choisis ton compte habituel, et non Administrateur (si besoin ... )

* Double clique sur SDFix.exe et choisis Install
Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
Tape Y pour lancer le script.
Le Fix supprime les services du virus et nettoie le registre, de ce fait un redémarrage est nécessaire
Presse une touche pour redémarrer

Le PC va mettre du temps avant de démarrer, presse une touche lorsque "Finished" s'affiche

Ouvre le dossier SDFix et copie/colle le contenu du fichier "Report.txt" pour le poster dans ta prochaine réponse ...

Réponse 30 / 46

mathsrv Messages postés 26 Date d'inscription samedi 22 mars 2008 Statut Membre Dernière intervention 10 janvier 2012 1
25 mars 2008 à 19:25

voila c fait

[b]SDFix: Version 1.161 [/b]

Run by Mathieu on 2008-03-25 at 14:13

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:

Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting

[b]Checking Files [/b]:

Trojan Files Found:

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat - Contains Links to Malware Sites! - Deleted
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat - Contains Links to Malware Sites! - Deleted
C:\WINDOWS\dat.txt - Deleted
C:\WINDOWS\rs.txt - Deleted
C:\WINDOWS\search_res.txt - Deleted
C:\WINDOWS\system32\tdidrv32.sys - Deleted

Folder C:\Program Files\Helper - Removed

Removing Temp Files

[b]ADS Check [/b]:

[b]Final Check [/b]:

catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-25 14:21:27
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 1

[b]Remaining Services [/b]:

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"="C:\\Program Files\\Microsoft LifeCam\\LifeExp.exe:*:Enabled:LifeExp.exe"
"C:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"="C:\\Program Files\\Microsoft LifeCam\\LifeCam.exe:*:Enabled:LifeCam.exe"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[b]Remaining Files [/b]:

File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Fri 1 Feb 2008 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Thu 31 Jan 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT100.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1018.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1035.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT103B.tmp"
Mon 25 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1066.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT107A.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1086.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT109D.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT10CD.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT10D.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT10EE.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1126.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT113F.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1143.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1161.tmp"
Mon 25 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1174.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT117A.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1191.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT11B.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT11BA.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT11C3.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT11CA.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT11D7.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT11F2.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT120.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT122D.tmp"
Mon 25 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1230.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1241.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1253.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1268.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT129E.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT12AA.tmp"
Mon 25 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT12EB.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT130.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1310.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT134F.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1366.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT137E.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1384.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT138A.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT138D.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT138E.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT139.tmp"
Mon 25 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1398.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT13A9.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT13B1.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT13C9.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT13F7.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT13FD.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT144B.tmp"
Mon 25 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT149F.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT14B1.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT14B2.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT14EA.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT153.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT158E.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT15B0.tmp"
Mon 25 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT15C0.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT15D3.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT15E4.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT15F6.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT161A.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT163C.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1652.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1657.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1660.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1661.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT166C.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT167E.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1683.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1684.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT168E.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1693.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT169D.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16A4.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16A7.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16A9.tmp"
Mon 25 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16AC.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16B7.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16C7.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16C9.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16CC.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16D1.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16DB.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16DC.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16E0.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16EB.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16F0.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16F7.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT16FE.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1702.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1709.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT170B.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT170E.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1718.tmp"
Mon 25 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT171F.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1722.tmp"
Mon 25 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT172B.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT172C.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1730.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1736.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT173B.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1740.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1745.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1746.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1747.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT174B.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1750.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1755.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1759.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1760.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1769.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1776.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT177B.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1782.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1787.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT178C.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT178D.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT178E.tmp"
Fri 22 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1792.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1797.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT179C.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17A.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17A1.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17A7.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17AC.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17B0.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17BE.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17C3.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17C8.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17CD.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17D2.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17D3.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17D7.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17DD.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17E2.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17E7.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17EC.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17F1.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT17F7.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT180B.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1811.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1816.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT181B.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT181F.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1820.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1825.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT182B.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1830.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1835.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT183A.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT183F.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1844.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1852.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1855.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT185A.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT185C.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT185F.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1864.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1869.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT186E.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1874.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1875.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1879.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT187E.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1885.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT188A.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1899.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18A3.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18A4.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18A8.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18AC.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18AF.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18B1.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18B8.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18BC.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18BD.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18C3.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18C8.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18CD.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18D2.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18D7.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18E0.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18E1.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18EC.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18F1.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT18F6.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1904.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1912.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1926.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT194A.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1951.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1955.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT196C.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1991.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT19B3.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT19E.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT19EA.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT19EB.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1A09.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1A0C.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1A0F.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1A2F.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1A34.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1A3D.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1A43.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1A53.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1A5E.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1A67.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1A76.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1A79.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1A7C.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1A99.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1ABB.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1ADE.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1B02.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1B15.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1B20.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1B24.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1B2D.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1B3E.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1B48.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1B7C.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1B9F.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1BC1.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1BC2.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1BCE.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1BE5.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1C07.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1C1C.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1C2B.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1C38.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1C4D.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1C75.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1CE1.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1CED.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1D00.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1D07.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1D10.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1D9F.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1DE.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1E2F.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1E6.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1E7.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1EDF.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1EF4.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1F01.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1F15.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1F27.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1F38.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1F53.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1F57.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1FAF.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT1FD.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2030.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT205.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2071.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT20D.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT20D6.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT20E.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT210.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2103.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2126.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT219.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT21B7.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT21C0.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT21F6.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT21FE.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2201.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2213.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT221B.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2220.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT222D.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2234.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2246.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT228.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2296.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT22A2.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT22AC.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT22D.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT22D5.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT232A.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT232C.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT233.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2338.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT234.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT234E.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT235A.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT236.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2380.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT23A1.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT23D.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2406.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2457.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT246.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2466.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT24BB.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT24D.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT255A.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2562.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2569.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT25C5.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT25C6.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT25EE.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT263.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT267E.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2694.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT26C5.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT26E.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT26FD.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT276A.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT278B.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT27C.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT27F1.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2826.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2856.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT285D.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT28A.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT28A8.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT28CF.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2901.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT295.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2966.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT29C0.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT29E4.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2A0A.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2A10.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2A1C.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2A23.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2A2D.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2A37.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2A3E.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2A4A.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2A4B.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2A54.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2B0.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2B04.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2B8.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2B9.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2B96.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2BB1.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2C9.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2C98.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2D8.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2D8A.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2DB.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2DCB.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2E52.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2E6.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2E7.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2E70.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2F04.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2F26.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2F7.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2F7F.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2F98.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2FA1.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2FAD.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2FC4.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2FD.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT2FE.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3006.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT305.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT30A7.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT318F.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT31B2.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT321.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT322.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT325D.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT327A.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3287.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT32B4.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT32D.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3312.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT335.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3364.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3373.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3398.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT33C3.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT344.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT344C.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT347F.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3497.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT34C5.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT34F6.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3566.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT35AA.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT35F5.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3652.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT368.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT368A.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3694.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT36E7.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3719.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT376F.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT37B5.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT38.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT388D.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT38C.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT38D2.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3923.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT396E.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT398E.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT39FC.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3A1D.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3A74.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3A7C.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3A86.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3AA3.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3AB0.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3AB3.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3AC9.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3AE.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3AEC.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3B01.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3B46.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3B90.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3BEB.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3C42.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3D1.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3D3E.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3DC1.tmp"
Thu 28 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3EA8.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3EE5.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT3F5.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT40D.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4190.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT41A.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT41A0.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT427.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT444.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT44A.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT462C.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4633.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT464E.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4658.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT465F.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT466E.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT468B.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4698.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT469F.tmp"
Tue 26 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT46AD.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT46D.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT477.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT477B.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT47C6.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT47F1.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4839.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT48DE.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT492.tmp"
Sat 23 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT49F7.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4A5A.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4AB3.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4B1B.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4B5.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4B99.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4BBC.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4BD9.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4C75.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4CC.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4CF1.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4D0F.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4D1.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4D6.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4D69.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4D8.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4DB.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4E0.tmp"
Sun 24 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4E3.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4E5.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4EA.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4EB1.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4EF.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4F4.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4F9.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4FAD.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4FB.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT4FD5.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT50E.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT510D.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT513.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT514D.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT5166.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT5170.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT518.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT51D.tmp"
Sat 1 Mar 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT51E.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT522.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT5237.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT5255.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT5266.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT527.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT5272.tmp"
Fri 29 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT52C.tmp"
Wed 27 Feb 2008 0 A..H. --- "C:\Documents and Settings\Sylvie\Local Settings\Temp\BIT52CA.tmp"
Wed

Réponse 31 / 46

sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
25 mars 2008 à 19:39

Impec ...

maintenant peux-tu faire un nouveau scan Hijack et me poster le nouveau rapport pour analyse svp ...

Réponse 32 / 46

mathsrv Messages postés 26 Date d'inscription samedi 22 mars 2008 Statut Membre Dernière intervention 10 janvier 2012 1
25 mars 2008 à 19:47

et voila

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:43:55, on 2008-03-25
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\vVX3000.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasDtServ.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {E2F8F7C7-954D-4336-BA99-27BFBEB73DAF} - C:\WINDOWS\system32\awtrroo.dll
O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - Winlogon Notify: awtrroo - C:\WINDOWS\SYSTEM32\awtrroo.dll
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O24 - Desktop Component 0: Privacy Protection - file:///C:\WINDOWS\privacy_danger\index.htm

Réponse 33 / 46

sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
25 mars 2008 à 20:04

maintenant il va falloir faire ce-ci :

Télécharger Vundofix.exe (par Atribune) sur votre Bureau.
Double-cliquer sur VundoFix.exe afin de le lancer.
Cliquer sur le bouton Scan for Vundo.
Lorsque le scan est complété, cliquer sur le bouton fix Vundo.
Une invite de commande demandera si l’on souhaite supprimer les fichiers, cliquer sur YES
Après avoir cliqué "YES", le Bureau disparaîtra un moment lors de la suppression des fichiers.
Une nouvelle invite de commande annoncera que le PC devra s'éteindre ("shutdown"). Cliquer sur OK , puis laisser le redémarrer.
Le contenu du rapport est situé dans C:\vundofix.txt, ouvrez le fait un cpoier / coller et post le dans ta prochaine réponse ainsi qu'un nouveau rapport Hijackthis ... puis attend les instructions .

Réponse 34 / 46

mathsrv Messages postés 26 Date d'inscription samedi 22 mars 2008 Statut Membre Dernière intervention 10 janvier 2012 1
25 mars 2008 à 20:24

g fait comme tu ma dis mais le vundofix ne trouve rien :(

sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
25 mars 2008 à 20:48

Post moi le rapport quand même svp ....

Réponse 35 / 46

sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
25 mars 2008 à 21:31

Ecoute ,ça ne fait rien , mais fais ce-ci:

Télécharger VirtumundoBegone sur le bureau:
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

Double cliquer sur VirtumundoBeGone.exe et suivre les instructions.
Une fois terminé, redémarrer le PC, le rapport VBG.TXT sera crée sur le bureau , postes le.
(Si un message Ecran bleu "Erreur fatale" apparaît, pas d’inquiétude car c'est normal et attendu).

puis ensuite, fait un autre scan Hijack et postes le aussi .

Réponse 36 / 46

mathsrv Messages postés 26 Date d'inscription samedi 22 mars 2008 Statut Membre Dernière intervention 10 janvier 2012 1
25 mars 2008 à 21:47

tient c le rapport de virtumondebegone

[03/25/2008, 16:39:57] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\Mathieu\Bureau\VirtumundoBeGone.exe" )
[03/25/2008, 16:40:10] - Detected System Information:
[03/25/2008, 16:40:10] - Windows Version: 5.1.2600, Service Pack 2
[03/25/2008, 16:40:10] - Current Username: Mathieu (Admin)
[03/25/2008, 16:40:10] - Windows is in NORMAL mode.
[03/25/2008, 16:40:10] - Searching for Browser Helper Objects:
[03/25/2008, 16:40:10] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper)
[03/25/2008, 16:40:10] - BHO 2: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Aide pour le lien d'Adobe PDF Reader)
[03/25/2008, 16:40:10] - BHO 3: {1392b8d2-5c05-419f-a8f6-b9f15a596612} (Freecorder Toolbar)
[03/25/2008, 16:40:10] - BHO 4: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[03/25/2008, 16:40:10] - BHO 5: {E2F8F7C7-954D-4336-BA99-27BFBEB73DAF} ()
[03/25/2008, 16:40:10] - WARNING: BHO has no default name. Checking for Winlogon reference.
[03/25/2008, 16:40:10] - Checking for HKLM\...\Winlogon\Notify\awtrroo
[03/25/2008, 16:40:10] - Found: HKLM\...\Winlogon\Notify\awtrroo - This is probably Virtumundo.
[03/25/2008, 16:40:10] - Assigning {E2F8F7C7-954D-4336-BA99-27BFBEB73DAF} MSEvents Object
[03/25/2008, 16:40:10] - BHO list has been changed! Starting over...
[03/25/2008, 16:40:10] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper)
[03/25/2008, 16:40:10] - BHO 2: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Aide pour le lien d'Adobe PDF Reader)
[03/25/2008, 16:40:10] - BHO 3: {1392b8d2-5c05-419f-a8f6-b9f15a596612} (Freecorder Toolbar)
[03/25/2008, 16:40:10] - BHO 4: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[03/25/2008, 16:40:10] - BHO 5: {E2F8F7C7-954D-4336-BA99-27BFBEB73DAF} (MSEvents Object)
[03/25/2008, 16:40:10] - ALERT: Found MSEvents Object!
[03/25/2008, 16:40:10] - Finished Searching Browser Helper Objects
[03/25/2008, 16:40:10] - *** Detected MSEvents Object
[03/25/2008, 16:40:10] - Trying to remove MSEvents Object...
[03/25/2008, 16:40:11] - Terminating Process: IEXPLORE.EXE
[03/25/2008, 16:40:12] - Terminating Process: RUNDLL32.EXE
[03/25/2008, 16:40:12] - Disabling Automatic Shell Restart
[03/25/2008, 16:40:12] - Terminating Process: EXPLORER.EXE
[03/25/2008, 16:40:12] - Suspending the NT Session Manager System Service
[03/25/2008, 16:40:12] - Terminating Windows NT Logon/Logoff Manager
[03/25/2008, 16:40:13] - Re-enabling Automatic Shell Restart
[03/25/2008, 16:40:13] - File to disable: C:\WINDOWS\system32\awtrroo.dll
[03/25/2008, 16:40:13] - Renaming C:\WINDOWS\system32\awtrroo.dll -> C:\WINDOWS\system32\awtrroo.dll.vir
[03/25/2008, 16:40:13] - File successfully renamed!
[03/25/2008, 16:40:13] - Removing HKLM\...\Browser Helper Objects\{E2F8F7C7-954D-4336-BA99-27BFBEB73DAF}
[03/25/2008, 16:40:13] - Removing HKCR\CLSID\{E2F8F7C7-954D-4336-BA99-27BFBEB73DAF}
[03/25/2008, 16:40:13] - Adding Kill Bit for ActiveX for GUID: {E2F8F7C7-954D-4336-BA99-27BFBEB73DAF}
[03/25/2008, 16:40:13] - Deleting ATLEvents/MSEvents Registry entries
[03/25/2008, 16:40:13] - Removing HKLM\...\Winlogon\Notify\awtrroo
[03/25/2008, 16:40:13] - Searching for Browser Helper Objects:
[03/25/2008, 16:40:13] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper)
[03/25/2008, 16:40:13] - BHO 2: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Aide pour le lien d'Adobe PDF Reader)
[03/25/2008, 16:40:13] - BHO 3: {1392b8d2-5c05-419f-a8f6-b9f15a596612} (Freecorder Toolbar)
[03/25/2008, 16:40:13] - BHO 4: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[03/25/2008, 16:40:13] - Finished Searching Browser Helper Objects
[03/25/2008, 16:40:13] - Finishing up...
[03/25/2008, 16:40:13] - A restart is needed.
[03/25/2008, 16:40:31] - Attempting to Restart via STOP error (Blue Screen!)

Réponse 37 / 46

sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
25 mars 2008 à 22:38

Ok ... et le dernier scan Hijack pour annalyse ;)

Réponse 38 / 46

mathsrv Messages postés 26 Date d'inscription samedi 22 mars 2008 Statut Membre Dernière intervention 10 janvier 2012 1
26 mars 2008 à 02:04

ah d'accord je crois que j'avais oublier :P

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:03:23, on 2008-03-25
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\vVX3000.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasDtServ.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O24 - Desktop Component 0: Privacy Protection - file:///C:\WINDOWS\privacy_danger\index.htm

Réponse 39 / 46

sKe69 Messages postés 21360 Date d'inscription samedi 15 mars 2008 Statut Contributeur sécurité Dernière intervention 30 décembre 2012 463
26 mars 2008 à 16:38

Salut ,

J'aimerai que tu fasses ce-ci :
lance de nouveau une analyse ToolsCleaner (de A.Rothstein) et fait une suppression de ce qu'il trouve pour nettoyer entre autre Hijackthis .
Enuite suprime le dossier : C / programme / Trend Micro ( qui doit être vide )

Puis on va retélécharger HijackThis en le renomment :
click DOIT ici : ftp://ftp.commentcamarche.com/download/HJTInstall.exe
choisis dans le déroulant "enregister la cible sous ... " et click gauche dessus .Choisis enregistrer dans : bureau . Puis changes le nom en "Mon-J" (c'est un expl.) , puis click sur "enregistrer" .

Double click sur "Mon-J" pour lancer l'instale . Une fois l'instale terminée click sur le raccourci Hijack et fait un nouveau scan . Enfin , postes moi le rapport obtenu .

Réponse 40 / 46

mathsrv Messages postés 26 Date d'inscription samedi 22 mars 2008 Statut Membre Dernière intervention 10 janvier 2012 1
26 mars 2008 à 17:02

tient j'espere juste avoir fait ce qu'il fallait :P

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:01:07, on 2008-03-26
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\vVX3000.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasDtServ.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Mathieu\Bureau\Mon-J\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O24 - Desktop Component 0: Privacy Protection - file:///C:\WINDOWS\privacy_danger\index.htm

Probleme de trojan et autre

46 réponses

Discussions similaires